3 ms·
Your intuition about the (in)security of PDFs is outdated. 2000s era Adobe Reader on Windows XP may have been a security nightmare, but a modern PDF app running
by Ajedi32 3y ago
Your intuition about the (in)security of PDFs is outdated. 2000s era Adobe Reader on Windows XP may have been a security nightmare, but a modern PDF app running on a mobile phone OS with bulit-in application sandboxing and a fine-grained permissions system definitely isn't.
- naravara 3y agoIt's less about PDFs specifically and more about normalizing the behavior where people just scan QR codes off stickers and then download and execute whatever arbitrary file the page wants to serve them.
- Analemma_ 3y agoIt should be (and, for the most part, is, modulo occasional 0-days) safe for regular users to visit random urls on their mobile phones, even if they trigger a download. If that isn't the case, we have failed as developers.
- taeric 3y agoFor your closing clause, I have bad news for you.