Adobe’s e-book reader sends your reading logs back to Adobe—in plain text [Updated] | Ars Technica


Adobe’s Digital Editions e-book and PDF reader—an application used by thousands of libraries to give patrons access to electronic lending libraries—actively logs and reports every document readers add to their local “library” along with what users do with those files. Even worse, the logs are transmitted over the Internet in the clear, allowing anyone who can monitor network traffic such as the National Security Agency, Internet service providers and cable companies, or others sharing a public Wi-Fi network to follow along over readers’ shoulders.

Ars has independently verified the logging of e-reader activity with the use of a packet capture tool. The exposure of data was first discovered by Nate Hoffelder of The Digital Reader, who reported the issue to Adobe but received no reply.

via Adobe’s e-book reader sends your reading logs back to Adobe—in plain text [Updated] | Ars Technica.

Advertisements