View Single Post
Old 12-12-2009, 03:15 PM   #4
KevinH
Sigil Developer
KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.KevinH ought to be getting tired of karma fortunes by now.
 
Posts: 8,841
Karma: 6120478
Join Date: Nov 2009
Device: many
Yes, but this has nothing to do with DRM

Hi,

I realize that Sony used Adobe Digital Editions software to add DRM to protect their e-books. There are other Adobe Digital Editions epub readers out there including just downloading Adobe Digitial Editions software itself and using it to read the files on your Mac or PC.

The problem is that the epubs they created are technically corrupted since they do not always have the same name in the central directory as they have in the local file headers inside the zip archive that makes up the epub container.

This means that Sony, Adobe software is using the local header name instead of the central directory name when unzipping these files out of the epub (which is a security risk since someone could make a special epub that might give them an attack vector by forcing it to unpack so someplace it should not). Sony just ignores the one or two garbled/mangled central directory names and goes with the local header name. That is why the epub works on Sony and B&N (but I don't have one to try that) even though it is bad.

I think this is just a bug in their creation software that really should be fixed. Adobe's own epubcheck-1.0.5 agrees with me on this point, as does unzip -t to test the epub.

I was hoping someone from Sony would see this and pass it along to the right technical people at Sony to get this fixed.

KevinH
KevinH is offline   Reply With Quote