billwill
Sunday 20th November 2011 3:07am [Edited]
North London
6,162 posts
Quote: AJGO @ November 19 2011, 5:19 PM GMT
True. But I wanted Adobe. Now my anger has doubled!
Adobe Reader itself has become horribly bloated.
Version 5 was a lean mean display machine that did all that was really needed for PDF files, but Adobe kept adding 'features' to Acrobat the PDF generator, & those who used it generated PDF files that could not be read by Reader 5, so we had to upgrade.
Then to cap it all with incredible stupidity (in my opinion) they added the capability to include executable programs (in Javascript) within what is esentially a DATA file (Portable Data File = PDF). THe facility was intended for PDF files containing forms, but they didn't restrict the Javascript to those functions. In my opinion as a very long term computer person, putting excecutable programming capabilities into a DATA file is an insane security risk.
Worse still Adobe turned ON this Javascript feature by Default and they STILL DO! Essentially it should not have been a problem, but Adobe are such crap programmers (in my opinion) that Adobe reader is riddled with bugs & security openings, such that crafty criminals were able to write viruses hidden in PDF files.
http://www.google.co.uk/search?hl=en&source=hp&biw=1272&bih=752&q=adobe+pdf+viruses&btnG=Google+Search&gbv=2&oq=adobe+pdf+virus&aq=1v&aqi=g1g-v8g-j1&aql=&gs_sm=c&gs_upl=2425l7668l0l11586l15l15l0l3l3l0l392l2228l0.10.1.1l12l0
At one stage (I think 2008 or 2009) viruses in PDF files were responsible for about 80% of all the world virus infections.
http://www.zdnet.com/blog/security/report-malicious-pdf-files-comprised-80-percent-of-all-exploits-for-2009/5473
And there are still lots of bugs & security flaws; you can find a list on Adobe website, though it is in a pretty obscure location & I would have to do a fresh search to find it. Mean while I strongly reccommend that you all turn OFF Jacascript in your Adobe reader. Any Document that really needs it will tell you that you need to turn it back on for that document & if that comes up when not expected then it is probably a virus.
To turn it off go to Reader's Edit Menu & select Preferences. Then highlight Javascript in the Left Column and then clear the tick box that says "Enable Javascript". Then click OK.
~~~~~~~~~~~~
Alas Foxit also has a security flaw, shared with Adobe Reader, even without any Javascript!
http://www.zdnet.com/blog/security/hacker-finds-a-way-to-exploit-pdf-files-without-a-vulnerability/5929?tag=rbxccnbzd1