Word documents, and even PDF files, aren’t necessarily safe. These normally innocuous files can be injected with malicious “poison” code or simple scripts of code that can be a serious security risk.
You probably already know it’s dangerous to open files from sources you can’t necessarily trust. If you’re an activist or journalist—or anyone who occasionally depends on anonymous tips to do their jobs—you might run into a situation where potentially useful information is inside a Microsoft Word document or PDF file that you can’t exactly vouch for. Wouldn’t it be nice if you could open those files and read them without exposing your device to potential security risks?
Dangerzone is a free and open source tool built for this purpose. Originally built by journalist and security engineer Micah Lee, this application opens files in a sandbox environment with no internet access, then converts the file to an image-based PDF with no scripting enabled. The resulting PDF has any malicious code stripped out and should be safe to open—at least, as safe as anything can be.
“You can think of it like printing a document and then rescanning it to remove anything sketchy, except all done in software,” explains the about page, which includes a lot of fascinating details about how the application works.
To get started, download and install Dangerzone. There are downloads for Windows, macOS, and various Linux systems. The first time you run it there will be a brief setup, after which you can simply drag files to the window.
Photograph: Justin Pot
The application can open and convert PDF, Word, Excel, PowerPoint, Open Office, EPUB, and image files. You can drag and drop multiple documents at once, if you’d like.
After adding documents you will be asked a few questions: where you’d like the resulting files to end up, whether they should open after the conversion is done, and whether you’d like to use optical character recognition (OCR) in order to make the document searchable. You can also move the original, potentially unsafe documents into a subfolder named “unsafe,” helping ensure you don’t confuse them with the newly made safe ones.
.png)
Photograph: Justin Pot
Read the full article here