diff options
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/threat_model.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/doc/threat_model.md b/doc/threat_model.md index 26e3741..80b57f3 100644 --- a/doc/threat_model.md +++ b/doc/threat_model.md | |||
| @@ -17,6 +17,7 @@ Mat only removes standard metadata from your files, it does _not_: | |||
| 17 | - handle steganography nor homoglyphs | 17 | - handle steganography nor homoglyphs |
| 18 | - handle stylometry | 18 | - handle stylometry |
| 19 | - handle any non-standard metadata field/system | 19 | - handle any non-standard metadata field/system |
| 20 | - handle file-system related metadata | ||
| 20 | 21 | ||
| 21 | If you really want to be anonymous format that does not contain any | 22 | If you really want to be anonymous format that does not contain any |
| 22 | metadata, or better : use plain-text ASCII without trailing spaces. | 23 | metadata, or better : use plain-text ASCII without trailing spaces. |
| @@ -91,3 +92,9 @@ Requirements | |||
| 91 | 92 | ||
| 92 | - MAT2 *must not* fail silently. Upon failure, | 93 | - MAT2 *must not* fail silently. Upon failure, |
| 93 | MAT2 *must not* modify the file in any way. | 94 | MAT2 *must not* modify the file in any way. |
| 95 | |||
| 96 | - MAT2 *might* leak the fact that MAT2 was used on the file, | ||
| 97 | since it might be uncommon for some file formats to come | ||
| 98 | without any kind of metadata, an adversary might suspect that | ||
| 99 | the user used MAT2 on certain files. | ||
| 100 | |||
