Hacker News Reader

I see threads recommending software doing full-text indexing of pdfs descending into archives. I remember that a few years ago there were some security vulnerabilities in exactly this kind of software on some fairly modern Linux distro.

So, if you enable it or use it, make sure computer is isolated of anything of value to you, not to mention it is your main work or personal machine.

View on HN

Well, it uses the exact same pdf parsing library that e.g. Evince uses.. so if you ever open untrusted PDFs in a normal viewer, this will expose you to the same danger (maybe less since it only extracts text). But yeah, if there was a nice safe PDF library written in pure Rust I would of course link against that.

Are you alleging there is a security issue in this software? It's open source, feel free to show us where.

GP said "exactly this _kind_ of software" -- i.e. software with a similar type of functionality. He did not claim that the posted code specifically has a vulnerability.

Reply on news.ycombinator.com