undefined | Better HN

0 pointscrazygringo4y ago0 comments

All phishing attacks require you to click on a link embedded in the PDF, right?

On the one hand, you'd think anyone technologically savvy wouldn't do that.

On the other hand, accidentally clicking on links in PDF's is the bane of my existence. I constantly consume academic books and papers as PDF's on my iPad in the built-in Books app, tap somewhere with my Apple Pencil for any number of reasons (to pan, to zoom, to highlight), and bam I'm transported 100's of pages away and with no back button.

If I could ask for any PDF reader feature, it would be to improve link handling. If it's an internal link, for the love of god include a back button. And if it's an external link for a web browser, for the love of god require a confirmation dialog first. I should never be led to a malware URL because of an accidental click.

0 comments

saurik4y ago

I mean, multiple jailbreaks merely required you to open the PDF: it isn't just phishing attacks that have made me wary of PDF files. (But we also have seen jailbreaks that rely only on JavaScript that can be run in the browser, so ¯\_(ツ)_/¯).

TechBro86154y ago

“Our users were getting exploited in our PDF viewer, so we added a stack”

j / k navigate · click thread line to collapse