iiinova — where your digital self keeps evolving

dangerzone

@dangerzone.social.freedom.press.ap.brid.gy

Take potentially dangerous PDFs, office documents, or images and convert them to safe PDFs. A @freedomofpress project. [bridged from social.freedom.press/@dangerzone on the fediverse by fed.brid.gy ]

Posts Replies Media

dangerzone @dangerzone.social.freedom.press.ap.brid.gy · 30/04/2026

All Linux distributions since 2017 were found vulnerable to a trivial way to gain root privileges by a local unprivileged attacker: copy.fail Dangerzone runs its sandbox on Linux everywhere (on Windows and macOS, it uses a Linux VM under the […] [Original post on social.freedom.press]

A screenshot of a terminal session. This session shows a command that invokes Dangerzone's outer container (Podman), a command that invokes the inner sandbox (gVisor), and the payload of the copy.fail exploit. The exploit fails to run because gVisor does not implement the vulnerable protocol.

100 1

dangerzone @dangerzone.social.freedom.press.ap.brid.gy · 30/04/2026

iTerm2 was found susceptible to PTY confusion: blog.calif.io/p/mad-bugs-even-cat-r… Dangerzone sanitizes control characters before writing to the terminal (see the escaped � characters in the image), so our CLI users are safe.

A screenshot of an iTerm2 terminal. It shows some logs by the Dangerzone CLI, and some Unicode replacement characters (�) in place of the ANSII escape sequences of the original iTerm2 exploit.

100 1

dangerzone @dangerzone.social.freedom.press.ap.brid.gy · 08/01/2026

Tracking pixels in documents are nothing new in tech circles, but whistleblowers and activists need to be aware of them. Here's what a company promises to their prospects:

Snippet from a company website that advertises its product for tracking PDF documents. The descriptions reads: "[product] uses advanced steganography to embed invisible tracking codes in PDFs, enabling precise and effortless leak detection."

1317 17