Macworld Forums: Mac OS X Hints Weblog: Keep some PDF info private - Macworld Forums

Jump to content

  • (2 Pages)
  • +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Mac OS X Hints Weblog: Keep some PDF info private

#15 User is offline   silentway Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 43
  • Joined: 13-September 04

Posted 02 March 2007 - 04:22 PM

Quote:

The author object member is a standard PDF field. It's embedded by most software which generates PDFs, not just OSX. It's not a security flaw, it's a feature of the PDF standard.


The existense of an author field is fine, and I've got no beef with it being a part of the PDF standard.
My problem is with the choice to populate that field with the OS X user's login name. This compromises the security of the computer because it gives away half of the info needed to login to your computer (the other half of course being your passsword).
A safer choice would be to pull the first and last name from Address Book's "My Card." Or better yet, allow us to change the source location via Terminal.
And just because it is "embedded by most software which generates PDFs" doesn't make a good idea.
0

#16 User is offline   Pixelgun Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 1
  • Joined: 02-March 07

Posted 02 March 2007 - 05:01 PM

The flip side of this coin is that saving your name in the PDF could be considered a feature if you are sharing documents for which you want credit. Of course, if anyone can just open the file in a text editor and change the information it would also be easy to change the author credit information.
0

#17 User is offline   Netizen_Kane Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 425
  • Joined: 01-November 01

Posted 02 March 2007 - 09:23 PM

Quote:

Since the PDF information is not encoded but written in plain ascii in the pdf file. You can easily remove it by editing the file using any text editor (such as vi, for exampe). This is certainly easier than having to log in as a different user every time you want to save a PDF.


It would be wise to try out solutions before saying they're "easy." Do you think we're all technophobes who can't think for ourselves? Before I settled on the new account solution, I already tried removing the name from the field using TextWrangler and it does not work. The file becomes unreadable by either Preview or Adobe Reader, although it's still a PDF and they both still try to open the file. I'm guessing there's some kind of checksum error protection in the PDF format so you can't just go in there and change raw text.
0

#18 User is offline   HandyMac Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 194
  • Joined: 22-June 01

Posted 04 March 2007 - 07:02 PM

Quote:

Can't you just open the pdf with Combine PDFs (http://www.monkeybreadsoftware.de/Freeware/index.shtml), delete the author's name, and save it?


Works for me. Easier than creating a new account. Thanks for the tip.
0

#19 User is offline   fizik Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 11
  • Joined: 22-June 06

Posted 05 March 2007 - 10:29 AM

Worked for me...
0

#20 User is offline   fizik Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 11
  • Joined: 22-June 06

Posted 05 March 2007 - 10:40 AM

That also works
0

#21 User is offline   sparky67 Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 148
  • Joined: 10-December 05

Posted 05 March 2007 - 01:05 PM

If you have a copy of Acrobat Professional you can edit the author as well as some of the other meta data by looking at Document Properties, Command-D
0

#22 User is offline   DKG Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 2
  • Joined: 19-February 05

Posted 06 March 2007 - 05:50 PM

OK - so what am I missing here? I create a LOT of PDFs from the Print Dialog. If I look at them with a Get Info request I see nothing that would compromise my identity. The Ownership and Permissions pane shows my short login name, but I can't see how that creates any exposure or vulnerability. What am I missing?
0

#23 User is offline   sparky67 Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 148
  • Joined: 10-December 05

Posted 06 March 2007 - 05:52 PM

Quote:

OK - so what am I missing here? I create a LOT of PDFs from the Print Dialog. If I look at them with a Get Info request I see nothing that would compromise my identity. The Ownership and Permissions pane shows my short login name, but I can't see how that creates any exposure or vulnerability. What am I missing?


Inside the "more info" section of the Get Info window is the meta data. The second item, author, is your login name.
0

#24 User is offline   silentway Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 43
  • Joined: 13-September 04

Posted 06 March 2007 - 05:54 PM

Open up the pdf in Preview first, then do a get info (Tools-->Get Info or cmd-I). That shows more details.
In Acrobat Reader it's File--> Document Properties (cmd-D).
0

#25 User is offline   griffman Icon

  • Advanced Member
  • Icon
  • Group: Moderators
  • Posts: 8,605
  • Joined: 09-January 01

Posted 06 March 2007 - 06:07 PM

Also, some apps don't seem to store the Author information; Word and the other Office apps do...
-rob.

#26 User is offline   HandyMac Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 194
  • Joined: 22-June 01

Posted 07 March 2007 - 09:50 AM

Quote:

Quote:

Can't you just open the pdf with Combine PDFs (http://www.monkeybreadsoftware.de/Freeware/index.shtml), delete the author's name, and save it?


Works for me. Easier than creating a new account. Thanks for the tip.


OOPS - Unfortunately, while this method works to delete the author name, it also kills live html links, such as those you can put into a PDF by creating it from Pages. They still appear blue & underlined in Preview, but they don't work anymore.
So: Use the Combine PDFs method only on PDFs with no links in them. Sigh
0

#27 User is offline   gobear Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 10
  • Joined: 07-March 07

Posted 07 March 2007 - 04:17 PM

I made also a "normal" pdf from a word-document. The result: Size 1.2 MB. After that I tried the "compressed"-way. Some PDF info disappeared but the size was also compressed. Size: 248 kb, with the same file. Now I'm asthonished.
0

#28 User is online   celiawessen Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 72
  • Joined: 09-March 06

Posted 19 December 2007 - 04:59 PM

In Mac OS X 10.5, the "Save As PDF-X" option will actually embed your account's shortname into the Author field. The save dialog does not show that it will do this, unlike the regular "Save As PDF" option. Now THAT is a security flaw.
0

  • (2 Pages)
  • +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

2 User(s) are reading this topic
0 members, 2 guests, 0 anonymous users