Ironically, I didn't pay attention to the "[pdf]" part of the title, and as soon...

r3bl on Feb 6, 2017 | parent | context | favorite | on: Is the Linux Desktop less secure than Windows 10? ...

Ironically, I didn't pay attention to the "[pdf]" part of the title, and as soon as I clicked the link, the PDF file got downloaded.

I have a pretty strict AppArmor profile for Evince (AKA Document Viewer on GNOME-based DEs), so I thought that automatically downloading PDFs and opening them in Evince instead of in the web browser would be safer. I didn't even thought about this kind of attack surface.

andai on Feb 6, 2017 [–]

Apparently, the code for parsing PDFs has grown larger than the linux kernel. That's quite an attack surface!