Live data from Hacker News

Freecomputerbooks.com

freecomputerbooks.com

21–30 of 44 posts

Re: Freecomputerbooks.com

#22

Earlier quoted context omitted.

"Usually don't" and "often not" are comforting words but regardless there are always risks involved when committing illegal acts.

Is there actually? In Germany I have heard of people getting served with fines for downloading torrents, as sharing a torrent identifies you through your IP. I've never heard of anyone getting into trouble for streaming or downloading a file, and I'm not sure how it could realistically be detected.

A couple of years ago the European court of justice actually decided that streaming itself is already illegal. That is, if it's reasonable to assume that you knew it was an illegal stream. I haven't heard about a case of it ever being prosecuted though.

Re: Freecomputerbooks.com

#23

Earlier quoted context omitted.

"Usually don't" and "often not" are comforting words but regardless there are always risks involved when committing illegal acts.

Is there actually? In Germany I have heard of people getting served with fines for downloading torrents, as sharing a torrent identifies you through your IP. I've never heard of anyone getting into trouble for streaming or downloading a file, and I'm not sure how it could realistically be detected.

There is growing legal pressure to not consider an IP address used as evidence that the "owner" of said IP address is the one doing the activity.

For example, my IP address is paid for by me, through a run-of-the-mill ISP subscription. Does that make me legally liable for all the activity of the other person that lives with me and uses "my" network for all their private internet traffic?

I guess there are laws about facilitating piracy, and whatnot, but you can't reasonably expect me to screen all my fiance's activity on the network. Most of it is encrypted anyway. I can't be on the hook for that.

I'm privileged in that I have an ISP that feels the same way as I do about this. They've fought for the privacy of their subscribers before, and will likely keep doing so in the future, because an IP address does not identify any individual.

Re: Freecomputerbooks.com

#24

> In other words, this site DOES NOT contain any actual content of the books or lecture notes listed in this site. > Therefore, this website is as legal as search results of any search engines like Google, Yahoo, etc. It's worth pointing out that this site may link to copyrighted material.

>This site neither supports copyright infringement, nor links to web sites that trade copyrighted material. If you find any questionable links on this web site, please contact the webmaster (see the contact info at the bottom).

Re: Freecomputerbooks.com

#25

Is there any comparable resource that also (explicitly) includes copyrighted material? I believe a curated list containing the "cream of the crop" of a specific domain would be an excellent resource for anyone starting out.

You might want the O'Reilly library subscription. It's $50 per month, and all the books are high quality.

Re: Freecomputerbooks.com

#26
post #17

Earlier quoted context omitted.

Whenever I download untrusted pdfs I always upload them to virustotal. Does that help at all and if so, is it sufficient enough?

Is pdf dangerous? I guess on linux canonical distributes latest, free-of-known-vulnerables evince, what about windows? One must upload every file?

There has been a case of confirmed code execution vulnerability in Evince in the past, in 2017:

* https://www.cvedetails.com/cve/CVE-2017-1000083/

As well as possible code execution vulnerabilities in Evince, in 2019 and 2011:

* https://www.cvedetails.com/cve/CVE-2019-1010006/

* https://www.cvedetails.com/cve/CVE-2011-5244/

* https://www.cvedetails.com/cve/CVE-2011-0433/

They have also had a command injection vulnerability, in 2017:

* https://www.cvedetails.com/cve/CVE-2017-1000159/

These and other reported security vulnerabilities for Evince are listed here:

* https://www.cvedetails.com/vulnerability-list/vendor_id-283/...

I think in the case of all software it is safest to assume that opening a file that you downloaded from the internet has the potential to do harm, regardless of whether you are using Linux, macOS, Windows, or some other operating system, and regardless of what software you use to read the file.

The best mitigation would be to keep a separate device that you use purely for unauthenticated internet browsing and opening files from the Internet. Never accessing any personal data on that device. In reality almost all of us will use the same devices for our personal files and data, and for browsing the internet and opening random files that we downloaded.

It is interesting to note that the statistics for known security vulnerabilities in Evince..

* https://www.cvedetails.com/product/23592/Gnome-Evince.html?v...

..pales in comparison to the statistics for known security vulnerabilities in Adobe Acrobat Reader:

* https://www.cvedetails.com/product/497/Adobe-Acrobat-Reader....

I wonder if it indicates that Evince is so much more secure than Acrobat Reader.. Or is it simply the case that Evince has not been subject to the level of scrutiny that Acrobat Reader has been? And if so, there might be more unknown security vulnerabilities lurking under the surface of Evince than in Acrobat Reader.

Re: Freecomputerbooks.com

#27

> In other words, this site DOES NOT contain any actual content of the books or lecture notes listed in this site. > Therefore, this website is as legal as search results of any search engines like Google, Yahoo, etc. It's worth pointing out that this site may link to copyrighted material.

[deleted]

Re: Freecomputerbooks.com

#28
post #17

Earlier quoted context omitted.

Is pdf dangerous? I guess on linux canonical distributes latest, free-of-known-vulnerables evince, what about windows? One must upload every file?

There has been a case of confirmed code execution vulnerability in Evince in the past, in 2017: * https://www.cvedetails.com/cve/CVE-2017-1000083/ As well as possible code execution vulnerabilities in Evince, in 2019 and 2011: * https://www.cvedetails.com/cve/CVE-2019-1010006/ * https://www.cvedetails.com/cve/CVE-2011-5244/ * https://www.cvedetails.com/cve/CVE-2011-0433/ They have also had a command injection vulnera…

One possibility is that Acrobat Reader is more forgiving of poorly-formed PDFs, as I’ve generally heard is the case, and that by allowing documents that don’t meet the (huge, probably also poorly-formed) standard they open themselves up to more security risks.
Post reply on HN