Use non-networked disposible VMs for opening all decrypted files. implemented
MITIGQW18 · Implemented: In place. · Defined in mitigations.py:837
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Side-channel analysis or exfiltration of GPG keys or other sensitive data THREATQW29 | partially mitigated | 6 medium | 6 medium |
| Side-channel analysis or exfiltration of sd-viewer VM THREATQW16 | partially mitigated | 3 low | 3 low |
| Attacker obtains code execution in sd-viewer VM THREATQW1 | partially mitigated | 9 high | 2 low |
| Injection vulnerability in securedrop-client THREATQW9 | mitigated | 9 high | 2 low |
| Macro executed in malicious office file THREATQW46 | mitigated | 9 high | 2 low |