this post was submitted on 05 Feb 2024
138 points (96.6% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

54577 readers
575 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 1 year ago
MODERATORS
138
submitted 9 months ago* (last edited 9 months ago) by [email protected] to c/[email protected]
 

I have bought a font with a really shitty license agreement and I have a couple of questions.

  1. How can I best share the font with the community? (I am afraid of metadata in the font files, which may be tied to my payment account etc. - I had to register and log in to download the ttf files)

  2. How can I remove the DSIG and other metadata from the ttf file while keeping it usable?

  3. Are they able to detect it if I use the font in a commercial product online by crawling my website and if yes, how could I prevent an automatic detection attempt?

To my (and possibly your) surprise, I didn't find any free downloads of the font online. Their license is tied to a personal account, you have to log into once a year to keep the license. As far as I understand they theoretically could use the DSIG to let the ttf files "expire", at least when used in software that verifies the signature. But I may be wrong, please let me know.

Thanks in advance and cheers-I mean ARR

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 12 points 9 months ago (7 children)

If I have it right, it goes like this. I purchase the font package, the seller includes hidden in the files an identifier so they know it's mine. I share the files across the seven seas. The seller keeps a lookout for their fonts being shared, and spots it in the wild, downloads it and finds out who's it was.

[–] [email protected] 2 points 9 months ago (3 children)

Isn't this easily bypassed by modifying the "hidden" part

[–] [email protected] 4 points 9 months ago (2 children)

If you even know what the hidden part(s) is, is the problem.

[–] [email protected] 5 points 9 months ago* (last edited 9 months ago)

Maybe is in the metadata as someone pointed out earlier, or it could be an otherwise unused ASCII char that looks different for each user who licensed it when printed out, sort of like a qr code as a single ASCII char.

Or it could be that they simply just check filename, file size and/or md5, all of which can be easily changed.

load more comments (1 replies)
load more comments (1 replies)
load more comments (4 replies)