From c1f442661270009221328759703736459b6dd74e Mon Sep 17 00:00:00 2001
From: jvoisin <julien.voisin@dustri.org>
Date: Wed, 20 Jun 2018 00:10:21 +0200
Subject: [PATCH] Improve the threat-model again, thanks to @joe

---
 doc/threat_model.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/threat_model.md b/doc/threat_model.md
index 26e3741..80b57f3 100644
--- a/doc/threat_model.md
+++ b/doc/threat_model.md
@@ -17,6 +17,7 @@ Mat only removes standard metadata from your files, it does _not_:
   - handle steganography nor homoglyphs
   - handle stylometry
   - handle any non-standard metadata field/system
+  - handle file-system related metadata
 
 If you really want to be anonymous format that does not contain any
 metadata, or better : use plain-text ASCII without trailing spaces.
@@ -91,3 +92,9 @@ Requirements
 
 		- MAT2 *must not* fail silently. Upon failure,
 		MAT2 *must not* modify the file in any way.
+
+		- MAT2 *might* leak the fact that MAT2 was used on the file,
+		since it might be uncommon for some file formats to come
+		without any kind of metadata, an adversary might suspect that
+		the user used MAT2 on certain files.
+
-- 
GitLab