Ask Slashdot: How Do You Automatically Sanitize PDF Email Attachments?

First time accepted submitter supachupa writes "It seems the past couple of years that spearfishing is getting very convincing and it is becoming more and more likely someone (including myself) will accidentally click on a PDF attachment with malicious javascript embedded. It would be impossible to block PDFs as they are required for business. We do disable javascript on Adobe reader, but I would sleep a lot better knowing the code is removed completely. I have looked high and low but could not find a cheap out of the box solution or a 'how to' guide for automatically neutralizing PDFs by stripping out the javascript. The closest thing I could find is using PDF2PS and then reversing the process with PS2PDF. Does anyone know of a solution for this that is not too complex, works preferably at the SMTP relay, and can work with ZIPed PDFs as well, or have some common sense advice for dealing with this so that once its in place, there is no further action required by myself or by users."

Re:Just block PDFs with javascript

[Kardos]

Looks like these guys made a tool to do the JS detection: http://www-rsec.cs.uni-tuebingen.de/laskov/papers/acsac2011.pdf [uni-tuebingen.de]

Re: Just block PDFs with javascript

[Anonymous Coward]

That link is to a PDF! How do I know it's not a trap? Oh, the dichotomy :-(

Re:Test the Attachments

[ZzzzSleep]

Then just do all your work in a VM, and you'll be safe from malware!

Re:Print to PDF

[nicolastheadept]

Converting to JPEG? You're a terrible human being.