1 Oct
2015
1 Oct
'15
10:16 p.m.
On Thu, Oct 01, 2015 at 05:54:09PM -0400, Steve Kinney wrote:
The network itself is the trap, with or without javascript, with or without obfuscation via TOR or etc. I would be much more concerned with the handling of those downloaded files on the local machine - if a trap is suspected, zero day exploits hidden in the files should be assumed.
yes, that's why the "zip" should also be signed with some widely accepted pgp key. -- otr fp: https://www.ctrlc.hu/~stef/otr.txt