Not Where You Think: Protecting Location Privacy Against Reasoning-Based Geolocation

Summary

Researchers show that large reasoning models can infer where ordinary photos were taken from visual content alone, even after metadata and obvious location cues are removed. Their GeoTrace attack localizes 25.71% of 525 images within 1 km with Gemini-3-Flash and 16.95% with GPT-5-mini. They also present GeoShift, a user-side defense that rewrites high-impact location clues before release, cutting street-level localization to 2.48% (GPT-5-mini) and 3.81% (Gemini-3-Flash).

Mitigation

GeoShift, a proactive user-side defense that breaks the visual clue chain before image release by preserving stable scene properties, selecting a visually compatible false target location, and strategically rewriting high-impact geo-revealing clues.

Related items

• InfoOpenAI nears up to $30 billion funding round at $1.25 trillion valuation led by UAE investors Same vendor · CNBC Technology
• InfoDonating Agent Skills to the Agentic AI FoundationSame vendor · Simon Willison's Weblog
• LowThird-party evaluators found vulnerabilities in OpenAI monitoring system during test pilotSame vendor · CNBC Technology
• InfoSomeone hacked the Switch 2 by using an old game and AISame vendor · The Verge (AI)
• InfoOpenAI, Anthropic, and Nvidia had record lobbying quartersSame vendor · The Verge (AI)