Microsoft switches Edge’s PDF reader to pay-to-play Adobe Acrobat
(2023/02/10)
- Reference: 1676064433
- News link: https://www.theregister.co.uk/2023/02/10/microsoft_edge_pdf_acrobat/
- Source link:
Microsoft's Edge browser will be getting a significant facelift in the coming months, thanks to Adobe.
The same week the giant software maker said it is bringing the hype-tastic [1]ChatGPT AI tool to Edge (and Bing), it also [2]announced it is replacing the fairly basic PDF reader currently built into the browser with a new one powered by Adobe's Acrobat PDF engine.
The decision is part of a [3]larger plan between the two companies to bring Adobe technologies like e-signature and documentation automation to Microsoft users. Already Adobe PDF and e-sign technologies have been integrated into Microsoft 365, Teams, and SharePoint.
[4]
Now this is coming to Edge, presumably with Adobe's PDF engine replacing the built-in tech that the browser's Chromium heart uses.
[5]
[6]
"Bringing Adobe and Microsoft closer together is good for productivity and good for customers," Jared Spataro, corporate vice president of modern work and business applications at Microsoft, said in a statement. "Adobe's PDF technology in Microsoft Edge means users will have fast and secure access to critical digital document capabilities."
The idea is to bring the richer set of features in Adobe's Acrobat PDF engine to Edge, including higher fidelity for better colors and graphics, better performance, strong security, and more accessibility capabilities, such as better text selection and read-aloud narration. Those functions will be free to Windows 10 and 11 users.
[7]
However, if folks want more advanced features, it's going to cost money. Users will need to buy an Acrobat subscription if they want to be able to edit text and images, convert PDFs to other file formats, or combine files. Those who already have such subscriptions can use the Acrobat extension in Edge without spending more.
[8]Adobe: Take user data to train generative AI models? We'd never do that
[9]Microsoft tries again to ignite interest in DevOps cloud security
[10]Three major browsers are about to hit version 100. Will websites cope?
[11]Microsoft tells people to prepare for AI search engine that goes Bing!
Microsoft made a [12]particular point of outlining its efforts to ensure the new Adobe PDF tool is secure. Miscreants will use [13]malware-infused PDFs to muscle their way into enterprise networks, so Microsoft's Edge Vulnerability Research team was involved in the process of bringing the Adobe engine to Edge.
That includes adding security features to the PDF stack such as PartitionAlloc a secure heap implementation developed on Chromium and already used in Edge, according to Gareth Evans, principal security research lead at Microsoft.
"PartitionAlloc is designed in such a way as to keep objects of different types separate from each other with minimal intervention from the developer," Evans wrote.
The package also includes mitigations such as Intel's Control Flow Enforcement Technology to protect against the hijacking of control-flow transfer instructions, a technology that complements Microsoft's Control Flow Guard. Fuzzing – automatic testing for vulnerabilities – is another security feature included with the new Edge PDF stack.
[14]
In addition, Edge's Acrobat engine will be included in the software vendor's bug bounty program to incentivize developers to find and report flaws. And there have been [15]quite a few flaws in Adobe's PDF code.
The new Edge PDF offering will have all the capabilities that the current one does. Once the system is in place, users will see an Adobe brand mark in the bottom corner of the PDF view
"These users will also see an option to try the advanced features, such as converting PDFs, combining files, editing text and images," which will require the Acrobat subscription, Microsoft [16]wrote .
Redmond is also rolling out the new Adobe-driven Edge PDF tool in phases. Consumers and others using unmanaged Windows 10 or 11 systems will see the change once it launches next month, with all such users having it in place by September.
Companies with managed devices can choose when to opt-in until September, giving them time to test their apps with the change in PDF engine. After that, they can opt out until March 2024, when the legacy Edge PDF engine is removed. ®
Get our [17]Tech Resources
[1] https://www.theregister.com/2023/02/07/microsoft_bing_ai/
[2] https://blogs.windows.com/msedgedev/2023/02/08/adobe-acrobat-microsoft-edge-pdf/
[3] https://www.adobe.com/documentcloud/integrations/microsoft.html
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2023/01/19/adobe_user_data_ai_training/
[9] https://www.theregister.com/2022/10/12/microsoft_ignite_security/
[10] https://www.theregister.com/2022/02/17/browsers_version_100_websites_bug/
[11] https://www.theregister.com/2023/02/07/microsoft_bing_ai/
[12] https://microsoftedge.github.io/edgevr/posts/How-we-are-securing-our-new-PDF-stack/
[13] https://www.theregister.com/2022/05/24/hp-pdf-phishing-malware/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://www.cvedetails.com/vulnerability-list.php?vendor_id=53&product_id=497&version_id=&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&month=0&cweid=0&order=3&trc=298&sha=1598da75c5430529fdb807542fbde7172ee86976
[16] https://techcommunity.microsoft.com/t5/microsoft-edge-insider/microsoft-edge-and-adobe-partner-to-improve-the-pdf-experience/ba-p/3733481
[17] https://whitepapers.theregister.com/
The same week the giant software maker said it is bringing the hype-tastic [1]ChatGPT AI tool to Edge (and Bing), it also [2]announced it is replacing the fairly basic PDF reader currently built into the browser with a new one powered by Adobe's Acrobat PDF engine.
The decision is part of a [3]larger plan between the two companies to bring Adobe technologies like e-signature and documentation automation to Microsoft users. Already Adobe PDF and e-sign technologies have been integrated into Microsoft 365, Teams, and SharePoint.
[4]
Now this is coming to Edge, presumably with Adobe's PDF engine replacing the built-in tech that the browser's Chromium heart uses.
[5]
[6]
"Bringing Adobe and Microsoft closer together is good for productivity and good for customers," Jared Spataro, corporate vice president of modern work and business applications at Microsoft, said in a statement. "Adobe's PDF technology in Microsoft Edge means users will have fast and secure access to critical digital document capabilities."
The idea is to bring the richer set of features in Adobe's Acrobat PDF engine to Edge, including higher fidelity for better colors and graphics, better performance, strong security, and more accessibility capabilities, such as better text selection and read-aloud narration. Those functions will be free to Windows 10 and 11 users.
[7]
However, if folks want more advanced features, it's going to cost money. Users will need to buy an Acrobat subscription if they want to be able to edit text and images, convert PDFs to other file formats, or combine files. Those who already have such subscriptions can use the Acrobat extension in Edge without spending more.
[8]Adobe: Take user data to train generative AI models? We'd never do that
[9]Microsoft tries again to ignite interest in DevOps cloud security
[10]Three major browsers are about to hit version 100. Will websites cope?
[11]Microsoft tells people to prepare for AI search engine that goes Bing!
Microsoft made a [12]particular point of outlining its efforts to ensure the new Adobe PDF tool is secure. Miscreants will use [13]malware-infused PDFs to muscle their way into enterprise networks, so Microsoft's Edge Vulnerability Research team was involved in the process of bringing the Adobe engine to Edge.
That includes adding security features to the PDF stack such as PartitionAlloc a secure heap implementation developed on Chromium and already used in Edge, according to Gareth Evans, principal security research lead at Microsoft.
"PartitionAlloc is designed in such a way as to keep objects of different types separate from each other with minimal intervention from the developer," Evans wrote.
The package also includes mitigations such as Intel's Control Flow Enforcement Technology to protect against the hijacking of control-flow transfer instructions, a technology that complements Microsoft's Control Flow Guard. Fuzzing – automatic testing for vulnerabilities – is another security feature included with the new Edge PDF stack.
[14]
In addition, Edge's Acrobat engine will be included in the software vendor's bug bounty program to incentivize developers to find and report flaws. And there have been [15]quite a few flaws in Adobe's PDF code.
The new Edge PDF offering will have all the capabilities that the current one does. Once the system is in place, users will see an Adobe brand mark in the bottom corner of the PDF view
"These users will also see an option to try the advanced features, such as converting PDFs, combining files, editing text and images," which will require the Acrobat subscription, Microsoft [16]wrote .
Redmond is also rolling out the new Adobe-driven Edge PDF tool in phases. Consumers and others using unmanaged Windows 10 or 11 systems will see the change once it launches next month, with all such users having it in place by September.
Companies with managed devices can choose when to opt-in until September, giving them time to test their apps with the change in PDF engine. After that, they can opt out until March 2024, when the legacy Edge PDF engine is removed. ®
Get our [17]Tech Resources
[1] https://www.theregister.com/2023/02/07/microsoft_bing_ai/
[2] https://blogs.windows.com/msedgedev/2023/02/08/adobe-acrobat-microsoft-edge-pdf/
[3] https://www.adobe.com/documentcloud/integrations/microsoft.html
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2023/01/19/adobe_user_data_ai_training/
[9] https://www.theregister.com/2022/10/12/microsoft_ignite_security/
[10] https://www.theregister.com/2022/02/17/browsers_version_100_websites_bug/
[11] https://www.theregister.com/2023/02/07/microsoft_bing_ai/
[12] https://microsoftedge.github.io/edgevr/posts/How-we-are-securing-our-new-PDF-stack/
[13] https://www.theregister.com/2022/05/24/hp-pdf-phishing-malware/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y@bMkmuh1hmdUeLglErg9gAAAIc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://www.cvedetails.com/vulnerability-list.php?vendor_id=53&product_id=497&version_id=&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&month=0&cweid=0&order=3&trc=298&sha=1598da75c5430529fdb807542fbde7172ee86976
[16] https://techcommunity.microsoft.com/t5/microsoft-edge-insider/microsoft-edge-and-adobe-partner-to-improve-the-pdf-experience/ba-p/3733481
[17] https://whitepapers.theregister.com/
Not time to "opt-in" but to bale out
moonhaus
Companies with managed devices have until March 2024, giving them time to configure an alternative browser.
FTFY.
Revenue grab
David 132
So basically it’s just another upsell hook in Windows, which is increasingly just an ad-delivery framework.
(Sorry. I am still salty that on my one Windows 10 machine I can no longer remove the “Microsoft Rewards” advert on the Settings app, where Vivetool used to do it perfectly but is now broken. Funny how MS updates always do a great job of closing down mods like this that people create, but such a useless job of fixing real security flaws…)
firefox & pdf24
Alternatively use firefox and if you need to manipulate pdfs then the best free (cant remember if it is FOSS) pdf24 does a very good job