Quote:
Originally Posted by Miss Chief
I think the issue is that EPUB's in particular can be opened and read in a browser these days (not sure about other formats since I tend to buy/edit books as EPUB then convert them to what I need, which largely depends on where I plan on reading them). I was quite miffed that Edge made itself the default app for opening EPUB's after an update some time ago, it kind of makes sense though, EPUBs are written in HTML they even use CSS.
I doubt anyone is targeting ebook readers themselves (the hardware I mean) as there isn't much to be gained from doing so (possibly your Amazon login from Kindles) but people who read on their computers or tablets using a browser, or even using a ereader program that supports scripts could be vulnerable. Browsers themselves have a lot of personal info about people from the autofill alone and if they can get at the saved passwords well that would be the kind of thing they might want to target, without considering anything outside of the browser. )
|
Even PDFs in a Browser are stupid. Or that's especially stupid. I've been getting people to disable that for YEARS. Used to be standard thing on IT setup maybe 15 years ago to disable everything except basic necessities in a Browser.
Go to Browser "Applications". Set anything not a "Web Page" to be prompting to Save.
Install a real PDF reader (Summatra, Foxit, PDF express, even Ghostview). Linux comes WITH two real PDF readers as default.
Install Calibre and use its ePub & Mobi ebook reader standalone.
Add a script blocking plugin such as uMatrix or NoScript.
Don't use Edge or Internet Explorer unless mandated by your company as MS has lost the Plot on Browser and Windows design.
Use Safari, Firefox, Waterfox etc. Chrome is Google Spyware.