F-Secure Suggests Ditching Adobe Reader For Free PDF Viewers

hweimer writes "Yesterday at RSA security conference, F-Secure's chief research officer recommended dropping Adobe Reader for viewing PDF files because of the huge amount of targeted attacks against it. Instead, he pointed to PDFreaders.org, a website maintaining a list of free and open source PDF viewers."

Comments

Already there

[andytrevino]

I've been using Foxit Reader for some time on my aging laptop because of performance issues with Adobe Reader 9, and it works great. http://www.foxitsoftware.com/pdf/reader/

Re:Already there

[Dyinobal]

same here. I switched to foxit ages ago, simply because of adobe being so bloated. It made reading PDFs enjoyable again.

Re:Already there

[omeomi]

Agreed. Small download. Quick start-up. Never had a problem. Foxit rocks.

Re:Already there

[Saint Stephen]

Foxit has a couple of problems with some forms-based PDFs my work gave me, but on the other hand, it lets me save form field values in pdfs where acrobat won't.

It's great; I got sick of the bloat ware and "run all the time! in the background! always show up with checks for prompts for updates every time I open my browser!" that adobe has turned into.

now if foxit only made a flash player

Re:Already there

[FlyingBishop]

Actually, the article specifically suggests that Adobe needs to improve its automatic update system, not remove it.

Foxit is getting pretty widely used, and it will be especially vulnerable if it lacks a mechanism to update itself automatically.

Convenience != good architecture.

I'm not sure who are more dangerous, those that don't update because they don't know what updates are, or those that don't update because they're too paranoid about corporations whose software they already use to allow that software to be patched against demonstrated security issues.

That said, Adobe is bloated. It just has nothing to do with running all the time in the background and prompting for updates, but just with generally shitty programming. Anything used for a significant portion of web traffic needs to have a mechanism to automatically retrieve updates, especially if the user is to lazy make sure that their system is up to date and secure.

Re:Already there

[omeomi]

I'm not sure who are more dangerous, those that don't update because they don't know what updates are, or those that don't update because they're too paranoid about corporations whose software they already use to allow that software to be patched against demonstrated security issues.

What about those of us who don't update because we're too lazy?

Re:Already there

[zonky]

Yes, it's so feature compatible with adobe, they've added similar exploits! http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1104

Re:Already there

[andytrevino]

Free as in beer, not as in speech. The article lists a number of alternatives with varying degrees of maturity and practical utility...

For example, I'm not going to install KDE on Windows just to read PDFs, and if I'm going to recommend an alternative PDF reader to one of my Average Joe friends, customers or relatives I'm not going to have them download one without an installer or from a website whose name has nothing to do with the product (MuPDF) that looks like it was designed circa 1997. Appearance is everything, you know, which is something that I think has greatly contributed to Firefox's success: both the product and the website look smooth, classy and refined.

Re:Already there

[QRDeNameland]

What about those of us who don't update because we're too lazy?

Then there's those of us who don't update because we've been burnt by updates breaking things way too many times in the past.

Re:Already there

[DanWS6]

I was a firm believer in foxit, until I had to fill out my 1040 and related forms. Some of the fields were just screwed up. I had to cave and install acrobat. I died a little inside that day.

Re:Already there

[Sentry21]

Funny I know, but it's not far off â" Acrobat only bugs me about updating when I'm about to try doing something else. 'I know you said you wanted to see this PDF, but wouldn't you be happier waiting 10 minutes for a software update instead?'

Acrobat needs some method of downloading updates in the background and then just asking you if you want to apply them (yes/no) when you start it, but applying them later, when you're done.

Then again, most apps need to do things like that.

Re:Already there

[toleraen]

Exactly what I don't get of this. When tracking the adobe exploits I saw several for Foxit pop up. The guy is basically advising security through obscurity. Foxit definitely released patches quicker than Adobe, but the vulnerabilities were still there...

Re:Already there

[JoeBuck]

What about those of us who don't update because we're too lazy?

You might be lazy, but your computer isn't; it's been sending out spam 24/7 for a while now.

Re:Already there

[izomiac]

I used to use Foxit, but got a little tired of its adware nature (banner ad, browser toolbar, tons of buttons that only exist to remind you what the free version doesn't have, etc.). So I switched to Sumatra (GPL and much more minimalistic than Foxit). Later, I started taking notes in class using PDF comments. I tried using Foxit again, but commenting is restricted to the Pro version. Plus it crashed every second time I tried to comment the DRM'd lecture notes (that was difficult to figure out since Foxit doesn't indicate if DRM is present). So I switched to PDF-XChange Viewer since it can handle DRM and allows comments. It's similar to Foxit in that it's adware and feature-rich, but it does it with a bit more class IMHO. E.g. there's an option to hide the "Professional" features. Plus, there's a portable version.

Re:Already there

[FRiC]

Until Foxit Reader (at least the Windows version, no experience with other versions) can support Unicode, it will never replace Adobe Reader.

Re:Already there

[blind biker]

And what I find quite important: it renders text quite well. At least I don't see a big difference between how Foxit renders text vs. Acrobat. But, as I was saying in another post, Sumatra does a very bad job - so much so, that I feel slightly nauseated when reading documents with Sumatra.

Re:Already there

[petermgreen]

I'm not sure who are more dangerous, those that don't update because they don't know what updates are, or those that don't update because they're too paranoid about corporations whose software they already use to allow that software to be patched against demonstrated security issues.
What about:
Those who don't update because it would take unreasonable ammounts of time on thier slow connection

Those who don't upgrade because they are afraid vendor incompetance will cause something to break (or have upgraded and then had to downgrade because something broke and are now stuck with the version they downgraded too)

Those who don't update because they simply can't be bothered dealing with all the updators.

IMO all the major windows development houses (including MS themselves) need to get together and use a common automatic updates system with a common setting for deciding update policy (off/check and ask/download and ask/full auto) and maybe an advanced settings box to set different update policies for different products. I think the windows automatic updates system may already support this but if it does then i've never seen anyone other than MS use it.

Re:Already there

[jbn-o]

Foxit Reader is proprietary, no more inspectable or modifiable than Adobe's PDF reader and therefore no more trustworthy than any other proprietary software. No proprietary software is not a good solution to the problems faced with Adobe's proprietary PDF Reader. You are merely jumping from one proprietor to another.

A reasonable recommendation is a FLOSS PDF reader such as Sumatra, Skim, or one of the other fine PDF readers recommended by PDFReaders.org.

Re:Already there

[Anonymous Coward]

The guy is basically advising security through not encouraging a monoculture
 
.

Fixed that for you.

Re:Already there

[hairyfeet]

Uuuhhhhh....I don't know where you get your info from, but Foxit updates itself just fine, has been for awhile. As you can see here it updates itself. Allow me to quote: "To select "Check for Updates", please go to Help > Check for Updates Now > click "Preferences" in the Foxit Reader Updates dialog box > select "Automatically check for Foxit updates". Please note that this option is selected by default."

I can say that I have been using the free version for years and for at least the past two versions it has been advising me of updates to the software. of course like most here I picked Foxit for the lack of bloat and quick startup, but having it update itself is just a nice bonus.

Re:Already there

[PopeRatzo]

And not only does Adobe Reader use a lot of resources, but that automatic "updater" is annoying as hell.

Do you all agree that Foxit is the best of show for free PDF reader? I'd like to hear your opinions on some of the others.

Re:Already there

[TooMuchToDo]

Like Firefox? They've perfected the way they do updates.

Re:Already there

[Garrett Fox]

Seems good so far, in terms of memory use. The invitations on installation to install an advertising toolbar and eBay stuff were slightly annoying though, and I'd like to find a way to change the EXE file's subheading. You know, the unchangeable "Foxit Reader, Best reader for everyday use!", seen in the "Open With" dialog. I already installed it, so why the built-in ad?

Re:Already there

[b4dc0d3r]

What's your bug report number?

Re:Already there

[emm-tee]

Like Firefox? They've perfected the way they do updates.

Unless you use Windows XP and don't run as administrator.

Updates don't work for non-administrator accounts. This resulted failures where an update had been downloaded but could not be applied.

The Firefox developers "fixed" this issue by not even notifying the user when updates are available.

Re:Already there

[windsurfer619]

Updates don't work for non-administrator accounts... The Firefox developers "fixed" this issue by not even notifying the user when updates are available.

As it should be. The system administrator should be responsible for updating software, especially if the user can't do it themselves.

Re:Already there

[behindthewall]

I learned of Skim a few months ago, and it looks like a great tool. Extensive navigation and annotation abilities, with the annotations saved separately (merging them into the PDF file is also supported). Exactly what I want for migrating to more on-screen research and study.

Unfortunately, it is dependent upon Mac OS PDF handling libraries. I've been wishing/hoping something similar will appear that is cross platform. Some recent news about Python-based PDF libraries (I forget the specific names, at the moment) has perked my interest/hope a bit.

I hope something does develop. Or that I generate enough spare cash to finally put down for a Mac. (Suboptimal: I don't want to be tied to Apple's libraries.)

Not Much Cross-Platform

[Kelson]

It's interesting that of the 8 alternatives mentioned, only Okular is listed as being available across the board on Windows, Mac OS X, and (as they put it), "Free Operating Systems." (Linux, BSD, etc.) Even so, it involves installing KDE on top of Windows or Mac OS X, but at least it can be done.

The only two-platform reader, Yap, appears to be based on GNUStep, and I don't actually see a Windows download on the web page.

Re:Not Much Cross-Platform

[Kelson]

Doesn't Apple have their own non-adobe pdf reader built into OS X?

Yes, Preview can read PDFs (among many other formats) well enough that I didn't even install Adobe Reader when I bought a new MacBook a few months ago. Admittedly I'm not sure how well it handles forms, but it has no problems with static PDF files.

Of course, I doubt it's open source/free software, so it wouldn't be on this list anyway.

Re:Not Much Cross-Platform

[dov_0]

I've been using Evince on Linux for years now. No dramas. Runs about 10 times faster than the Adobe Reader as well.

Does whether a particular reader is cross-platform really matter? Most people only seem to use the zoom in/out, scroll up/down and preview pane functions anyway. Not a lot to figure out on a different system...

Re:Not Much Cross-Platform

[John Whitley]

Yes. There's also Skim for OS X, which is far and away my favorite PDF reader for any platform. It's actually designed by and for people who really want to read, quickly search, and annotate PDFs.

Here are two of Skim's great features that I'd love to to see in other PDF readers:

1. Fast search with great presentation. Skim's PDF text search is blazing fast, provides a concise one-hit per line view, as well as thumbnails of the page around the search target on mouse hover. The thumbs are great for quickly winnowing down to the correct hit; you often don't need to even read the text, just the "look" is enough to know you've got the right thing.
2. The ability to easily spin off small windows frozen to a part of a page -- great for popping open a diagram or other material referenced across multiple pages of a text.

I do believe that Skim relies heavily on various OS X frameworks (e.g. for PDF rendering, Spotlight support for search, etc.). That definitely goes to show the value of providing functionality via general, well-conceived and well-implemented frameworks instead of being wrapped up inside of monolithic applications.

Re:Not Much Cross-Platform

[buchner.johannes]

The websites are the horror from a windows end-user point of view.

Okular: no download, build descriptions?
MuPDF: A parser description?
Yap: That screenshot ...
Sumatra PDF: Looks good.

Re:Not Much Cross-Platform

[pete-classic]

Forms support is decent, but not perfect. I reported a couple of bugs I ran into filling out my tax forms this year. Specifically, I couldn't save a PDF in Adobe Reader that had form data already saved in it with Preview. And the digits didn't align correctly in the bank routing and account number fields.

I use it frequently. My only other gripe is that the search is brain-dead. (It "ors" all the search terms. which is never what I want. Putting an "AND" between them doesn't help :-/)

It might sound like I don't like it, but these are actually my only complaints. Very solid app.

It's also worth noting that PDF export is built right into the print subsystem. No goofy third party print drivers. No need for individual apps to understand PDF.

-Peter

Re:Not Much Cross-Platform

[blind biker]

I tried Sumatra (newest version) and while it's installed size is small, compared to the features it offers, it's bloated (ok, it's not bloated if you compare to Adobe, but it is compared to Foxit). But that's not the real problem with Sumatra: the gravest issue is the rendering: I thought I'll get a headache reading text rendered by Sumatra. It was very unpleasant at any zoom level.

Re:Not Much Cross-Platform

[BlackSabbath]

Whole-heartedly agree. Skim has made getting through my Master's degree much easier. The ability to highlight (markup in many ways) and add text notes directly on the page make this awesome.

Re:Not Much Cross-Platform

[mjwx]

Sumatra PDF: Looks good.

I switched from Foxit to Sumatra PDF when the flashing banner ad in Foxit became too annoying. Sumatra handles displaying PDF's on a Windows box far better and doesn't seem to have the same issues when printing a colour PDF, Foxit would take 5 minutes to send it to the printer. Sumatra doesn't do everything, its a small light PDF viewer that has a quick load time, which is exactly what most people are after with a PDF viewer.

Re:Not Much Cross-Platform

[PopeRatzo]

Perhaps you should consider getting your operating system from an organization that does not require you to download such fundamental applications as a PDF viewer from a third party.

Hey, I don't want my OS coming with ANY apps, how about that? Just run my programs and stay out of my way.

Re:Not Much Cross-Platform

[windsurfer619]

That definitely goes to show the value of providing functionality via general, well-conceived and well-implemented frameworks instead of being wrapped up inside of monolithic applications.

As someone that doesn't want or have the macintosh os, that value is 0..

Helpfully

[Anonymous Coward]

F-Secure posted a PDF with exploits to uninstall Adobe Reader and install a new free reader.

Acrobat: The Worlds Worst Software

[gilgongo]

Acrobat utterly takes the biscuit when it comes to being the most execrably awful, arrogant, bloated, buggy, piece of software ever made, ever. And that's in a world where Microsoft exists as well.

But as if that isn't bad enough, it ALSO ranks as the most tragic irony in *all* *computing* *history* that such a screamingly, revoltingly, tear-out-your-hair-and-become-a-monk awful software is essentially based on an open standard. I'll say that again: PDF is an *open* ISO standard. HOW did Adobe rape and strangle it to death like they did? If anyone wants an example of how unspeakably evil marketing and sharp practices can be, they need look no further than Adobe Acrobat.

If I never used Acrobat ever again it would be too soon.

Re:Acrobat: The Worlds Worst Software

[Anonymous Coward]

the most execrably awful, arrogant, bloated, buggy, piece of software ever made, ever.

It's called Realplayer.

Re:Acrobat: The Worlds Worst Software

[UncleTogie]

You really think so? Let me introduce you to my Buddy, Bonzi....

Re:Acrobat: The Worlds Worst Software

[5of0]

But it's malware that sings! That right there makes the difference.

Re:Acrobat: The Worlds Worst Software

[H0p313ss]

Acrobat utterly takes the biscuit when it comes to being the most execrably awful, arrogant, bloated, buggy, piece of software ever made, ever.

Clearly you have not used anything Lotus has shipped in the past decade.

Re:Acrobat: The Worlds Worst Software

[spinkham]

Acrobat utterly takes the biscuit when it comes to being the most execrably awful, arrogant, bloated, buggy, piece of software ever made, ever. And that's in a world where Microsoft exists as well.

I see you never used Visual SourceSafe.

But yes, Acrobat sucks.

For those on the go

[compro01]

Sumatra PDF is also available in a portable format.

Re:For those on the go

[drizek]

I was introduced to Sumatra from portable apps and now use it instead of FoxIt. It does have a few issues here and there, but it seems to work better.

How about a security review?

[Burdell]

Being the most targeted is not a good reason to switch (being the most exploited may be). However, rather than say "acroread sucks, try something else", shouldn't a security company actually check the security of the alternatives? Alternative does not automatically imply better; how do I know that the alternatives are not worse?

How many of the alternatives implement all the features require (and implement them securely)? Viewing an owner's guide PDF or some such isn't a big deal (I'd hope they can all do that); I need to know if all the form handling works correctly (because I need to use that).

Re:How about a security review?

[mrbene]

I think F-Secure's unofficial stance is outlined best in their blog from a while back:

we're not recommending Foxit. We're not recommending Sumatra. Or PDF-Xchange, CoolPDF or eXPert PDF. Instead, we recommend users to find their own Adobe Reader replacement. This way we get more heterogeneous userbase, which is a good idea security-wise.

I dropped Adobe PDF reader for a different reason

[bogaboga]

"Yesterday at RSA security conference, F-Secure's chief research officer recommended dropping Adobe Reader for viewing PDF files because of the huge amount of targeted attacks against it.

I used to use Adobe's PDF reader but while running Windows XP, I got a message prompting me to upgrade my Adobe reader to the latest.

I attempted to and the downloaded file was quite small. On completing the installation, I found out that I was stuck with a directory heavy at 200MB! Uninstalling the extras did not help matters.

Later on, I discovered Foxit Reader. I haven't looked back and I am not worried about Adobe misbehaving for I know the would not like Microsoft to gain any traction with their XPS format.

Adobe: The Worlds Worst Software Company

[Anonymous Coward]

That was my response to the dreamweaver CS3 install that dumped over 800 meg of bolt-on garbarge and two new services BEFORE starting the actual dreamweaver install.

And the new-and-improved dreamweaver was almost exactly the same as the macromedia version. They added a new CSS selector and a new tab for their adobe ajax framework. And they broke the best interakt extension. So the product went backwards, despite trending towards epic MS levels of application footprint.

They acquired the interackt folks and I think CS4 suckers are still waiting for the supported port.

Everything adobe touches turns to shit if you ask me.

What about DRM PDFs?

[Orion Blastar]

I have a ton of DRM protected eBooks from my college. They only work in Adobe Acrobat Reader. How do I remove the DRM, or would removing the DRM so that I can use them in a third party PDF viewer be a violation of my license with the college and publishers?

I really don't want to lose my eBook library, but I don't want to get infected either.

Re:What about DRM PDFs?

[Anonymous Coward]

Open the file as a text file and look for the comment that says something like it is a violation of the DMCA to remove the following lines. Remove the following lines. Repeat. This is of course assuming that you don't think it's a violation of the DMCA to remove the lines in question.

Re:What about DRM PDFs?

[Anonymous Coward]

Search for ineptpdf.pyw.

Re:What about DRM PDFs?

[bcrowell]

How do I remove the DRM

On linux: gs -q -dCompatibilityLevel=1.4 -dNOPAUSE -dBATCH -sDEVICE=pdfwrite -sOutputFile=b.pdf a.pdf -c '.setpdfwrite'

or would removing the DRM so that I can use them in a third party PDF viewer be a violation of my license with the college and publishers?

Who cares? You're in a situation where you're being horribly abused. The professor chose the book, the publisher chose to put DRM on it, and the publishing industry's lobbyists got Congress to pass the DMCA...just do whatever works for you. You paid for the book, after all.

I really don't want to lose my eBook library, but I don't want to get infected either.

Turn off javascript in AR: Edit, Preferences, JavaScript, and uncheck "Enable Acrobat JavaScript".

Re:What about DRM PDFs?

[bendodge]

Kpdf (part of KDE 3.5) had a checkbox to ignore DRM. I don't know of Okular (KDE 4) does.

Re:nice that there was an MS rep there to pay him

[moderatorrater]

using this guys logic, he should be saying to dump Microsoft and use another OS due to the large number of breakins on Windows boxes.

Unless he thought that the cost of switching OSes was significantly higher than the cost of switching to another free piece of software on top of that OS. With Windows, people need it to do things that no other operating system can do, namely, running Windows-only applications as well as they can be run. Switching to another OS requires either dealing with emulation, a VM, or not being able to run those programs at all. In addition, there are costs in either a steep learning curve going to linux or hardware to get a Mac. Cost to change: many, many hours of learning or a few thousand dollars.

On the other hand, as long as these PDF readers can read any pdf that adobe can, and as long as they're free like adobe is, there's no other cost. Hell, you can even have adobe installed just in case you'll need it, but make another reader the default for everything, thereby giving you the security of having another reader without any loss in functionality. Cost to change: maybe half an hour.

In other words, your bias is showing.

better -- use pdfs appropriately!

[owlnation]

Actually, what would also be a huge help (regardless of reader) would be to only use PDF where it was appropriate to do so -- namely, when the end user actually needs to print said document.

I realize there's pretty much no point in saying this, as it seems that many designers -- especially in large organizations -- seem to give little thought to the end user, and the usability of their site. (inappropriate or unnecessary use of pdf, flash, javascript, popups (still!) etc )

I'm tired of going to a site to find that in order to find out -- for example, where an event is going to take place -- that I have to download a 3 page pdf document, one that would have been so much easier and quicker and accessible as html on a webpage.

I'm willing to bet that, at the very least, half of all pdfs created do not need to be pdfs in the first place.

Okular has no chance there ...

[MartinSchou]

Okular has no chance there. Not amongst regular Windows users at least.

Step 1 - Go to PDFreaders.org - no issue
Step 2 - Click on "Download" on the intersection between Okular and Windows - no issue
Step 3 - Click "Download latest installer for immediate installation. - no issue
Step 4 - Run the KDE installer - not so much an issue, as what it does is
Step 5 - Click Next - "install from Internet" is the default setting, sounds reasonable
Step 6 - Select a download server - "What the hell did I just download then?"
Step 7 - Select an available release - Ehh? Whut?
Step 8 - Select the package you want to install - Well, that's just fucked up. 140+ packages to choose from. They're sorted by package name ONLY, cannot sort by package notes.
Step 9 - Look for something called Okular as package name. None found
Step 10 - "Oh, well, maybe these are packages I want in addition to Okular. I mean, I downloaded the Okular installer, right?"
Step 11 - Click Next
Step 12 - Installation/Update finished
Step 13 - Realise that NOTHING has been installed.
Step 14 - Get annoyed
Step 15 - Call tech support (realise this is a free program and there's noone to yell at)
Step 16 - Download and run the installer again (because they forgot where they downloaded it to)
Step 17 - Get to the package list and start reading very carefully
Step 18 - Wonder why the hell the package list goes Czech, Kashubian, Welsh, Danish, German, Greek, English, Esperanto, Spanish, Estonian [spelling package]
Step 19 - Realise there's still no Okular package anywhere
Step 20 - Read the list for the 3rd time and note that "Graphics applications" has a note "(including Okular)"
Step 21 - Wonder why the hell the download Okular link from before doesn't give you the fucking package to begin with
Step 22 - Notice that you're now downloading 40 (forty!) packages from the servers
Step 23 - Notice that one of these files are 60+ MB
Step 24 - Wonder why they call Acrobat Reader bloated and slow when that installer is less than 25 MB and takes about 30 seconds to install, just by clicking Next until you're done.
Step 25 - Notice that you now have a folder called "Programs" in your Start menu's program folder, which is aparently a sym-link to the program folder (doesn't point to itself though)
Step 26 - Find the "KDE 4.22 Release" folder in Programs and notice these programs:

• Help
• Graphics\More Applications\KColorChooser (Color Chooser)
• Graphics\More Applications\KRuler (Screen Ruler)
• Graphics\Gwenview (Image Viewer)
• Graphics\KolourPaint (Paint Program)
• Graphics\Okular (Document Viewer)
• Network\KNetAttach (Network Folder Wizard)

Step 27 - Wonder once more why the hell people call Acrobat Reader bloated when this program installs with 5 extra programs.
Step 28 - Start the bloody program!
Step 29 - KConf_update.exe would like to run. So, Acrobat Reader running its updater - Bad! This - GOOD!
Step 30 - TRY to put frustrations aside and use the program

That installer REALLY needs some work.

And if you are going to have a Windows program, be as kind as to have an actual uninstaller. NONE of the KDE programs installed are listed in (Add/Remove)Programs(and Features). No uninstallers in the start menu either. I realise a lot of vocal FOSS supporters don't like Windows, but please - if you're going to advocate FOSS, at least make it live up to the LOW standards of Windows software (the non-malicious part of that group).

Re:Okular has no chance there ...

[LiquidFire_HK]

Well, to be fair, the KDE on Windows page does say, in bold,

KDE on Windows is not in the final state, so applications can be unsuitable for day to day use yet.

The installer is far from suitable for end-users as well. I'm not sure why the website would link to the KDE installer without any instructions (there is no installer specific to Okular, or any specific KDE program, yet).

Foxit is unsuitable

[GF678]

This isn't FUD, this is based on my own experiences:

I've found that the latest Foxit Reader is unable to show certain PDFs, in particular those created using the latest version of Adobe Acrobat. I created some PDFs in Acrobat 9 and when loaded into Foxit Reader 3.0, showed up entirely blank. The only way to view them was to put Adobe Reader on instead. So I did.

I'm not sure why Foxit showed these PDFs entirely blank. Maybe Acrobat 9 has a new version of the PDF standard that's incompatable, I don't know. What I do know is it means that if I want to gurantee the viewing of PDF files, I pretty much require Adobe products, which isn't that bad if you're using Reader 9 (much faster than version 8).

Possibly a vendor lock-in mechanism, but I'm tired of fighting. It's easier just to go with Adobe and get on with work.

Re:Foxit is unsuitable

[GF678]

One more thing I forgot to mention - I switched from Acrobat to PDFCreator a while back. It's very good, and anything I render using PDFCreator works just fine with Foxit Reader. Also has the side benefit of being open source and an example of an actually GOOD open source product. Unfortunately this doesn't discount the fact that other people might use Acrobat to render THEIR PDFs, and I don't want to cut myself off from being able to view them.

Re:Foxit Reader

[LordLimecat]

Probably the same way HP printer drivers are 350mb.
I'm actually starting to suspect that the same people who write the adobe reader/updater code, also work in the HP drivers division. Both use FEAD/Nosso compression, both have obnoxious updaters, both are massively bloated....
/tinfoil hat

Broken ones are JetForm/LiveCycle based

[bigtrike]

Foxit does not yet support JetForm/LiveCycle based PDFs. Neither does OSX's Preview.

I wish people would stop using LiveCycle to produce PDFs, from what I can tell the format is not documented in the PDF ISO specification. Additionally, the newer format does not seem to provide any features that were not previously available in PDF. One can only speculate that it was done out of laziness or to thwart competition after they opened the format.

Re:Broken ones are JetForm/LiveCycle based

[Skuld-Chan]

It is an open specification:

http://partners.adobe.com/public/developer/xml/index_arch.html

And yes it does provide a lot of things not available in the pdf spec - for example directly rendered forms (which require significantly less bandwidth).

I wish people would stop spreading fud about Acrobat/Reader. Having worked for Adobe (I no longer do sadly) on Acrobat specifically a few facts:

A) update manager only starts with the app - it doesn't run constantly and you can disable it and use the help > check for updates feature - you can even deploy it to a million machines with this setting (thanks to its msi installer and customization wizard).

B) patches are released only once per quarter - I don't recall anytime (unless it was a security hotfix) that we released more than one patch per quarter.

C) Foxit is great - its the reason why Adobe made the PDF spec and ISO standard.

That said - it only impliments maybe a tenth (and I'm being really generous here) of what Reader/Acrobat can do. If you take reader and remove all the plugins from it its as small as foxit and starts just as fast and has as much functionality. There really are people in banking, finance, manufacturing, education, printing etc that rely on these features.

As some people have mentioned - it lacks a lot of features required in form support. I'd also add that it doesn't support postscript passthrough, or any number of a hundred different features required for pre-press work (color separation, color management, analysis or reporting).

I'd also add that foxit supports javascipt as well - which means eventually once it reaches Slashdot market dominance it will become a ripe target for hackers as well.

On security - as far back as Acrobat 4 it had security issues - no-one messed around with it because frankly it wasn't a big enough target. It wasn't until someone a while back (I think while Acrobat 7 was shipping) that someone exploited it and the blood was in the water. Once that happened every security researcher/hacker under the sun was working on it. Until it happens to your product you can sit there and say whatever you are doing is secure, but trust me its not. Once in the hands of people who really want to exploit it for real money want to - you essentially will play a cat and mouse game for the rest of the products lifecycle where sometimes you win and sometimes they win.

On launch performance - I'd actually bet money that Acrobat 9 Pro would launch faster than Foxit - yes seriously. It launches 10x faster than 8 did because it only loads libraries as it needs them (instead of doing like a 120+ loadlib calls on start). Essentially if you're just loading a pdf and looking at it - it doesn't need to load all the plugins for forms, annotations and 3d annotations etc.

Also for visual performance (and foxit definately doesn't have this) 8 and later can use a video card with pixel shader 3 hardware to accelerate the filling in and drawing of vectors to the point where you can do things like realtime zoom, rotations and scrolling on a pdf file - even complex ones.

Re:They are NOT free!

[Hucko]

it is an open standard, you are welcome to do so.

This is slashdot!

[Kludge]

Step 1: Don't buy anything with DRM protection.
Step 2: Repeat.

here's a more comprehensive list

[belmolis]

This list is more comprehensive.

I've gone to Kpdf and I won't go back

[Anonymous Coward]

I used to use Adobe's Linux Acrobat Reader; 4 was the first version I recall using. I loved that Adobe provided a Linux release, even if it wasn't open (I prefer open programs, but I won't cry if I don't get them). I kept upgrading as new versions were released, until, I think, 8 (maybe?) This version decided that it would install a bunch of shit into ~/.local, overriding KDE's PDF icons with its own that were out of place, and generally making a mess of itself. Cleaning up ~/.local didn't help, because acroread would create that horrible, horrible mess each time I started it. If I wanted to change file associations, etc, I would do it! I don't need a program doing it behind my back. Ask me, that's fine; don't just do it, though.

So I ditched acroread. I realized that kpdf does everything I need it to, it integrates with my desktop, and it doesn't try to force changes on me. I'd probably still be a happy acroread user if they didn't decide that they should take over my desktop. That works on windows, where people have become resigned to programs fucking them over. But it doesn't work for me.

#6 there is the dealbreaker.

[Shag]

Apple's "Preview" (included with OS X, and did anyone mention that OS X's display model is visual PDF or something like that?) does pretty much everything you need there, better than Acrobat, and with less bloat. (And to the other poster who was wondering, yes, you can fill in forms. Can't create/edit them, though.) But although it runs on Intel, it doesn't run on Windows. Sorry. :(

Needed feature

[geminidomino]

Since my profs and TAs seem to love Acrobat's "comments"(those stupid yellow icons that display on a mouseover), are there any on linux that will display them? I've had no luck with Evince or Okular on hardy.

Tracker Software

[eric2hill]

The free PDF Viewer from Tracker Software is a wonderfully fast PDF reader, and comes with annotation capability right out of the box. They are very developer friendly, and their PDF XChange printer drivers produce PDF's that are tighter and better optimized than Adobe themselves. Great company to work with, and a great free PDF viewer.

PDF Studio from Qoppa

[emaname]

One more to consider. I haven't tried this product yet but will soon. NOTE: It ain't free. It's based on Java. But it's less expensive and if they keep the package trim and secure, that's fine by me. I just don't want to deal w/A-D'oh-be anymore.

PDF Studio(tm) for Linux, Mac & Windows

http://www.qoppa.com/index.html

Disclaimer: If this product sucks, my apologies in advance for suggesting it.

I'm waiting for the...

[mysidia]

Adobe suggests ditching F-Secure for other anti-malware products.

But that won't happen and people aren't going to switch PDF readers, until the security software itself starts identifying Acrobat installations as riskware and displaying dialog boxes alerting users to the security risk and what actions they need to take (what types of alternatives are available to use)..

So what's the best reader for Windows

[Animats]

All I need is a PDF reader that will render correctly, won't create security problems, and will run on Win32. What's current thinking on this? The alternatives listed:

• MuPDF Seems to be mostly a demo for a new graphics library.
• Okular Does that even run on Windows? The table says yes, but the site says no.
• Sumatra PDF Do I want to trust something that comes from "blog.kowalczyk.info"?
• Yap Just a front end for GhostScript, which does a mediocre job on PostScript.

The Gimp is Cross-Platform

[flyingfsck]

You can edit PDFs and paste text onto forms with the Gimp. Kinda painful, but it works and then you can save the file in any format you want.

F-Secure Blog

[Leevi]

They talked about this months ago in their blog http://www.f-secure.com/weblog/archives/00001623.html Out of context taken quote "we're not recommending Foxit."

PDF comments on linux

[mu22le]

bump [sorry :(]

I have exactly the same problem, I'd choose free software over closed source any time, but AFAIK there is no libre pdf reader that support reading (not to mention writing) comments, that's why I keep an old copy of acrobat 7 around (much faster and less bloated that newer versions)

Does anyone know an alternative?