From c1f442661270009221328759703736459b6dd74e Mon Sep 17 00:00:00 2001 From: jvoisin Date: Wed, 20 Jun 2018 00:10:21 +0200 Subject: [PATCH] Improve the threat-model again, thanks to @joe --- doc/threat_model.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/doc/threat_model.md b/doc/threat_model.md index 26e3741..80b57f3 100644 --- a/doc/threat_model.md +++ b/doc/threat_model.md @@ -17,6 +17,7 @@ Mat only removes standard metadata from your files, it does _not_: - handle steganography nor homoglyphs - handle stylometry - handle any non-standard metadata field/system + - handle file-system related metadata If you really want to be anonymous format that does not contain any metadata, or better : use plain-text ASCII without trailing spaces. @@ -91,3 +92,9 @@ Requirements - MAT2 *must not* fail silently. Upon failure, MAT2 *must not* modify the file in any way. + + - MAT2 *might* leak the fact that MAT2 was used on the file, + since it might be uncommon for some file formats to come + without any kind of metadata, an adversary might suspect that + the user used MAT2 on certain files. +