Access from a local file

[downie -]

> To: or-talk at freehaven.net
> Subject: Re: Access from a local file
> Date: Wed, 17 Feb 2010 12:22:00 -0600
> From: jon at jcosby.com
> 
> 
> On Wed, 17 Feb 2010 10:01:08 -0800 (PST), Martin Fick <mogulguy at yahoo.com>
> wrote:
> >> What's the risk in accessing the
> >> Internet from a local file? Is this actually traceable to my
> >> computer?
> > 
> > You will have to clarify a bit better what you mean.  On
> > its own this question does not make much sense.  A file 
> > does not access things, programs do.  Files are things
> > that are accessed...
> > 
> 
> I'm referring to links from file:// urls. By default, Torbutton blocks
> this, and has it "recommended."
> 

If you download a file from an untrustworthy source, and then open it in your browser (or it gets saved locally and automatically opened), any malicious script in there can access other local files, which could be a bad thing in several ways. So it's not local files themselves that are a problem, but untrusted ones.

GD
 		 	   		  
_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
http://clk.atdmt.com/GBL/go/201469230/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20100217/d77d6f7b/attachment.htm>