Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Learning from the Enemy: The Gunman Project (2007) [pdf]

nsa.gov

Post reply on HN
Print view View original

11–20 of 49 posts

Re: Learning from the Enemy: The Gunman Project (2007) [pdf]

#11

Post by JupiterMoon »

leni536 wrote: post #8
JupiterMoon wrote: post #6

Earlier quoted context omitted.

In response: (a) I wish I could but I doubt I ever will. I've heard so much bad stuff about US border guards being annoying and transiting through the US being slow and painful that I won't even use a US hub anymore. (b) Cool I guess I can't know if this is true without opening it though? This is partly the fault of the pdf spec itself. Maybe a more transparent document format would help (does that even exist)?. (c)…

How is PDF not as transparent as any other open binary format (though PDF is more like mixed)? Edit: > Maybe a more transparent document format would help (does not even exist). I don't know if more transparent, but djvu exists for scanned documents. Postscript also exists but I would doubt that it's safer than PDF.

I am aware that the pdf specific is open. However pdf does a lot of things and is somewhat complex. I argue more than is needed for transmitting documents. Can you personally verify that a given pdf does nothing malicious?

Re: Learning from the Enemy: The Gunman Project (2007) [pdf]

#12

Post by leni536 »

JupiterMoon wrote: post #11
leni536 wrote: post #8

Earlier quoted context omitted.

How is PDF not as transparent as any other open binary format (though PDF is more like mixed)? Edit: > Maybe a more transparent document format would help (does not even exist). I don't know if more transparent, but djvu exists for scanned documents. Postscript also exists but I would doubt that it's safer than PDF.

I am aware that the pdf specific is open. However pdf does a lot of things and is somewhat complex. I argue more than is needed for transmitting documents. Can you personally verify that a given pdf does nothing malicious?

Can you personally verify that a given jpeg does nothing malicious? Same thing, you trust (or not) your reader and its parser and hope it doesn't have any remote code execution vulnerability. Or you stop reading PDF files and stop viewing images.

Re: Learning from the Enemy: The Gunman Project (2007) [pdf]

#13

Post by JupiterMoon »

leni536 wrote: post #12
JupiterMoon wrote: post #11

Earlier quoted context omitted.

I am aware that the pdf specific is open. However pdf does a lot of things and is somewhat complex. I argue more than is needed for transmitting documents. Can you personally verify that a given pdf does nothing malicious?

Can you personally verify that a given jpeg does nothing malicious? Same thing, you trust (or not) your reader and its parser and hope it doesn't have any remote code execution vulnerability. Or you stop reading PDF files and stop viewing images.

Nope I can't. In reality how many exploits have actually been contained in jpegs vs pdf though?

Re: Learning from the Enemy: The Gunman Project (2007) [pdf]

#14

Post by casualhner »

leni536 wrote: post #9
fallat wrote: post #4

Earlier quoted context omitted.

Download it, block all ports, run pdf reader in a chroot...B)

And on a separate X server. It's more like trusting your reader than the PDF file itself.

>destroy computer after reading.

Re: Learning from the Enemy: The Gunman Project (2007) [pdf]

#18

Post by leni536 »

JupiterMoon wrote: post #13
leni536 wrote: post #12

Earlier quoted context omitted.

Can you personally verify that a given jpeg does nothing malicious? Same thing, you trust (or not) your reader and its parser and hope it doesn't have any remote code execution vulnerability. Or you stop reading PDF files and stop viewing images.

Nope I can't. In reality how many exploits have actually been contained in jpegs vs pdf though?

That's an other question. Parsers of multimedia formats often have nasty vulnerabilities though. The most vulnerable part of PDF readers is the handling of embedded javascript. It can be easily evaded by using a viewer that doesn't implement the javascript functionalities of PDF, most files don't use it anyway.

Re: Learning from the Enemy: The Gunman Project (2007) [pdf]

#20

Post by ptaipale »

casualhner wrote: post #14
leni536 wrote: post #9

Earlier quoted context omitted.

And on a separate X server. It's more like trusting your reader than the PDF file itself.

>destroy computer after reading.

Perfectly common, of course. Usually the way to do this is to use a virtual machine which you then throw away.
Post reply on HN