News for hackers. Stuff that matters.
Re:SumatraPDF Reader by ykonstant on Tuesday October 24, 2023 @05:12AM (#37996545)
I implore all developers of PDF readers to implement sioyek's overview feature[0]. When you hover on a cross-referenced entry, it opens a little preview window with the contents of the reference. It is an absolute game-changer for reading textbooks and technical papers; I cannot overstate its utility.

[0] https://github.com/ahrm/sioyek#overview

Re:SumatraPDF Reader by kjksf on Tuesday October 24, 2023 @06:48AM (#37997179)
(I wrote SumatraPDF).

I know about sioyek and been meaning to steal some of their ideas.

Maybe in the next version.

Re:SumatraPDF Reader by V1ndaar on Tuesday October 24, 2023 @07:29AM (#37997532)
Evince does the same. It's a great feature, I agree.
Re:SumatraPDF Reader by cs3f16 on Tuesday October 24, 2023 @07:34AM (#37997592)
Thank you so much for sharing this extremely amazing software! I hope it gains more popularity and traction.
Re:SumatraPDF Reader by javale on Tuesday October 24, 2023 @08:43AM (#37998359)
Thanks for sharing!!
Re:SumatraPDF Reader by majora2007 on Tuesday October 24, 2023 @09:16AM (#37998774)
This is really cool, I'm going to steal some of these ideas for my app Kavita.
Re:SumatraPDF Reader by spit2wind on Tuesday October 24, 2023 @10:24AM (#37999580)
Is this not Ted Nelson's transclusion? Namely, "...the same content knowably in more than one place".

https://en.m.wikipedia.org/wiki/Transclusion

Re:SumatraPDF Reader by wolverine876 on Tuesday October 24, 2023 @11:34AM (#38000615)
> When you hover on a cross-referenced entry, it opens a little preview window with the contents of the reference.

Wikipedia does the same thing, but I assume you would know that. What am I misunderstanding?

Also, if it makes your PDF reader execute arbitrary remote code, isn't that a serious risk?

Re:SumatraPDF Reader by drannex on Tuesday October 24, 2023 @12:21PM (#38001398)
I don't believe it's a risk, since you're not injecting arbitrary remote code into a document, you're more overlaying on top of it. Even if the reader wants to execute code, then it will, that's how you have a reader to begin with. As long as it's not the PDF itself (source document) deciding to execute inline code, you should be fine.
Re:SumatraPDF Reader by wolverine876 on Tuesday October 24, 2023 @12:26PM (#38001474)
What does it matter if it's displayed in the document or in an overlay window or if it's saved in the document or not? That code could try to do anything; many PDF readers have a security option to prevent opening any remote documents or links.
Re:SumatraPDF Reader by joveian on Tuesday October 24, 2023 @09:46PM (#38008160)
Why do you think there is remote code execution? Without being familiar with that code (or evince code, which does the same thing) I can almost guarantee there is no such thing (what even would they be executing and why?).
Re:SumatraPDF Reader by wolverine876 on Wednesday October 25, 2023 @12:13AM (#38009055)
How is the remote reference rendered, other than by executing a renderer for that format in a window? Renderers for web pages, for example, are very powerful platforms with a long history of security issues.
Re:SumatraPDF Reader by esquivalience on Wednesday October 25, 2023 @05:47AM (#38011045)
The reference being discussed seems to be another part of the same pdf.
Re:SumatraPDF Reader by hju22_-3 on Wednesday October 25, 2023 @05:54AM (#38011091)
I think you've misunderstood the feature. It shows an overlay window of another part of the same PDF you're already in. It doesn't open another PDF or a website or anything, it's just a small preview of another page essentially. You could just as easily scroll to where the reference is placed in the PDF, but this lets you quickly preview the section without actually leaving your position in the document.
Re:SumatraPDF Reader by wolverine876 on Wednesday October 25, 2023 @04:42PM (#38018093)
I did misunderstand; you are correct. Thanks for explaining it.

And that is indeed very useful!