For many years malicious PDF files had the shameful honor of being the number one way people’s PCs got infected, and it’s because of bullshit like this.
“Surprise, here’s some Java code to execute on your personal computer without asking!” isn’t being done by anyone who is actually your ally.
We’re just discussing how shitty a shitty person has been toward you, at this point. There’s no good pro-social reason to deliver you an app while calling it a document.
Do we think it’s a virus? Probably not, but maybe. So we think there’s a tracker? Certainly. The average organization shitty enough to build or use this technology layer has over 500 separate relationships with companies that track you.
Someone tried to put a tracker in this PDF.
Whether people like me made it too hard for them is up for analysis.
I guarantee you that someone tried.
They’re not good enough at hiding this stuff yet, to feel confident lying about it, so it likely is disclosed in the fine print somewhere, if you’re feeling patient enough to read all of it.
// portability
Gave me the giggles. I’ve helped maintain systems where this portable solution would have left everyone better off.