Re:Converting untrusted PDFs into trusted ones: The Qubes Wa...
by eviks on Thursday December 12, 2024 @10:07PM
(#42405632)
You could simply not support those obscure image formats?
Re:Converting untrusted PDFs into trusted ones: The Qubes Wa...
by danielheath on Friday December 13, 2024 @06:12AM
(#42407599)
And when a journalist receives a tip from a reliable source they can't open with their secure PDF tool, they are more likely to do what? Disregard the info, or open the PDF in an unsafe tool?
Re:Converting untrusted PDFs into trusted ones: The Qubes Wa...
by kccqzy on Friday December 13, 2024 @10:15AM
(#42409157)
That's not an option. JBIG2 is objectively the best format for compressing black-and-white scanned images. The Adobe Acrobat software has an "optimize scanned PDF" feature that produces this format. It's not obscure at all.
Re:Converting untrusted PDFs into trusted ones: The Qubes Wa...
by eviks on Friday December 13, 2024 @10:33AM
(#42409381)
That objectively best format that was banned in some areas due to replacing important numbers in accounting documents? But if it's the default in Acrobat, yeah, likely not obscure enough
That's the problem right there. PDF supports many image formats, including ones that are useful but you may have never heard of like JBIG2 for scanned documents. And the parser for those image formats needed to be secure as well. One very famous exploit is just exploiting JBIG2 (among other things): https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...