horrifying-pdf-experiments

the repo's <https://github.com/osnr/horrifying-pdf-experiments> readme points to the talk given on this: https://www.youtube.com/watch?v=6rbJu10Telc the 2021 submission of the repo got some lively commentary https://news.ycombinator.com/item?id=25609321

I think this is it: https://github.com/osnr/horrifying-pdf-experiments

Depends on your PDF viewer... https://github.com/osnr/horrifying-pdf-experiments

Repo here: https://github.com/osnr/horrifying-pdf-experiments

https://github.com/osnr/horrifying-pdf-experiments https://www.alchemistowl.org/pocorgtfo/ Yes. Not only is it possible but historically already an avenue of attack.

Indeed they can: https://github.com/osnr/horrifying-pdf-experiments (Note, breakout game only works in Chrome's PDF reader)

PDFs that work in Chrome's PDF renderer: A calculator: https://pspdfkit.com/images/blog/2018/how-to-program-a-calcu... A game of breakout: https://github.com/osnr/horrifying-pdf-experiments/raw/maste... The PDF specification is hundreds of pages.

Slightly OT, but you would be surprised at how much power PDFs have (especially when opened in Adobe Acrobat/Reader). I recently came across this monstrosity[1] on HN, and the author mentions this: > Scripts can supposedly do things like make arbitrary database connections, detect attached monitors, import external resources, and manipulate 3D objects. That's an unprecedented level of power for what is supposedly a simple document format. That being said, PDFs are only a threat when opened in a with support for these obscure APIs, such as Adobe's own readers. You (probably) will be fine opening untrusted PDFs in Chrome's PDF reader (PDFium) and Preview. [1]: https://github.com/osnr/horrifying-pdf-experiments

From the repository - "Granted, most PDF readers (besides Adobe Reader) don't implement most of this stuff. But Chrome does implement JavaScript! If you open a PDF file like this one in Chrome, it will run the scripts." https://github.com/osnr/horrifying-pdf-experiments Doesn't work in Firefox for me. Try in Chrome if this is all you see on the first page. Move your mouse down here! also, README below...

The repository for this seems to indicate this only works in Chrome and a few other PDF readers[0]. Perhaps the title should be updated to reflect this. 0. https://github.com/osnr/horrifying-pdf-experiments

Related: Horrible PDF experiments (play breakout in a PDF document) https://github.com/osnr/horrifying-pdf-experiments