Comment by tombert
4 years ago
I've seen this one, I think it was on HN about a year ago, but a lot of the forms I've been signing in the last year have been stuff containing a fair amount of personal information (e.g. wife's immigration stuff, refinancing a house, banking annoyances, etc.). I can't really audit the code for an online service, and I find it unlikely that either Krita or ImageMagick are sending this information externally, considering both seem to work fine even without an internet connection.
EDIT: Clicking on it, I see the source code is available. If I can run it on my local box then this might be a little less nasty than mucking with the `convert` command.
https://github.com/baicunko/scanyourpdf
But yeah, the security implications of uploading a PDF with your SSN and signature to a random website is, um, not good.