Fish Wang says to YSITD
threat model: a.k.a. 不跑外部程式,不下載檔案