security question

Questions and postings pertaining to the usage of ImageMagick regardless of the interface. This includes the command-line utilities, as well as the C and C++ APIs. Usage questions are like "How do I use ImageMagick to create drop shadows?".
Post Reply
ben1357
Posts: 2
Joined: 2018-02-01T13:52:36-07:00
Authentication code: 1152

security question

Post by ben1357 » 2018-02-01T13:54:53-07:00

When using Image Magick to process images, does Image magick conduct all its processes internally on my computer, or for certain functions will it send data externally?

User avatar
fmw42
Posts: 23880
Joined: 2007-07-02T17:14:51-07:00
Authentication code: 1152
Location: Sunnyvale, California, USA

Re: security question

Post by fmw42 » 2018-02-01T13:57:52-07:00

Perhaps you could be a bit more specific. As far as I know all processing is done locally, except when the input is a URL. The it will download the file from the URL. There is a policy.xml file you can modify to make your ImageMagick more secure and limit all kinds of things. See policy.xml at https://www.imagemagick.org/script/resources.php

ben1357
Posts: 2
Joined: 2018-02-01T13:52:36-07:00
Authentication code: 1152

Re: security question

Post by ben1357 » 2018-02-01T14:02:34-07:00

that sounds right, i just need to make sure that my private local data isn't sent externally such that it could be procured by some outside party.

User avatar
fmw42
Posts: 23880
Joined: 2007-07-02T17:14:51-07:00
Authentication code: 1152
Location: Sunnyvale, California, USA

Re: security question

Post by fmw42 » 2018-02-01T14:05:59-07:00

As far a I know all of ImageMagick is installed locally including all its needed delegate libraries for handling PNG, TIF etc. So processing is all done locally unless you request an image from outside your system or send an image to another locations. Not sure that the following is even possible. If you are working on a server, you will need to be careful what else is done on the server. But if you are just using your own local computer, that should be safe, as best I know.

snibgo
Posts: 10717
Joined: 2010-01-23T23:01:33-07:00
Authentication code: 1151
Location: England, UK

Re: security question

Post by snibgo » 2018-02-01T14:12:54-07:00

Certain functions, eg reading from http:// protocol, or using distributed pixel caches, naturally send data or metadata externally.

But in normal use, IM does no external communication.
snibgo's IM pages: im.snibgo.com

Post Reply