4 ms·

PDF parsing and rendering has been sandboxed for over a decade: https://chrome.googleblog.com/2010/11/pdf-goodness-in-chrome.html https://chrome.googleblog.com/

by NavinF 5y ago

PDF parsing and rendering has been sandboxed for over a decade: https://chrome.googleblog.com/2010/11/pdf-goodness-in-chrome.html https://chrome.googleblog.com/2010/11/pdf-goodness-in-chrome... The idea of depending on your government to protect you from exploits is insane. Anyone in the world can upload a shady PDF to a website hosted in any country and suffer zero consequences.

flayy 5y ago
Using Chrome in the pursuit of privacy is a joke, right? Regarding PDF specifically: https://www.zdnet.com/article/google-chrome-zero-day-used-in-the-wild-to-collect-user-data-via-pdf-files/ https://www.zdnet.com/article/google-chrome-zero-day-used-in... https://windowsreport.com/google-chrome-pdf-security-bug/ https://windowsreport.com/google-chrome-pdf-security-bug/ Who said anything about "depending on the government" or uploading PDFs? This subthread is about downloading from Elsevier directly vs. downloading from SciHub.
- joshuaissac 5y ago
  > This subthread is about downloading from Elsevier directly vs. downloading from SciHub. The reply was to a comment about downloading from Belarus "where the government apparently tolerates the operation" "of PDF exploits" according to the commenter.
- Saris 5y ago
  To be fair security and privacy can be different things.