Questions about computer safety concerns when running TeX programs or viewing TeX-created documents. For questions about managing digital rights (e.g. password-protected documents) use the {drm} tag.

learn more… | top users | synonyms

24
votes
3answers
1k views

How can I safely compile other people's LaTeX documents?

I am a programmer and as part of a website I need to be able to take LaTeX source files and compile them, then return the pdf to the user. This seems dangerous since a malicious user could e.g. read ...
28
votes
4answers
4k views

Digital signature

I have recently been asked to add a digital signature to a report (which I wrote using pdflatex). Is there such a mechanism in the TeX/LaTeX world or am I better of using external software to verify ...
39
votes
1answer
740 views

Is luatex as secure as pdftex?

My texmf.cnf file contains these lines: % Allow TeX \openin, \openout, or \input on filenames starting with `.' % (e.g., .rhosts) or outside the current tree (e.g., /etc/passwd)? % a (any) : ...
16
votes
1answer
15k views

How do I create a PDF file that can be digitally signed?

We are using Acrobat digital signatures in my organization. With Acrobat Professional you can put in a signature block that allows signing with a client-side digital signature. This is something ...
15
votes
1answer
300 views

How do CTAN maintainers make sure all the uploaded packages and classess in CTAN are free of malicious code?

There are a large number of packages (plus some classes) uploaded and updated in CTAN (other mirrors as well). How do the CTAN maintainers make sure the uploaded stuff is free of malicious code? Do ...
3
votes
2answers
612 views

Disable including of system files [duplicate]

Possible Duplicate: How can I safely compile other people's LaTeX documents? I've got a Linux server that is rendering LaTeX documents, I want to disable the access of LaTeX to system ...
8
votes
1answer
409 views

AVG: Biber listed as a trojan in TexLive 2014?

A few days ago I installed TexLive 2014 on Windows. I just compiled a document today to test it and Biber is recognized as a Trojan Horse by AVG Free. The message says: BackDoor.Generic18.ALDX. From ...
3
votes
1answer
176 views

Security: Latex Injection Hack

I'm building a webapp that takes latex code from users, which is then compiled serverside. Now latex creates a huge system vulnerability since it is turing complete and you can basically hack the ...
10
votes
4answers
899 views

Is it necessary to disable virus scanner during TeX Live installation, and if so, why?

Is it necessary to disable virus scanner during TeX Live installation, and if so, why?
9
votes
3answers
590 views

What analysis of Texlive's restricted permissions model exists?

TH. writes, in How should one use \write18 with BibTeX: Background Now that TeX Live 2010 has a restricted \write18, I figured it'd be reasonable to update my cv which uses the bibunits package ...