News for hackers. Stuff that matters.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by MaxBarraclough on Thursday May 14, 2020 @02:06PM (#23183114)
I used to recommend Foxit too, but all major browsers now ship with good PDF support.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by TylerE on Thursday May 14, 2020 @03:37PM (#23184310)
For me, not being in the browser is a feature, not a bug. I often want to be able to open a PDF in a dedicated window I can easily switch to.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by cptskippy on Thursday May 14, 2020 @04:28PM (#23184955)
The problem with PDF is that it's a bag of needles disguised as a piece of paper. Most of the time people expect a PDF to be a document, not a Form, Rich Media, Contract, Javascript, or any of the other crap it can do. All that extra crap dramatically increases the attack surface area of Acrobat or any other PDF reader that supports it.

At least the PDF reader in Firefox is a Javascript App that runs in a Browser sandbox and doesn't support 99% of the crap a PDF can do.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by MaxBarraclough on Thursday May 14, 2020 @03:52PM (#23184510)
Sure, but you can open a PDF in a new browser window. I'd rather not broaden my trusted codebase by installing another PDF reader.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by TylerE on Thursday May 14, 2020 @05:09PM (#23185486)
OSs have this annoying habit of condensing multiple windows of a single application down to one taskbar item/dock item/whatever.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by alpaca128 on Friday May 15, 2020 @02:42AM (#23189584)
On Windows this can easily be remedied in the options accessible via the taskbar. I always turn this off and tell it to show the full window titles instead of just the icons. Windows are not browser tabs, I don't ever have enough of them open to need that stacking behaviour.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by MaxBarraclough on Friday May 15, 2020 @05:01AM (#23190235)
Another option for Chrome/Windows is to open a Guest window or an Incognito window, which is treated as a separate window-group.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by MaxBarraclough on Friday May 15, 2020 @07:28AM (#23190928)
Too late to edit: I see now that only a Guest window gets its own window-group. Incognito windows do not.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by rad_gruchalski on Thursday May 14, 2020 @06:50PM (#23186550)
What is the difference between having multiple pdf reader windows vs multiple browser windows then? If you are on a mac: cmd+` is your friend.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by TylerE on Thursday May 14, 2020 @07:05PM (#23186695)
I only have one PDF window open.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by rypskar on Friday May 15, 2020 @02:32AM (#23189530)
But do they remember your position in the PDF between restarts? I some times read books or lecture notes in PDF format, and dedicated programs works much better for that than the support in browsers
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by saagarjha on Thursday May 14, 2020 @02:48PM (#23183694)
Not Safari.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by eric_h on Thursday May 14, 2020 @02:58PM (#23183814)
How so? I have no problem opening PDF links directly in Safari.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by saagarjha on Thursday May 14, 2020 @03:09PM (#23183975)
Safari "supports PDF", but not well. The PDF viewer is run in an extremely janky view that clearly has not been updated in years. It runs out-of-process, but takes little advantage of the many advances in XPC rendering that have come in recent years; as such it cannot handle looking up services correctly, or vibrancy, or even have Retina support for its UI. And those are just visual: the PDF support itself is shoddy; it's unable to do many things that other browsers can do out-of-the-box (forms?), searching for text has been broken for the better part of a year. It's an obvious rough spot in Safari's otherwise polished interface.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by eric_h on Thursday May 14, 2020 @03:12PM (#23184009)
Fair criticism. I guess my bar for what I define as "good PDF support" is much lower than yours - I only generally read them or plug in a digital signature when signing my lease.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by saagarjha on Thursday May 14, 2020 @03:17PM (#23184073)
Personally, I am loath to download documents. I actually like what iOS Safari does, which is run the generic document previewer on files inside the app itself. I hate clicking on a link on my computer and then getting a PPTX that I have to open in PowerPoint.