Calibre improvement suggestion

[kovidgoyal]

Adding password controls to the main calibre interface is pointless. All a user would have to do is open the library folder in windows explorer to get around it.

[Katsunami]

Originally Posted by kovidgoyal

Adding password controls to the main calibre interface is pointless. All a user would have to do is open the library folder in windows explorer to get around it.

I know, but Grandma or mother-in-law won't be browsing the library like that.

[eschwartz]

Originally Posted by Katsunami

I know, but Grandma or mother-in-law won't be browsing the library like that.

I severely doubt Kovid will even accept free code designed to play tricks on the actual user like that.

That is the same mentality that gave us DRM for ebooks.

[Turtle91]

Originally Posted by eschwartz

I severely doubt Kovid will even accept free code designed to play tricks on the actual user like that.

That is the same mentality that gave us DRM for ebooks.

I don't think he intends to play "tricks". He is simply saying that grandma wouldn't be opening up the software and looking through the settings when she could just open up the OPDS link that her son set up for her on her ereader...

Besides, it is too simple to "secure" your settings page with a password...ie. if I want to prevent grandma's prying eyes I would just put a password lock to get into the server setup page.....if people really thought that would be an issue. I'm certainly not saying anyone SHOULD, just that it is possible.

[kovidgoyal]

Originally Posted by Katsunami

I know, but Grandma or mother-in-law won't be browsing the library like that.

SO use multiple libraries. Then unless grandma drills down the calibre multiple libraries switching menu, she will not find your naughty library. And if she is willing to do that, then she is perfectly capable of finding it by other means.

Hell just rename your naughty library folder to "Obscured" so that calibre cannot find it. And set up a special launch script for it that renames it back, then runs calibre with it, and after calibre quits, renames it back to Obscured.

If all you want is security through obscurity, there are many simpler ways to do it.

[eschwartz]

Originally Posted by Turtle91

I don't think he intends to play "tricks". He is simply saying that grandma wouldn't be opening up the software and looking through the settings when she could just open up the OPDS link that her son set up for her on her ereader...

Besides, it is too simple to "secure" your settings page with a password...ie. if I want to prevent grandma's prying eyes I would just put a password lock to get into the server setup page.....if people really thought that would be an issue. I'm certainly not saying anyone SHOULD, just that it is possible.

That is all fine and well, but what we were actually discussing was the desktop applicaction, not the server, and what I actually said is, it isn't calibre's job to offer tools that secure your library against the subset of the population that cannot figure out a file browser.

It is calibre's job to, when broadcasting onto the open internet, offer options to put up an authentication barrier before a visitor can get access, anyway anyhow.

It is a very DRM idea to offer the ability to password-protect a GUI interface to a non-secured file tree.

Like Kovid said -- security through obscurity. (One of) the definition of DRM.
calibre doesn't want any part of useless, pointless drivel like that, as far as I am concerned, and I get the feeling I have correctly called Kovid's opinion as well.


@Katsunami -- why not just disable VL tabs and have calibre start up automatically with a VL? Grandma presumably cannont figure that out any more than the library switcher or an actual (shudder) file tree.

[PeterT]

Why even worry what Grandma can see and read? She's probably experienced more stuff in her life than you....

[Katsunami]

Originally Posted by PeterT

Why even worry what Grandma can see and read? She's probably experienced more stuff in her life than you....

Probably, but some older people can be incredibly close-minded with things like sex or foul language.

[Turtle91]

lol....I think we are actually all agreeing...except for the part that the OP brought up.

It is too simple to put a password on Calibre's settings area....and unnecessary. Anyone with access to the physical machine could just find the file. The content server is for all those with access to the library via the internet or wi-fi. THAT is where the security question comes in...and the suggestion to allow multiple libraries.

The GUI can't do multiple libraries, but Kovid already said he was going to rewrite that. The only other option is to use multiple command line content servers, which requires a greater level of computer knowledge than is held by the majority of computer users...most MR readers excepted.

[eschwartz]

Okay, fine. I think we all also agree that would be nice.

Am I missing something? The Content Server already supports passwords, and I don't think that is going to change...

[Turtle91]

Both the GUI and command line content server supports username/passwords/library restrictions. They only support one per instance.

[eschwartz]

I would appreciate a clear and concise explanation as to what, precisely, you feel we disagree about. Because so far I am just getting more and more confused.