| Friday July 25th 2014

Feedburner

Subscribe by email:

We promise not to spam/sell you.


Search Amazon deals:

HOWTO: Defeat Sealed PDFs, A DRM Nightmare


sealed-icon.pngHave you ever heard of a “sealed” PDF? I don’t mean password-protected or branded with your name (as some eBook sellers do). This is a different beast. Let me introduce a company called SealedMedia. Their business is protecting electronic documents (PDFs), a form of Digital Rights Management (DRM) which has always been a topic of ongoing debate. One of their most notable clients: Harvard Business School Press.

The Problem:

I had to write a paper on case #698-004, entitled “We’ve Got Rhythm! Medtronic Corp.’s Cardiac Pacemaker Business,” which is a great case by the way. Unfortunately, my experience purchasing and reading the case was not.

The HBSP Online Store allows visitors to purchase cases individually, in PDF format, well actually SPDF format. The .spdf extension indicates the document has been “sealed” by SealedMedia, and consequently Adobe Reader cannot properly render it without the SealedMedia plug-in and a valid license.

When you purchase the case, you receive a license with a login name and password. When launching Adobe Reader, you must authenticate to the license server to view the document:

sealed-login

The license and the entire concept itself bestows the following restrictions:

  • Your license is only valid for six months. When the license expires, you can no longer view the document without paying for another.
  • The SealedMedia plug-in must be installed to the view the document. This will exclude any public computer (work, library, university) which does not already have the plug-in installed by the system administrator and restricts the installation of new software. Additionally, the plug-in is only compatible with specific versions of Adobe Reader. At the time of writing, SealedMedia only supports up to Adobe Reader 7.0.9, whereas 8.0 was released two months ago.
  • You must be connected to the Internet to view the document. The SealedMedia plug-in for Adobe Reader must connect to the license server and validate your login name and password to fetch your license, every time you double-click the file to open it.
  • While viewing the document, you cannot “print to image” or “print to PDF”. These are features of most operating systems, letting you output documents to other common file formats, instead of an actual printer, using the Print command. If you attempt to do this, you will receive a message stating that you need to purchase a print license.
  • Screen capturing or “Print Screen” does not work. As soon as you enter screen capturing mode, the entire document becomes hidden (I haven’t tested on Mac OS X):
  • You cannot copy and paste anything from the document to another application. If you want to incorporate any text into a report or use it in any other manner, you will have to copy the text by hand.
  • Your license can only be “checked out” to one computer. Once you log in and view your document (on your home PC for example), you cannot then view it at work without relinquishing the license from your home PC first. If you fail to”check in” your license, you will receive a”license already checked out” error. Your only alternative is to wait for the license to time out, which varies between companies using the technology (12 hours for HBSP).

That’s quite a list of restrictions for one document, averaging $6.50 a pop. It is certainly unpleasant knowing that once you agree to legitimately purchase a document from a publisher, these restrictions come bundled with it.

Think you can just take a screenshot? Think again.
sealed-screencap

Think About It

  • The policy is far too restrictive. I’m confident HBSP generates enough revenue selling hard copy case studies and legitimate electronic copies to care about unauthorized duplication. Where do you draw the line between security and convenience?
  • Harvard Business School Press may not be a candidate for solutions like SealedMedia. It seems that many individuals, universities, and businesses count on the instant availability of high quality case studies and other materials in a compact, easy to manage electronic format – without the accompanying restrictions which only distract and inhibit users from working naturally.
  • It is imperative for a company offering this type of solution (especially in a plug-in form) to stay current with the industry by keeping their software updated and properly stating the compatibilities and incompatibilities on their web site (adopting a support forum, posting fixes and workarounds, etc.).

The Solution:

The purpose of this post is to help other users get FAIR USE of .spdf materials that they have paid for but that are practically unusable due to a combination of bugs in the Sealed Media software and missing or obfuscated disclosures from vendors (in my case Harvard Business School that publishes HBR articles).

Specifically, in my case, I purchased an HBR case online since I was about to travel internationally where I would not have reliable Internet or printer access nor did I have time to print the article before leaving.

Due to the following combination of mostly non-disclosed “features” (aka bugs) in the DRM solution, I was not able to access the document that I had purchased again most of these issues were either not disclosed at all or obfuscated. I am sure that many fewer people would choose to download a soft copy over buying a hard copy if the following limitations were clearly disclosed prior to purchase:

1. Opening file requires Internet access and validation EACH AND EVERY TIME YOU OPEN THE FILE (including user name, password, and 1-2 minute wait to unlock); the file needs to be re-validated at least every 12 hours
2. Unlocking the DRM requires downloading of a plug-in which brings potential spyware, bugs, and other stability/security risks
3. This plug-in only works on Windoze computers and not on Linux (and at the time I got it not on Macs)
4. This plug-in only works with certain versions of Adobe Acrobat – most glaringly, it did not work with the current Adobe version at the time
5. The plug-in only works with Internet Explorer and doesn’t work with Firefox or presumably other browsers
6. The spdf file “expires” after 6 months” analogous to writing a document in disappearing ink
7. The spdf file cannot be saved in other unburdened formats for easier personal use. Note you cannot even print to file
8. Even after validation, individual phrases or tables cannot be copied and pasted for valid “fair use” of copyrighted material
9. The spdf file cannot even be read on another computer without a complicated process of uninstalling and reinstalling the key

So, the solution is as follows:
1. Set up a cups “print to pdf” virtual printer on a separate Linux machine (a similar approach probably should work for a Mac). I used the freely available cups-pdf program. Make sure printer is samba shareable over the local network
2. Browse to the pdf printer from your Windoze machine and double-click to install a printer driver (I used the already present HP 1200C/PS driver which enables high resolution color pdfs)
3. Print to the resulting driver. The .pdf file will then be (automatically) saved to your Linux Desktop

Note more detailed info on how to set up a samba (Windows) networked print-to-pdf printer is available at this link (it’s actually easier than it looks but this link includes lots of extra config details, many of which may not be necessary if you are using a Linux distro with a good default samba and cups configuration).

Interestingly, I was initially concerned that passing the text from spdf to postscript and then back to pdf would both lose resolution and increase the file size substantially. However, on my limited testing, I have noted no resolution loss (either of text or graphics, even at 1600% blow-up) and the file size only increased by 30%. Also, since you couldn’t cut and paste text in the original, you don’t lose anything here in the copy. My guess is that the spdf format is already missing all/most of the meta-information and is basically stored similar to a postscript page description language.

As a side note, such workarounds once again illustrate the futility of using DRM — even more so badly implemented DRM that prevents the user from reasonably using his/her legitimately purchased materials. In fact, had spdf been reasonably implemented, I would never have been motivated to spend the time to figure out a way to save it to standard pdf just so that it could be used as intended. Furthermore, were it not for my frustration with this crippled pdf format and the devious way it was sold, I would never have dreamed of posting my personal solution to the net. The solution though is laughably simple and does’t even involve hacking or reverse engineering the DRM itself – just printing it to a pdf printer on a local network.

Net result is I have had a bad customer experience with Harvard Business School and Sealed Media, making me less likely to purchase from them again and overall making me less sympathetic to the DRM interests of copyright holders in general. Ugh, DRM. Yuck!

Related Posts: On this day...

Reader Feedback

50 Responses to “HOWTO: Defeat Sealed PDFs, A DRM Nightmare”

  1. steve says:

    This works perfectly for bypassing the sealed pdf on MAC OS:

    http://bitbucket.org/codepoet/cups-pdf-for-mac-os-x/downloads

  2. Gracia Cabe says:

    Great news I recently stumble your blog and have been reading along. I thought I would leave my prime comment. I don’t know what to expose except that I have enjoyed reading. Nice blog. I will keep visiting this blog very at all times.

  3. Derek M. says:

    Please keep going on and continue to add excellent posts. Thank you so much for the wonderful content you have created! I admire you. Your article is great! After read it, I think a lot.You are tops.Great! Thanks! The content is very exciting and I can almost understand. Your article is really surprising.The article is very helpful to me. The more I read, the more I keep coming back! You’re amazing. Keep up the great job.

  4. Kat Morgan says:

    The reason these files are secured is because an individual spent hours creating this work and it has become intellectual property. If all Harvard Cases were available in downloadable pdf format, who in their right mind would pay for one. If no one is paying for these cases and the author was not being compensated for their time and efforts, then who would spend the time writing them…not me! If no one spent the time writing them, then we would all be missing out on these educational opportunities, we could then revert to the cheap “dummy” books.
    It seems unethical and rediculous to me to expect publishers to provide easy, open source content so that the reader is not inconvienced or asked to pay for these resources. Ever heard the phrase you get what you pay for!

  5. Anglye says:

    Are you able to please send me a mail. I actually like your style.

  6. Nohj Leachim Namrod says:

    Printed to my normal printer which was disconnected, used SPLView to open the .spl file (C:\Windows\System32\spool\PRINTERS for Win7), and printed it with the XPS writer as a file. Now I just use that.

    The only way that DRM can prevent piracy of media is if it entirely prevents the user from accessing its content, since any form of access allows the information to be copied by some method, physical capture if nothing else.

    But DRM won’t be a problem in 50 years since the consumer base at that time will be so massive that prices will drop below the cost of effort for piracy. Either that or it will be able to be distributed free due to the increased return to advertisement. I am morally fine with the use method I have gleaned from this article.

  7. Paul says:

    hi you can visit nulled.com to get IM tools

  8. Phillip Iredale says:

    WOW!! Amazing wallpapers I must say. Gorgeous. Thanks for sharing such a wonderful post with us!

  9. blueytoo says:

    The method suggested by Nohj Leachim Namrod (February 22, 2011 at 12:18 am) is probably the simplest. Note that the \Windows\System32\spool\PRINTERS folder does not have easily viewable permissions by normal admin users – so the SPLView program can’t open directly. Fix the permissions on the folder and put a shortcut somewhere convenient. (May have to log in as Administrator if having trouble.)

    A perhaps better way for publishers is to do what providers of standards documents have done for years – add the user licence information (name, date, etc) to the user’s pdf, which helps identify whose document it is. Then there is no need for the annoying digital rights management.

  10. Corey says:

    I actually think this amazing blog post , “LandoftheFreeish.
    com – Comments on HOWTO: Defeat Sealed PDFs, A DRM Nightmare”, quite
    interesting and also it was indeed a remarkable read.
    Thanks a lot,Ellie

Leave a Reply

You must be logged in to post a comment.