Hacker gets annoyed at Amazon’s Kindle apps, reverse-engineers the Kindle web reader’s protocol (which basically sends each page as a set of glyphs in a deliberately broken variant of SVG). Such obscurity, much security.

https://blog.pixelmelt.dev/kindle-web-drm/

How I Reversed Amazon's Kindle Web Obfuscation Because Their App Sucked

As it turns out they don't actually want you to do this (and have some interesting ways to stop you)

Cats with power tools
@acb Just wait til AMZN declares that all this was DRM.
@acb It is a bit of an irony then that SVGs in epubs don't always render reliably on the Kindle.
@acb I genuinely wonder how the people who implemented the DRM sleep at night.
@acb interestingly, he published a link to his GH repo with the code, but then he took it down. However, someone already cloned the repo and the code is now in the open :)
@xpil @acb
Maybe this is one of Amazons 'interesting ways to stop you'?
And I even don't know if Github is a safe place for a amazon book downloader when Amazon doesn't like it. 🤔
@chbmeyer @acb yeah, well, the thing is, the article describes the idea behind the hack pretty clearly, so even if there is no source code, anyone can re-build this from scratch relatively easily.

@acb I highly respect hacktivisms like this, but I think making a blogpost explaining how you did it is not the correct way how to share it.

Your solution should be heavily obfuscated, not talking about details, and just making an obsfuscated extension or an app that "just works". Don't make it easier for them to fix.

I kind of understand that may be suspicious and have it's own risks for the user, but still feels like a better way how to go about it.

@acb I prefer physical books. I do have downloaded versions, but they are for convenience of what I have a physical copy. I assume that anything I "bought" electronically is just rented.
@acb i love seeing quantifications of just HOW MUCH harder our typical software / technology products are working to control, hinder, restrict and spy on us than they are to do the tasks we actually want to use them for.

@acb Somebody besides me saw the possibility of a DMCA take-down notice and already "archived" this article at this link.

https://archive.ph/zU3ix

and
https://web.archive.org/web/20251016224613/https://blog.pixelmelt.dev/kindle-web-drm/

@acb Good kitty! (I know, the cat didn't do it.)
@acb Wow. I never thought, it would be this complicated.

@acb

Years ago I came across a PDF with glyph obfuscation. Tools like pdf2text revealed a substitution cypher going on with font. I am reminded now of that fun experience

@elithebearded @acb Having had to deal with PDFs issued by this or that toolchain, sometimes people want the PDF to be as tiny as possible and go for embedded fonts… that are limited to the actual set of glyphs needed for a given document (which in my case varied from contract to contract, yay!). While doing so, one might keep the notion of characters… or indeed replacing it with glyph IDs (as is the case here), leading to some kind of “substitution cypher” indeed.
@acb "Amazon made this personal" is one hell of a bar

@acb or one could buy the book, so the author gets paid and “obtain” it otherwise. Unfortunately Amazon takes credit (and a fee) for being a pain point in the sale.

I’ve emailed small indie authors a couple of times personally to ask if I could buy it DRM free, and had good success.

@acb
Just get a good e-reader, that isn't locked down and full of spam!
#Boox and #Bigme are excellent options, and Boox uses android so you can add any apps you like, including other e-readers apps.
@acb
Danke für den Tipp! Die Seite kannten wir noch nicht!
Redaktion AllAboutSecurity
https://www.all-about-security.de/category/dev-loop/
DevLoop Archive

Entwickler und Developer können auf unsere hochwertigen Inhalte zugreifen, die Ihnen helfen, Projekte effizienter und effektiver zu gestalten.

All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing, IT-Sicherheit, Netzwerksicherheit, KI, Threats, DDoS, Identity & Access, Plattformsicherheit
@acb it's not even surprised at this point

@acb This seems like a major accessibility issue that ought to be illegal under Section 508.

https://dralegal.org/case/national-federation-of-the-blind-nfb-et-al-v-target-corporation/

National Federation of the Blind (NFB), et al. v. Target Corporation - Disability Rights Advocates

As technology plays a central role in many facets of our lives from communication to purchasing goods, enrolling in classes and seeking employment, it is important now more than ever to bridge the digital divide between technology and people with disabilities. In 2006, DRA represented the National Federation of the Blind and three blind plaintiffs … Continue reading » "National Federation of the Blind (NFB), et al. v. Target Corporation"

Disability Rights Advocates
@acb how many man-hour to bring this innovation to us?

@acb Always love to see when folks that run into an artificial barrier and happen to have enough skills and willingness to learn get past those barriers.

Though for those that care (I am not sure how long it will keep working). If you get a copy of the Kindle for PC app that did still have the download option (2.4.0 70904). You can still sign-in, download, and strip DRM (or just read if not trying to use other apps/formats). Just need to make sure to disable auto-update first thing.

@acb ...so amazon's web reader is incompatible with screen readers?
@acb I like the #geek factor, but why buy a #bigtech (or in this case a #bugtech ) product any way? I'm happy with my (not perfect either, but much more open) #pocketbook
@acb How did search work, then? Had to dial home?