If Google is your concern, create a "to read attachments only" Google identity. Chromebooks are cheap; get one. https://twitter.com/can/status/765229709072343041 …
-
This Tweet is unavailable.
-
Replying to @zeynep
Is there a "how to read attachments securely" guideline esp. for activists and journalists? "Don't read them" is no answer.
@VessOnSecurity?5 replies 0 retweets 5 likes -
Replying to @zeynep
Depends on the attachment. A Chromebook only for untrusted docs is a good idea but expensive. Notebook with CubesOS is alternative.
1 reply 0 retweets 1 like -
Replying to @VessOnSecurity @zeynep
CubesOS is a pain in the butt to use, especially if you need to copy data from one process to another (from doc to your article).
1 reply 0 retweets 0 likes -
Replying to @VessOnSecurity @zeynep
Microsoft as viewer-only versions for Word, Excel and PowerPoint, but they might be exploitable.
2 replies 0 retweets 0 likes -
Replying to @VessOnSecurity @zeynep
Many alternatives to Adobe Acrobat (I use SumatraPDF) but they have vulnerabilities on their own.
1 reply 0 retweets 0 likes -
Replying to @VessOnSecurity @zeynep
A quick and dirty way is to use Google's document viewer https://www.google.com/safebrowsing/diagnostic?site= … and append the URL of the docafter the above URL.
2 replies 1 retweet 5 likes -
Replying to @VessOnSecurity @zeynep
But most of this advice is for a normal user who wants to protect himself. If you are targeted by a nation-state, it's a diff game.
1 reply 0 retweets 0 likes -
Replying to @VessOnSecurity @zeynep
Note that the leaked documents could be damaging "indirectly". They might not contain any malware - just wrong info.
1 reply 0 retweets 0 likes -
Replying to @VessOnSecurity @zeynep
Mixed with other documents with correct info. If you use the wrong one, you can damage your reputation or otherwise harm others.
1 reply 0 retweets 0 likes
Yes; I'm talking about the average journalist or dissident to protect themselves from malware distribution.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.