Hot answers tagged

93

There is no way to block saving of images, but here are some ideas to make it harder. To prevent right-clicking the image to save it, you can overlay a transparent div on it. The user will then right-click the div instead of the image below it and the context-menu will not show "Save image as". You could use a data URL to show the image so that there is no ...


78

No, there's no way to do it. Without setting connection parameter limits, there's even no way to make it relatively difficult. If a legitimate user can access your website, they can copy its contents, and if they can do it normally with a browser, then they can script it. You might setup User-Agent restrictions, cookie validation, maximum connections, and ...


55

You are seeking a technical solution to a social problem, if you want to call it one, which is often folly. One of the fundamental rules of security is that once you give the user something, they have it. Obfuscation and client-side "protection" (AKA DRM) do not work. If you want to display an image on user's screen screen, them saving that image can be no ...


53

What you are trying to do is futile. Information can not be contained. You can not prevent someone from passing on information. When they can not share their logins, they just copy&paste the text. When you disable copy&pasting (the common methods to do this can be easily bypassed, by the way), they will make screenshots. When you find some way to ...


47

If your problem is actually "convincing your client," try this thought experiment: Put a cartoon on a web page with a red border around it and a few diagonal stripes to partly obscure the image (just enough to make it ugly but still legible). Tell your client, "I've added unbreakable copy protection." Give your client a piece of paper and a pencil and ask ...


46

As far as I know there is no feature like that in Adobe Reader. But even when there were such a feature, it couldn't be effective. PDF is an open format, so they could just use another PDF-capable program to view it which doesn't support this feature They could create a copy of the file before opening it. Adobe Reader couldn't know about that second copy, ...


36

In addition to the existing answers, I just want to stress out that cookies are not meant to be a reliable persistent storage. They can be cleared on many occasions without asking user's consent, for example after a browser crash, an upgrade, profile corruption, you name it. You cannot just issue a fair warning to your users and expect them to keep the ...


34

DRM works pretty well for anything that you do not hand out to the users. Let's take Second Life as example. Second life is an 3d online game in which avatars are rather simple on their own in the sense that they cannot do anything beside moving around and using objects. Objects consists of a shape and texture, and they may contain scripts. Those scripts ...


26

Protect the part of the site you want to protect with a username and password. Then only assign a username and password to people who sign an NDA, (or similar) that says they won't extract or copy information from your site. Another trick is to make all your content load from AJAX... and make the AJAX data URL load from paths that change (such as ...


26

There is a way to distribute the risk such that any single print-shop gains no benefit from copying your files: Visual Cryptography. But it is esoteric and it is hard-core - versus simply buying your own printer or eBook reader. To print PDFs at untrusted print-shops with visual cryptography, you use special software to split each page into two parts - ...


25

As has @Adnan already pointed out in his answer, there is really no way of stopping a determined person from copying snapshots of your website. I used the word snapshots here, because that's what such content scrapers (or harvesters) are really copying. They don't (or at least shouldn't) have access to your backend where your website contents are actually ...


22

According to the E-book A survey of complex object technologies for digital libraries, DigiBox seems to be a container format that can contain different file types (although it was mostly used for PDFs). The basic concepts here are: The file is encrypted in a way that it's relatively difficult to read without special software (i.e you can't just read these ...


20

There's no technical way to solve this. The file (or, rather, a version of it) will be stored in the computer's cache for some time, and sent to the printer which will keep it there for some time. There are several places where a version of your file can be intercepted and stored. If you don't trust the copy shop, get your own printer.


19

Back then, tapes were just binary data on a magnetic film, with no "hidden" channels or out-of-band capabilities. Manufacturers that claimed to make tape-to-tape recording impossible often just made the tape look different, to deter would-be pirates. A regular tape recorder module was usually used to read them, so making "special" tapes couldn't really work. ...


19

The license generation method isn't really that important, as long as it's non-trivial. The trick is how your client verifies that the license is correct. Let's say you do something like this: BOOL verifyLicense (char* licenseKey) { BOOL result = false; if(strlen(licenseKey) > 128) return false; char* url = (char*)malloc(1024); ...


19

Before doing things like this you always have to ask yourself: What is your actual goal? It is impossible to stop a determined attacker from getting your images, what you can do is make it harder for your average site visitor to get to the image. What does this gain you? Your artwork is still just as vulnerable to commercial exploits as it was before. ...


16

For digital restriction management to be effective, it needs to be a sealed hardware implementation the user can not tamper with without destroying the hardware (like a TPM). Software-based DRM implementations can only work on the user-interface level. A compliant software will just not show the user interface elements necessary to perform the restricted ...


15

Everything the human user sees, he can record. As @Adnan points out, this is rather easy, and can be automated. However, some sites still have some relative success at deterring mass slurping. Consider, for instance, Google Maps. Many people have, occasionally, tried to recover high-definition maps of large areas through scripting. Some have succeeded, but ...


15

As you state in the question, doing this in a foolproof way is technically impossible. For the video to be displayed on the screen it must somehow reside somewhere in the RAM on the computer, be transfered to the monitor and then displayed there. From all these points the video could be extracted. Possible ways include: Copied from RAM. Recorded with ...


14

One tool for trying to enforce DRM is watermarking, i.e. embedding within the media itself a mark which is (almost) invisible to the human viewer, but which is resilient to copies (i.e. the copy has it). Once media copies are individually marked with the identity of their rightful owner, you can trace the origin of fraudulent copies. Do not get it wrong: it ...


13

Convenience: Offering good codecs NOT Preventing DVD players from fast forwarding through FBI warnings and 15 minutes of marketing Easy distribution: kindle, itunes, etc Allowing fair use: CSS (DMCA), moving between devices, no region locks, etc Reasonable pricing for electronic goods If there is more value in buying the good then downloading from ...


13

If I recall correctly, some games even managed to defeat direct tape-to-tape copying. In principle, this couldn't be possible, as the audio track on the tape contained all the information required. In practice, by using a custom loader which operated on data files encoded at a higher frequency than the standard Spectrum data files, low-quality ...


13

On a general basis, proactive measures do not work. For instance, your "specific reading application" is defeated by using virtualization: the guest operating system and its applications (including your reading application) believe that they have full control of the machine, but the machine is not a real one, and the host can easily keep screenshots at will. ...


13

Do not roll your own DRM scheme. The industry have tried and failed so many times that a homebrew solution will stand little chance. It would be better to "stand on the shoulders of giants" and use existing DRM solutions. Windows Media Rights Management and PlayReady are good solutions. The latter supports HDCP and are used by mainstream premium content ...


12

Setting aside the fact that this is futile, which has already been established, there is an additional avenue that could be considered: compulsory two-factor auth. If you require each login account to register a 2FA token (Google Authenticator, etc.) or to simply click a verification link that was sent through a side channel if it looks like they are a ...


9

There is no cryptography in there. It is all a matter of state. The application can access the system time, also the hardware clock (that's the clock with a battery which keeps time when the computer is off). The application can also look at the modification dates of various files to try to detect foul play with the system clock; and it can measure elapsed ...


9

when DRM-protected material is encrypted using the AES cipher DRM solutions try to allow playback of the media, while not allowing to create a copy. To make playback possible with current hardware the media either has to decrypted at the local host or it has to be provided in decrypted form already. In the second case no decryption is needed while in ...


9

I've been faced with that problem several times. The best solution we found was to drastically reduce the image quality. Make it acceptable for the screen but too low quality to print out - even if it's a screenshot. This works very well for art work (paintings and photographs) but I'm not certain how well it will work for a cartoonist. The above solution ...



Only top voted, non community-wiki answers of a minimum length are eligible