Nobody said they infect “everyone”, it’s most likely not even in their interest to do so.
besides, the CIA has a lot more to lose. if you get a virus downloading a PDF from North Korean servers, that's The Scorpion and the Frog. you're not gonna get much sympathy. if you get a virus downloading a PDF from CIA servers, that's near enough an international incident
I'm frankly getting tired of all the hysteria. If that is indeed the attack vector just use a sandbox and a pdf viewer with low featureset. Is all we do nowadays mindless hysteria?
EDIT: comical. the response to the advice to use a PDF viewer with low featureset is to list Acrobat exploits. Seems like in the hysteria about how terrible "our enemies" are, all sarcasm and absurdity is lost
EDIT: Comical indeed that MichaelCollins feels the need to come to muruculas rescue. The thread didn't start with murucula, it started with people saying they should not open NK PDF's because they're dangerous. The mindless hysteria could only have been trumped by people accusing one of China and Russia stoogedom in the comments below.
I was merely referring to the memes that were so popular in HN circles just a few years ago about how Kim Jong Un was too stupid to use a computer[1].
I have no skin in the game, but if the HN crowd is not able to read a PDF with basic Opsec to protect itself from malicious Acrobat exploits, we don't really deserve to be called hackers.
[1] http://www.slate.fr/sites/default/files/styles/1200x680/publ...
Anyway, muricula didn't say North Koreans don't know how to use computers, so there was no hypocrisy in his suggestion that North Koreans might have competent computer hackers. You're raging at numerous strawmen at once.
The netsec person in me says we probably shouldn’t be downloading PDFs/epubs from the servers of literal North Korean Government sites…