3 ms·
Slightly OT, but you would be surprised at how much power PDFs have (especially when opened in Adobe Acrobat/Reader). I recently came across this monstrosity[1]
by applecrazy 8y ago
Slightly OT, but you would be surprised at how much power PDFs have (especially when opened in Adobe Acrobat/Reader). I recently came across this monstrosity[1] on HN, and the author mentions this:
> Scripts can supposedly do things like make arbitrary database connections, detect attached monitors, import external resources, and manipulate 3D objects.
That's an unprecedented level of power for what is supposedly a simple document format.
That being said, PDFs are only a threat when opened in a with support for these obscure APIs, such as Adobe's own readers. You (probably) will be fine opening untrusted PDFs in Chrome's PDF reader (PDFium) and Preview.
[1]: https://github.com/osnr/horrifying-pdf-experiments https://github.com/osnr/horrifying-pdf-experiments
- ggm 8y agoYou should totes makes this a top level HN post!!!! (I typed in my statutory copied one line NeWS program back in the day too. Never again)
- JdeBP 8y agohttps://news.ycombinator.com/item?id=17915296 https://news.ycombinator.com/item?id=17915296
- emmelaich 8y agoThanks! I also heard it's got a email sender (and receiver?) inbuilt.
- syn0byte 8y agoNote; Chrome's PDF reader executes the nested JS in his breakout PDF game. IIRC, the only one that did support it. Not that PDFium is any worse than Adobe, but certainly not much better.