News for hackers. Stuff that matters.

A comment on We pwned X, Vercel, Cursor, and Discord through a supply-chain attack. Parent comment

Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by bmacho on Thursday December 18, 2025 @04:28PM (#46319043)
Yes, opening random pdfs especially in random and old pdf viewers is not a good idea.

If you must open a possibly infected pdf, then do it in browser, pdf.js is considered mostly safe, and updated.

[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by rvnx on Thursday December 18, 2025 @07:57PM (#46321015)
Use the PDF to JPG online services, convenient and you still get your result without having to deal with any sandbox
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by bpt3 on Thursday December 18, 2025 @08:38PM (#46321324)
Except of course that you're sharing the contents of that PDF with a random online service.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by rvnx on Thursday December 18, 2025 @08:53PM (#46321422)
True, I just considered that once you handle a PDF with so much care like if it was poisoned, it's perhaps better to send this poison to someone else to handle.
[ Parent | on HN ]