JDMurray wrote: » The GIAC exams are open book; you are only allowed to take paper into the exam and nothing electronic. Given this, you would be forced to print out all of the SANS material for your GIAC exam if it were in eBook format. People would complain about that too, so SANS spends the extra money to provide their materials on paper.
JDMurray wrote: » Well, I looked through a lot of the posts on that GIAC mailing list thread about wanting PDF releases of SANS manuals. There certainly seem to be a lot of people who want electronic distribution of SANS materials despite the obvious risk to SANS' own intellectual property. A few people cite how SANS distributes the class lectures in unprotected MP3 format, so why not do the same for the SANS class books using PDF? Probably because the information in the books is needed much more to pass the corresponding GIAC exam than the information in the lectures. (Both are needed, IMHO.) A lot of people who have scored 90%+ on one or more very difficult GIAC exams would rather SANS take its chances with having its IP widely pirated--thus devaluing their hard-earned GIAC cert(s)--so they can have easy-to-search-and-carry reference materials. I see this attitude as more of a lack of business sense than of security-mindedness.
JDMurray wrote: » I'm assuming the purpose of the pirating would be to create cheating materials to help people successfully challenge the GIAC exams. It would also allow SANS' competition to augment their own training materials by incorporating SANS' own information. However, either of these objectives can be accomplished by repeatedly enrolling agents in SANS training courses and legitimately obtaining the materials and taking the exams. There are persistent stories of how a (now famous) CISSP training materials author did this to the (ISC)2 and wrote a few best-selling books from it.
JDMurray wrote: » If anyone really needs their SANS materials in PDF format they can scan and OCR their books them self. The software to do it is very inexpensive.