I've heard about this, that's is probably done for sure. But I dont see how that's going to pose any risk to the downloaders, only the person who purchased and shared it. I'm curious if there's a way to embed code into a file to actually track downloaders, like send your their IP when they open it or something.
Possible for someone to track you from a PDF?
- Thread starter kytro360
- Start date
the_demon
Elite Member
- Nov 23, 2008
- 3,220
- 1,604
There's numerous ways to track the document.
1. Possibly using this methods: http://www.bleepingcomputer.com/tutorials/windows-alternate-data-streams/
2. Unique word signature
3. Word / letter character endcoding
4. Possibly some kind of scripting / exploit that is able to ping a url with the users ip address
5. Tracking code withing links the document contains
6. Could possibly alter urls / sources for some sections where a certain combination of sources, or the sources in a certain order create a unique finger print
7. Embedding an image in the PDF that uses stenography to contain a unique encoded file that has your details in it
I'm sure there's some others I missed, but overall, it's definitely possible.
1. Possibly using this methods: http://www.bleepingcomputer.com/tutorials/windows-alternate-data-streams/
2. Unique word signature
3. Word / letter character endcoding
4. Possibly some kind of scripting / exploit that is able to ping a url with the users ip address
5. Tracking code withing links the document contains
6. Could possibly alter urls / sources for some sections where a certain combination of sources, or the sources in a certain order create a unique finger print
7. Embedding an image in the PDF that uses stenography to contain a unique encoded file that has your details in it
I'm sure there's some others I missed, but overall, it's definitely possible.
Nigel Farage
BANNED
- Feb 8, 2012
- 565
- 1,502
I converted a .pdf to .docx just yesterday. Doubt the "secret code" is going to translate through.
HelloInsomnia
Elite Member
- Mar 1, 2009
- 1,801
- 3,042
So everything else will just fine but the "secret code" will somehow magically break? The thing is you don't know what the "secret code" is or if there is one. The Demon mentioned stenography for example - if they used that in a picture then it will transfer from a pdf to another format just fine and you will see it as a normal picture or perhaps a banner or a bullet and not even know that it contains a secret within it. Taking that picture and grabbing the md5 hash from it and matching it up to a database is all too easy.
Nigel Farage
BANNED
- Feb 8, 2012
- 565
- 1,502
My assumption was that the secret code was in the meta data, possibly using data fields for a purpose other than what was intended. I do not believe the unique identifier is in the actual text of the document. Could be wrong. Note I used the word "doubt", which in my definition is an action I take, like I walk to the bathroom or I drive to the store. I take the self-initiated action of doubting that a .pdf to .docx converter will convert top-secret, Snowdian meta data so that the NSA can track your Word documents also. My act of doubting says nothing about the possibility itself. It's just the thing I do, like farting, only it smells better.
I'm more inclined to base my judgment, not on the technical viability of a military-grade encryption technology being applied to lowly .pdf documents, but instead the feeble and plaintive posturings of an author threatening people with legal action if they illegally fileshare his copyright material.
And, sorry, but that whole idea is like jamming a knitting needle into my skull, and fully-penetrating my "FUCK YOU" nerve. Makes me feel like downloading that document, changing the author's name to "Nigel Farage" and selling it on Fiver, while simultaneously uploading it to kickass torrents with the descriptive text "stolen from world famous internet marketer and e-book author Nigel Farage" and "Being sold on the author's Fiver gig, Nigel Farage", etc... Maybe buy some tweets, FB likes, YouTube views, etc... telling the entire world that I am the e-books author and selling it, while at the same time making it available for free via P2P.
My FUCK YOU nerve is part of the parasympathetic nervous system, and has a tendency to over-react.
And I don't like pin-heads that threaten legal action for using, copying or distributing intellectual property. Tough shit, you chose to invest your life's energy into a medium that you can't control once it's released. I heard the car wash down the street is hiring, why don't you get a job there, instead of threatening my God-given rights to privacy, protection from illegal search and seizure and a long list of other God-given and constitutionally protected rights.
If it's a choice between them, and disgruntled author and former Army douchebag's income, Staff Sergeant Douchebag can spend his days panhandling for money on the side of the highway. It's my FUCK YOU nerve; it does me that way sometimes and I can't help it. Maybe I have a diagnosable illness here. Maybe I can get classified as "disabled", get a government check every month, and get a special place to park right in front of the Wal-Mart, despite the fact that I can walk just fine. Nothing says "special" and engenders a sense of entitlement more than getting a check each month from the government. This applies to the parasites on both ends of the political spectrum.