Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am wondering about the scripting and such capabilities within epub and mobi files. I see that there are free programs to open them such as Calibre or in a web browser. Is it similar to a pdf, where it is mainly dependent on the program and system opening the file? Is it safer to use a program like Calibre rather than a browser? Besides intended scripting abilities, would errors in programs like Calibre allow for code execution (within reason, I realize this is probably a potential problem for any program or file)?

I realize you can never really be 100% sure, but I feel safe opening pdfs in Preview because supposedly the scripting capabilities are not there. Is there a similar line to follow with epubs or mobi or are they completely innocuous?

share|improve this question
    
if anyone is curious about this issue here is an interesting article that covers a wide spectrum of the topic of ebook-file infection (the article gets into detail a few paragraphs down):baldurbjarnason.com/notes/epub-javascript-security –  bboyreason Sep 20 '13 at 16:46
    
I am finding that, generally speaking, ebook files can contain javascript and are unsafe. Many, if not all, e-book reading programs and methods of opening are more unsafe than PDF files. There do not seem to be more mature ways of dealing with e-books (such as Preview for PDFs) and they are difficult to sandbox properly in a browser. Seems like a much more likely scenario of infection than even PDFs. –  bboyreason Sep 20 '13 at 17:35

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.