Delivery-Date: Sun, 12 Jul 2015 15:26:24 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 4C9EA1E0A65;
	Sun, 12 Jul 2015 15:26:22 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 5F87D37012;
	Sun, 12 Jul 2015 19:26:16 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 2829636F93
 for <tor-talk@lists.torproject.org>; Sun, 12 Jul 2015 19:26:13 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id MO2bdv0h07lN for <tor-talk@lists.torproject.org>;
 Sun, 12 Jul 2015 19:26:13 +0000 (UTC)
Received: from gombert.agol.dk (gombert.agol.dk [212.60.120.178])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id E769036F5B
 for <tor-talk@lists.torproject.org>; Sun, 12 Jul 2015 19:26:12 +0000 (UTC)
Received: by gombert.agol.dk with esmtpsa 
 (Cipher TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84 #2 (EximConfig
 2.5)) id 1ZEMt6-0003le-8o  by authid <elgaard>  with lookup_cram 
 for <tor-talk@lists.torproject.org>; Sun, 12 Jul 2015 21:26:09 +0200
Date: Sun, 12 Jul 2015 21:27:24 +0200
From: Niels Elgaard Larsen <elgaard@agol.dk>
To: tor-talk@lists.torproject.org
Message-ID: <20150712212724.7aeaf951@spuncut.agol.dk>
In-Reply-To: <CAAgxajGSzYztzVzpsujpSskupMUkc9KAJ3zV5cCzdP1C=xW74A@mail.gmail.com>
References: <5596ED9F.3050302@cryptolab.net> <5596F0E5.8050101@riseup.net>
 <1435955784.11081.31.camel@larsluthman.net>
 <55971E8D.7090507@riseup.net> <559D1282.1020502@agol.dk>
 <CAAgxajGSzYztzVzpsujpSskupMUkc9KAJ3zV5cCzdP1C=xW74A@mail.gmail.com>
Organization: agol
X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.28; i586-pc-linux-gnu)
MIME-Version: 1.0
X-EximConfig: v2.5 on gombert.agol.dk (http://www.jcdigita.com/eximconfig)
Subject: Re: [tor-talk] pdf with tor
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On Thu, 9 Jul 2015 01:41:44 -0700
Apple Apple <djjdjdjdjdjdjd32@gmail.com> wrote:

> I feel like the wrong issue is being discussed here; the real danger is not
> really IP leaks. If you skipped Seth's post because of its length I suggest
> you go back and read it.


I did read it.

> If someone manages to trick your PDF viewer into running arbitrary code
> with a malicious PDF file, that person may then have full control over your
> machine and all your files, passwords, emails etc. In this situation Tor
> cannot protect your privacy and anonymity anymore.
> 
> This is why the Tor project provides the stringent recommendation of
> dedicating an isolated virtual machine to opening PDF files.

Yes, but you still have to remember to use a virtual machine every
single time, you read that PDF file - whether you are worried about IP
leaks or insecure PDF readers. If you convert it to a safer format in
an isolated environment, you are safer if you forget to use an isolated
environment, next time you read it.




-- 
Niels Elgaard Larsen
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

