security question

[ben1357]

When using Image Magick to process images, does Image magick conduct all its processes internally on my computer, or for certain functions will it send data externally?

[fmw42]

Perhaps you could be a bit more specific. As far as I know all processing is done locally, except when the input is a URL. The it will download the file from the URL. There is a policy.xml file you can modify to make your ImageMagick more secure and limit all kinds of things. See policy.xml at https://www.imagemagick.org/script/resources.php

[ben1357]

that sounds right, i just need to make sure that my private local data isn't sent externally such that it could be procured by some outside party.

[fmw42]

As far a I know all of ImageMagick is installed locally including all its needed delegate libraries for handling PNG, TIF etc. So processing is all done locally unless you request an image from outside your system or send an image to another locations. Not sure that the following is even possible. If you are working on a server, you will need to be careful what else is done on the server. But if you are just using your own local computer, that should be safe, as best I know.

[snibgo]

Certain functions, eg reading from http:// protocol, or using distributed pixel caches, naturally send data or metadata externally.

But in normal use, IM does no external communication.