Delivery-Date: Tue, 14 Jul 2015 20:56:30 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id BA3801E032A;
	Tue, 14 Jul 2015 20:56:28 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 7159236F3C;
	Wed, 15 Jul 2015 00:56:21 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 5DA9236E3E
 for <tor-talk@lists.torproject.org>; Wed, 15 Jul 2015 00:56:16 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id YJu0pQHWadLy for <tor-talk@lists.torproject.org>;
 Wed, 15 Jul 2015 00:56:16 +0000 (UTC)
Received: from gombert.agol.dk (gombert.agol.dk [212.60.120.178])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 28D1B36E38
 for <tor-talk@lists.torproject.org>; Wed, 15 Jul 2015 00:56:15 +0000 (UTC)
Received: by gombert.agol.dk with esmtpsa 
 (Cipher TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84 #2 (EximConfig
 2.5))
 id 1ZFAzc-0000Qz-Bg  by authid <elgaard>  with auth_server_plain 
 for <tor-talk@lists.torproject.org>; Wed, 15 Jul 2015 02:56:12 +0200
Message-ID: <55A5AFA2.5070107@agol.dk>
Date: Wed, 15 Jul 2015 02:56:02 +0200
From: Niels Elgaard Larsen <elgaard@agol.dk>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Icedove/31.7.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <5596ED9F.3050302@cryptolab.net> <5596F0E5.8050101@riseup.net>
 <1435955784.11081.31.camel@larsluthman.net> <55971E8D.7090507@riseup.net>
 <559D1282.1020502@agol.dk>
 <CAAgxajGSzYztzVzpsujpSskupMUkc9KAJ3zV5cCzdP1C=xW74A@mail.gmail.com>
 <20150712212724.7aeaf951@spuncut.agol.dk> <55A2F248.6090606@rawbw.com>
 <CAAgxajFmgiWZ4TFuDh+U+0CDdAd3Ou4ZF1Stkyeoss+MrgnXLg@mail.gmail.com>
In-Reply-To: <CAAgxajFmgiWZ4TFuDh+U+0CDdAd3Ou4ZF1Stkyeoss+MrgnXLg@mail.gmail.com>
X-EximConfig: v2.5 on gombert.agol.dk (http://www.jcdigita.com/eximconfig)
Subject: Re: [tor-talk] pdf with tor
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>



On 13-07-2015 10:10, Apple Apple wrote:
> On 13 Jul 2015 00:12, "Yuri" <yuri@rawbw.com> wrote:

> PostScript is something entirely unrelated. It is a way of describing the
> layout of documents with words, like a very early CSS or Latex. I remember
> claims about it being Turing complete but I think that this is in a similar
> spirit to C++ templates being Turing complete.

No, Postscript is a real programming language.

> I have doubts over whether
> it has enough IO capabilities to do anything malicious on its own.


Depends on the Postscript interpreter.


But there has been postscript vulnerabilities.

> You do raise an interesting point regarding embedded JavaScript inside PDF
> files which can also be used to exploit vulnerabilities in the viewer. Many
> PDF viewers will execute this code without the user even knowing about it.
> 
> If a PDF convertor ignores these embedded scripts then I think that is a
> definite bonus point for Niels' conversion strategy.


Yes, but I am not sure about that.

-- 
Niels Elgaard Larsen
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

