3 ms·
> I just have this suspicion that sooner than later they will be used as a vector for some kind of security issue. You mean like being rendered into a canvas t
by inetknght 6y ago
> I just have this suspicion that sooner than later they will be used as a vector for some kind of security issue.
You mean like being rendered into a canvas to get a high-entropy fingerprint of your device?
- skrebbel 6y agoHow do downloadable web fonts help with that?
- abjKT26nO8 6y agoTrueType implementations need to include an interpreter for a Turing-complete language (the hinting language). More about vulnerabilities: 1. https://security.stackexchange.com/questions/91347/how-can-a-font-be-used-for-privilege-escalation https://security.stackexchange.com/questions/91347/how-can-a... 2. https://threatpost.com/of-truetype-font-vulnerabilities-and-the-windows-kernel/101263/ https://threatpost.com/of-truetype-font-vulnerabilities-and-... 3. https://googleprojectzero.blogspot.com/2015/07/one-font-vulnerability-to-rule-them-all.html https://googleprojectzero.blogspot.com/2015/07/one-font-vuln...