4 ms·
Seems like there would be market demand for a super locked down PDF viewer that basically ignores all the silly extensions/additions that Adobe has added to the
by eigenvalue 4y ago
Seems like there would be market demand for a super locked down PDF viewer that basically ignores all the silly extensions/additions that Adobe has added to the format over the decades. The vast majority of documents don't need Turing complete code capabilities or embedded videos or interactive 3D models. Something that safely (using sandboxing and other methods) turns the document into totally static pixel data that still feels nice to read would mitigate this extremely common attack vector.
- SV_BubbleTime 4y agoFoxIt has out of the box GPO controls that are quite easy to use. It's probably got a lot of tweaking to really lock it down, but I think you could get pretty far before having to stop for lunch.
- stefan_ 4y agoI realized some time ago, not wanting to install drivers, that a lot of office printers now have some janky webinterface that also allows uploading PDFs to submit as print jobs. This will turn a malicious PDF into perfectly safe paper! Now whatever cursed embedded software on the printer reads the PDF is probably a lot easier to exploit than an updated PDF viewer, but that's not what these people are going for.
- tornato7 4y agoThis pretty much already exists, it’s called Cloudflare Browser Isolation. They basically render your browser on a remote server and pipe you the visual data.
- journey_16162 4y agoI run multiple user accounts on Linux for different applications. The main account does not have Internet access obviously (blocked by IPTables), only some sub accounts can access it. I guess that if I open a random PDF downloaded from Internet, it can't do anything without Internet access, can it?