Quote:
Originally Posted by anamardoll
Furthermore, you seem to be forgetting that any personal data contained in these books will be streamed over WiFi networks and 3G. Yeah, I'm not going to sign up for that.
|
Only if you buy the books over wifi or 3G. And even still, with the even the most basic security protocols in place, that still shouldn't be an issue. Plus given that the website will be the place that the books are bought, the likelihood of someone using their reader to buy the books with is pretty low. They'll use their computers, which are most likely behind firewalls, with encryption on the network connection, plus additional encryption to the servers they're buying and downloading the books from. Not to mention the watermark will most likely having the info encrypted (and highly likely, with a one way hash). So, basically, you're fearing that someone will break the encryption on your wifi connection to tap into your network, packet sniff your entire transaction, break the SSL encryption, find and extract the watermark, then use rainbow tables to get the info out of the watermark all while you're buying and downloading the book? The likelihood of that happening is as great as me finding out that I'm a boy wizard, and I'll get to goto Pigfarts on Mars with Malfoy. The only feasible way would be if someone got physical access to your reader, and extracted the files, and then proceeded with the extraction and rainbow tables lookup (which if thats the case, they'd need to figure out the encryption methods used in order to generate the rainbowtables in the first place). End result, you're talking about months of work, and extremely chance timing, to steal a credit card number. There are much quicker, and much easier ways.
Now, granted while as unlikely as that is, the other side of the coin is (and I think what most people worry) is the possibility of a database that has the info of who bought what, since that (as has been shown numerous times in the last few months, on 3 separate occasions with Sony alone) can be hacked with less effort than would be to get the info from one person, and now you have the info on EVERYONE.