newbie question about converting pictures into a trusted image

57 views
Skip to first unread message

tirej...@gmail.com

unread,
Aug 4, 2018, 12:11:32 PM8/4/18
to qubes-users
Can you help please to understand how it works more deeper

Why all random pic (jpeg,png, bmp etc) marked as untrusted. Are they not passing the tests on dispvms?

*.jpg-untrusted - Does it usable or not?

if I have many different virtual machines (dispvms based on different templates, which one do the tests start and do they run at all? how to check it? very grateful.

https://github.com/QubesOS/qubes-issues/issues/2437
https://theinvisiblethings.blogspot.com/2013/02/converting-untrusted-pdfs-into-trusted.html

John S.Recdep

unread,
Aug 4, 2018, 2:23:36 PM8/4/18
to qubes...@googlegroups.com
On 08/04/2018 06:11 AM,
I am guessing "untrusted" is just the Name of your AppVM (qube), there
is no tests .

There is the ability to "create trusted pdfs" via an Disp Qube which
transforms the pdf format to all pixels then it puts a larger copy back
in your original App Qube and changes the name to "foo-trusted.pdf"
but its no longer a pdf per se

I hope that helps ?

Unman

unread,
Aug 5, 2018, 6:16:26 AM8/5/18
to John S.Recdep, qubes...@googlegroups.com
This isn't quite right.

"-untrusted" is the original file renamed. The "trusted" version has the
same name as the original, or the name you gave it.
The test , if any, is that you chose to convert the image, so must have
considered the source to be questionable in some way.

The conversion is done in a disposableVM for the qube in which you are running
the conversion.

When you convert a PDF it produces a fully formed error free PDF.
Because it is image based it is not text searchable, which may be why John
says it isn't a "PDF per se", but a PDF it is.

To some extent the ability to open files in dispVMs makes these
utilities less important. It is possible, for example, to store such files in minimal
templates with no viewers and always open them in offline dispVMs.

Unman

unread,
Aug 5, 2018, 7:30:32 AM8/5/18
to John S.Recdep, qubes...@googlegroups.com
And it doesnt seem to be working for me in 4.0.
Errors with "Request refused" although all policies look fine.
I've raised an issue

sm...@tutamail.com

unread,
Aug 8, 2018, 7:10:29 PM8/8/18
to qubes-users
I am using 4.0 and it works.

3.2 and 4.0 always created "untrusted" in the name when I converted an image...never quite undertood why but I doubt it just you "tirej..."

Reply all
Reply to author
Forward
0 new messages