Search papers, labs, and topics across Lattice.
The authors investigate privacy leakage in geographic dot maps and build AutoLocate, an attack framework that recovers raw coordinates by exploiting sub-pixel anti-aliasing artifacts generated during map rendering. Large-scale dot maps are routinely assumed to visually obscure exact coordinates, but rendering pipelines inadvertently leak high-fidelity spatial data through marginal pixel shading. Framing coordinate extraction as a black-box optimization problem that minimizes perceptual discrepancies between candidate and target renderings, the approach achieves 1-meter accuracy (roughly 0.0002-pixel precision) on nationwide maps, outperforming existing baselines by over 200x.
Standard anti-aliasing in graphic renderers leaks geographic locations down to 1-meter resolution, breaking visual anonymization on dot maps with 0.0002-pixel recovery precision.
Dot maps, which visualize individual data points as dots over a geographic region, are widely used across diverse domains to represent spatial patterns in sensitive data. However, the understanding of the privacy risks associated with dot maps remains limited, particularly for maps covering large geographic areas. In this paper, we systematically analyze these risks and present AutoLocate, an automated framework for high-precision location recovery. At its core, AutoLocate exploits anti-aliasing artifacts introduced during map rendering, which inadvertently encode sub-pixel information about dot locations. AutoLocate formulates location recovery as a black-box optimization problem, iteratively refining estimated coordinates by minimizing perceptual discrepancies over these artifacts between the target map and rendered candidate maps. Extensive experiments on both real-world and synthetic datasets, across different attack scenarios and a broad range of map configurations (e.g., map scale, background, resolution), demonstrate the effectiveness of AutoLocate. In particular, it achieves average recovery errors as low as 1 meter (approximately 0.0002 pixel precision) on small-scale maps of the United States, over 200x more accurate than existing approaches. We also propose mitigation strategies and introduce a privacy risk assessment tool to help practitioners evaluate and reduce privacy leakage when publishing dot maps.
