Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Dangerzone: Convert PDFs, documents, or images to a safe PDF

github.com

Post reply on HN
Print view View original

1–7 of 7 posts

Re: Dangerzone: Convert PDFs, documents, or images to a safe PDF

#2

Post by mike_d »

This is a process referred to in government as "Content Disarm and Reconstruction." But I can't stress this enough: if you don't trust the files, you shouldn't be processing them at all locally.

I built a similar tool that converts >300 formats to images in a remote sandbox. https://preview.ninja/

Re: Dangerzone: Convert PDFs, documents, or images to a safe PDF

#4

Post by mdaniel »

fsflover wrote: post #3

Qubes OS has a convenient option to convert any PDF or picture into a trusted one, using strong hardware virtualization: https://blog.invisiblethings.org/2013/02/21/converting-untru...

I don't have experience with Qubes in order to know what the files do, but this repo references two files in a qubes directory: e.g. https://github.com/freedomofpress/dangerzone/blob/v0.6.0/qub...

Re: Dangerzone: Convert PDFs, documents, or images to a safe PDF

#6

Post by barfbagginus »

mike_d wrote: post #2

This is a process referred to in government as "Content Disarm and Reconstruction." But I can't stress this enough: if you don't trust the files, you shouldn't be processing them at all locally. I built a similar tool that converts >300 formats to images in a remote sandbox. https://preview.ninja/

How do I safely read them from the remote box, assuming we really expect the box to get compromised?

If the box is compromised and I RDP, I can get mashed by an RDP exploit. If I download the image or pdf, I can get mashed with an image or PDF exploit.

This is why I never trusted the Qubes image/PDF disarm workflow

Post reply on HN