PDF redaction uncovered …. again!
A cursory glance, or rather quick search at Google will reveal that the topic of redacting PDF has been hot for a looong time.
During my time at Planet PDF, we even ran a review of a US government employee’s efforts at redaction gone wrong in which a thought-to-be-redacted report revealed names, training procedures and other secrets.
Nope, this is not a new issue — there’s a swagger of “paid-for” software you can find (in addition to functionality included in Acrobat 8 and 9), using all types of methods — usefully listed by PDF ganglord, Duff Johnson.
But if you don’t have a fat wallet and you’re making use of some simpler methods — such as using the built-in text editing tool of previous Acrobat versions to remove information (or other editors), Didier Stevens (as mentioned in this Computerworld article) provides a warning:
If you produce PDF documents with a PDF editor that supports incremental updates, be aware that previous versions of your document could be included in the final document, and that this could lead to information disclosure.
My tip — be very careful to perform a full Save-As on the document (which regenerates the document completely). A normal File, Save which will be quicker, yet will use the incremental update method which means that the original document remains intact, and changes to it are added to the end. This means, that in the event of removing information, the original data still exists in the first portion of the file.
If you want to find more about the innards of a PDF file, then see Didier’s piece Solving a Little PDF Puzzle.
As for ensuring PDF metadata has been created and edited properly (or perhaps stripped) — that’s a story for another day….











[...] This is bad if you’re trying to hide sensitive information. And many, many people have been burned by this. If you want to properly delete senstive information, you need a PDF redaction [...]
[...] This is bad if you’re trying to hide sensitive information. And many, many people have been burned by this. If you want to properly delete sensitive information, you need a PDF redaction [...]
Leave your response!
Featured Posts
For those who still insist that applications can be measured by the time required for download or size of the installation, tell me how long does it take to deal with a PDF that breaks your preferred “lightweight” viewer? Somehow, that metric never makes it into the lazy claims of ‘bloatware’.”
I’ve just loaded up the latest release candidate of Windows 7 Ultimate (version 6, build 7100) — it was an upgrade on the previous (semi-dead-like-a-slug) 32-bit Vista installation. Packed it with the latest Adobe Reader (9.1 at the time, and 42mb download) for Windows Vista. Tried my best to load a PDF online and … no change. Right now, if you’re looking for a solution, try Foxit Reader…
A few days ago I tested Adobe Reader 9 on Windows 7 and didn’t discover any major issues. Adobe Reader worked correctly despite the fact that Windows 7 is not yet a supported platform. Today I thought I’d try the same with Adobe Acrobat 9 Pro.
Installing software on an unsupported operating system isn’t usually a good idea. In fact, it is quite often fraught with risk, as a lot of people found in 2006 when they tried to install software on Windows Vista that was originally been built for Windows XP and hadn’t been updated yet. Luckily — so far — it seems like it is going to be a far smoother transition from Windows Vista to Windows 7.
Blogroll
Categories
Archives
Recent Posts
Recent Comments