A while ago a person I know has had a pretty significant issue that could have ended badly.
Thinking back it is a very silly oversight, but I document it here so you don’t need to repeat it.
Here is a summary
Before the situation
The user got an Adobe license from their education facility or work, the usual scenario. They were trained on Adobe software so switching is really hard.
It is possible to switch to cracked versions of every app in the creative cloud suite, but before you do that, you need to make sure to remove any trace of the account from your machine!
In practice I would recommend to reinstall Windows. Maybe keep a copy of a very barebones debloatet Win11 install and clone it with Clonezilla.
If you don’t go that far, there are many ways Adobe could re-identify you!
The user was logged into their Adobe account in Firefox, which was the crucial mistake here.
About the cracked software
I only recommend to get cracked software from reputable private trackers! I will not give names, but they could be invite-only, so join Signal/SimpleX/Session groups to get in contact with peers.
There is a release group that somehow acquires offline installers of the entire creative suite, which are not available to consumers normally.
They also include scripts to cleanup the system of previous installs, which is very difficult! Even BulkCrapUninstaller or ChrisTitus’ WinUtil had issues removing the last pieces of that install. Adobe refuses to distribute sandboxed .appx packages through the Microsoft Store, assume they have invaded your system deeply, run in the background constantly and cannot easily be removed.
Adobe is malware, treat it like that.
The patched release also contains a script that adds a lot of domains and IPs to the system etc/host file, which blocks connections to those domains, which would otherwise make the use of the cracked software impossible. When done right, this is a big privacy improvement! But the IPs and domains could change, the people could have missed some rarely occuring connections etc.
What happened
The user got an email to the mail that they had previously used for their account, greeting them “welcome back strange_username123!”
We assume this username was somehow saved in the cracked versions of the adobe software and might be the same across all installs, which would be very problematic.
How could this happen?
- Any app even without internet access can tell the OS to open a link. This link opened in Firefox (hey, at least not Edge /s)
- Firefox autofills username and password by default! This means even without any cookies, if you have saved an old login, it will autofill the email which the website can see. Instant breach. You can turn this off in
about:preferences - Even without that, Firefox saves all cookies by default, because they don’t care enough to develop a nicely usable UI. Website owners can choose how long their cookies should persist and first-party-cookies (adobe.com for adobe.com) will always be accepted. Even with cookie deletion enabled, you might have set adobe.com to the allowlist, because well, you used that in the past! Check in
about:preferences
Some Adobe software had opened this link, which opened in Firefox, which doesnt use the system etc/host file for DNS lookup. Firefox either sent the website that cookie, or autofilled the email, doesn’t matter!
We were able to find that link in the browsing history and inspect it. It contains the application version number, language, a long token and other information.
No guarantees!
Even with a wiped browser, Adobe has access to basically the entire system. It could have saved a key somewhere, maybe in the registry, that allows re-linking your identities anywhere.
You can only be sure on a clean install, best inside a VM without any internet access.
There’s absolutely no reason to use Adobe products. There are much better open source alternatives.
But… If you gonna use Adobe, please pirate it. Don’t give them any money.
And what about it? Most software companies could ID cracker software users simply from system info and files because telemetry tends to still work even after crack.
I’ve used my original adobe account with cracked adobe products for 15 years with 0 issues.
Most application data is stored in %AppData% on windows, stuff like preferences, accounts, etc…
It’s also entirely possible they just didn’t delete the old app data folder before a re-install, as those are normally left behind when uninstalling software, and the new install just picked up the account from there.
My solution to Adobe is: Gimp, Inkscape, Krita, Kdenlive, etc.
Fuck Adobe malware forever. It’s a bait and switch, and I’m never going to be taking the bait.
Yes of course. Also these cracked versions can’t have internet access so the collaboration stuff is gone.
A Windows VM or maybe even the new bottles soda runtime would be interesting for isolating it, as the invasiveness is just insane.
Drop Windows all together, I used to be an Apple fan girl so I never really learnt much Windows stuff until highschool and university. I have really realized the planned opsolesence once poop started getting real expensive so I was stretching stuff out as long as possible. Going Linux was the best choice now that crap is so expensive.
There ia aome pirated apple software but way less. Apparently creative cloud works in WINE now so who knows
I should try this, especially the cracked version
Try Linux and use FOSS, rather than pirating these things, using the services even pirated software benefits the companies.
Knowing how to use a paid service shows that you are more likely going to use it longer.
Yeah, if you don’t depend on it for your livelihood, I don’t see why anyone should go through all these hoops just to install Adobe’s malware. All those apps you mentioned earlier, I find, are perfectly fine for hobbyists.
Question: would running stuff like this in sandboxie, with internet disabled, prevent these issues?
Interesting, never heard of this. My Windows experience is very small so I assumed this simply didnt exist
Yes but my knowledge of W$ndows is limited and I dont think that exists there that much
I understand they and their colleges know Adobe, but the world needs to go FOSS faster.
Funny video haha
Removed by mod
deleted by creator
apologies for the accusation edit: not sure what the mods up to, but okay.
deleted by creator
I haven’t downvoted anything, the hell?
deleted by creator
I imagine more are on the way.
I’m glad I’m too stupid to ever be acussed of being ai out put. I’m going to say its intentional my spelling and grammer is so bad to seem more genuine.
