tortiscu
It also means updates are just full system images, so no way for a package manager or differential update to mess anything up. It also means no way of downloading tiny differential updates (if I understand everything correctly).
If you don’t need DX or would like to switch off of KDE, there are other fedora atomic desktop based distributions available.
Oh right, a distribution is just an image, so switching distributions is as simple as switching the base OS image and rebooting.
Don’t quote me on this, but I don’t think PDFs can usually contain java. It also wouldn’t execute if you don’t have a java runtime.
Either way, java serialization data is not executable, it is just that: data. It doesn’t contain code. You need the matching code already running in order to de-serialize the data.
If your file matches the linked SO post, you don’t have serialized java data embedded in the pdf, but the pdf embedded in a serialized java array. Which, also according to the SO post, is not a valid pdf.
<speculation>
I would assume that the library that generated this file (in the SO case Apache FOP) has a bug where it accidentally serializes the memory array (that holds the generated pdf) to the disk, instead of writing it to the disk. Why do pdf readers open it anyway? Either they incorrectly scan the file for %PDF- instead of verifying these are the first bytes, or the apache library (and possibly other libraries with similar bugs) are or were common enough that accepting this became reasonable.
</speculation>
Y