Classic The nook is bad for eBooks

[Solicitous]

Originally Posted by user_none

At least with B&N's system they just put in the unlock code (name + credit card number) and their reading.

How long before someone is able to crack the DRM on B&N epub and extract your CC number? I personally don't like that. Lose your nook and cancel all your credit cards.

[kennyc]

Originally Posted by Ema

Since the nook can read formats that do not have DRM, this is exactly how I intend to use it. I have never bought a DRM book in my life nor do I ever intend to. Every e-book I have that does have DRM is borrowed for free from the library. As you can see, I can happily use a nook and not support DRM. The nook isn't the problem, the content purchased is.

True, but why in the world would you buy a nook if that is the only reason/times you will use it? It is designed specifically (as is the Kindle) to work with a specific book supplier.

If all you are reading is non-drm and library books then another device is probably cheaper, better.

[kennyc]

Originally Posted by Solicitous

How long before someone is able to crack the DRM on B&N epub and extract your CC number? I personally don't like that. Lose your nook and cancel all your credit cards.

Here we go again.

It DOES NOT STORE YOUR CC NUMBER!

http://www.howstuffworks.com/encryption.htm

[kennyc]

Originally Posted by nikkie

Books purchased from B&N with DRM have the pdb extension, not the epub extension.
...

Not true.

They are selling both epub and pdb with encryption. The epub uses the NEW Adobe "Social" DRM to allow for sharing that is only (currently) supported on the nook and B&N reader software.

[Solicitous]

Originally Posted by kennyc

Here we go again.

It DOES NOT STORE YOUR CC NUMBER!

http://www.howstuffworks.com/encryption.htm

No it doesn't but given you could take a copy of the DRM-epub, one could by already knowing your name just do a brute-force attack on the file and eventually come up with a number. Thing is everyone knows how many digits are required for a valid CC No.

Its not like the file has an inbuilt authentication system where x-no. of failed attempts locks you out.

[JSWolf]

Originally Posted by sunebird

I have been mislead. I have a Sony Reader. My fault for not doing my research. I downloaded a sample from B&N and it opened up no problem on the Sony Reader. So I bought a book and tried opening and I got the DRM message on the Sony Reader. B&N should warn people before they check out that even though the book is epub, It will not work on the Sony Reader. B&N refuses to refund my money, nor take away the DRM. I have legally purchased this book, so I should have the right to read it on the device of my choice.

It's not your fault. it's B&N's fault. Noplace in their eBook listings does it say the eBook is ePub and no place (in the eBooks listing) does it mention the DRM. So B&N is selling you something without giving you all the facts. You download a sample and it's ePub and it works with ADE. So you think the full eBook will be ok and it's not. Have you contacted B&N to get your money back? If they won't do so, go to your credit card company to get your money back.

[kennyc]

Originally Posted by JSWolf

It's not your fault. it's B&N's fault. Noplace in their eBook listings does it say the eBook is ePub and no place (in the eBooks listing) does it mention the DRM. So B&N is selling you something without giving you all the facts. You download a sample and it's ePub and it works with ADE. So you think the full eBook will be ok and it's not. Have you contacted B&N to get your money back? If they won't do so, go to your credit card company to get your money back.

I agree, the only way we are going to get full disclosure is by returning and complaining to B&N!

[JSWolf]

Originally Posted by kennyc

I agree, the only way we are going to get full disclosure is by returning and complaining to B&N!

If people buy ePub from B&N in good faith and find out it doesn't work, then it is B&N's fault for not disclosing all the information needed. The free Star Wars eBook in ePub from B&N that I downloaded had no information at all that it was ePub and what DRM it was using. So if I had paid for it, I would have tried to return it.

[JSWolf]

I would like everyone reading this thread to goto B&N's website (using the link below) and find where in the listing does it mention that the eBook is in ePub and then find where it mentions what DRM is used. The book is [i]The help/i] by Kathryn Stockett.

http://search.barnesandnoble.com/The...2069&inframe=y

The only way I knew it was ePub before purchase was to download the free sample. But because the sample is sans-DRM, it doesn't help with the DRM issue.

[Musicman]

Originally Posted by JSWolf

It's not your fault. it's B&N's fault. Noplace in their eBook listings does it say the eBook is ePub and no place (in the eBooks listing) does it mention the DRM. So B&N is selling you something without giving you all the facts. You download a sample and it's ePub and it works with ADE. So you think the full eBook will be ok and it's not. Have you contacted B&N to get your money back? If they won't do so, go to your credit card company to get your money back.

I disagree with you - It is not B&N's fault.

I think they are clear that their e-books can be read on devices that their ereader program runs on (which includes your PC) or their nook. So you can read the book, just not on your sony reader. They have been up front that their support of Epub was with their social DRM that Adobe was making available next year to others.

What you need to do is have sony implement the ereader DRM in an upgrade of Adobe Digital Editions on their readers when it is available next year.

[Kolenka]

Originally Posted by Solicitous

No it doesn't but given you could take a copy of the DRM-epub, one could by already knowing your name just do a brute-force attack on the file and eventually come up with a number. Thing is everyone knows how many digits are required for a valid CC No.

Its not like the file has an inbuilt authentication system where x-no. of failed attempts locks you out.

There are much better ways to get a valid CC number than brute-forcing an eBook. Anyone wanting to commit identity theft isn't exactly looking for your information, they are looking for someone's information. So they are looking for the easiest way to get a CC# and other information.

Knowledge here about the encryption doesn't lead to a better brute-force attack either, and they'll be missing information most sellers ask for, like billing address, CVV # and expiration date of the card (with the last two being the deal killer, usually). Phishing and attacks on corporate databases are a lot more fruitful for less or equal effort.

[kennyc]

Originally Posted by Musicman

I disagree with you - It is not B&N's fault.

I think they are clear that their e-books can be read on devices that their ereader program runs on (which includes your PC) or their nook. ....

Right, but since there are now different and incompatible forms of Adobe DRM they should at least list the type of drm and devices it is compatible with on a FAQ sheet or something.

They should also clearly indicate the format of any book you are looking to purchase.

It's just good customer relations and just pisses people off when it is "hidden."

[kennyc]

Originally Posted by Kolenka

There are much better ways to get a valid CC number than brute-forcing an eBook. Anyone wanting to commit identity theft isn't exactly looking for your information, they are looking for someone's information. So they are looking for the easiest way to get a CC# and other information.

Knowledge here about the encryption doesn't lead to a better brute-force attack either, and they'll be missing information most sellers ask for, like billing address, CVV # and expiration date of the card (with the last two being the deal killer, usually). Phishing and attacks on corporate databases are a lot more fruitful for less or equal effort.

Exactly.

[Propheous]

Originally Posted by Solicitous

No it doesn't but given you could take a copy of the DRM-epub, one could by already knowing your name just do a brute-force attack on the file and eventually come up with a number. Thing is everyone knows how many digits are required for a valid CC No.

Its not like the file has an inbuilt authentication system where x-no. of failed attempts locks you out.

Ok let me explain a really simple concept to you. In the time it would take you to hook your nook up to my computer and transfer the file I could have 100 valid cc numbers with name and signature.

Hackers, theives, and similar disreputable individuals do not go for the hard score unless its a challenge, the pay out is worth it, or they are REALLY freaking bored.

So worrying about this is rather silly and a total waste of time even bringing up.

[user_none]

Originally Posted by Kolenka

Knowledge here about the encryption doesn't lead to a better brute-force attack either, and they'll be missing information most sellers ask for, like billing address, CVV # and expiration date of the card (with the last two being the deal killer, usually).

I would like to add, this DRM (at least on the PDB files, but I'm reasonably sure it's the same for the EPUBs) does not use the entire credit card number. It only uses the last half. If someone were to brute force the credit card number they would only end up with a partial number. The reader applications like B&N Reader ask for the full number but only part of the number is actually needed for the decryption.