{"id":857,"date":"2014-10-23T18:25:18","date_gmt":"2014-10-24T01:25:18","guid":{"rendered":"http:\/\/galencharlton.com\/blog\/?p=857"},"modified":"2014-10-23T18:25:18","modified_gmt":"2014-10-24T01:25:18","slug":"testing-adobe-digital-editions-4-0-1","status":"publish","type":"post","link":"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/","title":{"rendered":"Testing Adobe Digital Editions 4.0.1"},"content":{"rendered":"<p>A couple hours ago, I saw reports from <a href=\"http:\/\/www.infodocket.com\/2014\/10\/23\/privacy-an-update-to-adobe-digital-editions-now-online-version-4-01-privacy-policy-updated\/\">Library Journal<\/a> and <a href=\"http:\/\/the-digital-reader.com\/2014\/10\/23\/adobe-updates-digital-edition-stops-sharing-user-info-internet\/\">The Digital Reader<\/a> that Adobe has released version 4.0.1 of Adobe Digital Editions. \u00a0This was something I had been\u00a0waiting for, given the <a href=\"http:\/\/the-digital-reader.com\/2014\/10\/06\/adobe-spying-users-collecting-data-ebook-libraries\/\">revelation<\/a> that ADE 4.0 had been sending ebook reading data in the clear.<\/p>\n<p>ADE 4.0.1 comes with a <a href=\"http:\/\/www.adobe.com\/privacy\/ade.html\">special addendum<\/a> to Adobe&#8217;s privacy statement that makes the following assertions:<\/p>\n<ul>\n<li>It enumerates the types of information that it is collecting.<\/li>\n<li>It states that information is sent via HTTPS, which means that it is encrypted.<\/li>\n<li>It states that no information is sent to Adobe on ebooks that do not have DRM applied to them.<\/li>\n<li>It may collect and send information about ebooks that do have DRM.<\/li>\n<\/ul>\n<p>It&#8217;s good to test such claims, so\u00a0I upgraded to ADE 4.0.1 on my Windows 7 machine and my OS X laptop.<\/p>\n<p>First, I did a quick check of strings in the ADE program itself &#8212; and found that it contained an instance of &#8220;https:\/\/adelogs.adobe.com\/&#8221; rather than &#8220;http:\/\/adelogs.adobe.com\/&#8221;. \u00a0That was a good indication that ADE 4.0.1 was in fact going to use HTTPS to send ebook reading data to that server.<\/p>\n<p>Next, I fired up Wireshark and started ADE. \u00a0Each time it started, it contacted a server called\u00a0adeactivate.adobe.com, presumably to verify that the DRM authorization was in good shape. \u00a0I then opened and flipped through several ebooks that were already present in the ADE library, including one DRM ebook I had checked out from my local\u00a0library.<\/p>\n<p>So far, it didn&#8217;t\u00a0send anything to adelogs.adobe.com. \u00a0I then checked out another DRM ebook from the library (in this case, Seattle Public Library and its OverDrive subscription) and flipped through it. \u00a0As it happens, it<em>\u00a0still\u00a0<\/em>didn&#8217;t send anything to Adobe&#8217;s logging server.<\/p>\n<p>Finally, I used ADE to fulfill a DRM ePub download from Kobo. \u00a0This time, after flipping\u00a0through the book, it did send data to the logging server. \u00a0I can confirm that it was sent using HTTPS, meaning that the contents of the message were encrypted.<\/p>\n<p>To sum up, ADE 4.0.1&#8217;s behavior is consistent with Adobe&#8217;s claims \u2013 the data is no longer sent in the clear and a message was sent to the logging server only when I opened a new commercial DRM ePub. \u00a0However, without decrypting the contents of that message, I cannot verify that it\u00a0<em>only<\/em> information about that ebook from Kobo.<\/p>\n<p>But even then&#8230; why should Adobe be logging that information about the Kobo book? I&#8217;m not aware that Kobo is doing anything fancy that requires knowledge of how many pages I read from a book I purchased from them but did not open in the Kobo native app. \u00a0Have they actually asked Adobe to collect that information for them?<\/p>\n<p>Another open question: why\u00a0did opening the library ebook in ADE not trigger a message to the logging server? \u00a0Is it because the fulfillmentType specified in the .acsm file was &#8220;loan&#8221; rather than &#8220;buy&#8221;? More clarity on\u00a0<em>exactly<\/em> when ADE sends reading progress to its logging server would be good.<\/p>\n<p>Finally, if we take the privacy statement at its word, ADE is\u00a0<em>not\u00a0<\/em>implementing a page synchronization feature as some, including myself, have speculated \u2013 at least not yet. \u00a0Instead, Adobe is gathering this data\u00a0to\u00a0&#8220;share anonymous aggregated information with eBook providers to enable billing under the applicable pricing model&#8221;. \u00a0However, another sentence in the statement is&#8230; interesting:<\/p>\n<blockquote><p>While some publishers and distributors may charge libraries and resellers for 30 days from the date of the download, others may follow a metered pricing model and charge them for the actual time you read the eBook.<\/p><\/blockquote>\n<p>In other words, if any libraries are using an ebook lending service that\u00a0<em>does<\/em> have such a metered pricing model, and if ADE is sending reading progress information to an Adobe server for such ebooks, that seems like a violation of reader privacy. Even though the data is now encrypted, if an Adobe ID is used to authorize ADE,\u00a0<em>Adobe itself<\/em> has personally identifying information about the library patron and what they&#8217;re reading.<\/p>\n<p>Adobe appears to\u00a0have closed a hole \u2013 but there are still important questions left open. Librarians need to continue pushing on this.<\/p>\n<div class=\"sharedaddy sd-sharing-enabled\"><div class=\"robots-nocontent sd-block sd-social sd-social-icon-text sd-sharing\"><h3 class=\"sd-title\">Share this:<\/h3><div class=\"sd-content\"><ul><li class=\"share-twitter\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-twitter-857\" class=\"share-twitter sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/?share=twitter\" target=\"_blank\" title=\"Click to share on Twitter\"><span>Twitter<\/span><\/a><\/li><li><a href=\"#\" class=\"sharing-anchor sd-button share-more\"><span>More<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><div class=\"sharing-hidden\"><div class=\"inner\" style=\"display: none;\"><ul><li class=\"share-tumblr\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-tumblr sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/?share=tumblr\" target=\"_blank\" title=\"Click to share on Tumblr\"><span>Tumblr<\/span><\/a><\/li><li class=\"share-reddit\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-reddit sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/?share=reddit\" target=\"_blank\" title=\"Click to share on Reddit\"><span>Reddit<\/span><\/a><\/li><li class=\"share-end\"><\/li><li class=\"share-print\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-print sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/\" target=\"_blank\" title=\"Click to print\"><span>Print<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><\/div><\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>A couple hours ago, I saw reports from Library Journal and The Digital Reader that Adobe has released version 4.0.1 of Adobe Digital Editions. \u00a0This&#8230;<\/p>\n<div class=\"sharedaddy sd-sharing-enabled\"><div class=\"robots-nocontent sd-block sd-social sd-social-icon-text sd-sharing\"><h3 class=\"sd-title\">Share this:<\/h3><div class=\"sd-content\"><ul><li class=\"share-twitter\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-twitter-857\" class=\"share-twitter sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/?share=twitter\" target=\"_blank\" title=\"Click to share on Twitter\"><span>Twitter<\/span><\/a><\/li><li><a href=\"#\" class=\"sharing-anchor sd-button share-more\"><span>More<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><div class=\"sharing-hidden\"><div class=\"inner\" style=\"display: none;\"><ul><li class=\"share-tumblr\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-tumblr sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/?share=tumblr\" target=\"_blank\" title=\"Click to share on Tumblr\"><span>Tumblr<\/span><\/a><\/li><li class=\"share-reddit\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-reddit sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/?share=reddit\" target=\"_blank\" title=\"Click to share on Reddit\"><span>Reddit<\/span><\/a><\/li><li class=\"share-end\"><\/li><li class=\"share-print\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-print sd-button share-icon\" href=\"https:\/\/galencharlton.com\/blog\/2014\/10\/testing-adobe-digital-editions-4-0-1\/\" target=\"_blank\" title=\"Click to print\"><span>Print<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><\/div><\/div><\/div><\/div><\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"Testing Adobe Digital Editions 4.0.1 http:\/\/wp.me\/p3gJ9y-dP @gluejar @ThDigitalReader #patronprivacy","jetpack_is_tweetstorm":false},"categories":[4,6,55],"tags":[],"jetpack_featured_media_url":"","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p3gJ9y-dP","_links":{"self":[{"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/posts\/857"}],"collection":[{"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/comments?post=857"}],"version-history":[{"count":5,"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/posts\/857\/revisions"}],"predecessor-version":[{"id":862,"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/posts\/857\/revisions\/862"}],"wp:attachment":[{"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/media?parent=857"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/categories?post=857"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/galencharlton.com\/blog\/wp-json\/wp\/v2\/tags?post=857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}