Show HN: Make your PDF look scanned in browser

Re:Show HN: Make your PDF look scanned in browser by kevin_nisbet on Tuesday April 19, 2022 @03:49PM (#31088058)

While this may work for unsophisticated attacks, wouldn't it still be possible for a more sophisticated adversary to do something more like store the document in browser local storage, and then later with internet access to post the contents?

I haven't spent a huge amount of time in the browser security space, but I do think there is quite alot of surface area if you give the browser session sensitive data.

[ Parent | on HN ]

Re:Show HN: Make your PDF look scanned in browser by paulgb on Tuesday April 19, 2022 @03:53PM (#31088105)

If you are using an incognito tab, anything in local storage, cookies, even caches should go away. I am not 100% up on the details but I believe modern browsers are pretty strict about isolating incognito state.

You're right though in general, that's why the incognito tab is important.

[ Parent | on HN ]

Re:Show HN: Make your PDF look scanned in browser by jonny_eh on Tuesday April 19, 2022 @06:40PM (#31090322)

This is correct, but you need to close ALL incognito tabs for storage to get wiped, not just the tab you loaded the site in.

[ Parent | on HN ]

Re:Show HN: Make your PDF look scanned in browser by YPPH on Tuesday April 19, 2022 @10:02PM (#31091926)

I mean, I considered this implied within the suggestion of using incognito mode.

In any event, it's an unrealistic attack vector. No bad actor is going to target 0.1% of edge cases when you could get enough damaging information from people who do not go through this process and remain connected to the internet.

[ Parent | on HN ]

Re:Show HN: Make your PDF look scanned in browser by jonny_eh on Tuesday April 19, 2022 @10:35PM (#31092151)

Just making it clear for anyone that doesn't know. It's caught me off guard before.

[ Parent | on HN ]

Re:Show HN: Make your PDF look scanned in browser by lxgr on Tuesday April 19, 2022 @09:27PM (#31091683)

That depends on the browser, I believe.

[ Parent | on HN ]