For the historical record, the Usenix Security paper PDF comment currently has 28 upvotes.

There is also your non-reproducible report that the PDF was incorrectly loaded as an Apple Wallet pass, which would require a web server MIME type of:

  application/vnd.apple.pkpass