Author Archive for

27
Mar
11

FYI: New FileOpen Plugin version released

Apparently there is a new FileOpen Plugin version. So far it’s only available for Windows and I know of no practical publisher`s implementation.

If that will change I will have to get into it.

We’ll see about that when/if it will happen. ;)

 

 

22
Jan
11

Update to 8.4.51: automatic APS offline key retrieval

Adobe and the referencing companies got wind of this little script. So they circle through the keys faster than Paris Hilton through her shoes. ;)

Neisklar and 80ka80 wrote some nice scripts to retrieve the keys (thanks so far for the effort). I adopted and modified it and included it in this update.

APS support is still experimental and the key retrieval only works for one major (German) publisher but the keystones are set and I think it’s possible to transfer it to all other companies.

The script update has one disadvantage: If you got an APS pdf and they change the key afterwards you can’t decrypt it (the script always gets the newest key). As you’re using a library system anyway you can just redownload it use the script faster. Anyway that problem will be addressed later.

02
Jan
11

2010 in review

The stats helper monkeys at WordPress.com mulled over how this blog did in 2010, and here’s a high level summary of its overall blog health:

Healthy blog!

The Blog-Health-o-Meter™ reads Wow.

Crunchy numbers

Featured image

A helper monkey made this abstract painting, inspired by your stats.

About 3 million people visit the Taj Mahal every year. This blog was viewed about 33,000 times in 2010. If it were the Taj Mahal, it would take about 4 days for that many people to see it.

 

In 2010, there were 60 new posts, not bad for the first year! There were 2 pictures uploaded, taking up a total of 17kb.

The busiest day of the year was November 4th with 365 views. The most popular post that day was FileOpen PDF DRM removal.

Where did they come from?

The top referring sites in 2010 were cs.cmu.edu, mobileread.com, locklizard.com, apprenticealf.wordpress.com, and boerse.bz.

Some visitors came searching, mostly for ineptpdf, tetrachroma, ineptpdf 8.4.28, ineptpdf 8.4, and ineptpdf 8.4.30.

Attractions in 2010

These are the posts and pages that got the most views in 2010.

1

FileOpen PDF DRM removal August 2010
96 comments

2

Upgrade to ineptpdf 8.3.1: bug fix for the “specified key file does not exist” error June 2010
7 comments

3

Short FAQ June 2010
5 comments

4

Update to 8.4.48: improved tolerance for false file/registry entries November 2010
7 comments

25
Dec
10

Update to 8.4.50: New APS-Onleihe Offlinekey and better error messages

If you are member of the rare “Onleihe community” you might want to check out this special update. Additionally there are better error messages (at least sort of ^^).

Make sure you don’t get the beta version of 8.4.50 (as marked in the comments).

10
Dec
10

Background information: Mac (and Linux) support

Recently I had some positive experience with Mac users so I consider implementing Mac (and Linux) support in the future. And there will be a merging with Apprentice Alf’s improvements (ineptpdf 7.6) so it will be at least usable with ADEPT systems (Adobe Digital Editions). In fact Mac works (for ADE) already if you have pycrypto installed.

The problem with Linux and Mac support is that I need IDA Pro (6.0) for Linux and Mac so it will probably take me a while to save the additional money (both cost at least 419 Euro). Btw. this is not a request for donations but rather an explanation about the stones which can be found in a reverser’s way. ;)

I’ll keep you informed.

 

01
Dec
10

Update to 8.4.49: some small improvements

An update I wanted to post for a few days.

FYI: Not much spare time for me so I probably won’t  answer you immediately.

04
Nov
10

Update to 8.4.48: improved tolerance for false file/registry entries

This update might solve (some of the remaining) ident4d problems.

03
Nov
10

Update to 8.4.37: script identification change to Adobe Reader

Script identification change to Adobe Reader.

01
Nov
10

Update to 8.4.46: script cleanup and optimizations

Some script optimizations.

It might just run a tick faster. Nothing to think about for hex core cpu enthusiasts but people with older and slower cpus might appreciate it.

01
Nov
10

update to 8.4.45: 2nd fix for ident4d problem

I’m on a roll, here is another compatibility update.

01
Nov
10

update to 8.4.44: another fix for the ident4d problem

This fix should work for most guys who are getting the ident4d error message.

If you still get the ‘ident4d …’ error message after you checked out 8.4.44 drop me a line (and attach your pdf + log).

Enjoy.

30
Oct
10

help mobileread forum thread

For help and exchange of experience about fileopen and the script I recommend you to ask questions in the ‘authorized fileopen drm pdf removal’ thread under

http://www.mobileread.com/forums/showthread.php?t=86826

The advantage is that you don’t have to search in all the comments for what you want to know. Just ask a question and another forum member (or myself) will answer the it.

30
Oct
10

Updated progress report for ‘Unsupported Ident4D Decryption’ problem

This error doesn’t occur on my computer so it’s harder to get information on it. I suspect it might be an additional feature of a newer fileopen plugin revision.

Stay tuned. A temporary fix may be to use an older fileopen.api version (use google to get an older version).

 

22
Oct
10

Update to 8.4.43: fix for user names longer than 13 characters and special uuid encryption

Another day, another (information) leak. Today Wikileaks released a whole bunch of new documents. Can’t wait to see Obama panicking over the whole leak. ;)

Nothing against him as a person but he hasn’t done a lot for the security of whistle blowsers, ‘don’t ask don’t tell’, Guantanamo Bay and a financial reform.

Anyway let’s get back to some important information …

Another small fix for people who had problems with the uuid calculation. Have fun.

01
Oct
10

Update to 8.4.42: improved nl/cr server response parsing

A small update for a small bug.

21
Sep
10

Update to 8.4.41: # improved user/password request windows, better server response tolerance

This update brings an improved user/password window and a more tolerant server response handling.

19
Sep
10

Update to 8.4.40: fix for non standard server responses

Have fun.

18
Sep
10

Update to 8.4.39: sophisticated request mode differentiation, forced uuid calculation

Wh0t’s up? This nice little tweaky update contains a sophisticated request mode differentiation and a forced uuid calulation.

You don’t have to know what it means. If you had no problems with an earlier version stay with it. If you have a pdf which worked with an earlier version and now it’s not please drop me a line.

By the way, why do you need tea parties? Don’t you drink good old coffee anymore?? ;)

15
Sep
10

Update to 8.4.38: Small fix for user/password protection and ‘glitch control’

Some user/pw protected files didn’t work and the ‘decryption successfull’ message didn’t show up in the former version.

Enjoy.

06
Sep
10

Update to 8.4.37: patch for unicode paths/filenames

Some guys did have problems with Unicode paths or filenames (like German umlauts). This update solves the problem.

24
Aug
10

FileOpen and APS PDF DRM removal

Fileopen and APS PDF DRM Removal Script

The project (latest script version: ineptpdf 8.4.51) has cost me a lot of nerves, caffeine and my (non-grey) hairs. It took me over 400 hours of hardcore reverse engineering and a lot of trial and error to get it right. Meanwhile my friends were hanging out on the beach, drinking cocktails and getting serious with the chicks. On the other hand, now they are getting accustomed with BP sponsored oil (*hehe*).

The FileOpen support has been added to the existing ADEPT PDF DRM scripts from I♥Cabbages ( click ) so I didn’t have to get serious with the PDF interals (at least not more than needed). It has the same requirements (Python version, PyCrypto, …) as the original script so with Python-related problems you might check out his site, too. Of course the script decrypts ADEPT PDFs (used in Adobe Digital Editions) as well. In that case you need the ineptkey script to get the key file (adeptkey.der). More information on that topic can be found at the specific mobileread forum discussion thread.

The FileOpen plugin is a privacy killer. It checks your network address, your harddisk id, your cpu id, your username, your hostname, when you open and close your document and how many times you already have printed it. Despite the information on their website it doesn’t support AES  (at least as far as I have seen). And yes, these methods may remind you of dystopian alternative realities like 1984 or Brave New World (you might want to check out the little story at click ).

You might want to check out the ‘FAQS’ and ‘bug report’ sections for more information.

As for the preachy part: Don’t use it to make illegal copies.

I’m not getting paid for writing the script and of course it is under the GPL. Nevertheless, if you want to help to create more freedom in the Web, it would be a nice gesture to donate a few (symbolic) bucks to organizations like your local Pirate Party (Pirate Party International (harrrrrrr – I want to meet a local pirate)), the EFF (EFF donation site) or, of course, myself => ;-) (BitCoin address: 1HRnjahgD3Tb7AHEjjUuf79mwtqKYTuUFg ) Even a very small donation will help to create more freedom and privacy in the web (legal disclaimer: I’m not related to these organizations in any way nor do I profit from donations).

If you send me proof of your donation (email can be found in the ‘about’-section) I might think about getting a Linux version running as well.

proven donations until now: (EFF: 1 (100 USD/0 Euro), Pirates Party: 0 (0 Euro), Myself 0 (0 Euro)

Thanks to all donors. :)

Known limitations:

  • no support for old fileopen encryption (haven’t seen such files for a long time)
  • password window sometimes doesn’t close itself
  • no Linux support (yet)
  • no Mac support (refers only to the FileOpen functionality,  ADEPT and Adobe Policy Server works fine)
  • Adobe (Reader) X may not work – read the FAQs for more information

If you think you have found a bug (script didn’t decrypt the pdf) check out the ‘faqs’ section carefully and study the information in the ‘bug report’ section.

Greetings
Tetrachroma

Download: (due to DMCA concerns no direct download link available)

24
Aug
10

FileOpen ineptpdf Twitter list

For update information (and everything else) about the script you can subscribe to my new ineptpdf  Twitter list:

http://twitter.com/#!/tetrachroma

24
Aug
10

Update to 8.4.36: previous machine/disk handling (PrevMach/PrevDisk)

I’m on a roll.

This update creates better compatibility for PCs with ‘previous hardware components’.

23
Aug
10

Update to 8.4.35: special handling for non-standard systems

There are rare instances where a PC has a non-standard configuration (like a missing c partition and the system is installed on another drive). If your pdf decryption didn’t work before you might want to check out this update.

22
Aug
10

Update to 8.4.34: better user/password management

This update improves the user and password management. Everybody who got an ‘AskUnp’ response before should give it a try.

21
Aug
10

Offtopic: aineptepub – added automated bulk processing (Tetrachroma)

Automated Inept Epub Decryptor (script name: “aineptepub 5.2″)

This update gives the new ineptepub 5.2 (decrypts ADEPT epubs) bulk processing capabilities. Now you can decrypt whole directories (containing epubs) again.

20
Aug
10

Update to 8.4.33: improved debug output option

This update improves the bug report procedure. More information can be found in the ‘bug report section’.

15
Aug
10

Update to 8.4.31: improved session cookie support and better server response error handling

Some improvements for non standard conform server responses and a better session cookie handling. If you still have problems with such type of files drop me a line and check the ‘ bug report’ section for further details.

09
Aug
10

Update to 8.4.30: extended authorization attributes support

Extended authorization attributes support.

05
Aug
10

update to 2.4.29: backport for bad formatted rc4 encrypted pdfs

Some pdfs have a wrong ‘Length’ attribute (e.g. Adobe Reader opens it but complains about ‘problems’). This small bug fix should repair them.

Needless to say in that case it’s the publishers fault and the script has to handle them ;).

04
Aug
10

Big Update to 8.4.28: limited experimental APS support

Some curious guys may have already seen it. There are APS and an AES functions in the text which you don’t need for FileOpen.

Tetrachroma and Neisklar are proud to present the world’s first release:

Ineptpdf 8.4.28 has limited (experimental) Adobe Policy Server Support.

Actually, at the moment it only works for German Libraries but with the right ‘PrincipalKey’ (which you can get by sniffing communication between your computer and the server) it should work for a bigger set of files. As it’s experimental no support for that part but for a fraction of users might fi nd itvery interesting.

At that moment I want to say thanks to Neisklar who helped to find the key elements in APS. Thanks for the productive teamwork.

Despite APS support there are numerous small bug fixes.

Enjoy

02
Aug
10

Update to 8.4.27: user/password fallback option

This update improves the user/password dialog recognition by a fallback option. That’s the way the fileopen plugin is doing it (in my opinion not the best way to do it but the world ‘is what it is’ ;) ).

This might help guys who couldn’t decrypt some of their pdfs before.

31
Jul
10

update to 8.4.26: automated session/user cookie request function

This update automates the processing of session/user cookie protected fileopen pdfs. In earlier versions you had to copy/paste the cookie content(s) to get it done.

If you have met the following requirements the script will do thework for you:

  • Firefox 3.x (or higher)
  • Firefox was used to activate/download your fileopen pdfs
  • Firefox has to be closed before running the script (otherwise the cookie database is looked)

If youstill  use the Internet Explorer, Safari, Firefox 2.x you don’t have to worry. The script has a fall back option where you still have to do the `handwork`.  Nevertheless at least in this case Firefox is the more convenient solution.

31
Jul
10

Update to 8.4.25: better unicode support

As there were minor bugs in the previous version there is an upgrade to 8.4.25.

It’s highly recommended to upgrade from earlier versions.

31
Jul
10

update to 8.4.24: support for more security attributes and session cookie support,

FeIlow landlovers, I’m back with two major updates.

The security attributes in rare pdfs are used and session cookie support is improved.

Arrrrrrrrrr …. enjoy.

Update information: Obsolete – don’t use 8.4.24 anymore. It has minor bugs which are solved in 2.8.25 (or the latest version)

18
Jul
10

Vacation notice

I will be on my (well earned) vacation over the next 2 – 3 weeks. You can still write me but I’m not able to answer them in these time period.

Enjoy the RL.

15
Jul
10

update to 8.4.22: disabled stdout prints for exception prevention

Python doesn’t like to execute prints if started as a windowed version (double clicked file with pyw extension). The strange thing is that it doesn’t throw immediately an exception but waits until its 4096 bytes buffer is filled up. That means the IOError exception can happen in several places and masks the real problem.

I suspected  if a python script is started in windows mode and it print something it’s just going to /dev/null but Python seems to be very resolute about confusing the programmers.

14
Jul
10

Update to 8.4.20: small bugfixes

A small bug has emerged. Use this version.

13
Jul
10

Update to 8.4.19: 2nd fix for ‘bad file descriptor’ problem

I studied the ‘bad file descriptor’ problem and I have  found a solution.

If I am right the bug is too embarrassing to show. It’s one of these things you can’t see until you see it. ;)

The funny thing is that it was included from the beginning of the inept scripts and specific problems haven not been reported before. Maybe the bigger size of the script has shown the problem.

Anyway, I strongly recommend to test this update (if you had the file descriptor problem) and report back as soon as possible.

11
Jul
10

advice for ‘file descriptor problem’ victims

Until beginning of 2010 Python 2.6 had a special Unicode problem. You got a good chance to have downloaded a non-working Python 2.6 version.

If you still have the file descriptor problem you might uninstall Python 2.6 (and the plugins) completely and install Python 2.7 + the two required plugins as described in the FAQs section.

I don’t know if that solves the problem but it may be worth a try (needs around 10 -15 minutes).

I can’t reproduce the problem (Unicode pathnames work file with my computer) and Python 2.7 is said to be faster and more reliable anyway. ;)

11
Jul
10

update to 8.4.18: follow up bug fix for the DPRM problem and more readable error messages

This update fixes the follow up problem from the DPRM fix (8.4.17). If you got a ‘Cannot find decryption key’ or an ‘Error: DPRM’ this nice little gem is for you.

11
Jul
10

Update to 8.4.17: fix for several ‘=’ chars in a DPRM entity

Solves the ‘Error: DPRM’ problem.

11
Jul
10

Information about “Error: [Errno 9]Bad file descriptor”

The message “Error: [Errno 9]Bad file descriptor” is still showing in some configurations. At the moment it’s not clear where does it come from but for some the solution is to wait a second and press ‘Decrypt’ again.

It might be the problem of Python 2.6 UTF processing but nothing more specific is known.

10
Jul
10

Update to 8.4.16: improves user/pass detection

This update improves the user/password detection. Also it might solve some ‘file descriptor problems’.

08
Jul
10

Update to 8.4.15: “Error: [Errno 9]Bad file descriptor”

This update solves the

“Error: [Errno 9]Bad file  descriptor”

problem. If it still occures give me a hint.

07
Jul
10

Update to 8.4.14: fix for non-standard-conform fileopen pdfs

Some publishers produce non-standard conform fileopen pdfs (the length of the key attribute didn’t have the right size). In that case the script didn’t find the key. This version fixes it but I want to make it clear: The fault is on the publisher’s sloppiness and not the script side. ;)

Additional information: Python 2.7 has been released. I tested it and it’s works fine with the script. It’s recommended to use it for new installations.

More information (download links, …) can be found in the FAQs section.

05
Jul
10

Update to 8.4.13: small bug fixes

Some small bug fixes.

03
Jul
10

Update to 8.4.12: fix for capital username characters and other unusual user login names

The update fixes unusual login user name problems (that’s your reward for trying to be cool and choosing a windows user name like ‘Man I am So Coolß!!’ ;-) ).

This time I had an excellent brainstorm and bug-hunting-session with ZeroPoint. It was great teamwork and obviously there is a great script update result. Thanks for your participation.

02
Jul
10

Update to 8.4.11: alternative ident4id calculation

Everybody who got a

Unsupported Ident4D Decryption, report the bug to the ineptpdf script forum

in the past might want to check out ineptpdf 8.4.11.

Small update: The error can still occure if your login name has capital letters in it (like Peter …). A fix will released soon.

This update took significant more time than expected. FileOpen has implemented more obfuscation without more security.

Status update:  Everybody who want to see a complete Linux version might think about motivating me with a donation to EFF or your local Pirate Party. As I got no donation proof at all I’m saving my time,  watch soccer and drink my favorite beverage.

Linux fans (and everybody who wants to support freedom in the web) – it’s your turn ;-)

29
Jun
10

Update to 8.4.10: line feed processing, non c system drive patch, nr support

Sometimes a linefeed at the end of the server response did break the key retrieval routine. That’s fixed. More compatibility for Windows Operating Systems which have no C drive (it’s not recommended to NOT install it on the C drive because some older programs need their C:\ ^^ ) and more support for exotic FileOpen pdfs (but no special cookie processing yet).

Check it out and report about successes and problems.




Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Join 130 other followers

Recent Posts


Follow

Get every new post delivered to your Inbox.

Join 130 other followers