Live data from Hacker News

GCHQ's Boiling Frogs paper on software development

github.com

81–85 of 85 posts

Re: GCHQ's Boiling Frogs paper on software development

#82
post #60

Earlier quoted context omitted.

JPGs are also a lot safer as PDFs can ping remote resources using carefully hidden beacon images. Although that said, I sometimes use this to see who opened my files. I once left hundreds of these on a very popular cloud hosting provider (not naming names), and somebody working there was stupid to open the PDF on a machine connected to the internet, thereby proving abuse by employees and proving any random stranger c…

Is that effective for non-adobe pdf viewers? What about the ones that disable javascript?

Look into canarytokens. Plenty of file types that do not rely on JavaScript nor macros etc

Re: GCHQ's Boiling Frogs paper on software development

#83
post #13

when I just opened the pdf my xorg died (OOM) - I kid you not, first time that ever happend. funny coincidence..or is it? I figure now I got a reason to setup that new distro I was playing with burn all them compromised stuff

Viewing the PDF using either the github viewer in Iceweasel 38 or downloading it and viewing it in Atril resulted in 2.1GB memory usage in a spare Jessie / MATE VM I had lying around. Close Atril and Iceweasel, ps -ef to check they're gone, look at top - and Xorg still holds on to 1.14GB.

Kosher it ain't. Proceed at your own risk.

Re: GCHQ's Boiling Frogs paper on software development

#84
post #13

when I just opened the pdf my xorg died (OOM) - I kid you not, first time that ever happend. funny coincidence..or is it? I figure now I got a reason to setup that new distro I was playing with burn all them compromised stuff

You'd be well advised to, too.

Couple of hours ago I created a throwaway account and commented here how Xorg held onto 1.1GB of memory after viewing the PDF with the github viewer and/or Atril. Tested and reproduced within a disposable Jessie / MATE VM.

I offered an opinion that this wasn't entirely usual behaviour.

The comment vanished. Not modded away, not "paled", just vanished.

Nothing to see here, move along now.

Re: GCHQ's Boiling Frogs paper on software development

#85
post #44

Earlier quoted context omitted.

Does HN have tags now?

Not sure what you mean. Other duplicate posts have "[dupe]" added to their title, so why the hassle this time?

Not hassle, I've just never personally seen a [dupe] tag so I didn't know what you meant.
Post reply on HN