4 ms·
PDF exploits are not new. I am really amazed at this business of PDFs running code. Only Adobe and Microsoft could come up with this kind of crap. Documents
by vfclists 4y ago
PDF exploits are not new.
I am really amazed at this business of PDFs running code. Only Adobe and Microsoft could come up with this kind of crap.
Documents are not supposed to be executable, plain and simple.
Any person in control of crypto keys who opens a PDF file, in fact any kind of executable coming from an email is an idiot.
1. They are supposed to come only from trusted authorized staff of business partners.
2. They are supposed to be scanned and vetted by in-house security on separate secure machines, even if they are from trusted business partners before being run on any end user machine, even those of admins and security admins.
3. There must be a clear cut case for files being executable in any case.
4. If you are to run any documented it should be checked on a remotely accessed system, ie over Remote Desktop, VNC if necessary, and purged of any code before being run on an enduser machine.
This is why I consider most crypto companies to be snake oil scams. If they don't have the discipline to secure their computer systems properly, why should they be trusted with other people's money.
It is so stupid it makes you wonder if said employee was a part of the scam.
- vfclists 4y agoIt seems we have an apologist for idiots in the house. Thats HN for you, filled with all kind of shills apologizing for scammy/scummy behaviours. Do you guys remember the Apple fanboyism that this place was plagued with some years ago? If it has stopped I may not have noticed.