Free content is no longer scanned by Digital Editions

Nov 3, 2014 13:51 GMT  ·  By
Information sent to the ADE server includes percentage of the book that is read
   Information sent to the ADE server includes percentage of the book that is read

The latest version of Digital Editions ebook reader from Adobe seems to have corrected the past flaws and now collects data on books with DRM (Digital Rights Management) only, sending it over a secure connection.

At the beginning of October, it was discovered that Adobe would use the ebook reading software to retrieve more information from the clients than it should, over an insecure connection, to one of its servers called Adelogs.

E-reader no longer touches free content

The amount of information taken from the computer of the users did not limit to DRM-protected books, or files opened with Digital Editions, but extended to items stored on an e-reading device connected to the computer.

The data included title of the book, number of pages read and information placed by the publisher. Delivering it in clear text allowed a third party the possibility of gleaning personal details about someone and leverage them in malicious attacks.

Following these findings, Adobe released version 4.0.1 of Digital Editions, that encrypts everything sent to its server.

According to Cooper Quintin, staff technologist at the Electronic Fronteer Foundation (EFF), the company also implemented the necessary mechanisms to discern DRM-protected items from free content that is not subject to copyright restrictions.

Quintin reached this conclusion after testing the new Adobe Digital Editions and inspecting the traffic it sent to the Adelogs server. He said that “the only time we saw data going back to an Adobe server was when an ebook with DRM was opened for the first time.”

It appears that Adobe went a little further in their effort to preserve the privacy of its clients, as plain text data can no longer be sent to the server, making it impossible for earlier editions of the e-reading program to deliver details in the clear.

Some data needs to be collected

DRM technology has the purpose of controlling the use of digital content after it has been sold, in order to prevent piracy or use of the goods in other ways than intended by the copyright holder.

Adobe Digital Editions (ADE) is used by libraries across the world for lending digital books to customers and controlling the process. The application can be used to block access to the content after the loan period expired.

In the release announcement for ADE 4.0.1, it is stated that the details collected from the user also include the IP address at the time of purchasing the ebook, duration of reading the text, and how much of the book has been read.

This would help comply with the DRM policies for the book, which would offer publishers and distributers the necessary data for creating different pricing models.