• the_q@lemmy.zip
    link
    fedilink
    arrow-up
    16
    arrow-down
    1
    ·
    edit-2
    15 hours ago

    This is an interesting request. Why are you looking for this specific type of web comic?

  • e0qdk@reddthat.com
    link
    fedilink
    arrow-up
    10
    ·
    15 hours ago

    Dumbing of Age uses PNGs with transparent backgrounds for most strips.

    I can’t think of anyone who publishes comics as SVG, but I wouldn’t be surprised if someone out there does it…

  • NaibofTabr@infosec.pub
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    11
    ·
    edit-2
    14 hours ago

    YSK: SVG files are a security risk. Be careful where you get them from and how you handle them.

    Basically, an SVG can contain JavaScript. If you open an SVG in an application that can interpret the JS (e.g. a web browser) then the script will execute (just as with a malicious PDF), at which point it could download other files (malware) or perform any other function that the application has access to (creating, editing or deleting files on the hard drive) because you gave it permission to do that by opening the SVG. Effectively opening an SVG in a JS-capable application is the same as allowing a stranger to run arbitrary code on your computer. You might as well go around the Internet wearing a “please hack me” sign.

    Downloading an SVG to your hard drive directly should be relatively safe, and opening it in a graphics program that does not execute JavaScript should have no risk, but viewing random SVGs in a web browser is a real hazard.

    • [object Object]@lemmy.world
      link
      fedilink
      arrow-up
      16
      ·
      edit-2
      12 hours ago

      Effectively opening an SVG in a JS-capable application is the same as allowing a stranger to run arbitrary code on your computer.

      If your browser allows JS access or create random files, or do other arbitrary stuff, that’s an extremely shit browser.

      • TrickDacy@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        10 hours ago

        It also doesn’t exist because no one worked for months or years on a browser to literally make it less secure

          • TrickDacy@lemmy.world
            link
            fedilink
            arrow-up
            1
            arrow-down
            1
            ·
            10 hours ago

            This is a bit like claiming cobol is still relevant because technically it’s still being used in production by some companies…

            • [object Object]@lemmy.world
              link
              fedilink
              arrow-up
              2
              arrow-down
              2
              ·
              edit-2
              8 hours ago

              Is the statement “no one worked for months or years on a browser to literally make it less secure” true?

              Also, some Lemmy users might use various newfangled alternative or experimental browsers.

    • Blue_Morpho@lemmy.world
      link
      fedilink
      arrow-up
      11
      ·
      12 hours ago

      How is the JavaScript in a svg different than the JavaScript in every web page on the Internet that makes it a security risk?

      • TrickDacy@lemmy.world
        link
        fedilink
        arrow-up
        8
        ·
        10 hours ago

        Literally identical. Pretty puzzled what op is smoking. Unless they disable JavaScript entirely, and in that case ain’t nobody got time for dat.

      • TrickDacy@lemmy.world
        link
        fedilink
        arrow-up
        3
        ·
        10 hours ago

        Yes, and the security risks associated with JavaScript are not typically seen as significant since your filesystem is not accessible and most any other vulnerable data isn’t either for that matter