News for hackers. Stuff that matters.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by pram on Thursday May 14, 2020 @01:31PM (#23182553)
Yes, Creative Cloud also vomits a bunch of random stuff everywhere. Right now I can see 5 launchagent/launchdaemons just from having Photoshop and Illustrator installed, which seems insane lol
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by jrockway on Thursday May 14, 2020 @04:12PM (#23184765)
I stopped using Lightroom because it seems to want to modify the Windows Explorer to have a Creative Cloud section and their background software constantly pops up to tell you that it still exists.

What's nice about their subscription model is that there is no sunk cost when giving up. It's $5/month and you just stop paying it.

(I switched to Affinity Photo for editing but never found anything I liked for organization/library management. I just copy files around now. It ends up being OK because about 50% of my photos are from my phone, 25% are from a DSLR, and 25% are from film scans. Lightroom never helped me with phone or scanned photos, really, so I didn't give much up. Would still like some central self-hosted photo collector, though. Maybe Perkeep is what I want.)

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by acdha on Thursday May 14, 2020 @04:24PM (#23184898)
> What's nice about their subscription model is that there is no sunk cost when giving up. It's $5/month and you just stop paying it.

Don't they try to get you to make a year commitment? I remember spending about 30 minutes with someone at Adobe getting them to cancel it when Lightroom was too slow to use on my Mac at the time (which had been more than fast enough for Aperture). After the second or third time that I told them I wasn't going to buy a new computer just for the privilege of running their software, they agreed not to charge a hefty early termination fee.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by robbintt on Thursday May 14, 2020 @06:08PM (#23186170)
Yes, I had to pay a fee equal to 50% of the remaining year contract. I will no longer receive PSDs directly from designers, so the designers must now to export stuff to web spec so I can work with it outside adobe.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by gtkspert on Thursday May 14, 2020 @09:40PM (#23187898)
I marked my card as damaged, and when it was replaced I refused to give them the new details...
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by TheSpiceIsLife on Thursday May 14, 2020 @11:51PM (#23188717)
I've done this an number of times to avoid the usual cancellation nightmares.

Be careful though, some card issues will forward the new card details on to (some?) services you have a payment agreement with.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by nessunodoro on Friday May 15, 2020 @05:21AM (#23190338)
GIMP handles PSD, no?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by mattmanser on Friday May 15, 2020 @05:40AM (#23190420)
I've not tried for several years, but it was never that great at doing that. Last time I had to do this, I gave up and bought a photoshop subscription. Has it improved now?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by Chazprime on Friday May 15, 2020 @07:51AM (#23191071)
Nope.

Adjustment and FX layers don't translate, as well as some compositing and blending options.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by aetherspawn on Thursday May 14, 2020 @07:34PM (#23187030)
I managed to get out of this by just explaining that I didn't have the money to pay the subscription anymore. They seem pretty sympathetic to that.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by acdha on Thursday May 14, 2020 @08:10PM (#23187360)
That’s probably a better angle
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by chrisweekly on Thursday May 14, 2020 @06:03PM (#23186125)
Thanks for the tip! I took a look, and it turns out Affinity Photo is 50% off right now. So, a one-time $25 purchase (via App Store for family sharing)! And it handles PSDs. And the iPad version is $10. Adobe is toast.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by tambourine_man on Thursday May 14, 2020 @06:21PM (#23186278)
> Adobe is toast.

I really, really wish that was the case, but there's no competition for Photoshop, Illustrator and InDesign.

Even after years of destroying their software with cloud crap, useless home screens, changing 30 years of muscle memory just because, all while adding a WebKit and Node.js instance for every new dialog box…

…nothing comes even close to any of those tools.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by adfm on Thursday May 14, 2020 @07:26PM (#23186924)
Affinity is definitely a step in the right direction. The Photo/Designer/Publisher combo holds its own and the iPad apps are pretty slick. It would be nice if they added something similar to Data Merge in InDesign, but for the most part, you can pretty much accomplish a lot of the same things for a fraction of the cost. And it's really not that big of a switch, considering a good swath of the market had to make the switch from PageMaker/Quark/Freehand/whatever as Adobe gobbled up the desktop market. It's similar to what Adobe did to the workstation suites 30 years ago.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by epse on Friday May 15, 2020 @03:39AM (#23189851)
Let's not forget the postgres instances they start. Why my illustration app needs a postgres server? Who knows
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by fouc on Friday May 15, 2020 @04:10AM (#23190009)
Sheesh. Why didn't they use sqlite?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by chrisweekly on Friday May 15, 2020 @06:15AM (#23190571)
"No competition" -- for some users, for now, maybe. (Speaking as someone doing web-related UI for a living since the late 90's, and using tools for digital art since the 80's.)
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by narrator on Thursday May 14, 2020 @07:26PM (#23186918)
QuarXPress thought they owned the market and then they started taking advantage of their users. Same goes for Adobe. The resentment is building up. Once there's a viable alternative people will quickly switch and never look back.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by tambourine_man on Friday May 15, 2020 @12:20AM (#23188865)
It took many years and millions, being bundled with the rest of the Adobe suite and, perhaps most importantly, the arrival of OS X and Quark’s inability to migrate to it, for InDesign to displace Quark. And let’s not forget that Adobe had years of experience with PageMaker.

Pro software is hard.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by ascagnel_ on Friday May 15, 2020 @09:03AM (#23191668)
Hell, I remember 2003-2005 and being _excited_ to switch to InDesign. I think the issue pro software has is that at some point it's basically "done", with only small updates still required, yet the developers of said pro software need to make their sales numbers.

I'd be fine with cloud subscription software if the TCO ended up being lower than buying a boxed product, but it's seemingly more expensive than it ever was. $10USD/mo doesn't seem bad, but if you're comparing to a two-year, $200 upgrade price, then you're spending $40 more and can't opt to skip the latest menu reshuffle.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by ngold on Thursday May 14, 2020 @09:13PM (#23187745)
I just wish I understood what everyone is doing that needs adobe? Anything.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by mekster on Friday May 15, 2020 @10:58PM (#23200094)
I don't even want to use it but the client passes me a PSD which I have to open accurately.

Photoshop puts like 5 folders in Utilities folder for no reason in macOS and runs bunch of daemons (which apparently can be a cause of bad vulnerabilities) and is dog slow in performance compared to a modern alternative like Affinity Photo.

Market dominance surely puts customer satisfaction to the end of the line.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by chrisweekly on Saturday May 16, 2020 @10:28PM (#23208980)
Affinity Pro seems to deal w PSD pretty handily; have you tried it?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by colejohnson66 on Thursday May 14, 2020 @10:20PM (#23188161)
For Photoshop, a big part of it is inertia. Companies worked with PS for years, and changing costs money. So students are taught what they’ll use (which is PS), and the cycle continues.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by tambourine_man on Friday May 15, 2020 @12:10AM (#23188810)
Do you print anything? Draw? Layout?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by jessaustin on Friday May 15, 2020 @09:19AM (#23191816)
If you assume the answers to these questions are "yes", what is your response to GP?

If you assume the answers to these questions are "no", what is your response to GP?

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by greggman3 on Friday May 15, 2020 @01:19AM (#23189132)
I have 2 licenses for affinity photo, Mac and Windows. But when I actually needed to get work done for a project, at least for my particular needs, I ended up going back to Photoshop.

It was a small thing. With Photoshop I can open a .PNG or .JPG file, edit, and pick Save (cmd-s/ctrl-s) and it saves back to the .PNG/.JPG. If I added layers or something I can press Ctrl/Cmd-Shfit-E to merge it all down then Cmd/Ctrl-S. This means the workflow is fast.

Affinity has no such workflow. You can open a .JPG but you have to follow the export workflow to save back to .JPG which is tedious.

I had say 150 files to edit. I reasoned my time was worth more than $120 to pay for a current version of Photoshop than to put up with a slow workflow.

I also recently tried to use Affinity's batch processing features but they aren't ask good as Photoshop's. I think they are trying to be helpful in that they scan all the photos before you start so you can see what they are going to operate on before you pick "Go". Unfortunately that's not actually a good flow if you're going to process 100s or 1000s of files. Instead of getting stuff done you have to wait for Affinity for several minutes while it goes and makes a thumbnail of all 100 or 1000+ images just so you can then click "Ok, do it!"

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by chrisweekly on Friday May 15, 2020 @06:30AM (#23190635)
There are other ways to automate workflow that don't require the tool to do everything for you. IMHO, limiting yourself to what Photoshop can do is a trap, eg "export for web" which doesn't come close to generating production-ready assets. Given a need for workflow automation that's external to the editor, I feel it makes more sense to compose a workflow from tools that follow a less monolithic, more unix-y "do one thing well", kind of approach. But use cases abound. YMMV.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by tristor on Thursday May 14, 2020 @04:29PM (#23184958)
Try DarkTable and RawTherapee. Both of these options are pretty decent open source alternatives to Lightroom for the majority of basic workflows and common cameras.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by buo on Thursday May 14, 2020 @04:44PM (#23185170)
I'd say they both are more than adequate, and allow for some pretty advanced workflows, since they expose a lot more tools with more fine-grained control than Lightroom.

For anyone who tries these programs, many of their developers and users hang out at https://discuss.pixls.us/

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by robotbikes on Friday May 15, 2020 @05:29AM (#23190370)
I've found DigiKam to be the most fully featured of the photo managers I've used. It even does facial recognition on your local box w/o sharing your data like most of the cloud hosted options. I'm not in love with the UI/workow but it works and can be installed on most OS I think.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by raihansaputra on Friday May 15, 2020 @12:49AM (#23188999)
If you need fast import/large curation/file management and you're willing to pay, I haven't found anything like Photo Mechanic.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by mehdix on Thursday May 14, 2020 @05:18PM (#23185605)
Wouldn't Syncthing do the collection part for you?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by tziki on Thursday May 14, 2020 @03:56PM (#23184557)
Absolutely this. I'm a very casual user and this is the main point why I'm thinking of getting rid of photoshop. Great tool for whenever I'm in the mood for some drawing but my god does it make me nervous about my security and privacy.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by kitotik on Thursday May 14, 2020 @02:25PM (#23183351)
Not sure if they still do it, but they also used to put hidden / protected files on any and all disk volumes as part of their copy protection scheme.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by sudosysgen on Thursday May 14, 2020 @03:05PM (#23183926)
Which is pointless when you realize that their copy-protection systems are broken in minutes every time. They should honestly give up.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by BuildTheRobots on Thursday May 14, 2020 @06:35PM (#23186412)
The rumour a decade ago was that Adobe was the biggest producer of Adobe cracks. The idea was that it'd get people using it for free so it was the goto tool and then they could slam anyone using it commercially.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by jpalomaki on Thursday May 14, 2020 @03:24PM (#23184161)
They can be still efective. Even a simple scheme may prevent a corporate user misusing some 30 day trial over and over and instead go through the trouble of getting proper license.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by sudosysgen on Thursday May 14, 2020 @03:31PM (#23184255)
Yes, it's probably worth it to get a simple scheme for corporate users only. But Photoshop's protection isn't simple, but it is so widely cracked that in third world countries with limited internet access there are wandering sellers with DVDs of cracked Photoshop for 2-3$ (!)
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by dkdk8283 on Thursday May 14, 2020 @03:11PM (#23184003)
I searched for this but couldn’t find any technical articles giving details. Have any links or search bait to share?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by kitotik on Thursday May 14, 2020 @05:10PM (#23185499)
I’m not finding much searching around either. I probably have an old spinning rust drive somewhere with the files still on them. This was somewhere around the CS5 or CS6 days, pre-subscription model.

From memory, in addition to sticking some pseudo-randomly named files in /System/Library, /Library, and -/Library, it would place a file in the root directory of all hfs+ volumes with xattrs set to hide and write-protect the file. Installers would then look for these files to check licensing status.

At the time, this was a fairly common trick with pro/prosumer proprietary software.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by thejsa on Friday May 15, 2020 @04:13AM (#23190018)
I believe on Windows the FlexNet DRM they use(d?) would overwrite Sector 32 and/or sometimes other nearby ones [0], which broke a fair few people’s GRUB2 bootloader installs as well as TrueCrypt as Flexera apparently didn’t check to see if it was in use for something else first.

[0]: https://en.wikipedia.org/wiki/FlexNet_Publisher#Issues_with_...

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by birdyrooster on Friday May 15, 2020 @12:01AM (#23188765)
On Windows 10 with only Photoshop installed I see: Adobe Update Service, Adobe Notification Client, Adobe IPC Broker, Adobe Installer, Adobe Genuine Software Service, Adobe Genuine Software Integrity Service, Adobe CEF Helper, Adobe CEF Helper, Adobe CEF Helper.

That is 9 background processes for an app I haven't used in a week.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by epse on Friday May 15, 2020 @03:40AM (#23189855)
Count the node.js and postgres instances as well
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by ukyrgf on Friday May 15, 2020 @10:10AM (#23192381)
This past week mine has started doing something even more fun on Windows 10: creating "WpSystem" folders on the root of all of my secondary hard drives and putting AppData>Local>Packages>Adobe.CC folders inside of them with a bunch of Internet Explorer and other dump files in it.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by duxup on Thursday May 14, 2020 @03:17PM (#23184074)
Funny as on windows whatever creative cloud is supposed to do it just quits randomly....I have to wake it up all the time.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by Lammy on Friday May 15, 2020 @12:09AM (#23188806)
Stuff like this is why I'm still hanging on to my old Photoshop CS3. Some of the newer features are cool, but my needs are pretty basic and haven't really changed in the time CS3 has existed.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by greggman3 on Friday May 15, 2020 @01:40AM (#23189256)
Sadly with OS upgrades that's often not possible. I suspect CS3 runs on Windows but with Apple's aggressive removing support for old features you can no longer run CS6 on MacOS AFAIK.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by thejynxed on Friday May 15, 2020 @06:25AM (#23190614)
Wonder if that is because everything from CS6 and earlier is 32-bit and Apple nuked 32-bit support in MacOS.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by tasty_freeze on Friday May 15, 2020 @08:01PM (#23198981)
I have CS6 on my windows machine and it is 64b. I would be surprised if CS6 wasn't available as a 64b option on macos.