🧵 AI-assisted vulnerabilities are all the rage nowadays. We had a close call with two of them in the last few days. Here’s how our defenses held up:

🧵 Dangerzone is a free app developed by FPF that converts potentially dangerous PDFs, office documents, or images into a safe-to-open PDFs. It converts docs into pixels, then reconstructs them as PDFs. Read the thread for important details about our recent sandbox update ⤵️

Web applications are only as trustworthy as the servers that serve them, and servers can get hacked. That’s why we are introducing WEBCAT, a tool allowing web browsers to verify the origin of code before they run it. 🌞 Today WEBCAT enters alpha testing! If you like to experiment with […]

For Dangerzone, the reproducibility of our container image is one of our core defenses against supply chain attacks. We explain why and share some tools we created along the way. https://dangerzone.rocks/news/2026-03-02-repro-build/

We’re kickstarting a series of technical articles about recent developments in Dangerzone. First up, we explain how we improved our image's footprint, security and build complexity, by switching from Alpine Linux to Debian Stable: https://dangerzone.rocks/news/2026-02-05-debian-stable/

Join us in FOSDEM 2026 for a double feature: 🎥 "Who’s reproducing the reproducible images?" 📅 Saturday @ 11:50 🔗 https://fosdem.org/2026/schedule/event/RYM8SF-repro-build/ 🎥 "Dangerzone: Bleach your documents" 📅 Sunday @ 10:45 🔗 https://fosdem.org/2026/schedule/event/JZ3F8W-dz-bleach/

Tracking pixels in documents are nothing new in tech circles, but whistleblowers and activists need to be aware of them. Here's what a company promises to their prospects:

How do you think Santa is handling cyberthreats? With Dangerzone of course! (Yeah, it took some training.) If you feel like testing his security team, you should know it has a challenge for you: Craft Santa a letter that can bypass Dangerzone's defenses and earn a bounty! 💰🎅 […]

How do you think Santa is handling cyberthreats? With Dangerzone of course! (Yeah, it took some training.) If you feel like testing his security team, you should know it has a challenge for you: Craft Santa a letter that can bypass Dangerzone's defenses and earn a bounty! 💰🎅 […]

We just released a major update to Dangerzone, it's now easier to install and use than ever before! If you're a journalist, use Dangerzone to sanitize documents you receive from sources and protect yourself from malware: https://dangerzone.rocks/news/2025-12-02-0.10.0/

Dangerzone 0.10.0 has been released, containing two major changes: sandbox auto-updates and embedding Podman for macOS and Windows. Check the announcement here: https://dangerzone.rocks/news/

The first release candidate for Dangerzone 0.10.0 is out, and we’re looking for feedback from users, especially on macOS and Windows. Thanks! https://dangerzone.rocks/news/2025-11-03-0.10.0-call-for-testing/

Docker Desktop releases prior to August 20th (v4.44.3) had a vulnerability that allowed malicious containers to compromise the host. Dangerzone is not affected, since it creates containers without network access. Still, if you haven't updated your Docker Desktop installation, this is your […]

Dangerzone 0.9.1 has been released. This release mainly contains bug fixes for Windows and macOS platforms. https://dangerzone.rocks/news/2025-07-10-0.9.1

Coming to Dataharvest in Belgium? Feel free to reach out to us, we would be happy to talk about Dangerzone or related topics. If you don’t want to scout for folks wearing “Freedom of the Press Foundation” t-shirts, send us a Signal message instead to meet […]

Dangerzone 0.9.0 has been released. This release makes our container images fully reproducible, brings security updates, and introduces experimental support for Podman Desktop on Windows and macOS. https://dangerzone.rocks/news/2025-04-09-0.9.0/

Big props to our SecureDrop colleagues for taking a swing at the "Javascript crypto is considered harmful" Leviathan: https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/ tl;dr: Browsers should be able to load security-sensitive pages only when the […]

We're aware that Dangerzone sometimes fails to convert files on macOS 15.2 or greater, and are investigating the issue. We will post an update to this thread once we have a workaround or a final fix. The corresponding GitHub issue is https://github.com/freedomofpress/dangerzone/issues/1101.

For our Apple macOS users: Before upgrading to macOS Sequoia, please first ensure you've upgraded Docker Desktop to avoid a known issue. More information here: https://dangerzone.rocks/news/2025-01-27-docker-disruptions/

PSA for our macOS users: macOS may report Docker as malware, due to a code-signing certificate that recently expired. Please follow this GitHub issue for a workaround, if you are affected: https://github.com/docker/for-mac/issues/7520

Dangerzone 0.8.1 has been released! This is mainly a security release that tackles a security vulnerability in the quarantined environment where documents are opened. Vulnerabilities like this are expected and do not compromise the security of Dangerzone, but users are strongly advised to […]

@runasand @GIJN There's lots of practical advice in this article that's easy to follow, and will considerably improve your security posture: https://gijn.org/resource/introduction-investigative-journalism-digital-security Also, we can't stress this enough: "It’s worth noting that photos and […]

This account is now bridged to #bluesky at https://bsky.app/profile/dangerzone.social.freedom.press.ap.brid.gy if you want to follow us there. :)