logoalt Hacker News

dfajgljsldkjagyesterday at 11:00 PM4 repliesview on HN

I personally just upload them to google drive. It would be a serious pwn if they could somehow still do a compromise through google drive.


Replies

apyrgiotistoday at 9:46 AM

(disclaimer: one of the Dangerzone devs)

That's something I do from time to time as well. AFAIK Google Drive renders all documents on the server-side (which implicitly means that they don't trust the browser sandbox), so that's a reasonable price to pay for less privacy.

Dealing with sensitive documents though is another story, you just can't upload them to a third-party service. That's where projects like Dangerzone come into play.

bob1029today at 12:25 AM

Does google drive apply any transformation over the PDF, or are you effectively loading the same document in your browser on the round trip?

show 3 replies
gleenntoday at 12:09 AM

Do you have any specifics on what Drive does? Any examples of it fixing embedded virii? Or is this blind assumption?

show 1 reply
creatoneztoday at 2:14 AM

Firefox has a builtin PDF reader, PDF.js, that resides inside of the Javascript sandbox. In theory, it's as safe as loading a webpage.

show 1 reply