Hacker News Reader

Periodic reminder that a PDF is a turing-complete script that generates a document and should be treated as foreign code

If you disable JavaScript, it’s not. PDF removed loops etc from the PostScript it supports