{"guid":"7135636e-9dfb-557b-be80-7bd7e0d56707","title":"Perfidy, Deception, Fraud - How Much Trust Should We Put in a PDF?","subtitle":null,"slug":"gpn23-38-perfidy-deception-fraud-how-much-trust-should-we-put-in-a-pdf-","link":"https://cfp.gulas.ch/gpn23/talk/G7FMP3/","description":"In our daily life, we often think of PDF documents as static and immutable. This mental model is wrong.\n\nIn this presentation, we give a brief overview of PDF (in-)security and describe a novel kind of attack where a malicious PDF document can\n\n* change its displayed content with time (while the file stays the same)\n* display different content to different people\n\nWe publish details and a proof of concept at https://github.com/vlkl-sap/perfidy-deception-fraud\n\nLicensed to the public under https://creativecommons.org/licenses/by/4.0/","original_language":"eng","persons":["vlkl"],"tags":["38","2025","gpn23","Cyber Security","ZKM Kubus","gpn23-eng","Day 3"],"view_count":268,"promoted":false,"date":"2025-06-21T23:40:00.000+02:00","release_date":"2025-06-22T00:00:00.000+02:00","updated_at":"2026-04-07T12:45:08.036+02:00","length":1451,"duration":1451,"thumb_url":"https://static.media.ccc.de/media/events/gpn/gpn23/38-7135636e-9dfb-557b-be80-7bd7e0d56707.jpg","poster_url":"https://static.media.ccc.de/media/events/gpn/gpn23/38-7135636e-9dfb-557b-be80-7bd7e0d56707_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/gpn/gpn23/38-7135636e-9dfb-557b-be80-7bd7e0d56707.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/gpn/gpn23/38-7135636e-9dfb-557b-be80-7bd7e0d56707.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/gpn23-38-perfidy-deception-fraud-how-much-trust-should-we-put-in-a-pdf-","url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_title":"Gulaschprogrammiernacht 23","conference_url":"https://api.media.ccc.de/public/conferences/gpn23","related":[],"recordings":[{"size":171,"length":1451,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-06-22T09:20:24.582+02:00","recording_url":"https://cdn.media.ccc.de/events/gpn/gpn23/av1-hd/gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/88297","event_url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_url":"https://api.media.ccc.de/public/conferences/gpn23"},{"size":22,"length":1451,"mime_type":"audio/mpeg","language":"eng","filename":"gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2025-06-22T09:17:10.656+02:00","recording_url":"https://cdn.media.ccc.de/events/gpn/gpn23/mp3/gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/88292","event_url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_url":"https://api.media.ccc.de/public/conferences/gpn23"},{"size":15,"length":1451,"mime_type":"audio/opus","language":"eng","filename":"gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2025-06-22T09:17:02.004+02:00","recording_url":"https://cdn.media.ccc.de/events/gpn/gpn23/opus/gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_opus.opus","url":"https://api.media.ccc.de/public/recordings/88290","event_url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_url":"https://api.media.ccc.de/public/conferences/gpn23"},{"size":104,"length":1451,"mime_type":"video/webm","language":"eng","filename":"gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-06-22T09:18:47.140+02:00","recording_url":"https://cdn.media.ccc.de/events/gpn/gpn23/webm-sd/gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/88296","event_url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_url":"https://api.media.ccc.de/public/conferences/gpn23"},{"size":773,"length":1451,"mime_type":"video/webm","language":"eng","filename":"gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-06-22T09:18:24.252+02:00","recording_url":"https://cdn.media.ccc.de/events/gpn/gpn23/webm-hd/gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/88295","event_url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_url":"https://api.media.ccc.de/public/conferences/gpn23"},{"size":67,"length":1451,"mime_type":"video/mp4","language":"eng","filename":"gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-06-22T09:17:06.866+02:00","recording_url":"https://cdn.media.ccc.de/events/gpn/gpn23/h264-sd/gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_sd.mp4","url":"https://api.media.ccc.de/public/recordings/88291","event_url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_url":"https://api.media.ccc.de/public/conferences/gpn23"},{"size":315,"length":1451,"mime_type":"video/mp4","language":"eng","filename":"gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-06-22T08:56:06.090+02:00","recording_url":"https://cdn.media.ccc.de/events/gpn/gpn23/h264-hd/gpn23-38-eng-Perfidy_Deception_Fraud_-_How_Much_Trust_Should_We_Put_in_a_PDF_hd.mp4","url":"https://api.media.ccc.de/public/recordings/88285","event_url":"https://api.media.ccc.de/public/events/7135636e-9dfb-557b-be80-7bd7e0d56707","conference_url":"https://api.media.ccc.de/public/conferences/gpn23"}]}