this post was submitted on 05 Feb 2024
138 points (96.6% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

54655 readers
594 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 1 year ago
MODERATORS
138
submitted 9 months ago* (last edited 9 months ago) by Deckweiss@lemmy.world to c/piracy@lemmy.dbzer0.com
 

I have bought a font with a really shitty license agreement and I have a couple of questions.

  1. How can I best share the font with the community? (I am afraid of metadata in the font files, which may be tied to my payment account etc. - I had to register and log in to download the ttf files)

  2. How can I remove the DSIG and other metadata from the ttf file while keeping it usable?

  3. Are they able to detect it if I use the font in a commercial product online by crawling my website and if yes, how could I prevent an automatic detection attempt?

To my (and possibly your) surprise, I didn't find any free downloads of the font online. Their license is tied to a personal account, you have to log into once a year to keep the license. As far as I understand they theoretically could use the DSIG to let the ttf files "expire", at least when used in software that verifies the signature. But I may be wrong, please let me know.

Thanks in advance and cheers-I mean ARR

all 43 comments
sorted by: hot top controversial new old
[–] ElderReflections@kbin.social 68 points 9 months ago (2 children)

Fonttools includes a tool to convert TTF to XML and back again. Makes it easy to inspect and remove unwanted metadata

[–] Landmammals@lemmy.world 24 points 9 months ago (2 children)

What's fun about that, is that fonts are copyrightable, but typefaces are not.

[–] Agent641@lemmy.world 3 points 9 months ago (1 children)
[–] hai@lemmy.ml 6 points 9 months ago

Basically style vs the instructions that make up the font. It’s lead to a lot of rip offs (see: Helvetica vs. Arial).

[–] Deckweiss@lemmy.world 7 points 9 months ago

Awesome, thank you! I'll try that

[–] PerogiBoi@lemmy.ca 41 points 9 months ago (2 children)

This is how u pirate a font:

Google “fontname GitHub”

The end.

[–] Deckweiss@lemmy.world 28 points 9 months ago* (last edited 9 months ago)

I did that and:

  1. The only file that is correct is only of the regular version, so there are a lot of variations missing - you wouldn't be able to get the same files as by following the paid way. The upload is 8 years old and seems to be part of an opensource website.

  2. There is another upload from 4 years ago, where the files appear to be called by the same name, but it's not the same font at all. Seems to be part of a website again, which shows a couple of fonts for comparison. Maybe they've put it there as a placeholder.

Thats why I wanted to ask how to safely upload them.

[–] isles@lemmy.world 2 points 9 months ago (1 children)

Github is really a great piracy bro.

[–] PerogiBoi@lemmy.ca 2 points 9 months ago

Yeah why not. Works in a pinch. I don’t recall where I said it was the most efficient or effective method though.

[–] yokonzo@lemmy.world 30 points 9 months ago (1 children)

Well, if you really want to keep it you could drag it into a vector graphic editing software and trace each letter, make your own font set

[–] WarmSoda@lemm.ee 9 points 9 months ago (3 children)

Side question, does anyone have suggestions for a decent free vector editing software? I've been meaning to just search for one for a long time but I always forget about it.

[–] tonyn@lemmy.ml 35 points 9 months ago

I use inkscape for vector graphics editing. It's free and open source, and runs on Linux, Mac, and Windows.

[–] yokonzo@lemmy.world 8 points 9 months ago* (last edited 9 months ago) (2 children)

So I personally would use illustrator or inkscape, one thing you have to really understand though is while this isn't very hard it will be very time consuming and monotonous. Just be warned. On average that could be 200-400 characters you have to trace, export, and put into a font compiler. Thousands if you're doing a multilingual font. Again, You can do this, but I mostly meant it as a joke, it will be very tedious

[–] WarmSoda@lemm.ee 5 points 9 months ago

I want it for general graphics, not a font. Really good advice though, thank you!

[–] ProfessorProteus@lemmy.world 2 points 9 months ago (2 children)

Could they not just (in Illustrator) use the type tool for the characters they want and convert each character to paths? No tracing required!

This is based solely on memory so I'm probably wrong somewhere lol

[–] yokonzo@lemmy.world 4 points 9 months ago

You may actually be right. The only extra step would be placing them back into a font compiler just without whatever metadata originally existed

[–] cestvrai@lemm.ee 2 points 9 months ago

It’s a bit more barebones but I really like BoxySVG

Whatever you end up doing, make sure you don’t leave out the ARRRRRs

[–] figjam@midwest.social 12 points 9 months ago (1 children)

The first and last font I downloaded was the Quake font.

[–] AngryCommieKender@lemmy.world 4 points 9 months ago

Marines we are at 5% force operational status

[–] SquiffSquiff@lemmy.world 7 points 9 months ago (1 children)

Please excuse my lack of knowledge here. Am I under to understand from your post that software that you have purchased from another supplier will check from files that you have bought from this supplier and refuse to use them based on their attestation?

[–] Evil_incarnate@lemm.ee 12 points 9 months ago (2 children)

If I have it right, it goes like this. I purchase the font package, the seller includes hidden in the files an identifier so they know it's mine. I share the files across the seven seas. The seller keeps a lookout for their fonts being shared, and spots it in the wild, downloads it and finds out who's it was.

[–] SquiffSquiff@lemmy.world 4 points 9 months ago (1 children)

Oh no, I understood the watermarking concern. This sort of thing is famous with with Oscar screeners and electronic books. I was asking about OP's suggestion that the font might be effectively withdrawn by a third party

[–] Deckweiss@lemmy.world 7 points 9 months ago* (last edited 9 months ago) (1 children)

Like I mentioned in my post, I don't really understand it, thats why I asked.

But I've read https://learn.microsoft.com/en-us/typography/opentype/spec/dsig and to me it sounds like your OS for example (or any other software) could attempt to verify the validity of the DSIG of a font. If it works similarly to other types of signing, the certificate authority, in this case the creator of the font, could declare a font signed with a specific key invalid and your OS e.g. would then prohibit you from installing it.

But I may be completely wrong here. Maybe nobody is bothering with it, but since we live in DRM hell, I wnated to ask to make sure.

[–] SquiffSquiff@lemmy.world 2 points 9 months ago

Thanks for explaining. I guess this would be comparable to e.g. Blu-ray key revocation. I suppose it's possible but I'm not sure how likely it is considering the potential downsides, e.g. legal liability, for anyone doing this, compared to I'm not sure what upsides where there's no profit to be found and all costs sunk

[–] killeronthecorner@lemmy.world 2 points 9 months ago (1 children)

Isn't this easily bypassed by modifying the "hidden" part

[–] Kanzar@lemmy.world 4 points 9 months ago (2 children)

If you even know what the hidden part(s) is, is the problem.

[–] AnAngryAlpaca@feddit.de 5 points 9 months ago* (last edited 9 months ago)

Maybe is in the metadata as someone pointed out earlier, or it could be an otherwise unused ASCII char that looks different for each user who licensed it when printed out, sort of like a qr code as a single ASCII char.

Or it could be that they simply just check filename, file size and/or md5, all of which can be easily changed.

[–] killeronthecorner@lemmy.world 1 points 9 months ago

Files have formats. Anything "hidden" here is destroyed by conversion to a different font format before redistribution.

There is no way of controlling this from the authors side without some sort of DRM.

[–] cuchilloc@lemmy.world 6 points 9 months ago (2 children)
[–] ThoGot@lemm.ee 3 points 9 months ago (1 children)
[–] remindme@mstdn.social 0 points 9 months ago

@ThoGot Ok, I will remind you on Monday Feb 19, 2024 at 10:53 PM PST.

[–] remindme@mstdn.social 3 points 9 months ago (1 children)

@cuchilloc Ok, I will remind you on Monday Feb 19, 2024 at 10:53 AM PST.

[–] jvrava9@lemmy.dbzer0.com 11 points 9 months ago (1 children)

Didn't know that the bot was ported to lemmy

[–] anguo@lemmy.ca 4 points 9 months ago

Looks like it's a mastodon bot.