This needs to be an open source script! I would love to use it to actually own my purchased books.
post
I find it puzzling that people are OK with allowing a mammoth, regularly hostile corporation know exactly what books they're reading as well as the exact details of their reading habits. Everything is accessible to Amazon - when and how often you access a book, how fast you read and when you linger on or return to a page. I wonder when they'll implement camera-based eye tracking so they know what word you're on?
The same public libraries that vigorously defend the privacy of our reading lists are simultaneously fine outsourcing all ebook access to Amazon where there's no expectation of privacy at all. Epubs at those libraries are now so well hidden they're not even mentioned anymore and access is buried multiple levels deep in the mandatory Libby app.
I love the ease of access and convenience of ebooks, but paper books are becoming more and more appealing by comparison.
I sideload my own books and then turn off the internet on the Kindle. Other than knowing what books I have, are they still able to monitor all those other things?
I ask because I don't completely understand some of this internet networking stuff. The other day I turned off my router while I was watching a video on YouTube and the video kept playing with no interruption or lag while I thought I had turned off the wifi in my house. I guess we can't turn it off anymore? Or was it able to keep playing because it was cached?
If the Kindle never has Internet access (and that includes access through another app) Amazon should not be able to connect at all, but even if your books are from a public library Amazon will still be provided a record of them.
From one library's site: "...we want you to know that when you check out a Kindle eBook you must use your Amazon account. At that point we no longer have control over protecting your records associated with this transaction. At the very least, Amazon may use this information to recommend other items for purchase to you, as is the case with any purchases you make through the site."
YouTube buffers content and your device may have already downloaded the entire file, but if it's a phone it would just switch to the mobile network.
Sometimes I think I'm too paranoid about this stuff and the next day they'll be another headline about corporate abuse of "protected" consumer data or yet another breach. Remember Facebook's years long access of protected medical records through a tracking tool installed on a third of medical websites? I'm probably not paranoid enough.
Timestamps on activities you take can be combined with other data points to figure out things like your location, what people are nearby you, and what you are doing at that moment. These data points are created frequently and can be reviewed actively or retroactively.
That data is collected and sold by data brokers, who then sell it to law enforcement and government, as well as advertisers and other companies.
AI is very good at finding patterns in data points, and is accelerating the usability of all this data thats been collected.
I simply don't like the idea of being targeted or used, so ive tried to minimize data collection. I have a custom ROM on my phone and have linux on my computers. I dont have accounts with companies I dont trust. Sometimes if I have to make an account anyways, I'll use fake information and a vpn.
Amazon can't see shit that me and mine read, but that's cuz I liberated my Kindle books and now read/listen to all of my Kindle/audible books through audiobookshelf.
So glad I made that jump a few years ago
The same public libraries that vigorously defend the privacy of our reading lists
The Patriot act allows the feds to get the books you've checked out at your local library.
Yep. Good news on that front: libraries I've worked at just don't keep records of what you've checked out after you've returned it, unless there was some sort of fine or something. Can't give up data you don't have and if the library avoids storing the data for anyone then it's hard to accuse the library of selectively hiding data.
I stopped buying books from Amazon long ago because their Android app is such dogshit. I can't imagine going to this much trouble to continue giving them money to reward their terrible engineering.
That was an interesting read.
If you wanna own your audiobooks you might wanna check out https://libro.fm/ - they allow you to download the bought audiobook without drm.
I gladly accept tips for similar sites when it comes to buying ebooks.
Kobo does drm-free ebooks when the publisher allows it, so it’s on a case-by-case basis but I have got a lot of them drm free
that was such a great read no joke. I love it when people use spite as a motivator.
I bought my first ebook from amazon
Just don't do that. If you give money to this company, they'll continue to go down the path they're on. Enshitification.
That's doable until you need a book that's an Amazon exclusive.
I have "purchased" thousands of books from Amazon, but never given them money for a book.
They run free specials all the time. FreeReadFeed scans for them. It's a great way to discover authors to purchase their books at another site or use the library apps.
That was a good read. I did think it was interesting that he decided to solve the randomized alphabet problem with the complex character recognition and image matching system he used. I mean, that was very clever and it clearly worked, so great! But an alternate option would have been the cryptographic method. There's a lot of software designed to crack replacement cyphers (especially in English) it probably would have been trivial to drop those characters into one of these and have it spit out the results.
Admittedly it would likely struggle with the other three alphabets, the italic, heading and italic heading alphabets, where there may not be enough words to be certain about success.
DRM's ever present weakness, if you can view it you will be able to crack it.
https://en.wikipedia.org/wiki/Analog_hole
The analog hole (also known as the analog loophole or analog gap) is a perceived fundamental and inevitable vulnerability in copy protection schemes for noninteractive works in digital formats which can be exploited to duplicate copy-protected works using analog means. Once digital information is converted to a human-perceptible (analog) form, it is a relatively simple matter to digitally recapture that analog reproduction in an unrestricted form, thereby fundamentally circumventing any and all restrictions placed on copyrighted digitally distributed work. Media publishers who use digital rights management (DRM), to restrict how a work can be used, perceive the necessity to make it visible or audible as a "hole" in the control that DRM otherwise affords them.[1]
EDIT: I don't know if I'd say that it's fundamental, as Wikipedia did
I can think of a couple of approaches to try and address it
but it is quite substantial.
https://craphound.com/msftdrm.txt
In DRM, the attacker is also the recipient. It's not Alice and Bob and Carol, it's just Alice and Bob. Alice sells Bob a DVD. She sells Bob a DVD player. The DVD has a movie on it—say, Pirates of the Caribbean—and it's enciphered with an algorithm called CSS—Content Scrambling System. The DVD player has a CSS un-scrambler.
…
… Alice wants Bob to buy Pirates of the Caribbean from her. Bob will only buy Pirates of the Caribbean if he can descramble the CSS-encrypted VOB—video object—on his DVD player. Otherwise, the disc is only useful to Bob as a drinks-coaster. So Alice has to provide Bob—the attacker—with the key, the cipher and the ciphertext.
I feel like a lot of what he attributes to malice or obfuscation is rather his unfamiliarity with the technical side of things.
Mapping numbers to non-sequential glyphs is exactly what happens in PDF, and PostScript before it. So is text positioning by Cartesian coordinates rather than in reading order.
Ligatures and multiple font variations have been around since fonts existed. Fonts that render incorrectly unless you use them in one specific way are legion (turns out font designers often have very little technical understanding, or just don’t care).
The only thing that sounds like obfuscation to me is changing the font encoding on every call. And if that is indeed its purpose, it’s a very poor attempt.
The level of pettiness by this person is immense, & I love it! We need more people like this in the world. Great short read. They obviously have some real skills & patience to pull this off, amazing!
What is evil is that this type of cracking is probably illegal through contract law (simply using the product).
Impressive work and an interesting article, but what I ultimately got from this was "don't buy shit from Amazon".
Very nice exercise and definitely easier to understand than tackling the DRM itself. For those interested, that's what DeDRM does: https://github.com/nodrm/DeDRM_tools
no comments (yet)