Slashdot Mirror
Napster Adding "Protection Layer"
bluecalix writes "According to an article on sonicnet, 'In the new Napster, which the company says will be launched "as soon as possible," users will still be able to swap MP3 files ripped from their own CDs. But Napster will add a new "protection layer" to MP3s as they move from one user's computer to another, allowing the service to control what users do with the files they download, according to a statement from the company.'"
Why doesn't anyone EVER mention vmware when referring to methods of circumventing this technology? It seems pretty darn intuitive to me that once the data steam leaves vmware linux can have its way with it. There are plenty of loopback capture methods for linux.
What did you eat today? http://www.atetoday.com/
The thing that Napster are forgetting is why it is they were so successful: It was a classic example of viral marketing. People used it because it was useful. Then more people used it because other people told them it was great - not because they'd seen a billboard advertising it. If they want to charge for napster, and the downloaded MP3's only work on that one machine - its not going to be useful is it?
So the message to those wishing to ego-pander by having (say) 100 million people using their software is simple: Go.
It has to work on Windows, like it or not, and it has to be simple. It has to be secure, it has to scale, it has to be able to search, and it would be damn handy to the lamer in the street if it could cut collections of MP3's to audio CD.
Obviously it has to be completely decentralised, cos RIAA are going to go nuts.
Go for it. Make it work. And do yourself a favour by not putting the letters 'GN' at the start of it's name.
Dave
I write a blog now, you should be afraid.
Well, it won't be an MP3, will it? It'll be some proprietary Napster file format. Most likely your Napster client has a private key and a public key. When you get an MP3 from someone else, your client gives their client the public key, their box uses this key to encode the outgoing .mp3 as a .nap, then it can only be played on your box because only your box has the private key.
Piece of piss. How does it play in an MP3 player? It won't.
Dave
I write a blog now, you should be afraid.
The way the system is set up now is that the mp3 itself never actually goes through napster. In order to somehow "add a layer" to the mp3, it would have to pass through napster at some point. Last time I checked 1,786,189 files were online. When each one is transferred, napster has to come in contact with it. This would take too much bandwidth to work properly.
This could be done at the client level, but would need to have everyone using the new client. This is time consuming and does not stop people from using the old client with something like opennap.
How could the new napster client be sure that the mp3 was from his/her own cd collection? As easily as new mp3's come with a new "protection layer", I can remove it.
Napster must realize this, and hopefully this is just a move to keep the RIAA at bay for a while because they're "doing something" to stop it, despite how easy it is to get around.
Unix is mysterious, and ancient, and strong. It's made of cast iron and the bones of heroic programmers of old -
Judging by the huge demand for file-sharing that has been evident through Napster, this is not an activity that will soon fade out.
Rather, the RIAA's contribution to shutting Napster down or gimping it with ridiculous restrictions will ultimately work against those who wish to prohibit sharing of music and files.
It reminds me of what my doctor says about taking antibiotics, "Take them until they're gone. If you only take a few, you'll just kill off the weak bacteria and eventually create a stronger strain."
Well, this is exactly what will happen. Once a central server-based system like Napster goes down, we will see noncentralized systems like the Gnutella model increase in size and reliability. The RIAA will shoot itself in the foot by forcing file-sharing to become easier to use by consumers and increasingly untouchable by industry and government.
if the idea is to keep people from burning MP3s to CDs, there's nothing to keep them from writing dummy device drivers as an intermediate step.
SBLive already has this (What-U-Hear); I'd think InterTrust (contracted by Napster to provide restrictions management) would have thought of this already. Anyway, Windows ME and Windows XP contain a Secure Audio Path that only drivers signed by Microsoft can use. And to be signed, a driver must disable all digital outputs (spdif, what-u-hear, write to .wav) when the Secure Audio Path is open.
All your hallucinogen are belong to us.
Will I retire or break 10K?
It all ended on that day
When a few actually wanted to pay
And Napster gave in
To Big Brother's whim
That day Napster could no longer stay.
__________________________________________
The people that are willing to pay for napster are the people that don't know how to download MP3s from other sources. The reason for this is probably that they aren't exactly computer junkies. They probably don't spend much time on their computers and therefore don't get mp3s to play them on their computer. They get them to put them on CDs and play them in their car or whatever. Napster will kill themselves by becoming a slave to the music industry. Why would anyone pay for napster to get stupid songs that they can't play anywhere but their computer? After the first few months of their subscription service, subscribers will probably die down once they realize how stupid it is with a small user pool and altered songs.
I don't know how many costs they would have, but I don't see them making a huge amount of profit with this plan. They could even go bankrupt. They really only have two logical options: Close now or keep up the legal battles. It's obvious their only reasoning behind this move is to please the music industry, their enemy. Yes, Napster is a business, but this move doesn't look very businesslike - Napster is basically letting the music industry control them. Whatever they do, the music industry will be watching them. If napster doesn't go bankrupt, it will just turn into a place like cdnow.com, except you can't even get CDs from it. It's the napster self-destruction.
/whois John Galt
Today is the closing of a parenthesis opened before this sig, before this story, before this existence that is me (as if
the new Napster
Oh, so it'll be pretty much like the old Napster, except now nobody will like it.
.sig last updated Jan. 14, 2000
The nightmare that immediately jumped into my mind is that this "protection layer" could come to involve brief advertisements from our favorite corporations, prepended to the beginning of every song. Otherwise, this seems like not much of a problem or hindrance--if the idea is to keep people from burning MP3s to CDs, there's nothing to keep them from writing dummy device drivers as an intermediate step. More power to them.
- could they block alternative client tools?
- could they keep people from removing the protection?
the answer to 1. is probably. Certainly they could sue anybody who is distributing alternative client tools ala deCSS and keep those tools out of the hands of most users. They could also have some kind of access mechanism that would change every couple of weeks that would be transparent to end users who would get automatic client updates to be able to use the new access mechanisms. Thus a determined hacker could get through the protection, but they would have to do it again every couple of weeks and couldn't reasonably distribute the hack to a wide enough user community to pose a threat to napster.the answer to 2. is less clear. Obviously they couldn't change the way you access older napster files on your computer. They could encrypt them, which isn't terribly feasible in terms of having to be decrypted for every playback unless the encryption is weak (maybe I am wrong on this). What about having a funky scrambled format that changed regularly? then anyone cracking it would again have to distribute updates through illegal means, which is slow, whereas their software could remember the old formats and descramble based on the date of the file.
I guess my point is that they don't have make it impossible to decrypt mp3 files to win. They just have to make it impractical for users to do it on a wide scale.
I agree with many of the posters that it's likely this copy protection will be easy to hack. I doubt that it will be on purpose, but napster just doesn't have the kind of resources or time it takes to play this kind of game. But I do think that it's a legitimate attempt. Napster investors and board members aren't looking to play cute tricks and sly wink-wink kind of routines with all the visibility this has in the country and on the hill. This is all about making their authorized subscription service, which seems like it at this point will have only one major contributor, Bertelsmann (and if other label showings are any indications, maybe only with a few hundred selected traffic)
The main issue is really the injunction. Once a reasonable rewrite is made, napster will be compelled to turn off file sharing. The injunction has nothing to do with appropriate copy protection. It will still be illegal to swap songs, even if you can't burn them.
So that leaves the high profile 1 billion dollar deal that is nothing more than a political stance, an effort to show good faith that napster wants to pay. Can you imagine as a record label taking $30 million a year to give a license to piracy?? Do you think any of the labels would take that deal from off-shore pirates? And a little honesty... Where does the $200 million a year that napster would have to produce come from? How much revenue did they book in '00 ? Probably no more than 10-20 million, and if they did that would put them at the top of the heap in private online music ventures.
The real truth of the matter is that no one, NO ONE, is doing well with online music. No one can beg borrow or steal licenses to deliver digital as the primary medium. What you're left with is a bunch of marginal online radio apps and places that offer a horrible cross-section of downloadables (emusic). Or deals where the right to stream is gotten buy buying in the correct brick and mortar store. It makes no difference, look around at the online music industry and everyone is laying off. It's simply a game of how much money you have left before you go under.
Napster is no different. The $50 million they got from Bertelsmann had heavy contingencies. If you had made an investment in napster, wouldn't you have been looking at the appeal results as to how you felt about following through with the investments.
They even hinted at doing napster for movies and games. Apparently they saw scour's unqualified success as a reason to run down that road. What on earth makes them think they can be successful against the MPAA when the RIAA has been so effective?
Napster's management has cracked like everyone else's, and they are desperately grasping at any business plan that hits their desks. It's quite interesting to watch, you can be sure it will continue to be entertaining.