General problem needs a general solution
Posted Apr 1, 2005 14:39 UTC (Fri) by
kevinbsmith (guest, #4778)
In reply to:
Unexpected features in Acrobat 7 by rro
Parent article:
Unexpected features in Acrobat 7
Even if your proxy does block RemoteApproach itself, it won't block other similar "attacks". RemoteApproach could register a new domain every month. Competitors may spring up. Someone may create a tool that allows PDF authors to embed tracking that goes to an arbitrary site of the author's choosing.
Since the javascript plugin is a general tool, it is best blocked with a general approach.
I don't use acroread myself, but I will recommend to my friends that they disable acroread plugins entirely (as described in posts above), at least as a starting point. I wonder what other privacy and/or security vulnerabilities lurk within those (closed source) plugins.
(
Log in to post comments)