ThomasRinsma

6 ms·

1. 1.▲
   Spoofing OpenPGP.js signature verification(codeanlabs.com)

   97 points by ThomasRinsma 1y ago|30 comments
2. 2.▲
   by ThomasRinsma 2y ago

   Author of "PDF Tetris" here. Great work! We had the same idea at the same time, here's my version of PDF Doom: Source: https://github.com/thomasRinsma/pdfdoom Playable here: https://th0mas.nl&
3. 3.▲
   by ThomasRinsma 2y ago

   Oops, yeah :)
4. 4.▲
   by ThomasRinsma 2y ago

   I barely looked at Adobe Reader so not sure about that one, it definitely does not work with this PDF though, likely because it's not compliant in several ways. Besides that I wouldn't be surprised if it supports all the required
5. 5.▲
   Show HN: Tetris in a PDF(th0mas.nl)

   1289 points by ThomasRinsma 2y ago|223 comments
6. 6.▲
   CVE-2024-29510 – Exploiting Ghostscript using format strings(codeanlabs.com)

   41 points by ThomasRinsma 2y ago|9 comments
7. 7.▲
   by ThomasRinsma 2y ago

   Original author here. This is indeed a bit confusing. You are right for the case where Firefox's PDF.js is used (local or remote file in a tab or iframe). The XSS problem however is with web-applications that themselves use PDF.js. In