-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sat, Mar 11, 2017 at 01:07:30AM +0000, Andrew Clausen wrote:
> Hi Marek,
> 
> On 10 March 2017 at 17:57, Marek Marczykowski-Górecki <
> [email protected]> wrote:
> 
> > > Are we implementing MIME-handling to open a specific file/type in
> > > DisposableVMs only, or should the user be able to choose/enter any one
> > > of their installed VMs? As a Qubes user I would like the ability to open
> > > all PDFs in, say, my work AppVM, rather than only being able to only set
> > > global rules for files to open in Disposable VMs.
> >
> > Technically it's indeed very similar, but in practice it doesn't make
> > much sense - if you want to open some file always in the same
> > non-disposable VM, simply keep the file there.
> >
> 
> Isn't this similar in practice too?  For example, when I download a
> document in a web browser (not in Qubes), it opens is straight away in a
> document viewer; I can then click to "save a copy" from the document
> viewer.  I think it makes sense to extend this standard workflow to opening
> the document in a preferred VM, where it can then be saved.
> 
> For example, if I receive a PDF attachment in my "personal" VM, I usually
> want to open (and possibly save it) in my "work" VM.

There is one important difference between sending a file to a VM
(qvm-copy-to-vm) and opening it there - the later may easily compromise
target VM, especially in case of complex file formats. While
compromising Disposable VM by opening malicious file there isn't a
problem (this is exactly what Disposable VM is for), it is a problem in
case of non-Disposable VM. This means that opening a file in
non-Disposable VM should be decision made in target VM (where you sent
file), not the one sending a file there.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYw6x+AAoJENuP0xzK19csQ6kH/1cZCU1pAGvQrEBsvLGMdQ0H
/8L/RlUx4/HuRskGyKmZ3ItBWkcVVy//rrKUFEB3RT/zyQ5JedpYyJbjyU+03Rmd
rtyZNdayi9n/mf0maSRCx29elUI+ERflGahuiIADiM55eCzrJUmx9FpCkXrjQMHw
1jl+BV321YCzYV9+tfVewBwtOLIM3E6Q02/V+3oOU25bkHT8nwziQFdOT0Rnn0t7
mr5EV+Wc2ldr6CT2iUHqCYqymDnabf1e12+6DTX8+wUJHGB1C/QgIukdTZKk5q0+
9Bsi7092ZAXXt4hOXTTPguXYobROgJQ5rUhxPN7jURvn6SB97KruAKlx+BNZd8I=
=KK9F
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170311075126.GE15825%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Reply via email to