News for hackers. Stuff that matters.

A comment on Dangerzone: Convert potentially dangerous PDFs, documents, or images to safe PDF. Parent comment

Re:Dangerzone: Convert potentially dangerous PDFs, documents... by leskat on Sunday March 08, 2020 @04:16AM (#22516932)
> Dangerzone can optionally OCR the safe PDFs it creates, so it will have a text layer again

I'm not completely sure, but wouldn't this parse links and make them accessible again, possibly even clickable?

[ Parent | on HN ]
Re:Dangerzone: Convert potentially dangerous PDFs, documents... by clort on Sunday March 08, 2020 @08:00AM (#22517601)
A links displayed text and its destination URL are not necessarily the same. Rendering the document to a bitmap then OCRing that would get the display text rather than the URL. I would think that it would be normal for a malicious URL to be obscured with an innocent looking display text.
[ Parent | on HN ]
Re:Dangerzone: Convert potentially dangerous PDFs, documents... by seanhunter on Monday March 09, 2020 @03:33AM (#22523623)
Given the security focus here I'd be somewhat surprised if they did this - links are one of the main threat vectors associated with pdfs.
[ Parent | on HN ]
Re:Dangerzone: Convert potentially dangerous PDFs, documents... by edoceo on Sunday March 08, 2020 @04:42AM (#22517018)
Maybe use pdftotext wrapper to extract text along side the image based pdf.
[ Parent | on HN ]