Ask HN: What if I open on a malicious PDF AirDropped to my iPhone by a stranger?

1 scripper1 1 8/6/2025, 5:30:52 AM

The title says it all. I made a mistake. I opened my iPhone to receive AirDrop photos from a stranger. I later found a PDF in Files and tried to open (after disconnecting from the internet), but Files crashed and the file disappeared. I was on 18.4. I have since factory reset. Do you think it's possible that there's a PDF exploit I've been victim to?

Comments (1)

SilentTiger · 2m ago

Receiving data from strangers is dangerous. While we generally consider iOS to be secure, but you know that there are numerous zero-day vulnerabilities. Who knows if this PDF file might contain a script that exploits one? Therefore, avoid accepting data from strangers and, ideally, change your AirDrop settings to "Contacts Only."

Open models by OpenAI (openai.com)

Fast (catherinejue.com)

Perplexity is using stealth, undeclared crawlers to evade no-crawl directives (blog.cloudflare.com)

Genie 3: A new frontier for world models (deepmind.google)

Helsinki records zero traffic deaths for full year (helsinkitimes.fi)

Study mode (openai.com)

Show HN: I spent 6 years building a ridiculous wooden pixel display (benholmen.com)

Copyparty – Turn almost any device into a file server (github.com)

EU age verification app to ban any Android system not licensed by Google (reddit.com)

uBlock Origin Lite now available for Safari (apps.apple.com)

Dumb Pipe (dumbpipe.dev)

‘I witnessed war crimes’ in Gaza – former worker at GHF aid site [video] (bbc.com)

Slow (michaelnotebook.com)

Enough AI copilots, we need AI HUDs (geoffreylitt.com)

Performance and telemetry analysis of Trae IDE, ByteDance's VSCode fork (github.com)

If you're remote, ramble (stephango.com)

Show HN: Draw a fish and watch it swim with the others (drawafish.com)

M8.7 earthquake in Western Pacific, tsunami warning issued (earthquake.usgs.gov)

Show HN: Use Their ID – Use your local UK MP’s ID for the Online Safety Act (use-their-id.com)

Modern Node.js Patterns (kashw1n.com)

Things that helped me get out of the AI 10x engineer imposter syndrome (colton.dev)

Vibe code is legacy code (blog.val.town)

Our $100M Series B (oxide.computer)

Face it: you're a crazy person (experimental-history.com)

‘No Other Land’ consultant Awdah Hathaleen killed by Israeli settler (latimes.com)

Claude Opus 4.1 (anthropic.com)

VPN use surges in UK as new online safety rules kick in (ft.com)

Tom Lehrer has died (nytimes.com)

Sleep all comes down to the mitochondria (science.org)

Telo MT1 (telotrucks.com)

Visa and Mastercard are getting overwhelmed by gamer fury over censorship (polygon.com)

Corporation for Public Broadcasting ceasing operations (cpb.org)

Claude Code weekly rate limits

Job-seekers are dodging AI interviewers (fortune.com)

Mastercard deflects blame for NSFW games being taken down (pcgamer.com)

My 2.5 year old laptop can write Space Invaders in JavaScript now (GLM-4.5 Air) (simonwillison.net)

6 weeks of Claude Code (blog.puzzmo.com)

Writing a good design document (grantslatton.com)

Sign in with Google in Chrome (underpassapp.com)

Ollama's new app (ollama.com)

Monitor your security cameras with locally processed AI (frigate.video)

Tao on “blue team” vs. “red team” LLMs (mathstodon.xyz)

How was the Universal Pictures 1936 opening logo created? (movies.stackexchange.com)

Qwen-Image: Crafting with native text rendering (qwenlm.github.io)

4k NASA employees opt to leave agency through deferred resignation program (kcrw.com)

iPhone 16 cameras vs. traditional digital cameras (candid9.com)

The anti-abundance critique on housing is wrong (derekthompson.org)

Live coding interviews measure stress, not coding skills (hadid.dev)

MacBook Pro Insomnia (manuel.bernhardt.io)

We may not like what we become if A.I. solves loneliness (newyorker.com)

Ask HN: What if I open on a malicious PDF AirDropped to my iPhone by a stranger?

Comments (1)