Live data from Hacker News

Linux Running in a PDF

linux.doompdf.dev

111–116 of 116 posts

Re: Linux Running in a PDF

#111

Earlier quoted context omitted.

Running operating systems inside of document formats is what makes computing great? I thought it was the ease and leisure as well as the aid in pursuit of real knowledge they were supposed to introduce into our lives. Can we spend our time more wisely instead?

what are you doing commenting here? go back to curing cancer!

That is not a reasonable comparison is it. Junk hyperbole doesn't make a strong point.

What are you trying to say? This insidious stuff is worthwhile? Bitcoin mining in PDFs is important stuff?

Re: Linux Running in a PDF

#112

Earlier quoted context omitted.

what are you doing commenting here? go back to curing cancer!

That is not a reasonable comparison is it. Junk hyperbole doesn't make a strong point. What are you trying to say? This insidious stuff is worthwhile? Bitcoin mining in PDFs is important stuff?

How is it not reasonable? Commenting here is clearly a total waste of life compared to curing cancer, one of the most noblest pursuits, and we've taken it upon ourselves to judge how other people spend their time. And of course once we've decided that I am the arbiter of what other people get to spend their time on, and I've decided that curing cancer is the most important thing to be working on, anyone not working on that gets sent right to waste of time jail.

Watching TV and playing sports or having a drink with friends, all banned under this regime because that's all unnecessary. I might also be possible that everyone's concept of what's valuable and productive is entirely subjective. Demonstrating that PDFs have JavaScript interpreters these days and are not a static content rendering system, and are not to be trusted, in a way that goes viral for maximum exposure, in the off chance someone learns something about how insecure they are, and they avoid getting hacked seems quite valuable to me, given how much money gets lost to hackers.

No one spends all their time only doing productive things, and some choose to spend it making things that other people find neat enough to share, like this PDF. Other people choose to spend their time commenting here. What else do you do for fun (when you're not off curing cancer)? Why is that any more worthy?

Why does it bother you how others spend their free time?

Re: Linux Running in a PDF

#113
post #54

Earlier quoted context omitted.

PDFs have always been a highly attractive attack vector, because most people associate them purely with text and have no clue that you can easily embed executable code. Combine that with how atrociously many vulnerabilities there are in popular readers like acrobat, and you have a perfect gateway for getting your company hacked.

Converting all your PDF's to max-quality sized DJVU's (at least the ones without forms) would be the first thing to do in any company. Maybe not for graphic design because $ADOBE, but for documentation it's perfectly safe to do so.

Unfortunately that approach falls apart the moment you need to interact with anyone outside your company.

Re: Linux Running in a PDF

#115

Earlier quoted context omitted.

PDFs have always been a highly attractive attack vector, because most people associate them purely with text and have no clue that you can easily embed executable code. Combine that with how atrociously many vulnerabilities there are in popular readers like acrobat, and you have a perfect gateway for getting your company hacked.

PDF is brushing up against "more harm than good". Wish there was a proper alternative.

How about OpenXPS or DjVu?
Post reply on HN