[gentoo-user] [OT] Secure web document

2005-06-14 Thread Stuart Howard
Hi

I work in the engineering sector where we issue documents that detail
process methods on how to produce certain items of equipment. Recently
we have produced some documentation that we need to be able to publish
[in a form such as pdf] for use by our suppliers BUT we want to ensure
that this documentation cannot escape out of our control.

What I am wondering is, can a document be published to a website [for
example] in such a way that it can be viewed and read but it cannot be
either copied, downloaded, printed or the text extracted from it?

Not in the spirit of open source I admit but in the world of
manufacturing there is little honour.

Stuart

-- 
There are 10 types of people in this world: those who understand
binary, those who don't

--Unknown

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Secure web document

2005-06-14 Thread Zac Medico
Stuart Howard wrote:
 Hi
 
 I work in the engineering sector where we issue documents that detail
 process methods on how to produce certain items of equipment. Recently
 we have produced some documentation that we need to be able to publish
 [in a form such as pdf] for use by our suppliers BUT we want to ensure
 that this documentation cannot escape out of our control.
 
 What I am wondering is, can a document be published to a website [for
 example] in such a way that it can be viewed and read but it cannot be
 either copied, downloaded, printed or the text extracted from it?
 
 Not in the spirit of open source I admit but in the world of
 manufacturing there is little honour.
 
 Stuart
 

I believe that's what the Adobe eBook is all about.  Brings back memories of 
Dmitry Sklyarov:
http://www.freesklyarov.org/

Zac
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Secure web document

2005-06-14 Thread Heinz Sporn
Hi!

Viewing / reading implies that the information has already been
transferred (downloaded and rendered) to a client browser. So I don't
think that you could totally prevent information extraction on the
client side.

You can make it rather hard though:

1. Use evil things like Flash.
2. Convert the information to a graphic format and use that as
background image. No browser is able to directly download background
images (in the moment).
3. Invent your own crypted text format and develop a viewer for that.

*SCNR* the irony. But it seems you want to solve a organisational
problem with a technical approach. That never works IMHO.

Regards

spox

Am Dienstag, den 14.06.2005, 08:23 +0100 schrieb Stuart Howard:
 Hi
 
 I work in the engineering sector where we issue documents that detail
 process methods on how to produce certain items of equipment. Recently
 we have produced some documentation that we need to be able to publish
 [in a form such as pdf] for use by our suppliers BUT we want to ensure
 that this documentation cannot escape out of our control.
 
 What I am wondering is, can a document be published to a website [for
 example] in such a way that it can be viewed and read but it cannot be
 either copied, downloaded, printed or the text extracted from it?
 
 Not in the spirit of open source I admit but in the world of
 manufacturing there is little honour.
 
 Stuart
 
 -- 
 There are 10 types of people in this world: those who understand
 binary, those who don't
 
 --Unknown
 
-- 
Mit freundlichen Grüßen

Heinz Sporn

SPORN it-freelancing

Mobile: ++43 (0)699 / 127 827 07
Email:  [EMAIL PROTECTED]
[EMAIL PROTECTED]
Snail:  Steyrer Str. 20
A-4540 Bad Hall
Austria / Europe

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Secure web document

2005-06-14 Thread Stuart Howard
Thanks for the suggestions, the self code sounds like a fun project
but I suspect my manager will want an off the shelf solution.
So it seems like Adobe will be receiving some of our hard earned cash.
[suspected it would go there]
I agree with your point about organisational problem btw, the problem
is that we do not trust our own suppliers.

stuart

ps. Apolgies for the off-topic.



On 6/14/05, Heinz Sporn [EMAIL PROTECTED] wrote:
 Hi!
 
 Viewing / reading implies that the information has already been
 transferred (downloaded and rendered) to a client browser. So I don't
 think that you could totally prevent information extraction on the
 client side.
 
 You can make it rather hard though:
 
 1. Use evil things like Flash.
 2. Convert the information to a graphic format and use that as
 background image. No browser is able to directly download background
 images (in the moment).
 3. Invent your own crypted text format and develop a viewer for that.
 
 *SCNR* the irony. But it seems you want to solve a organisational
 problem with a technical approach. That never works IMHO.
 
 Regards
 
 spox
 
 Am Dienstag, den 14.06.2005, 08:23 +0100 schrieb Stuart Howard:
  Hi
 
  I work in the engineering sector where we issue documents that detail
  process methods on how to produce certain items of equipment. Recently
  we have produced some documentation that we need to be able to publish
  [in a form such as pdf] for use by our suppliers BUT we want to ensure
  that this documentation cannot escape out of our control.
 
  What I am wondering is, can a document be published to a website [for
  example] in such a way that it can be viewed and read but it cannot be
  either copied, downloaded, printed or the text extracted from it?
 
  Not in the spirit of open source I admit but in the world of
  manufacturing there is little honour.
 
  Stuart
 
  --
  There are 10 types of people in this world: those who understand
  binary, those who don't
 
  --Unknown
 
 --
 Mit freundlichen Grüßen
 
 Heinz Sporn
 
 SPORN it-freelancing
 
 Mobile: ++43 (0)699 / 127 827 07
 Email:  [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 Snail:  Steyrer Str. 20
 A-4540 Bad Hall
 Austria / Europe
 
 --
 gentoo-user@gentoo.org mailing list
 
 


-- 
There are 10 types of people in this world: those who understand
binary, those who don't

--Unknown

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Secure web document

2005-06-14 Thread Colin

Heinz Sporn wrote:


Hi!

Viewing / reading implies that the information has already been transferred 
(downloaded and rendered) to a client browser. So I don't think that you could 
totally prevent information extraction on the client side.

Even if you prevent people from copying and pasting, you can't stop them 
from opening up nano and just typing a copy by hand, pointing a camera 
at the screen, taking screen captures, memorizing all the information 
and then telling someone, dictating it into a tape recorder... the best 
way to secure your files is to not put them on the Internet.  Just print 
them out and hand them to someone along with a non-disclosure agreement.


Or, a little trick I picked up from the TV show Ghost in the Shell.  
Convert all the text into barcodes and just let people's cyber-brains 
decode the barcodes.  This technology, though, is definitely not ready 
for the general population... :-)


--
Colin

--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Secure web document

2005-06-14 Thread Stuart Howard
loving the barcode suggestion 

Though I accept that simply someone taking the time to rewrite the
text is impossible to stop, I just want to make it harder than click
forward for them to get around. I was a little misleading with web
in the subject I was more refering to electronic transmission [eg.
email] or having a viewable document that could not be downloaded
from a web server.
From your suggestions I think a protected pdf with print restrictions
and locked is the best option, so even if someone takes the time to
rewrite it it wont have the electronic signature of our document so we
can argue that it is an uncontrolled document and therefore not
acceptable as a source of information.

stuart

ps. non-disclosure agreements are great but I suspect keep lawyers in
business longer than we will :)


On 6/14/05, Colin [EMAIL PROTECTED] wrote:
 Heinz Sporn wrote:
 
 Hi!
 
 Viewing / reading implies that the information has already been transferred 
 (downloaded and rendered) to a client browser. So I don't think that you 
 could totally prevent information extraction on the client side.
 
 Even if you prevent people from copying and pasting, you can't stop them
 from opening up nano and just typing a copy by hand, pointing a camera
 at the screen, taking screen captures, memorizing all the information
 and then telling someone, dictating it into a tape recorder... the best
 way to secure your files is to not put them on the Internet.  Just print
 them out and hand them to someone along with a non-disclosure agreement.
 
 Or, a little trick I picked up from the TV show Ghost in the Shell.
 Convert all the text into barcodes and just let people's cyber-brains
 decode the barcodes.  This technology, though, is definitely not ready
 for the general population... :-)
 
 --
 Colin
 
 --
 gentoo-user@gentoo.org mailing list
 
 


-- 
There are 10 types of people in this world: those who understand
binary, those who don't

--Unknown

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Secure web document

2005-06-14 Thread Richard Fish
Stuart Howard wrote:

Thanks for the suggestions, the self code sounds like a fun project
but I suspect my manager will want an off the shelf solution.
So it seems like Adobe will be receiving some of our hard earned cash.
[suspected it would go there]
I agree with your point about organisational problem btw, the problem
is that we do not trust our own suppliers.

stuart

ps. Apolgies for the off-topic.
  


Well, printing and copying are going to be virtually impossible to
enforce, because a determined person can just take screen shots of the
document and print those.  Heck, they can even run OCR software on the
images to extract the actual text.

My advice is don't piss off your users by trying to prevent them from
doing something reasonable.  They can always look for another supplier...

I think a legally binding click-through agreement to not distribute the
document, along with the appropriate proprietary-do not distribute
notices in the document would be sufficient to keep honest people
honest.  If they are dis-honest, well, you are screwed regardless.

-Richard

-- 
gentoo-user@gentoo.org mailing list