View Single Post
Old 03-18-2008, 07:32 AM   #21
APK
The Duke of URL
 
APK's Avatar
 
Join Date: Dec 2007
Location: A discrete point in the space-time continuum
Posts: 31
APK is on a distinguished road
Secure yourself vs. Adobe Acrobat Reader JavaScript attacks online...

For users of Adobe Acrobat Reader (of any version or patch level today - safety hint):

Since it has been attacked so much recently (via its ability to place javascripting into its .pdf document format, & javascript that bears truly "ill will")?

Well, update to the latest/greatest version... HOWEVER, if you don't trust that, as I do not, FULLY?

(I say this, & simply because browser makers have been trying that left & right since "time immemorial" online, & more of those types of attacks pop up of differing nature that evades new patches vs. it, keep popping up regardless of the patches!)

Plus, like I had stated earlier in this guide?

I suggested turning off using javascript for EVERY SITE online, in your webbrowser (& only keep it for ones that demand it (or, become useless w/out it, like many shopping &/or banking sites - this lessens the possibility of being poisoned by bad adbanner OR site code & also lessens the attack surface area + limits the possibles to the sites you left javascript on for, ONLY))??

Try this FOR ADOBE ACROBAT READER ALSO:

TURN OFF JAVASCRIPT USAGE IN ADOBE ACROBAT READER!

Simply to be safe vs. attacks in it that are javascript-based in nature!
  • Use Adobe Acrobat's EDIT menu
  • PREFERENCES submenu
  • Javascript section (in left-hand side column of options)
& uncheck "Enable Acrobat Javascript" in the right-hand side option for that.

APK

P.S.=> That ***ures you are "bullet-proofed" vs. Adobe Acrobat malware/bad javascript containing contaminated .pdf documents via bogus javascript in them for exploiting you online today!

NOW - the only h***le here is that SOMETIMES, there is so much javascript in them, ADOBE MAY "nag" a lot about it, & should have a feature to turn that off (imo @ least)... apk
APK is offline   Reply With Quote