@lpheathen2 @judgedread

> I truly thought most people on here had some form of a sandbox set up for safe viewing of threat material from threat vectors that monitor for IoT.

The chudbuds.lol admin got her tax returns and divorce filings and child support payments and everything down to photos from the hospital of her new husband's dick injury, all posted online. She ran an instance with 2100 active users ( http://demo.fedilist.com/instance/chudbuds.lol ) on it, and she used the same Windows computer to administer that machine, handle business, do her Twitch streaming, and also install RAT tools disguised as Minecraft mods. I am not sure what qualifies as "most people" but I think people that are remotely careful about anything are vanishingly rare. Most people don't really have a reason (although in Claire's case, installing a random executable on the computer she used for everything while also acting as an admin for a very noisy instance is possibly the biggest mismatch between how careful someone should be and how careful they are).

> ( don’t click links) (don’t open rando pdf’s)

In thus case, it's a known domain belonging to a regular site and it's an academic PDF and we're not at "don't click links" threat-levels yet. That's Gab levels of of "What if they find my IP address?" paranoia. It's just shitty people publishing an academic dry-hump. It's not a thing to worry about. Tor's sufficient for now.