News for hackers. Stuff that matters.
Re:Embedded PDF viewer in Firefox 81 supports filling forms by cgb223 on Tuesday September 22, 2020 @01:45PM (#24557594)
My favorite pdf fact is that the security flags for things like copy protection and passwords are on the viewer to implement so you can just turn them off and all the security is gone
Re:Embedded PDF viewer in Firefox 81 supports filling forms by BHSPitMonkey on Tuesday September 22, 2020 @05:53PM (#24560398)
Debian actually goes out of their way to patch those checks out in their PDF-related packages as part of their stance against DRM, like this example with "pdftk":

https://sources.debian.org/patches/pdftk/2.02-4/drm_fix/

Re:Embedded PDF viewer in Firefox 81 supports filling forms by r00fus on Tuesday September 22, 2020 @03:20PM (#24558646)
This is not entirely true, you can encrypt PDFs [1] since v1.3 of the spec but the cypher is often so weak (RC4 until v1.6) they can be bruteforced in reasonable amounts of time.

[1] https://www.pdflib.com/pdf-knowledge-base/pdf-password-secur...

Re:Embedded PDF viewer in Firefox 81 supports filling forms by Thorrez on Tuesday September 22, 2020 @10:55PM (#24562466)
You can encrypt them to completely prevent them from being opened. But cgb223 wasn't talking about that, cgb223 was talking about the ability to open them but not copy text, or not print.
Re:Embedded PDF viewer in Firefox 81 supports filling forms by benmmurphy on Wednesday September 23, 2020 @07:18AM (#24565592)
You can make the text uncopyable by using non-standard font indexing. The reader will be able to copy the text but it will be gobbly-gook. It forces the user to OCR the PDF or reverse the font mapping.
Re:Embedded PDF viewer in Firefox 81 supports filling forms by hnick on Wednesday September 23, 2020 @11:21PM (#24574926)
And ain't that a treat when clients send us PDFs to sort, print, and mail, but the address extraction fails completely.
Re:Embedded PDF viewer in Firefox 81 supports filling forms by toomanybeersies on Tuesday September 22, 2020 @02:51PM (#24558360)
You can also circumvent copy protection on PDFs by taking a screenshot, or taking a photo of the screen with your phone.
Re:Embedded PDF viewer in Firefox 81 supports filling forms by Drdrdrq on Tuesday September 22, 2020 @02:33PM (#24558168)
My somewhat less favorite pdf fact is that if you do that, you are still breaking protection, legally speaking.
Re:Embedded PDF viewer in Firefox 81 supports filling forms by maxerickson on Tuesday September 22, 2020 @02:40PM (#24558241)
Seems to be a reasonable analogy with trespass, where you are violating the law when you cross an invisible line. The need for marking the line varies considerably.

And even places with strong roaming rights tend place limits on well marked land.

Re:Embedded PDF viewer in Firefox 81 supports filling forms by smegger001 on Tuesday September 22, 2020 @05:54PM (#24560407)
So what if you open it in a postscript viewer instead of a PDF viewer? Because they are compatible formats except for some edge cases like security flags.
Re:Embedded PDF viewer in Firefox 81 supports filling forms by mkl on Tuesday September 22, 2020 @06:17PM (#24560624)
Postscript and PDF are definitely not compatible formats. The drawing model is similar, but the structure and code are completely different.