Page MenuHomePhabricator

Have 'Obey DRM limitations' in Okular unticked by default
Closed, ResolvedPublic

Description

As discussed in the forums, in Okular, the current default PDF reader in Whonix, there is a privacy and anonymity risk in PDF files which contain 'DRM' which may track the user in Whonix through such code.

Can we have ‘Obey DRM limitations’ unticked by default in Whonix to help mitigate this risk?

Details

Impact
Needs Triage

Event Timeline

HulaHoop added a subscriber: HulaHoop.EditedMay 12 2018, 2:44 AM

Interesting backstory about this anti-feature in Debian. Nonetheless I've found a solution.

This is done by changing the following file:

/home/user/.kde/share/config/okularpartrc

to:

[$Version]
update_info=okular.upd:sep_settings

[Core General]
ObeyDRM=false

HulaHoop (HulaHoop):

/home/user/.kde/share/config/okularpartrc

Ought to avoid writing into the home folder.

Adding that file into this folder might do the trick.

https://github.com/Whonix/anon-apps-config/tree/master/usr/share/anon-apps-config

Please send a pull request.

Then we might still get this into Whonix 14. (Or Whonix 15.)

HulaHoop closed this task as Resolved.May 30 2018, 5:41 AM
HulaHoop claimed this task.