Is every (grabbed) image uploaded to google?

Questions & Help
1

** this is all a misunderstanding … **

I have a bit of a privacy issue if my findings are correct.

i used app Image Grabber App voor Homey | Homey to test something.
Only to discover that it looks like that all images are uploaded to google.
The image object

  droptoken: Image {
    manager: ManagerImages {
      _events: [Object: null prototype],
      _eventsCount: 4,
      _maxListeners: undefined,
      homey: [Homey],
      __client: [Object],
      _images: [Object],
      [Symbol(kCapture)]: false
    },
    id: '3ffdxxxx-97b8-xxxx-a5f8-a11d2893xxxx',
    __client: { emit: [AsyncFunction: emit] },
    cloudUrl: 'https://xxxx1498845c750b7b4xxxxx.connect.athom.com/api/image/3ffdxxxx-97b8-xxxx-a5f8-a11d2893xxxx',
    localUrl: 'http://192.168.xxx.xxx/api/image/3ffdxxxx-97b8-xxxx-a5f8-a11d2893xxxx'
  }

When i curl “http://192.168.xxx.xxx/api/image/3ffdxxxx-97b8-xxxx-a5f8-a11d2893xxxx” i get the following

→ curl --head -L http://192.168.xxx.xxx/api/image/3ffdxxxx-97b8-xxxx-a5f8-a11d2893xxxx
HTTP/1.1 302 Found
X-Powered-By: Express
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Access-Control-Expose-Headers: X-Homey-ID, X-Homey-Version
X-Homey-Version: 10.0.0-rc.78
X-Homey-ID: xxxxx
Location: https://i.ytimg.com/vi/xxx-xxxxx/hqdefault.jpg
Vary: Accept
Content-Type: text/plain; charset=utf-8
Content-Length: 70
Date: Thu, 20 Apr 2023 12:12:24 GMT
Connection: keep-alive
Keep-Alive: timeout=5

HTTP/2 200
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 33443
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Apr 2023 12:12:25 GMT
expires: Thu, 20 Apr 2023 14:12:25 GMT
cache-control: public, max-age=7200
etag: "1677864560"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

For me personally, that’s a big nono… or is it a setting that i can use local images only?

1 Like
2

You can use the FTP Client app for the same think.
It has a flowcard: Retrieve a Image Token for URL.

It (also :slight_smile: ) does not send it to google!
Here is the source for the app: QlusterIT / nl.qluster-it.ftpclient — Bitbucket

3

Let me guess: you tested this with an image from Youtube?

4

nope, just installed image-grabber, added a url, and logged the token to the console

5

Which URL…?

6

Neither does Image Grabber.

7

I’m so sorry, you are so right.
It was a google image.
I started with a too big of an image and just did a quick search …
Never to have to thougth that localUrl became an “shortlink” to the original url

1 Like
8

Can someone from the @moderators close this topic?

9

Hahah, sorry, i never checked if the question was correct, just answered it with an alternatief.
Thanks Robert, good to know :wink:

2 Likes