Hacker News Reader

You guys know that PDFs can load web assets right? They can de-anonymize you just by opening them right?

Don't trust it if you don't trust the host.

You guys know that PDF readers can turn off loading of web assets right? That you should turn it off or prompt or people can de-anonymize you just by getting you to open a PDF right?

Don't trust it if you don't trust the host, regardless. Exploits do exist.

As ignorant/oblivious as HN users are, (see your post for reference) it needed to be mentioned.

Sources are available here: https://github.com/forthy42/thinking-forth

Reply on news.ycombinator.com