What does converting to trusted jpeg actually do?

General Discussion
1

and any downside to doing a batch conversion re: which applications might be able to open them etc?

2

https://www.qubes-os.org/doc/security-guidelines/#handling-untrusted-files

Alternatively PDFs may be converted to trusted PDFs by right clicking on them. This converts the PDFā€™s text to graphic form, so the disk size these documents take up will increase.

P.S. The first article should actually have a link to the second one, but it doesnā€™t currently.

3

yes, thats PDFs, I asked about Jpegs specifically thanks

4

Here is the source code: https://github.com/QubesOS/qubes-app-linux-img-converter. You can get the entry point which use notably this https://github.com/QubesOS/qubes-linux-utils/tree/master/imgconverter.

5

well thanks but I canā€™t read source code.

just a simple answer , was what was hoping forā€¦

6

Hi @Clodius,

The man page say:

   DESCRIPTION

   qvm-convert-img  modifies image files by processing them using the conā€
   vert tool from imagemagick. Processing is done in  a  disposable  qube,
   and  the  converted  file stored in output-file Conversion is done to a
   very simple RGBA representation of the  image.   Any  metadata  in  the
   original file is removed.

So the image displayed in a fake display and each pixels cloned (like a screenshot of the displayed image), and all metadata removed.

The same is also available for PDF, an article from Joanna Rutkowska explains it.

4 Likes
7

oh, it has a man pageā€¦

so is there a downside if I did some Batch conversion of all my images

8

Is there a nautilus, right-click, option or package instead of a terminal tool? I use the qvm-convert-img and qvm-convert-pdf sparingly, like untrusted sources, since the quality of the converted pdf isnā€™t the greatest and sometimes you canā€™t do text searches on images.

9

Yes