Re:A fake job offer took down Axie Infinity
by Jwarder on Wednesday July 06, 2022 @11:55AM
(#32002803)
Is there a good no-nonsense way to clean PDFs of possible threats? Hunting around I see mentions of converting PDF->Postscript->PDF to remove junk, but I also see mentions that Postscript is its own security mess.
[ Parent
| on HN ]
Re:A fake job offer took down Axie Infinity
by jabroni_salad on Wednesday July 06, 2022 @12:28PM
(#32003285)
Your only option is to disable all of those fancy features. That config only lasts until someone needs to file a form with the government though.
Re:A fake job offer took down Axie Infinity
by alexk307 on Friday July 08, 2022 @04:41PM
(#32026704)
You’d be best suited making sure your pdf viewer is locked down and doesn’t allow for any js. You could parse your pdf pretty easily and read the sections before you open it, it’s mostly in plaintext
Re:A fake job offer took down Axie Infinity
by jabroni_salad on Monday July 11, 2022 @10:32AM
(#32056689)
Unfortunately, there is a scourge of PDFs that download the content after you open them, and have interactive features that should be on websites rather than PDFs.
The BSA efiling system has mandatory forms for every bank to fill out, and if they say they say the browser's pdf viewer is no-go and you must configure adobe, that is what you will do. Now every bank in the USA has a hard dependency on adobe reader and a gpo that disables the web browser's built-in pdf reader. Thanks for that, fincen.
https://bsaefiling.fincen.treas.gov/docs/BrowserSettingChang... [pdf warning]