Linux running inside a PDF file via a RISC-V emulator
Linux running inside a PDF file via a RISC-V emulator
github.com
GitHub - ading2210/linuxpdf: Linux running inside a PDF file via a RISC-V emulator
7 comments
7 comments
Linux running inside a PDF file via a RISC-V emulator
GitHub - ading2210/linuxpdf: Linux running inside a PDF file via a RISC-V emulator
That's really impressive but has massive security implications.
This is something that really shouldn't exist. I can't imagine the legitimate uses for this outweigh the ways to abuse it.
Documents shouldn't be allowed to run code. Ever.
Incidentally, anyone know which Firefox flag to set to disable running JS in PDFs entirely?
Indeed, any time you have a Turing complete language baked into a document that's a recipe for exploits.
It's
pdfjs.enableScriptingin about:config. Note that Firefox is more strict with PDF scripts to begin with, and the linked Linux PDF only works in Chromium-based browsers.While a small subset of JS's capabilities are implemented within browsers due to security concerns; its full functionality exists in some PDF readers, notably Acrobat.