Some additions [LWN.net]

Some additions

Posted Apr 2, 2025 20:48 UTC (Wed) by mbunkus (subscriber, #87248)
In reply to: Some additions by Cyberax
Parent article: Catching up with calibre

> This is still possible, but you need a physical Kindle device. You need to download books onto the device, and then you can import them into the library. The same de-DRM plugin still works.

Never had one, and when that loophole was closed I simply stopped buying eBooks from Amazon. I'm currently buying from Kobo, and removing DRM from their books (when they have DRM) with the corresponding calibre plugin works fine at the moment.

> Highly don't recommend. It has a history of vulnerabilities. Instead, you can use Calibre-Web ( https://github.com/janeczku/calibre-web ) in a Docker container. It interoperates with the regular Calibre database, so you can use them both at the same time. I'm using the regular Calibre to organize my library and to browse the books, but Calibre-Web to interact with my library from my phone.

I'm running calibre's server behind an authenticating proxy instead of using calibre-server's own authentication. Unfortunately calibre-on-Android doesn't send the authentication for requests to the book's thumbnails, requiring exceptions in the proxy.

I didn't know about calibre-web. That looks very interesting. Thanks for the recommendation.

to post comments

Some additions

Posted Apr 2, 2025 20:56 UTC (Wed) by Cyberax (✭ supporter ✭, #52523) [Link]

> Never had one, and when that loophole was closed I simply stopped buying eBooks from Amazon. I'm currently buying from Kobo, and removing DRM from their books (when they have DRM) with the corresponding calibre plugin works fine at the moment.

I'm following several authors, and Amazon apparently offers a good deal for them that requires a 1-year exclusivity, especially if they want to release to Audible.

But yeah, I'm switching to Kobo for all other purchases.

Authenticating proxies

Posted Apr 3, 2025 7:09 UTC (Thu) by DemiMarie (subscriber, #164188) [Link]

That matches my strategy for iffy web applications: put them behind NGINX with client certificate authentication required.