1–10 of 102 posts
I found this to be an interesting finding. Here are the detailed results: https://www.fertrevino.com/docs/gpt5_medhelm.pdf
From GPT-4 to GPT-5: Measuring progress through MedHELM [pdf]
fertrevino.com
Interesting topic, but I'm not opening a PDF from some random website. Post a summary of the paper or the key findings here first.
Interesting topic, but I'm not opening a PDF from some random website. Post a summary of the paper or the key findings here first.
It's hacker news. You can handle a PDF.
Earlier quoted context omitted.
It's hacker news. You can handle a PDF.
I approve of this level of paranoia, but I would just like to know why PDFs are dangerous (reasonable) but HTML is not (inconsistent).
Earlier quoted context omitted.
I approve of this level of paranoia, but I would just like to know why PDFs are dangerous (reasonable) but HTML is not (inconsistent).
PDFs can run almost anything and have an attack surface the size of Greece's coast.
I think pdf.js even defaults to not running scripts in PDFs by default (would need to double check), if you want to view it in the browser's sandbox. Of course there's still always text rendering based security attacks and such but, again, there's nothing unique to that vs a webpage in a browser.