Slashdot Mirror


Emusic Tracking MP3s On Napster

Nice Geek sent us a wired story talking about EMusic tracking MP3s on Napster. Several issues: mainly the flaws of using MD5 checksums to determine the source of the MP3, but also the problem that using a bot violates Napster's terms of service. I don't really have any problems with this, but it'll be interesting to see what the next step will be.

42 of 159 comments (clear)

  1. Two Wrongs? by Speare · · Score: 2

    And here is the crux of the matter. A) The artists often do not own the songs the write and sing, the record companies do. Many artists get little or nothing from "their" music. B) Considering the record industries "creative accounting" practices (i.e., screwing the artists), many people seem to find it difficult to accept the record companies claim of the higher moral ground.

    You don't make a case against the theft of music via file-trading. It is theft, as the Napster user is getting the benefit of the music while the licensed distributor gets nothing in return.

    I agree that the licensed distributors are sleazebags, fat cats who wine and dine little artists, seducing them into signing horribly restrictive contracts.

    To shift the industry away from the fat cat executives,

    Get the little indies to STAY independent. Those contracts are signed with their blood.

    Organize secure downloads at reasonable prices. A buck a song, or even lower through a subscription service that can handle the microtransactions with a minimum of fuss.

    Get debit cards in the hands of teenagers. They're the market for music money, yet so few teens have any purchasing power online due to the credit card hurdle.

    --
    [ .sig file not found ]
    1. Re:Two Wrongs? by Speare · · Score: 2

      Moreover I might point out there's no constitutional right that guarantees that music companies should make money. If their target customers don't have money for CDs, maybe they should rethink their business plan.

      I wasn't suggesting that teens get debit cards to purchase CDs. Heck, if they want CDs, they can go to the local brick and mortar shop with the cold hard cash daddy gives them.

      Teens need online purchasing power to equalize the situation: indies can avoid the sleazy contracts purloined by big distributors if they can still make money from their audience. If the indies only target 40-somethings for making money, they'll starve. The indie needs to get cash from the teens, avoiding the big distributors.

      Cash flow:

      teen to debit card to online broker to indie

      Content flow:

      indie to online broker to teen

      --
      [ .sig file not found ]
  2. Re:Legitimate rips? by TheCarp · · Score: 2

    > If you read your CD it says that it is illegal,
    > without prior consent, to copy it to another
    > form.

    And if you bought a new car, opened the hood, and saw a tiny little sticker saying "it is illegal to modify this car in any way, including but not limited to the addition of racing stries, repainting and tinting of glass without written permission from Honda" would that stop you?

    Just because someone writes some words on a peice of paper (or plastic) doesn't make you legally bound by them. In truth, it has been ruled that its perfectly legal to make copies for personal use...in fact, the law explicitly states that you CAN.

    Legally, the record companies can NOT stop you. they can not take that right away. However, they write their little fine print anyway because they know that they can fool some people, some of the time.

    > How would you feel, for example, if a book you
    > wrote, was disseminated on the internet, and as
    > a result you didn't sell any books?

    I would track down the person who distributed it and shake their hand. It feels great to creat something and have someone else like it enough to share it with others. It feels great to have your work accepted and praised in such a way.

    In fact, I can think of no greater praise for my work than to have someone hand a copy to someone else and suggest that they take a look at it.

    -Steve

    --
    "I opened my eyes, and everything went dark again"
  3. MD5?! by Cyberdyne · · Score: 2
    One small problem here: MD5 is specifically designed to make sure that changing a single bit in the data changes the checksum. Assuming they check the ID tag at the end, this means you can just change the artist's name a bit - from "Spears, Britney" to "Britney Spears", say - and their `clever' software will regard it as completely different. Duh.

    Failing that, chop the last byte off the file. It won't affect the music you hear - just cutting the last millisecond or so of sound out - but it will make the file size and MD5 hash different.

    Finally, in order to calculate an MD5 hash, you need to download the whole file. EMusic plan to download every single file on Napster, just to check for files they claim rights to?? This, I must see!

    1. Re:MD5?! by Fizgig · · Score: 2

      If you go entirely on the MD5 hash, you will get false positives: look at the "birthday problem" to see why. With literally millions of different songs on Napster, there will be many random "collisions" (as they are known in crypto circles).

      Well, technically yes. Practically no. MD5 is a 128-bit hash, so there are 2^128 hash values. You'd need 2^64 distinct MP3s before you're likely to find two which hash to the same thing. 2^64 is really, really big. MD5 may or may not be a perfect hash (I think there is some evidence of flaws), but even if specific attacks were known, it's not like people are going to specifically construct MP3s so that they get hash to a known value (making themselves "look guilty" on purpose).

    2. Re:MD5?! by Cyberdyne · · Score: 2
      the napster client already sends your MD5 info into the servers on login, it was used for auto resuming which has been disabled now..and it only MD5's the first 300k so if you have an incomplete file that's 350k and the full file is 5Mb the MD5's will match as the first 300k will be identical and we can safely assume it's the same file and resume regardless of filename.

      If you go entirely on the MD5 hash, you will get false positives: look at the "birthday problem" to see why. With literally millions of different songs on Napster, there will be many random "collisions" (as they are known in crypto circles).

      Of course, you can then remove or randomise the hash from your Napster client. Since it is no longer used, why keep it?

      Then there's the problem Emusic will be using a bot to do all this - at which point, they get barred from the service for ToS violations!

  4. Using a bot by C8H10O2+MF · · Score: 2

    Violates Napster's user agreement?
    Ehr..So does 80% of the Napster users, if not
    more, by downloading Music files and keeping them
    longer than a day.
    Who cares..Sueing individuals for downloading
    illegal music is the same nonsense as prosecuting everyone with a VHS copy of some
    movie.
    Napster's user agreement is a joke..
    Then again, it's a very good joke that prevents
    them from being guilty of spreading
    illegal copies. They are not, and I think Napster
    is doing a great job.

  5. This doesnt make sense. by pallex · · Score: 4

    How will this work? If N people mp3 a song, then unless they all use the same software, and the same options, they`ll get different files. Some may normalize the wav file before mp3`ing. Some will trim the file to remove silence at the end (for example, the penultimate track may have loads of silence to `hide` the bonus track).
    If this took off, mp3 encoders could invert the song, or add some random bits to the end of the song.

    Basically, there is no way they can do this. They`d have to constantly be downloading songs - any song - and then either listening to it, or use yet more vapourware - a tool to analyse a song and guess which song it actually is - before taking action.

    I cant see how this would work!

  6. Re:And why not? by McFiegolx · · Score: 2
    I want to enjoy music I can download, and Napster stands in the way of this.

    Actually I think you could argue the complete opposite. Napster forced the big 5 Record Labels to acknowledge the Internet as a potential market. I'm sure Napster's press citing 20 million users and previously unrecognised demand helped get the attention of record company directors.

    Do you think that without Napster and MyMp3.com, you would be seeing the current rush by the big 5 to start their own distribution sites?

    Paul

  7. God, what's next. by Perlguy · · Score: 2
    Why don't we ALL fsck with Napster, everyone else does....


    Thankfully I get all of my online music via usenet...

    First!

    --
    -- Windows security? Sure, which ONE would you like? -me
  8. Re:Emusic also sponsors open source Linux projects by jcsmith · · Score: 2

    Emusic is already an attractive alternative. I no longer have to waste my time downloading songs from users with 14.4 connections. I no longer have songs that are poorly ripped. No more partial rips. And no RIAA police banging on the door. All that for $10/month is a steal.

    If only they had a system to suggest music I might like based on how I rate the songs I download.

  9. This sounds familiar by 91degrees · · Score: 4

    Sounds like the BSA's "Pirate software detector vans" that can detect when you're using an illegal copy of a program.

    They just want to scare poeple into behaving.

    1. Re:This sounds familiar by TheGratefulNet · · Score: 3
      BSA's "Pirate software detector vans

      huh? are the Boy Scouts of America into driving pirate-detector vans these days? I thought they were putting most of their muscle into gay-detection...

      --

      --

      --
      "It is now safe to switch off your computer."
  10. Oh no! They violated the EULA! by sheldon · · Score: 2

    Haven't you heard? EULA and copyrights are evil.

    I just found it incredibly funny that someone would complain, especially a slashdot editor, about violating the terms of service on Napster.

    Haven't you heard? Napster can't control what their users do.

  11. But what will they track?? by web_angel_tr · · Score: 2

    Nice. And it will take only a few weeks and then there is a crack which will mask the Files so that they can not be tracked anymore...


    --

    --
    There is no such thing as gravity. The Earth just sucks.
    1. Re:But what will they track?? by mian · · Score: 2

      actually it took about an hour.. http://forums.napigator.com/read.php?f=4&i=20820&t =20820&l=0 (scroll down to last post)

    2. Re:But what will they track?? by True+Dork · · Score: 2

      The md5 is created by the napster client stored in the shared.dat on windows machines and in ~/.gnapster/shared for gnapster. That is what is sent to the napster server for the search engine. All you have to do is alter the md5 in the file and poof, emusic's little bot is worthless. I made a dippy little bash script that scrambles the md5s in my gnapster shared file and then launches gnapster for me. No cracking involved.

  12. Finally! by buttfucker2000 · · Score: 2

    We have something that can control Napster. Let's hope it succeeds - people think they have a right to steal music, and they don't. Just because it's not physical theft, doesn't make it not theft.

    The artists (or the record company) own their recordings and have the right to do what they want with them.

    Middle class white collar theft is no less theft than any other kind of theft.

    Things about 'banning bots' etc are nothing set next to the fact that Napster is a tool for theft, plain and simple. These things are only used (or at lest 99%) to distribute stolen music.

    --
    Free Anne Tomlinson!!
    1. Re:Finally! by thdexter · · Score: 2

      I find it amazing this got modded up.. Anyway, Napster is a tool -- but not one for theft. It can be used for theft, but so can the Internet. So can Usenet. So can my car, ad infinitum. Napster does have a "no bots" policy -- because they're doing this in the name of Good, they should be able to walk over that? What if I made a rule for my DNS server that I didn't want anybody packet sniffing? It wouldn't stop anybody -- but then they'd also be violating my policy. If Napster has a "no bots" policy, it won't stop many people from using bots - but they're violating the policy. I come to my previous statement; Are they allowed to do this just because they're in the name of ethics? Morals? Commander Joe? I don't quite think so, myself. Nobody ever claimed to have a right to steal music, last I checked. I wonder - Did you use the "preview" button before you submitted?

      --
      I'm on a road shaped like a figure eight; I'm going nowhere but I'm guaranteed to be late.
    2. Re:Finally! by GeekDork · · Score: 5
      Your modem/DSL/ISDN adapter is a tool for theft. Throw it out of your window immediately or I will sue your nuts off, bubba... ;-)

      This discussion is old and boring. Napster itself is a tool for exchanging music. It is, however, used to exchange "illegal" music(???).

      EMusic is using a bot on thre service and therefore should be banned from the network as anyone caught running one. I don't want to hear someone cry "it's a good bot!" or stuff like that. EMusic violates Napster' s TOS and even makes it public. There's no excuse for plain stupidity.

      Aaaah! My blood pressure's coming down again...

      --

      Fight hunger. Filet a politician and send him to a 3rd world country of your choice.

    3. Re:Finally! by LostScorp88 · · Score: 3
      So, we are to assume that you NEVER right-clicked an image on a webpage and saved it and used it. Or that you never forgot to give credit to the original author for something you quoted. Or that you never, ever burnt a CD-R or gave someone something that may have been copyrighted (eg, a game or application). Well, you get the idea.

      Napster may be used for theft, but the software itself is not a criminal. All it does is allow people to download songs from others. Some people view Napster as this evil tool, when all it really does is allow people to trade music. They could do this anyway, but Napster makes it much easier and more accessible. Very few people truly abuse it. Most of the users just downloaded a few selected songs, making the total loss to the artist virtually nothing.

      And it's not like they make a ton on the CD either. They get very little of what they are sold for. Each song is worth cents. So buying CD's doesn't do them that much better.

      Finally, having a little bot to monitor the files you have is an invasion of privacy. Those files could be legitimate rips from CD's. In short, any attempt to monitor Napster activity is no better than monitoring where you go on the Net - it is a blatant violation of privacy. Do you want some machine looking over your shoulder, seeing you downloading that "evil" music? Don't think so. The future lies in freedom, not in the old way of selling CD's costing in excess of 15 dollars.

  13. Re:Offtopic digression. by ichimunki · · Score: 3

    I was going to moderate on this story, but there's no moderation tag for "-1, Obviously Stupid", so I'll have to respond. Last time I checked, farming was one of the few remaining commodity markets in existence, which practically gaurantees that farmers are at the mercy of the few large corporations who buy the bulk of their products, and with the ongoing consolidations in the agriculturally-derived manufacturing industries (look at RJR Nabisco, look at Pillsbury being merged with General Mills), expect this to get worse.

    It simple economics, the fewer buyers there are, and as long as sellers are mostly dependent on those buyers, the buyers will be able to set their price about as low as they want to. Where I live in Minnesota, this is a continuous issue-- where families that have farmed for generations are now having to find other means to make money since farming is becoming increasingly unprofitable at the smaller, family-sized farm level. In fact, there is a large movement, especially among the devotees of organic produce, to support locally-owned, family-style, non-corporate farms in a very direct way (through co-ops and such).

    In other words, this analogy is flawed, I hear about farmers being ripped off a lot more than I hear about rock stars being ripped off. I also hear about farmers consistently losing ground through no fault of their own. Given the ease of capitalizing a CD pressing and the incredible number of outlets for same, I can't say I have the same sympathy for musicians too dumb not to whore themselves to RIAA member corps.

    --
    I do not have a signature
  14. Changing The File by graystar · · Score: 2

    The guy that reversed engineered the protocol said that you only need to change one bit. What is to stop, say something like Gnapster to just change one bit at the start and end randomly? Will this affect the song playability that much? This an example where open-source clients are going to be so much better, especially considering an move by Napster to do this would be against their case.

    --
    -- Cheer, Cheer, The Red and the White.
  15. Re:MD5?! (parent overrated) by burris · · Score: 2
    If you go entirely on the MD5 hash, you will get false positives: look at the "birthday problem" to see why. With literally millions of different songs on Napster, there will be many random "collisions" (as they are known in crypto circles).
    Uh, did you do the math here? MD5 is a 128-bit hash. The birthday attack reduces that to the square root, which means on average you'll need to generate 2^64 hashes before finding a collision. Last time I checked, 2^64 is quite a bit larger than "millions" (which is about 2^20). The magnetic particles on my hard drive platter spontaneously rearranging themselves into Britney Spears new single is more likely than any two songs on Napster accidentially having the same hash.

    To put this into better perspective, distributed.net has been trying to find a single 64-bit key for close to three years now and the key rate is up to 121 billion keys per second without success.

    Burris

  16. Re:And why not? by Patrik+Nordebo · · Score: 2

    If the RIAA moves slowly this will only encourage people to copy more music illegally, since 99%+ of the songs on Napster were originally ripped from legitimately purchased CDs. Napster should spur them on to find ways to make it possible for people to easily get music over the net. Since searching for a completely secure method of distributing music is going to be futile, anyway, they should concentrate on getting money from people by giving them what they want.
    Of course they may well be too stupid/naive to understand this, but then they should be replaced with people who aren't.

  17. Re:And why not? by lizrd · · Score: 2
    I wasn't actually referring to the content of the traded mp3s but more to the quality of the mp3s themselves. Finding songs worth listening to is a bit of a challenge no matter where you look for them, be it at a record store, CDNow, or Napster. Dark side of the moon is also one of my favorite albums. But if I were to search for "Pink Floyd Money" on Napster chances are that what I would download would be complete and total shit. What I see as part of the value of paying for an album is getting a competent audio engineer to make the master that gets stamped onto the disk and not having that work undone by some AOL user trying to rip their CDs into a lossy audio compression format.

    I agree with you that there is a great deal of crap on the market. There are also some real jems. Lately Blue Note has been releasing some of their prize recordings on CD. Say what you like about music today being a rip off of everything good that was done by Pink Floyd, the Stones et. al. in the 70s, but remember that most of what they did was building on what John Coltrane and Miles Davis et. al. did in the 40s.
    _____________

    --
    I don't want free as in beer. I just want free beer.
  18. MD5 ? by Stavr0 · · Score: 2

    Last time I checked the MD5 check used in NAPSTER is calculated off the first 300kb (ballpark). So changing the last bytes of the files won't change the MD5.
    ---
    Inanimate Carbon Rod thanks you for your support. See you in 2004!

    1. Re:MD5 ? by thdexter · · Score: 2

      Well-- use id3v2 then :P

      --
      I'm on a road shaped like a figure eight; I'm going nowhere but I'm guaranteed to be late.
  19. Re:Policing is fine, but not when it the tool fail by thdexter · · Score: 2

    I hate doing this, considering I just replied to another post, but.. Policing Napster downloads isn't all fine and dandy, it violates their policy. If you agreed to the policy, you're therefore free to be banned from the service. Black and white. On or off. One or zero. That's it - nothing deeper. If there is an investigation system, then the only people who would be authorized to use it are Napster Inc., or people they in turn authorize. Besides, I have author permission on all 700 of my mp3's. I ripped and encoded them, gave myself permission.. Now, I don't allow you to copy them. Nyeh.

    --
    I'm on a road shaped like a figure eight; I'm going nowhere but I'm guaranteed to be late.
  20. Misleading by rinkjustice · · Score: 2

    "People don't have the right to privacy when they are publicly making available infringing songs," Hoffman said. "A burglar doesn't have that right when he's walking with a television under his arm."

    What an incredibly misleading analogy. An mp3 is a digital representation of a song, not the real goods. Audio signals are removed and repetitous or similar patterns are looped, so what the listener is hearing is a reasonable fascimile of the music - no more. Comparing it to breaking into private property and stealing a television set is quite a stretch.

    Your Support for Napster Can Make a Difference

  21. No, It isn't theft by Syllepsis · · Score: 2

    We have something that can control Napster. Let's hope it succeeds - people think they have a right to steal music, and they don't. Just because it's not physical theft, doesn't make it not theft.

    People do not have a right to copy music without permission under the current body of laws designed to compensate artists so that the increased body of art will further the public good. That being said, it is wrong to live under the contract of this society and disregard completely this piece of the contract.

    Unauthorized copying is not ethical under the currently accepted system of artist repayment in the US. However, this is not a universal ethical guideline, and in other places it may not apply. Unauthorized copying is in no wy, shape, or form theft. The artist still has the master locked away for themselves and no one looses access to the artwork (actually the record company owns the work). Stealing an idea is akin to talking away the notebook of secret plans, copying such a notebook is simply unlawful replication, and not theft. The only thing that is possibly lost when an mp3 is downloaded illegally is the monetary compensation which the record company is entitled to by agreed upon US law, and this compensation is only truly lost if the kid had some intention of actually buying the work.

    I am tired of the theft analogy. It was made up by software and record companies trying to sensationalize this entire process. Later society might realize that IP ownership applied to music has been in no way productive to society, esp. considering the downward spiral popular music has made in the last century, from baroque masterpieces and culturally viable folk art, to trite commercial music marketed to the LCD of the 14 year old population, with large stadium concerts (the worst accoustic environment imaginable) in which overpriced tickets result in riot and death.

    Furthermore, as an owner of over 300 legally purchased CDs, I have found that through false promises and illegal trade restrictions, the music industry more of less owes me about $500-$1000. Add to that the piracy surcharge I paid on my blanks I used to copy BSD and Slackware legally. Fair, no?

    You must own stock to actually support these theives.

  22. Re:Oh no! They violated the EULA! by sheldon · · Score: 2

    Could you define the word 'complaint' for me?

    Thank you. ;)

  23. damn... too late again... by tewwetruggur · · Score: 3
    well, pooh. I had been working on shrinking hound dogs to the size of an electron to follow MP3's by scent. I'm sure I was only 2-3 weeks away from a major breakthrough on this, too...

    damn damn damn!

    and I already had the Milkbones ready for 'em.

    --
    Hi! This is the Sig, blatantly attached to the end of this comment.
  24. Re:And why not? by Darth+Yoshi · · Score: 4
    A few quibbles.

    Whilst the move to digital, downloadable music is inevitable at this point, Napster has made sure that the RIAA will move as slowly as possible whilst aiming for maximum control over every aspect of online music.

    I would disagree. If anything Napster has accelerated the industry's move to online distribution. RIAA (and the music industry in general) is an established bureacracy who believe the adage, "If we're making tons of money from brick and mortar stores, why should we go online"? Napster et al, have given the music industry a well deserved kick in the butt.

    Napster really is not the future of online music, ...

    Strictly speaking, I agree, but I think something Napster-like may be.

    and has merely solidifed the opposition of a lot of artists to making their music available online

    And support from a lot of other artists, especially (but not exclusivly) indie artists.

    teenagers won't go out and buy a Brittany Spears CD

    You say this like it's a bad thing. :-)

    b) theft is still theft - the artists have not given their permission to do this and so anyone uploading their tracks onto Napster is infringing upon their rights to control what they produce.

    And here is the crux of the matter. A) The artists often do not own the songs the write and sing, the record companies do. Many artists get little or nothing from "their" music. B) Considering the record industries "creative accounting" practices (i.e., screwing the artists), many people seem to find it difficult to accept the record companies claim of the higher moral ground.

    I want to enjoy music I can download, and Napster stands in the way of this.

    You're entitled to your opinion. To restate my opinion, I think Napster has been a wakeup call and the record companies will have to move damn fast to come up with a consumer acceptable online alternative.

    --
    // TODO: fix sig
  25. Emusic also sponsors open source Linux projects... by big.ears · · Score: 5
    Emusic is one of the sponsors of the Freeamp open source music player (which has limited support for .ogg formats, and is available for Linux and Windows). They have teamed with a company called Relatable, and another project called MusicBrainz, to categorize and catalog mp3s and cds. Relatable has a signaturing system that I believe uses acoustic fingerprinting--which is robust to small errors (or maybe even large errors) in songs. MusicBrainz takes these fingerprints and uses them to determine what songs you actually have, and then can use collaboritive filtering techniques to suggest playlists to you. I think this combination and seamless integration is making freeamp a very attractive player, although it still needs a little work and a little more help from interested developers.

    What does all of this have to do with napster and you? Well, freeamp allows you to download/stream music from emusic fairly easily (for a fee--something like $10 a month). So, if the napster distribution channel dries up, they become a quite attractive alternative. No more crappy searches, no more little red dots beside the songs, linux integration, artist-tipping support. Now, I'm not saying that emusic's actions here are good or bad, but do have a legal approach to digital music, while napster/gnutella/etc are questionable at the very least. They do support an open source project as well.

  26. Theft vs real open market by synq · · Score: 3

    You have a point. Stealing things is not right.

    But opening a way to buy music while not letting the 'monopolist' record companies be the only ones to distribute it may make very well sense. Music that's not as good as other music may have a lower price. Plus, using the internet as a distribution medium is much cheaper than CD's that need packaging and handling.

    --
    sig not found
  27. Emusic are a legitimate source by TMB · · Score: 2
    Looks to me like it would be useful only for detecting stuff that was downloaded from a "legitimate" source (are there any?) and put unchanged onto Napster.

    The reason you're seeing this come from Emusic and not The Big Five(tm) is that Emusic are a legitimate source of digital music. Unless people go to the effort of purposely modifying the mp3 files they get from Emusic before putting them in their Napster directory, the files will be identical.

    Before now, there's never been any reason anyone would go to that effort. But now, I suspect you will see lots of utilities that flip some number of random bits in a file to destroy the signature.

    Incidentally, there are plenty of other legitimate sources, and they're growing by the day. The majority are band's own websites... often an exclusive remix or a live version of a song. As a current example, the official Nine Inch Nails site contains two tracks that were not put on the new remix album "Things Falling Apart".

    [TMB]

  28. Re:And why not? by lizrd · · Score: 2
    I want to enjoy music I can download, and Napster stands in the way of this.

    Couldn't agree with you more. All that Napster really does is make lots more really bad mp3s avaliable to a huge audience and see that they get handed around further. I stopped using Napster quite a while ago because so much of the music there sounds really bad (as if mp3s weren't bad enough to start with) and/or is missing the end of the song. As far as I'm concerned, it's still worth some money to be able to buy an album and know that I'm getting something quality.
    _____________

    --
    I don't want free as in beer. I just want free beer.
  29. Re:yes, but not what by Pope · · Score: 2

    I suppose you pay the farmer directly for everything you eat, right?

    Pope

    Freedom is Slavery! Ignorance is Strength! Monopolies offer Choice!

    --
    It doesn't mean much now, it's built for the future.
  30. Automatic anti-MD5 scrambling? by sid_vicious · · Score: 2
    "You can't forge MD5," Weekly said via instant message. "Napster uses MD5 to fingerprint each song. The thing is, if you change one bit in the song, you get a different MD5. Meaning that if you try and track songs by their MD5s, and the users find out, they will be able to very easily modify their songs to have wildly different MD5s."

    Why not make this part of the file-sharing protocol? The user could click a box that says "Use anti-signature device" before downloading and a few unimportant bits would get flipped intentionally during download. Then, every file would have a unique MD5 signature.

    --
    If it ain't broke, it doesn't have enough features yet.
  31. Let Me Get This Straight .... by StormyMonday · · Score: 2

    They go through Napster to find cuts with "their" particular MD5 checksum. Every ripper, of course, creates bit-by-bit identical .mp3 files (needed to get the same MD5).

    Looks to me like it would be useful only for detecting stuff that was downloaded from a "legitimate" source (are there any?) and put unchanged onto Napster.

    As soon as Napster starts letting the record companies run bots against their servers, they're dead meat. All the record companies have to do is look for people serving stuff that *might* be theirs, and then download it to check it out. Of course, they'll have to keep downloading it to see if it has changed. Bandwidth? What bandwidth?

    --

    --
    Welcome to the Turing Tarpit, where everything is possible but nothing interesting is easy.
  32. Re:And why not? by Captain_Frisk · · Score: 2

    I agree with some points. Theft is theft. However, a good portion doesn't view downloading mp3s as wrong. Whether or not this is "morally" or "legally" wrong is irrelevant if the majority of society doesn't believe it to be so.

    Sharing files on Napster is no different than lending someone one of your CDs for a day. You don't know what they are going to do with it, perhaps they just want to hear more of the band, perhaps they are going to copy it and sell it on the black market. The only difference is that Napster gets more press because it occurs on a larger scale.

    I don't know what the solution to this is, but I think its unfair to say that Napster is completely wrong. Instead of trying to fight napster, the record labels should be looking for methods to compete with it, charging money if they desire, or finding ways to make purchasing records more popular. Peer to Peer is out of the bag. Even if they shut down Napster, there will be others. They should learn to adapt.

    My 2 cents... Captain_Frisk