Hacker News new | ask | show | jobs
by hdgvhicv 302 days ago
Some desktop environments hide file extensions. This bad behaviour dates back 30 years.

File is foo.pdf.desktop in a zip file. zip unzipped, DE hides .desktop and shows “foo.pdf”

User double clicks thinking it’s a safe pdf but it’s actually a script or other payload which does bad things.