2025-12-11: Porn Is Being Injected Into Government Websites Via Malicious PDFs

PDF files, for all the governmental pdf-files.

Finally a good use of my tax dollars

"unlike many of the other PDFs" suggests it's not unlike all of the other PDFs. I'm curious what other city documents are like it.

So someone can upload a PDF and link to it externally? That's a REALLY dumb design. ANYTHING like that WILL be exploited.

I've been doing web stuff since 1996, and while for professional projects I take security seriously, over the years I've put stuff up - largely "security by obscurity"... it usually flies under the radar, but not always. I remember also somewhere around 2010-2015 I installed a URL shortener so I could create private short URLs. By default, you didn't have to log in to create one, which was convenient. And even though only I used it in places that wouldn't get much attention, it still got found and abused.

Anything widespread or with obvious flaws WILL get compromised and abused. It's a hard lesson to learn, but there's absolutely zero excuse for someone providing services to multiple government agencies to have an open system like that. That's embarassing for them.

Trump officials offended that they're forced to look at a woman over the age of 18

If they force us to stop watching porn, we should force them to start watching it

Finally a reason to visit government websites.

"Malicious."

This will finally make the government successful. Like VHS. Right, nerds?

So this is what tumblr becoming the "new pdf" meant