返回首页

对比阅读

对比阅读:PDF Black Bars Don't Hide Anything — I've Sent My Margin by Mistake 与 你的合同 PDF 里的客户信息,鼠标一拖就被看见了 — 这个坑我也踩过

AEN
PDF redactiondocument securityfreelancing·

PDF Black Bars Don't Hide Anything — I've Sent My Margin by Mistake

Last week I sent a client a PDF quote. I'd used black bars to cover the supplier pricing — but they hit Ctrl+A, copied it all, and saw everything underneath. I've been stuck in this trap too.

That job last week nearly cost me a whole month of work

I do e-commerce copywriting on the side — writing product detail pages for brands. Last week I sent a PDF quote to a client in Hangzhou, and tacked on a page with supplier cost numbers (40% lower than the client-facing price). I drew black rectangles over a few numbers and sent it off — guess what? They hit Ctrl+A, pasted into Word, and those numbers popped out clean as day.

Later I figured it out: PDFs have a "text layer." Those black bars you draw are just an image overlay — the underlying text is untouched. This is called "fake redaction." Sounds technical, but really it's just using the wrong tool.

Real redaction: the free version is enough

That 2025 Google data center water/power data leak — same mistake. Official documents used black bars on sensitive numbers, but the PDF text layer wasn't deleted, and anyone technical copied it all out. It made the front page of Hacker News. I read it and realized I was walking the same tightrope every day.

I use two methods now:

  • Minimal setup (free): Open PDF in LibreOffice Draw → select the text to redact → press Delete → export as PDF. 30 seconds total.
  • Low-effort option (paid): Adobe Acrobat Pro ($20/month) has a dedicated "Redact" tool. Select with your mouse, and it's actually deleted.

Xiaoli, an independent brand designer in Beijing, took a logo revision project for a listed company last year. Legal required all proposals to use real redaction. She made the same mistake I did at first — then her whole team switched to Adobe Acrobat. No incidents since.

Replication cost: do it tonight

  • Money: $0 (LibreOffice method) or $20/month (Adobe method)
  • Time: 10 minutes to download LibreOffice, 5 minutes to learn the operation
  • Technical barrier: If you can use a PDF, you can do this — easier than sending an email
  • First step: Right now, open any PDF on your computer that you're planning to send someone. Open it in Notepad — if you can see text, then even "fake redaction" won't protect it

If you only send a PDF or two a month, you can also just replace sensitive info with "***" or screenshot it. Not everyone needs this. But if your file has prices, contract numbers, or ID numbers — you need to learn this.

Three types of people, three different recommendations

Just starting out / still learning: The most important thing you can do right now — before sending any PDF, open it in Notepad and confirm there's no text layer. 30-second action, saves a major incident.

Got 1-2 steady clients: Install LibreOffice — free, real redaction done in 30 seconds. Run every PDF with prices, ID numbers, or contracts through this workflow.

Scaling up / team of 2+: Just subscribe to Adobe Acrobat Pro Team Edition, $20/person/month. Expensive upfront, but one data breach payout covers 5 years of subscription.

BZH
PDF涂黑文档安全自由职业·

你的合同 PDF 里的客户信息,鼠标一拖就被看见了 — 这个坑我也踩过

上周我给客户发 PDF 报价,里面我用黑条涂掉的供应商价格,客户 Ctrl+A 复制,全看见了。我也卡过这坑。

上周那单差点让我白干一个月

我做电商文案副业,给品牌写详情页。上周给杭州一个客户发 PDF 报价,里面夹了一页给供应商的采购成本表(比给客户价低 40%)。我用黑色矩形「涂掉」了几个数字就发出去了 — 你猜怎么着,对方 Ctrl+A 全选复制到 Word 里,那些数字原原本本跳出来了。

后来我才搞明白,PDF 里有个「文字层」,鼠标画的黑条只是图片盖住,底层文字完好无损。这叫「假涂黑」,听起来专业,其实就是用错工具了。

真涂黑的方法,免费版就够用

Google 数据中心 2025 年那次水电网数据泄露,也是同一个错 — 官方文件里用黑条涂掉敏感数字,但 PDF 文字层没删,懂技术的人全复制出来了。这事当时上了 Hacker News 头条,我看完才意识到自己每天都走在同样的钢丝上。

我现在用两种方法:

  • 极简方案(免费):用 LibreOffice Draw 打开 PDF → 框选要涂黑的字 → 按 Delete → 导出 PDF。整个过程 30 秒。
  • 省事方案(付费):Adobe Acrobat Pro($20/月),有专门的「涂黑」工具,鼠标框选就真删。

北京做独立品牌设计的小李,去年接某上市公司 logo 改稿,对方法务要求所有提案必须用真涂黑。她一开始也犯过我这错,后来全团队换 Adobe Acrobat,再没出过事。

复刻成本:今晚就能搞定

  • 钱:0 元(LibreOffice 方案)或 $20/月(Adobe 方案)
  • 时间:下载 LibreOffice 10 分钟,学会操作 5 分钟
  • 技术门槛:会用 PDF 就行,比发邮件还简单
  • 第一步:现在打开你电脑里一个要发给别人的 PDF,用记事本打开看看 — 如果能看到文字,说明你这个文件就算「假涂黑」也会被穿透

如果你一个月只发一两份 PDF,发之前把敏感信息换成「***」或截图处理也行,不是所有人都需要。但文件里有价格、合同号、身份证,必学。

这三类人,建议不一样

刚起步 / 还在练手的:你现在最该做的是 — 发任何 PDF 前,先用记事本打开确认没文字层。30 秒动作,省一次大事故。

有 1-2 个稳定客户的:建议装个 LibreOffice,免费,真涂黑 30 秒搞定。把你所有带价格、身份证、合同的 PDF 走一遍这个流程。

在扩规模 / 团队 2 人以上:直接订 Adobe Acrobat Pro 团队版,$20/人/月。前期贵,但一次信息泄露的赔偿,够你付 5 年订阅。