-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-11-15 06:00, '091823'04918'032948'1093248018243 wrote: > Hello, > > wow cool, I found out that now QR32 also can convert pictures into a trusted > image. > > Only I got confused, because after the conversion, I got two files: > > i) xy.jpg > ii) xy_untrusted.jpg > > In the PDF work flow it was the opposite: > > i) xy.pdf > ii) xy_trusted.pdf > > I liked the last work flow much better, because after the conversion, I can > see it, that this conversion took really place! > (especially after the copying around from files, so it will be easy to lost > the overview...) > > I don't found some docu for the untrusted.jpg, this means I must wipe the > xy_untrusted.jpg and keep the xy.jpg, which is now the 100% dead jpg picture, > right? > > Merci for this very nice new feature and Kind Regards >
That does indeed appear to be an oversight. Tracking here: https://github.com/QubesOS/qubes-issues/issues/2437 > P.S. Do I need also some Safty Linux Converter fro MP3 and MP4, or are this > files always 100% dead, without any kind of embedded objects by default? > I think it's fair to say that *any* time complex input is being parsed, there's the potential for malicious input to be crafted to exploit a bug in whatever program is doing the parsing. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJYKxxXAAoJENtN07w5UDAwAJIQAItCCYhGa7ry9GOEZRdXE9ps cfSov4ghYnNFA1K1aZATxJa6h9h2v5GbdYhZGPIFE1Bp5kqghZ2Rfhl/S5koIY4I XaWypv1gWAX95I3eG7WGX03sBp2tfSufe8yqJjevzXlttgS/Lg2fOnFmPPGGbS99 WV0KIXd+SFkG4NZ2EfN/dTA6ST0NlszaR680ZAa36ii9GVGMdWL3DqhjEslYYhWi alYrqdD9odKq92uGNRFw8jA0+iSwYIICzCfDbLr0HKBy/8bCmYzGBLCCsa/HixN7 ek6PdZP9d6ZrcbeYt50hkar+RrC617Xj7k696XXiArkfD97NIweMYb4ksC8rcntm zytsnLj72mXq1RJoxQFsOn73jmCfSbSktuQzFhDXarhh9nXDwgPtAfJLFKPs4fX+ U3odhxPuVPjKGtcXvUE3oxkePBSYUAW4tn1wVmjUgwpuYXh/dLKWuc2RgoPiCVWC JsL/jzPY/ze8P2nHkBF/4Kj5nvJQEYLjtoueYCAJVPOdYUqGuZ2xP84vrpoNM/CN YVQsminN6jOUOrP+nrmtffzupkCJ6gIig4kY/cdBRcxTgNlrQsnsSG4Ot1iUeQ6w CIONUm4rq3BbwvUCujO2wetaPY+k0eqyFSkwSHOKOJLI9YdfTBoi3Jxr2jkRfcBI DKVSjVCjqskcykYAuoPB =nsan -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/6cac380f-0b2d-d7df-249b-64de24b985d9%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
