summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--README.security14
1 files changed, 9 insertions, 5 deletions
diff --git a/README.security b/README.security
index 335c537..1e6fad0 100644
--- a/README.security
+++ b/README.security
@@ -1,14 +1,17 @@
1Warning 1Warning
2======= 2=======
3Mat only removes metadata from your files, it does not anonymise their 3Mat only removes standard metadata from your files, it does _not_:
4content, nor can it handle watermarking, steganography, or any too custom 4 - anonymise their content
5metadata field/system. 5 - handle watermarking
6 - handle steganography
7 - handle any non-standard metadata field/system
6 8
7If you really want to be anonymous format that does not contain any 9If you really want to be anonymous format that does not contain any
8metadata, or better : use plain-text. 10metadata, or better : use plain-text.
9 11
12
10Implementation notes 13Implementation notes
11====================== 14====================
12Symlink attacks 15Symlink attacks
13--------------- 16---------------
14MAT output predictable filenames (like yourfile.jpg.bak). 17MAT output predictable filenames (like yourfile.jpg.bak).
@@ -20,6 +23,7 @@ Test suite
20Formats that are not in the test suite are not well-tested, 23Formats that are not in the test suite are not well-tested,
21please do not trust the MAT about them! 24please do not trust the MAT about them!
22 25
26
23Threat Model 27Threat Model
24============ 28============
25The Metadata Anonymisation Toolkit adversary has a number 29The Metadata Anonymisation Toolkit adversary has a number
@@ -86,5 +90,5 @@ Requirements
86 anonymise files: every added items of metadata decreases 90 anonymise files: every added items of metadata decreases
87 anonymity. 91 anonymity.
88 92
89 - The MAT *must* handle unknown/hidden metadata fields, 93 - The MAT *should* handle unknown/hidden metadata fields,
90 like proprietary extensions of open formats. 94 like proprietary extensions of open formats.