[tor-talk] pdf with tor

Niels Elgaard Larsen elgaard at agol.dk
Sun Jul 12 19:27:24 UTC 2015


On Thu, 9 Jul 2015 01:41:44 -0700
Apple Apple <djjdjdjdjdjdjd32 at gmail.com> wrote:

> I feel like the wrong issue is being discussed here; the real danger is not
> really IP leaks. If you skipped Seth's post because of its length I suggest
> you go back and read it.


I did read it.

> If someone manages to trick your PDF viewer into running arbitrary code
> with a malicious PDF file, that person may then have full control over your
> machine and all your files, passwords, emails etc. In this situation Tor
> cannot protect your privacy and anonymity anymore.
> 
> This is why the Tor project provides the stringent recommendation of
> dedicating an isolated virtual machine to opening PDF files.

Yes, but you still have to remember to use a virtual machine every
single time, you read that PDF file - whether you are worried about IP
leaks or insecure PDF readers. If you convert it to a safer format in
an isolated environment, you are safer if you forget to use an isolated
environment, next time you read it.




-- 
Niels Elgaard Larsen


More information about the tor-talk mailing list