Slashdot Mirror


RIAA to DoS Pirates?

_Chainsaw sent an article running at ZD that talks about the RIAAs latest plan to stop pirates: " We'll smother song swappers " is the quote, but it basically amounts to a Denial of Service. Way to go guys! Brilliant strategy!

616 comments

  1. Cool... by Anonymous Coward · · Score: 4, Funny

    ... does that mean I can respond with a Smurf attack? I mean, they started it...

    1. Re:Cool... by mAIsE · · Score: 0

      let the games begin !!!!

      wouldnt this technically be an act of corporate terroism(via the new terrist act)?

    2. Re:Cool... by Anonymous Coward · · Score: 2, Funny

      eye for an eye
      server for a server

      just link the offending site to an article on slashdot

    3. Re:Cool... by Anonymous Coward · · Score: 0

      Good'ol OpenBSD Transparent Bridged Firewall and OpenBSD NAT behind that. pfft, what can they do?
      Filtering more than just non-ip protocols on a bridge.

    4. Re:Cool... by Anonymous Coward · · Score: 0

      What I was thinking, why doesn't Kazaa just make the copyright on their protocol read that RIAA, employees or RIAA, etc... cannot modify the client or use the protocol, and then start a legal fund to sue RIAA under DMCA legislation for by-passing copy protection mechanisms

    5. Re:Cool... by Anonymous Coward · · Score: 0

      What about a DoS utility that we could all run that would DoS them? They can't possibly sue or catch us all.

  2. Riaa to fight hackers on own terms... by kilgore_47 · · Score: 5, Funny

    ...hilarity will surly ensue.

    --
    ___
    The way to see by faith is to shut the eye of reason. --Ben Franklin
    1. Re:Riaa to fight hackers on own terms... by Amazing+Quantum+Man · · Score: 5, Funny

      Don't you mean "Hilary (Rosen) will surely sue"?

      --
      Fascism starts when the efficiency of the government becomes more important than the rights of the people.
    2. Re:Riaa to fight hackers on own terms... by reverius · · Score: 0

      I think what he's trying to say is "funniness (hilarity) will definitely (surely) follow (ensue)."

      So... funniness will definitely follow the RIAA's attempt to fight hackers on their own terms.

      Hmm... it's almost understandable now. :)

    3. Re:Riaa to fight hackers on own terms... by synthetic · · Score: 1

      you forgot "And France surrenders"

    4. Re:Riaa to fight hackers on own terms... by Dlugar · · Score: 1

      I think he meant "Hilary, surly, will sue."

      Dlugar

      --
      Computer Go: Writing Software to Play the Ancient Game of Go
    5. Re:Riaa to fight hackers on own terms... by Absynthe · · Score: 0, Flamebait

      Shut up and sit down. Didn't you hear Ari Fleisher "Be careful what you say"? You are the silly stuffed shirt tory cunt. Bet you just can't wait for Daddy to come get someone who dares speak ill of him.

      Grow a spine and maybe look up to people who are willing to dissent under the most repressive laws since the anti-sedition acts of the 18th century. They have a set of cajones unlike anything you've ever known.

      P.S. for the first "patriotic" idiot to mod me down I could give a damn, I'll still be posting at 2 for the next 10 years

  3. Wont work by ZaneMcAuley · · Score: 2, Interesting

    How can they be sure that theyre hitting a user that falls under the laws theyre enforcing by themselves? What if the user is in a country not covered by those laws?

    Could they themselves could be hunted for performing terrorist actions under terrorism laws?

    --
    ----- Whats wrong with this picture? http://www.revoh.org:1234/whatswrong
  4. Arrest them by totalnubee · · Score: 4, Insightful

    Wouldn't that qualify as a terrorist act now?

    "Even when I say nothing it's a beautiful use of negative space."
    - Indelible, "Fire In Which You Burn"

    --
    "Even when I say nothing it's a beautiful use of negative space." - Indelible, "Fire In Which You Burn"
    1. Re:Arrest them by kilgore_47 · · Score: 3, Interesting

      "The new strategy would take advantage of file-swapping networks' own weaknesses, amplifying them to the point where download services appear even more clogged and slow to function than they are today. Because most peer-to-peer services are unregulated, the quality of connections and speed of downloads already varies wildly based on time of day and geographic location."

      I don't think there is a legal way to do what they are describing.
      I think this might be yet another scare tactic.

      --
      ___
      The way to see by faith is to shut the eye of reason. --Ben Franklin
    2. Re:Arrest them by punchdrunk · · Score: 1

      If you had read the article you might have noticed the section where they talk about that, and how the RIAA is lobbying for a clause that exempts copyright holders.

    3. Re:Arrest them by TheOnlyCoolTim · · Score: 5, Funny

      Hacking/Cracking is only a terrorist act if you don't have enough money to bribe Washington.

      Tim

      --
      Omnia vestra castrorum habetur nobis.
    4. Re:Arrest them by Anonymous Coward · · Score: 0

      So as long as Usama bin Laden has some sort of copyright on some sort of book or song or video or something, he'll be able to freely commit acts of terrorism?

    5. Re:Arrest them by Anonymous Coward · · Score: 0

      No, but he could hack an originasation that knowingly infringes on his copyright.

    6. Re:Arrest them by yesthatguy · · Score: 1

      ...or are unwilling to, as in the case of bin Laden. He's loaded, and indirectly bribing the government with all the money that they're "freezing." However, he actually has (in his head) good reasons and a strong stance against Washington.

      --
      Yes! That guy!
    7. Re:Arrest them by Anonymous Coward · · Score: 0

      Except that they already tried and failed to buy the amendment. Oh jeez, maybe Washington isn't quite as broken as you think. Typical knee jerk reaction by someone who would rather whine than actually investigate.

    8. Re:Arrest them by Anonymous Coward · · Score: 0

      You seem to have misunderstood the meaning of the present conflict.
      When the little guy attacks the big guy, that's terrorism.
      When the big buy attacks the little guy, that's defense.

    9. Re:Arrest them by ajs · · Score: 5, Interesting

      No, it's not a terrorist act (according to the bizzare logic of the new anti-terrorism bill) unless they're doing it for financial gain....

      Oh wait! That's EXACTLY why they're doing it!

    10. Re:Arrest them by AssFace · · Score: 1

      $10 million for their head.

      and another $5 million if you have video of them getting raped by a horse.
      lord knows I do.

      --

      There are some odd things afoot now, in the Villa Straylight.
    11. Re:Arrest them by Rob.Mathers · · Score: 1

      FYI: "Freezing" someone's account does not mean that they take the money. What it does mean is that the government fines any financial instituiton that transfers, deposits, withdraws (pretty much anyone that does anything with the money) anything from that account.

      --

      My other sig is funny!
    12. Re:Arrest them by jmauro · · Score: 1

      If they're doing it for financial gain its not a terrorism act by any definition (Congress may prove me wrong though). Terrorism in inherently political. If hacking was done for political purposes, then it would terrorism. Guess Linus and RMS are on the same level as bin Laden though. Oh well.

    13. Re:Arrest them by yesthatguy · · Score: 1

      Yeah, I was aware that it wasn't directly taking the money...but what happens once bin Laden dies, or the organizations/individuals with frozen assets are prosecuted and convicted. Does the money then go to the government, get wiped out of existence, or what?

      --
      Yes! That guy!
    14. Re:Arrest them by psych031337 · · Score: 3, Informative
      From the link... they have already identified this as a problem and adress it properly (mainly by lobbbying and lieing - but read for yourself:

      Already a potentially contentious plan, the recording industry inadvertently sparked a further wave of criticism last week with plans to protect its strategy from being undermined by a pending antiterrorism bill.

      RIAA lobbyists sought a provision to the bill that would shield copyright holders for any damage done to computers in the pursuit of copyright protection--a goal that critics charged was too broad and might even give the group the ability to spread viruses in the pursuit of pirates.

      "We referred to it as the 'license to virus,'" said one congressional staffer. "It would have given them the incentive to employ lots of hackers trying to figure out how to stop (MusicCity), Morpheus or Audiogalaxy."

      An RIAA spokesman said the group was simply trying to protect its existing tools, not expand them.

      "We have a legitimate concern that the measure currently being debated could unintentionally take away a remedy currently available to us under law that helps us combat piracy," said RIAA spokesman Jano Cabrera.


      Pretty much says it all.
      --
      +++ath0
    15. Re:Arrest them by dswensen · · Score: 1

      No, it's "Freedom Fighting."

      Fighting free as in free beer.

    16. Re:Arrest them by annenk38 · · Score: 1

      A finn of Swedish descent named Torvalds is already a terrorist -- at least according to Swordfish Hmm... I wonder who commissioned the production of that film.

    17. Re:Arrest them by Anonymous Coward · · Score: 0

      Of course. See Israel/Palastine, USA/Afghanistan, ISA/Iraq, etc.

    18. Re:Arrest them by COAngler · · Score: 1
      Yeah, I was aware that it wasn't directly taking the money...but what happens once bin Laden dies, or the organizations/individuals with frozen assets are prosecuted and convicted. Does the money then go to the government, get wiped out of existence, or what?



      Money doesn't just "get wiped out of existence."



      What happens is eventually, the money either gets released or forfeited. Release basically requires the owner's petition for the release to be granted by a court, AIUI (I'm a little weak on Federal forfeiture law.) Forfeiture means that the government basically files a lawsuit with the money/assets as a defendant, and is required to show to a preponderance of the evidence that the money was either the proceeds of a criminal enterprise or the means to commit one.



      If the money's traceable to ObL, well, he ain't getting it back. He'd have to appear in court to petition, and would be hooked in a heartbeat.



      Or the money can stay frozen indefinitely. If he dies, that's not impossible.

    19. Re:Arrest them by Anonymous Coward · · Score: 0

      Would the bank still have the money on in its "coffers" allowing it to conduct financial transactions? If so, this is not a bad deal for the bank, a depositer that can never make a withdrawl.

    20. Re:Arrest them by whereiswaldo · · Score: 1

      You know what, if the RIAA (and possible collusionists) wants to start playing strongarm with their customers, then their customers are going to go elsewhere for entertainment and music. There are _plenty_ of good singers out there and good bands and performers who aren't under the big black umbrella. Mostly, these people are just missing a distribution channel.
      We should willingly strip all our music sharing services of copyrighted music, thumb our noses and the RIAA and only distribute FREE music that good bands don't mind giving to their fans. It doesn't have to be the whole album - just 3-4 songs for example. If they're good, people will go to their site and buy ... if not just for the fact that it helps put money in someone _else's_ pocket for a change.
      Anyway, this news is starting to smell like Microsoft's tactics of late more and more... it can only hold up for so long, then people are going to say f-ck it. A lot of people are at that point now. You can't change in a day something that's been going on for many years, but change is happening surely.

    21. Re:Arrest them by ajs · · Score: 2

      Actually, I withdraw my comments. I had heard that an earlier draft of the bill defined computer intrusion as a terrorist act, when it was done for financial gain (and thus applied the bill's "life without parole" clause for terrorist acts). After having read the most recent form of the bill I see no such reference.

      This is a Good Thing(tm), as it indicates that someone with a shred of a clue was listened to by the lawmakers who came up with the compromise legislation. Sorry for spreading old info.

  5. DoS by crumbz · · Score: 0

    Apparently it is not legal at this time to use these methods to shut down individual users. They must be getting really scared to stoop to employing potential damaging and/or legally questionable tactics such as these. How far do they think they can go before the backlash gets to them? Or do they think the average college kid swapping songs and burning MP3s can be frightened into spending the proverbial 20 bucks on a disc? I seriously doubt it.

    1. Re:DoS by amuro98 · · Score: 3, Insightful

      How do you figure?

      If the RIAA tries to DOS me, they'll be DOS-ing my ISP (a baby bell.)

      If the RIAA tries to DOS some college student, they'll be DOS-ing that college.

      Likewise, the RIAA is connected to the internet via some ISP, and I don't know of a single ISP that doesn't have a rule/contract clause/etc. against launching DOS attacks (or other forms of network abuse.)

      Even if directed at a single IP#, the attack is still interfering with the normal operation of that network to which that IP# belongs.

      Apparentally no one told the RIAA that two wrongs do not make a right.

    2. Re:DoS by crumbz · · Score: 0

      What does this have to do with my post?

    3. Re:DoS by amuro98 · · Score: 1

      Hrm...good question.

      I misread your original comment and thought you said that it *wasn't illegal* for someone to attack an individual.

      Regardless, my comment got marked with a "3". I'm not sure how to feel about this :/

      Let's just chalk it up to a supporting argument :)

    4. Re:DoS by nexex · · Score: 1

      Excellent point, my ISP will block the RIAA domain if incoming attacks are deteceted from it, or any other for that matter (that doesn't mean permanently, although if they are attacking frequently enough I would bet my money on it)...They are very, hmm, finicky about their bandwidth.

      --
      Winter 2010: With Glowing Hearts
  6. Just goes to show by Mattcelt · · Score: 5, Interesting

    That the RIAA see their own interests as being more important than the civil liberties of their *customers*. Should this vigilante BS be responded to in kind?

    I think we need to keep a very close eye on the RIAA right now. We (/. users) have the same capabilities as the US govt because of our large distributed nature. I advocate the foundation of a group to watch the RIAA. Email me if you think it's a good idea.

    Oh, and check out the RIAA-watching stuff already on http://www.cryptome.org.

    Mattcelt out

    1. Re:Just goes to show by stilwebm · · Score: 3, Insightful

      HELLO! Who are their customers?? Nope, not the listners, nope not the performers. Keep guessing!

    2. Re:Just goes to show by Yebyen · · Score: 2

      Oh yeah? Well... what about assraping? What are they going to do about that? See, your strategy breaks down very quickly when its subjected to a more strenuous test.

      --
      Restating the obvious since nineteen aught five.
    3. Re:Just goes to show by know_tax__no_tax · · Score: 1

      Why not apply for jobs and speed up the development proces.... by posting specs and internal memo's to get the open source community to help us with our tools.

      --
      Save Bob OK! put down the club,You DO have the right to tax me!
    4. Re:Just goes to show by Anonymous Coward · · Score: 0

      Does one of their customers start with Clear and end with Channel?

      F#*? the RIAA! I can't wait for them to try and pull this one off... Not only are they going to punish the file swappers, but every other innocent person by sucking up all the bandwidth. Thoughts of Communism ring in my head everytime RIAA, XM radio, and MPAA are mentioned.

    5. Re:Just goes to show by cloudmaster · · Score: 1

      Since you didn't provide an email address, I sent a message to /dev/null.

    6. Re:Just goes to show by Anonymous Coward · · Score: 1, Informative

      1) Retail music outlets (Sam Goody, WalMart) who take in 50% of the cost of a CD.
      2) Radio stations

      Good call, BTW, don't expect it to sink in.

    7. Re:Just goes to show by Loligo · · Score: 1


      More like the stockholders of BMG, Warner, Arista, Sony...

      -l

    8. Re:Just goes to show by Mattcelt · · Score: 1

      Check my profile.

      matt@moreilly.com

      But /dev/null works just as well.

    9. Re:Just goes to show by Anonymous Coward · · Score: 1, Funny

      Oh, I'm quite sure the organizations you mention are not communist.

      (joke - I know what you meant.)

    10. Re:Just goes to show by stilwebm · · Score: 1

      As well as those awarded stock options and cash bonuses at the top of those companies...

    11. Re:Just goes to show by cloudmaster · · Score: 2

      Log out and check your profile from everyone else's point of view - your address isn't visible. :) It is on your web page, however... I'll see if I can find a copy of that message. Hmm, maybe "cat /dev/null | mutt matt" will get the message back...

  7. Escalation! by hugg · · Score: 5, Funny

    "And we would have gotten away with it too, if it wasn't for those lousy k1dd13z!"

    1. Re:Escalation! by Evil_Furby · · Score: 1

      ph33r Velma and her l337 hackin' skillz!

      --
      OH NOES! TEH INTARWEB IS BORKEN!
  8. Hmmm.. by rnd() · · Score: 3, Funny

    This will work about as well as if the 'pirates' decided to circumvent copy protection by singing the desired songs themselves.

    --

    Amazing magic tricks

  9. Dumb move by snoozerdss · · Score: 1

    I'm sure this Will just lead to DoS attacks on riaa.com, and big lablessites as well. I wonder if they have thought of this?

    --
    Snoozer.
    1. Re:Dumb move by Anonymous Coward · · Score: 0

      Never mind a DoS against the label's sites.

      Aren't they all planning on rolling out their own pay to download service? =)

  10. irony by Anonymous Coward · · Score: 0

    Way to go guys ! - I hope that was irony ..

  11. Yet another good reason to use IP Tables.... by nsafreak · · Score: 1

    Have fun you folks at the RIAA, I'm sure you'll enjoy trying to DoS my Linux firewall/router. I wonder what would happen if we all sent e-mails to their ISPs complaining about what was coming from them. Hmmmm......

    1. Re:Yet another good reason to use IP Tables.... by Flower · · Score: 1

      I suggest a complaint a packet.

      --
      I don't want knowledge. I want certainty. - Law, David Bowie
    2. Re:Yet another good reason to use IP Tables.... by rhost89 · · Score: 1

      Theres just one problem with this, by the time the packet hits your firewall and the firewall discards it, it has allready passed your router, effectivly taking all your bandwidth before you can do anything about it. The only solution to this would be to get a hold of your provider and put a acl in your edge router (Eg. there router on there bandwidth) that way all the packets are discarded before traveling down YOUR pipe.

      --
      I will bend your mind with my spoon
    3. Re:Yet another good reason to use IP Tables.... by cloudmaster · · Score: 3, Interesting

      So the incoming traffic is slowed down. You're still just sending out a little packet to the RIAA, while your legitimate users are barely affected once they manage to connect. I agree, though, your service provider (and all others) should ban traffic originating from anything controlled by the RIAA/MPAA/whatever. Just think how nice it'd be to globally block verbal and written communication from them too.

    4. Re:Yet another good reason to use IP Tables.... by einhverfr · · Score: 2

      You make the assumption that they would be using DDoS. That is unlikely. Why would they waiste their own bandwidth using this?

      No. They will be trying other less brute-force methods. If they do, I would call up my ISP and complain, firewall logs in hand.

      I wrote a little log analysis tool. A good PERL hacker could do a lot with it in terms of mining data from firewall logs. Write me if you are interested.

      --

      LedgerSMB: Open source Accounting/ERP
  12. I always thought... by Greyfox · · Score: 2, Redundant

    Those guys were a bunch of terrorists. Maybe the fed can detain them indefinitely. Put Valenti and Rosen in the cell next to Sklyarov...

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    1. Re:I always thought... by Anonymous Coward · · Score: 0

      Sklyraov: That's the guy whose company in Russia sells the closed source software that's used by clueless spamming busineses to harvest email addresses out of online content, right?
      If he wasn't the current 'poster boy' for a whole lot of people for an unrelated reason he'd be virulently hated.
      I mean, this is a guy with coding skills who's selling those skills to spammers who'd otherwise not be able to spam.
      What's worse than that?

    2. Re:I always thought... by Anonymous Coward · · Score: 0

      Those guys were a bunch of terrorists. Maybe the fed can detain them indefinitely. Put Valenti and Rosen in the cell next to Sklyarov...
      No, In a bunker next to Bin Laden...

    3. Re:I always thought... by TheCarp · · Score: 1

      Very true.

      However, just because he has done something that we consider wrong, does not mean he should be charged with, and sent to jail, for something else - thats not true justice!

      Whether or not he is a paragon of virtue is irrelevant. Whether he deserves to be in jail for the SPECIFIC ACT of "decrypting" (undoing rot-13...do I remember correctly?) a file and then publishing or otherwise disseminating information on how to do this.

      Putting him in jail for that sets a dangerous precident (in my book, perhaps you disagree and think that THIS crime is one worthy of punishment?). That is the real issue... if it can be done to him, it can be done to anyone else.

      The fact that he is a rotten spammer is besides the point. Thats a seprate issue. Now...if he could be tried for theft of services and network abuse because of his work as a spammer...that would be a different story alltogether.

      -Steve

      --
      "I opened my eyes, and everything went dark again"
    4. Re:I always thought... by Pig+Hogger · · Score: 2
      Nah, just have Valenti have a sex change and sent to the talibans...

      Actually, this would be a swell punishment for Bin Laden: have a sex change done on him and sent back to the talibans...

  13. Good. by Anonymous Coward · · Score: 0

    I'm glad the RIAA is finally taking some pro-active measures to stop music theives. Songwriters deserve compensation, and if AOL using lusers are stopped from trading songs then that's one more dollar in their pockets.

    1. Re:Good. by Marcos+the+Jackle · · Score: 0

      Wow... how brave of you to make such a daring post as an Anon. Coward.
      And your concern for those starving artists is admirable... even though most "Songwriters" see less than 7% of the profits generated by their endevors.
      Yes, here's to another 7 cents in the pockets of exploited songwriters everywhere! (And the other 93 cents goes to guess who)

      Bugger off.

    2. Re:Good. by Anonymous Coward · · Score: 0

      Do you think I'm gonna waste my time registering on this shithole of a site?

      Also you cocksmoke, how much do songwriters (why the fuck did you put it in quotes? Do they not write songs?) get from stolen music? Hmm, how about ZERO.

      I guess this can let us all conclude that low UID != intellegence.

  14. Simple solution for this method... by Skyfire · · Score: 1

    Just stop slow downloads from your computer.. sheees

    --
    Do not go gentle into that good night. Rage, rage against the dying of the light.
    1. Re:Simple solution for this method... by stubob · · Score: 1

      I'd love this option on Kazaa. I hate having to kill all the connections that are going to take 10 hours to download. A minimum connection speed for download would be a good addition for the next version (if there will be one).

      --
      Planning to be moderated ± 1: Bad Pun.
  15. Well, good! by Tom7 · · Score: 3, Insightful


    I'm glad to see internet battles being fought on internet terms. Technological problems need technological solutions (ie, MAPS RBL but NOT spam legislation). Now, it's up to you to decide whether file sharing / piracy is a "problem", but if they do try this, then it's likely that we will see improved technology to deal with it (freenet?).

    Bring it on, I say!

    1. Re:Well, good! by ujube · · Score: 1

      Music piracy isn't a technical problem. It is a societal one, and it is fairly unlikely that a technical solution will ever really solve it completely.

    2. Re:Well, good! by linzeal · · Score: 1
      "If brute force isn't solving your problem, you're not using enough. "

      ahem cough* hypocrit *cough

    3. Re:Well, good! by katanaRyder · · Score: 1

      Once we put as much time into freenet as has been spent developing Gnutella apps we won't have to deal with and of this crap anymore. ... and DeCss for all (the hell with MPAA while were at it).

  16. Seems somewhat easy to overcome by Dimensio · · Score: 5, Insightful

    Doesn't sound like a typical DoS attack. From the article it looks more like the RIAA would have machines set up to look for copyrighted material and make repeated download requests, then download very very slowly to keep servers with connection limits filled up. How hard would it be to require a minimum transfer rate -- that is, for the servers that do not already offer such a setting -- and then code in a setting to allow banning of IPs that engage in suspect behaviour consistently.

    The scarier RIAA attempt IMO is their attempt to make themselves exempt from liability if they damage a system while looking for copyright. The wording alone allowing for immunity to any prosecution provided that the break-in was by a copyright holder (in the article) appears so utterly vague as to be used as a carte blanche for anyone to break into a system (Honestly, your honor, I was trying to make sure that they weren't pirating a Star Trek TNG Fanfic that I wrote nine years ago!). What's scarier is the quotes suggesting that not only have they considered it legal in the past, but they have already been engaging in such activity.

    1. Re:Seems somewhat easy to overcome by how_would_i_know · · Score: 1

      Thats a good thought, providing a minimum download speed. It may also help increase the overall speed of the P2P network, basically shutting out sites that have already filled their bandwidth.

    2. Re:Seems somewhat easy to overcome by S.Lemmon · · Score: 1

      I know Gnucleus, for one, already has settings for minimum download rates. Also most peers can limit the number of downloads from a single IP.

      Actually, this idea is probably a good thing. It reflects badly on the RIAA making them look like the criminals. Even lawmakers with no net sense can make a "hacker=bad" connection.

      In the end it'll benefit swappers by encouraging better designed peers that are less vunerable to all types of abuse. ;-)

    3. Re:Seems somewhat easy to overcome by uslinux.net · · Score: 1


      Hey, if the RIAA is downloading files from themselves, does that mean they should be arresting and prosecuting themselves for downloading their pirated music?

      I've got a better answer - since every American has the right to invoke a citizens arrest, we all need to invoke that right on the RIAA when they pirate their own music in this manner.

    4. Re:Seems somewhat easy to overcome by theancient2 · · Score: 1

      It sucks that my university caps download rates, meaning I can only ever get 0.5k/sec from anything other than WWW and FTP... I'd be banned from everything for sure. Now, at least I can download things if I'm willing to take a week...

      I'd remove connection limits, and impose instead bandwidth limits. Meaning I set Napster up to upload at a max aggregate rate of 100K/sec, and determine the maximum number of simultaneous connections from that. Isn't limiting bandwidth the real purpose for the limit anyway? Is it better to have 2 people downloading at 500KB/sec, or 10 people each downloading at 1KB/sec?

      Not that it matters to me... I stopped supporting the RIAA as soon as they started putting copy restrictions on CDs.

    5. Re:Seems somewhat easy to overcome by Anonymous Coward · · Score: 0

      It's kind of like inverse LaBrea. An agressive
      tarpit instead of a defensive one though.

      Anyone want to start a campaign to counter this
      DoS by setting up servers that offer bogus
      copyrighted material files to DoS their DoS attack?

      Or maybe that would be illegal.

    6. Re:Seems somewhat easy to overcome by aridhol · · Score: 1
      I can just see the lawsuit now.


      "So you see, Your Honour, the defendant is obviously guilty of protecting their networks from our attack."

      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    7. Re:Seems somewhat easy to overcome by MxTxL · · Score: 2
      This would still allow them to move from server to server and each one would be delayed by having to identify that the IP is a piker. I think that it would be cool that after identifying a RIAA suspected IP address that the nex-gen file trading servers will then share the suspect IP address with the whole network.

      If it's done in such a way that the bans are not permanent, you could avoid permanently banning innocent IP addresses, and ones that consistantly come up suspect will continuously be excluded. It wouldn't take very long to completely identify and disable their whole range of IPs. If they drop them and go for more, those that they had previously used will not be screwed over and the ones that they are still using or now using will be quickly excluded and won't affect anyone.

      Hmmm.... good idea?

    8. Re:Seems somewhat easy to overcome by redcliffe · · Score: 1

      Another way to fix this, is to make the P2P programs automatically inform other members of the network of suspect nodes. If a suspect node connects to another machine, and does something wierd, a universal ban message would be sent. The ban would expire after 24 hours, to allow the IP's to be allowed back in after that time, in case of dynamic IP's. You don't want to block out legitamate users because the happen to get the same IP that the RIAA was using earlier.

    9. Re:Seems somewhat easy to overcome by Anonymous Coward · · Score: 0

      Actually schemes like this are quite clever if executed well. The filesharing servers are facing the problem of not knowing who they can trust. If they allow anyone to download, the tarpit strikes, if they use the network to share banned IPs, a rogue client could inject "legitimate" addresses as "RIAA" and kick them out of the network. Statistics could help, but for that to work even more bookkeeping data would have to be transmitted. Trustwebs are another option, but unless they are handled almost completely automatically, they're probably too much of a burden for the average user.

    10. Re:Seems somewhat easy to overcome by karlm · · Score: 1
      Hmmm.... good idea?


      Nope, bad idea. You need some sort of web of trust, otherwise they set up servers that claim to pass along blacklists for every computer on the net. Everyone gets blacklisted and nobody can download. They could re-blacklist everyone every five minutes to prevent timeouts.


      You'll need a few trusted authorities to sign blacklists, and have the lists timeout. Or, you'll need to establish a large web of trust for signing blacklists.

      --
      Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
    11. Re:Seems somewhat easy to overcome by nexex · · Score: 1

      Many of the newer clients are allowing you to block users as well... or just put riaa in your hosts.deny

      --
      Winter 2010: With Glowing Hearts
    12. Re:Seems somewhat easy to overcome by MyMarty · · Score: 1

      NOOOOoooo! I still use a 56k dial-up modem! I'd look like i was an RIAA snail-trail machine for sure considering my average transfer rate...

    13. Re:Seems somewhat easy to overcome by Schwarzchild · · Score: 3, Interesting
      The scarier RIAA attempt IMO is their attempt to make themselves exempt from liability if they damage a system while looking for copyright. The wording alone allowing for immunity to any prosecution provided that the break-in was by a copyright holder (in the article) appears so utterly vague as to be used as a carte blanche for anyone to break into a system


      I agree that this is scary but what if it bit them in the ass? What if Microsoft (as a Copyright holder of Windows) broke into the RIAA's systems to ensure that the RIAA didn't have any illegal copies of Windows and inadvertently deleted the data on all of their servers?


      Just desserts?

      --

      "sweet dreams are made of this..."

    14. Re:Seems somewhat easy to overcome by matman · · Score: 2

      Depending on the language, the process of breaking into the computer systems of someone could include break and enter to property. Imagine breaking into MS and wiping/burning all Windows source because OSS developers suspect GPL violations? :) heh

    15. Re:Seems somewhat easy to overcome by Anonymous Coward · · Score: 0

      I'd have the same problem, but if I'm perceived as an RIAA machine I would view it as this:

      1) it will make the RIAA look like they are trying to mess people up who serve legit files (download stories or songs from independant unknown bands)
      2) it will make the RIAA look silly for downloading pr0n

  17. This is not a DOS by Captain+Kirk · · Score: 1, Troll

    Calling this a DOS misunderstands what a denial of serice attack does. A DOS attack blocks you r bandwidth and there's absolutely nothing you can do about that ping flood. If a record company uploads Mambo No 5 from your achine again and again very slowly, it may stop others uploading it at the same time but you can free your connection anytime but shutting down Gnutella, Kazaa or whatever. And since the song wasn't yours to give away in the first place, this hardly seems unreasonable.

    1. Re:This is not a DOS by EllisDees · · Score: 1

      I was under the impression that a denial of service attack was anything that denied access to that service. As opposed to say a normal, hacking in and stealing credit card numbers type of attack.

      --
      -- Give me ambiguity or give me something else!
    2. Re:This is not a DOS by czardonic · · Score: 0

      DoS attack blocks you r bandwidth and there's absolutely nothing you can do about that ping flood.

      Not necessarily. A DoS attack blocks or degrades availability to resources, hence, Denial of Service. You could simply shut down your server during a SYN flood etc. Dosen't make your resource any more available.

      --
      Takahashi Rumiko made beats! DON, taku, DON, taku. . .
    3. Re:This is not a DOS by connorbd · · Score: 2

      How is it reasonable for a private industry group to want carte blanche to blackice you in the name of protecting a copyright?

      /Brian

    4. Re:This is not a DOS by cemcnulty · · Score: 2, Interesting

      If gnutella is the service, and if the attack denies said service, then by definition, the RIAA is engaging in a DoS. What I want to know is what if the RIAA downloads a song from my computer for which *I* own the copyright? Can I sue them for copyright infringment? Or even better, if they're legislation had passed, and they downloaded my copyrighted material, would I have the right (nay the obligation) to hack into thier system retrieve my file and if I happen to fdisk their system, whoops!

      -Chuck

    5. Re:This is not a DOS by batkiwi · · Score: 2, Informative

      A DOS attack does not HAVE to be a ping flood.

      It's anything that keeps you from being able to offer your service to the net, hence a "Denial of Service" attack.

      Exploiting all the bandwidth of an ftp is certainly a DoS attack if it keeps others from being able to download those files, same as having thousands repeatedly hit a web site to take it down is a DoS.

      Typcially DoS's are accomplished through pingfloods and the like, but that's not the only definition.

    6. Re:This is not a DOS by TheCarp · · Score: 1

      allow me to nitpick...a more exact phrasing.

      A DOS attack is an action whose INTENDED PURPOSE is to block or degrade the availability of resources.

      Hence, me hitting reload on my web browser is a DOS attack if (and only if) I do it with the specific intention of putting extra load on your server and thus degrading its availability.
      (as a cheesy example)

      As the purpose of the RIAA action is to degrade or block availability, it is certainly a DOS attack. It is network abuse....a malicous vigilante action.

      -Steve

      --
      "I opened my eyes, and everything went dark again"
    7. Re:This is not a DOS by czardonic · · Score: 0

      You are correct, but allow me to nitpick back. . .

      Calling it an ATTACK implies the malicious intent.

      --
      Takahashi Rumiko made beats! DON, taku, DON, taku. . .
    8. Re:This is not a DOS by MstrFool · · Score: 1

      A better question is, what if they find something that looks like their song, maybe it is, maybe it isn't? They jam up your file sharing and prevent any one from downloading the songs that /you/ made at the same time. Now they are illegally blocking access to songs that you own the copyright to, bet that would look lovely in the papers.

      --
      Question reality.
    9. Re:This is not a DOS by CaptJay · · Score: 2

      You're right, the purpose of the RIAA in this matter cannot be denied.

      Fair-use quote from the article:

      Record labels hope to make the point that subscription services such as MusicNet or Pressplay, which will launch on Yahoo, America Online, MSN and RealNetworks by year's end, will not be subject to the same doubtful quality of service.

      So basically they are saying that they will degrade quality of peer-to-peer services in order to show that their services are of higher quality. This is called unfair competition, and under the new laws adopted, would probably qualify as an act of terrorism for financial gain...

      I don't know what they smoked to think that they were allowed to do this with the current law. Probably they figured that nobody who was sharing their music would sue them for damages, since they'd bring attention to themselves...

      --
      "I remember Y1K, every abacus had to get another bead"
    10. Re:This is not a DOS by Anonymous Coward · · Score: 0

      False.

    11. Re:This is not a DOS by decoydog · · Score: 1

      I thought it was ok to download copyrighted material but illegal to make copyrighted material available for download. So in your case, you'd be in violation for making the material available.

      Please correct me if I am wrong.

    12. Re:This is not a DOS by czardonic · · Score: 1

      Probably they figured that nobody who was sharing their music would sue them for damages, since they'd bring attention to themselves...

      . . .a notion that meshes well with their general assumption that peer-to-peer networks are used EXCLUSIVELY to share pirated files.

      --
      Takahashi Rumiko made beats! DON, taku, DON, taku. . .
  18. And just how long by Xibby · · Score: 3, Informative

    before users figure out the IP's of the RIAA's smothering servers and firewall connections from those machines to /dev/null?

    --
    I'm going to go back in my box and will think within the limits of my box: MS Sucks Linux Good I read too much Slashdot.
    1. Re:And just how long by Anonymous Coward · · Score: 0

      Is IP spoofing prohibited?
      I've always heard a lot of hotheads on sites like this arguing they shouldn't be.
      So what's it gonna be? Are you the only ones allowed to be 'bad'?

      Let's face it, if the RIAA wants to break down the consensus model the 'net is based on they pretty much can. Anybody could have, sorry, not much can be done about it.

    2. Re:And just how long by Anonymous Coward · · Score: 0

      May be a real time blackhole list for the IP addresses of RIAA machines then ?

      I don't think they can shutdown this server legally.

    3. Re:And just how long by Mtgman · · Score: 3, Insightful

      Oh, I figure it will happen around the same time as Joe Sixpack learns to check and see if he has IIS running on his pre-loaded system from Best Buy and applies the proper patches to keep it secure.

      Face it, technophiles are fine with this measure of the RIAA's. It simply won't affect us, but the RIAA, for all their mouthing, doesn't give a damn about us. We're such a small number of people we simply don't matter. It's the Joe Sixpacks they're worried about. If they can make Joe's experience with P2P miserable(and tying up your phone line all night to download a couple of songs will certainly be miserable) then they've done their job. Any action on the part of P2P servant providers to filter these type of connections through a central MAPS-type database would be attacked like all other companies who have had any central architecture to attack have been.

      I'm afraid this has a possibility of working in the short term at least. Anyway, everyone knows real pirates use Usenet or IRC.

      Steven

      --
      -- I have marked myself unwilling to moderate-- I don't have other accounts to artificially inflate the karma of
  19. Welp, by Chakat · · Score: 2, Insightful
    Looks like people are going to have to just move to an unDoSable solution. Darn. The RIAA is always going to be a couple steps behind the piracy war until they realize that one of the real reasons that people pirate is that they can't justify spending upwards of $20 for a CD.

    Note to those who will say that I'm a dirty rotten no good pirate: I don't pirate music. I simply buy from indie labels. At least then, I'm sure that the artist gets most of my money.

    --

    If god had intended you to be naked, you would have been born that way.

    1. Re:Welp, by tooler · · Score: 1

      "I simply buy from indie labels. At least then, I'm sure that the artist gets most of my money."

      Are you sure? How do you know? Indie labels may or may not be much different. I'd like some proof.

      I like buying CDs from touring bands because it gives them enough money for gas and food to get through the tour!

    2. Re:Welp, by connorbd · · Score: 3, Interesting

      Clarify: can't justify spending upwards of $20 on a *bad* CD. Or haven't you heard that CD sales were through the roof during Napster's heyday?

      Actually, I think the end result will be to a) create a protocol arms race (if all else fails, there's always encrypted FTP or something like that) and b) move the fileswaps to sneakernet. Or hasn't the RIAA ever heard the maxim "Never underestimate the bandwidth of a station wagon full of CDRs"?

      /Brian

    3. Re:Welp, by Roofus · · Score: 1


      Or hasn't the RIAA ever heard the maxim "Never underestimate the bandwidth of a station wagon full of CDRs"?

      I'm afraid I haven't heard that one either =)

      But I must say it sounds good. I've been thinking of ways to safely trade music online. My favorite idea is to set up trading "rings". Basically, you only give access to people you trust. So you might start a ring with 20 people on it, but those 20 people might also be included in the rings of others as well. You can't be connected to more than one ring at once.

      This changes things from sharing songs with everybody on the internet to sharing songs with your trusted friends. It's safer, and you most likely will have similar tastes in music with people you know.

      Songs will still get around, just a little more slowly.

    4. Re:Welp, by Andux · · Score: 1
      Looks like people are going to have to just move to an unDoSable solution.

      Not even Freenet is immune to such an attack, if sufficient resources are behind it. Remember, in addition to being major media producers, some of the RIAA members also have a stake in broadband internet access. That means they've got a lot of bandwidth to work with.

      --
      (Do not sign anything.) -- Fell, Planescape: Torment
  20. Even if legal, it would never work.. by Havokmon · · Score: 3, Interesting

    And Usenet will immediately be filled with posts of RIAA IP addresses to filter..

    Yeah that's a Good Idea(tm). Bring the pirate music industry closer together, then raise prices for the rest of us.

    Well duh. It's not a move to combat piracy, it's an excuse to claim 'more pirated works exist than we thought..', and ensure prices stay high, or go up.

    --
    "I can't give you a brain, so I'll give you a diploma" - The Great Oz (blatently stolen sig)
    1. Re:Even if legal, it would never work.. by Anonymous Coward · · Score: 0

      And the RIAA will spam Usenet with the IP addresses of sites they don't approve of for people to 'filter.'

      Face it, the sword cuts both ways. We can't have a wide-open 'net with freedom and prohibit a few jerks from showing up to the party and wrecking it.

      The 'net doesn't work that way. It never has.

      Deal with it.

    2. Re:Even if legal, it would never work.. by Havokmon · · Score: 1

      Exactly. So there's no reason for them to spend a ton of money, because it will stop nothing. By spending more money, they will require more money, which will be had by raising prices which will encourage more piracy.

      Spending a million dollars to stop half a million in theft is not smart business. (Unless you believe the bloated numbers ANY business says they have 'lost' to piracy, or lack of air travel, or 'the terrorist act'...)

      --
      "I can't give you a brain, so I'll give you a diploma" - The Great Oz (blatently stolen sig)
  21. Dropping the standards? by Spackler · · Score: 4, Funny

    First they want to be a hacker with no recourse.
    Now they want to be a "script kiddie".
    What's next, they'll want to be an MSCE?

    1. Re:Dropping the standards? by Spackler · · Score: 1

      MCSE - Damn, missed preview again!

  22. As if nobody would DDoS them back;) by forgoil · · Score: 1

    Is it just me that thinks this has gone straight into the sandbox? I find this mentality, quite frankly, scary. Is this the only thing they can come up with? Why is pissing people off the only way for them to make money? This is, as I've said before, the industrialisation all over again, combined with a "then we will bomb you" mentality.

    Why can't they speak with their customer instead of haressing them? I will sit back and smile when the DDoS starts to disrupt large parts of the internet, and a very large bunch of companies will want to sue RIAA;)

    1. Re:As if nobody would DDoS them back;) by Anonymous Coward · · Score: 0

      Problem is, pad're, what 'value' the record industy "produces" has no "value" other than in a monopolistic environment. They MUST prevent a free-market in their product ( music/film ... ) or flame-out .... very much the same case as M$ Win_OSs!

  23. moo ? by Anonymous Coward · · Score: 0

    and then they'll tell me the sun won't be shining in my city too ! .. blah. yeah right. then again money talks ... bullshit walks.

  24. Maybe I missed something ? by Tolchz · · Score: 1, Redundant

    Let me get this, you're going to request a file
    and then download it slowly, using very little
    bandwidth. The only way I see this hurting is
    if users only allow x number of transfers. As
    far as bandwidth, it wouldn't hurt much at all
    and by using up a slot and not using much
    bandwith it could speed up other transfers.

    1. Re:Maybe I missed something ? by Spy+Hunter · · Score: 2
      The only way I see this hurting is if users only allow x number of transfers.

      And aside from the fact that that is exactly the way it works, we shouldn't have any problems, right?

      --
      main(c,r){for(r=32;r;) printf(++c>31?c=!r--,"\n":c<r?" ":~c&r?" `":" #");}
  25. So... by UberOogie · · Score: 5, Insightful
    ... in the course of a week, our frinds at the RIAA have advocated cracking systems and DOS attacks?

    If this doesn't prove a mentality of being above the laws of "regular people," I have no idea what does.

    --
    "Enough of this wretched, whining monkey life." -- Marcus Aurelius, _Meditations_, Book 9, 37
    1. Re:So... by punchdrunk · · Score: 1

      Just wait until they lobby for the right to break into our houses and smash things with hammers.

    2. Re:So... by Trekologer · · Score: 3, Insightful

      I'm remided of the Southpark eppisode...

      Music executive: "I am above the law!"

      These people (the RIAA) really think that they are above the law. We need to put pressure on THEM by being in contact with our government representatives and through grassroots movements. The only way to beat them is to turn the public against them.

    3. Re:So... by Anonymous Coward · · Score: 0

      Remember the "Chef Aid" episode of South Park?

      "I am above the law!" (fixes back comb-over).

    4. Re:So... by Anonymous Coward · · Score: 0

      I really should start scrolling down a bit before I post...

    5. Re:So... by Kris_J · · Score: 1

      Next: an RIAA marketing campaign of spam, telling everyone how nice they are.

    6. Re:So... by gol64738 · · Score: 1

      These people (the RIAA) really think that they are above the law

      duh! they have tons of money! they are above the law!

      you don't remember the OJ Simpson trial?

    7. Re:So... by Lonath · · Score: 1

      Next week they'll come to your house and leave a horse's head in your bed while you sleep.

    8. Re:So... by Dwonis · · Score: 2

      The O.J. Simpson trial was a race issue, not a money issue.

    9. Re:So... by Silver222 · · Score: 1
      Nope. If OJ was making $20,000 a year instead of being a football star, an all black jury would have fried his ass. It was more about fame and money than race, IMHO.

      --
      "It's not a war on drugs, it's a war on personal freedom. Keep that in mind at all times." Bill Hicks
    10. Re:So... by Dwonis · · Score: 2

      You're right, and if he was a white famous football player, he would have landed his rear-end in jail, too. Remember, the Rodney King incident had just happened, so there was an "us vs them" mentality that wouldn't have been there if race wasn't an issue.

  26. RIAA - Pursue by any means illegal? by !Squalus · · Score: 5, Insightful

    Just when did anyone vote for the RIAA?

    I wasn't aware that they had dictatorial powers over the Internet. This seems highly illegal, and should be stopped immediately.

    I guess it's time to step up and hurt them where it counts. Boycott the music industry.

    This is either a) bogus or b) an example of the fascist thinking going on at the RIAA. Somebody really needs to explain the principles of fair use to those people, or maybe we should just stop buying music altogether.

    --
    All Ad hominem replies happily ignored as the sender shall be deemed to lack the faculties to comprehend the equation.
    1. Re:RIAA - Pursue by any means illegal? by frknfrk · · Score: 2
      maybe we should just stop buying music altogether.

      that's the thing. i would hope most of us have already done that, and that is what scares the RIAA. we have better, cheaper, easier access to music than they are willing to provide us. and naturally we are choosing these better, cheaper, easier ways of getting to the music. and they have no idea how to battle with that. (cluestick: offer better, cheaper, easier ways of getting to the music, knuckleheads!).

      Boycott the music industry.

      I wish it were possible, but the companies involved in the RIAA have their fingers in so much, you might as well try to boycott public streets driving from NY to LA. electronics, food, transportation, television, etc, etc. The RIAA are getting money from just about everywhere, which is why they can afford to spend big bucks trying to screw their own customers.

      -sam
      --
      The REAL sam_at_caveman_dot_org is user ID 13833.
    2. Re:RIAA - Pursue by any means illegal? by dswensen · · Score: 1

      I guess it's time to step up and hurt them where it counts. Boycott the music industry.

      I wish significant numbers of people had the same idea. I've been boycotting them since the first call for boycotts in what, 1999? And hey! It hasn't slowed them down a bit.

      All I've got to show for it is an aging "Boycott RIAA" flier on my wall and a developing taste for indie music. And a real hankering for the new New Order album; oooh, damn you, RIAA...

      Of course, I'm in the wrong demographic. I don't buy N'Sync and Britney Spears albums by the truckload, and therefore my participation in the boycott amounts to precisely dick. Hell, all of Slashdot boycotting RIAA might just amount to a drop in the bucket, given the anti-pop sentiments one often reads around here.

    3. Re:RIAA - Pursue by any means illegal? by Twiles · · Score: 1

      Boycot does not hurt enough, quickly enough. Some record companies (Universal) are currently releasing their CD's with digital rights encoding so that they will not play on a computers CD.

      Solution:

      1. Get a group of friends together. 2. Buy up a large number of these CD's using a real credit card (not a debit card). 3. Try to play the CD on you computer (there is no warning on the packaging stating that the play is restricted to certain types of approved players). 4. Return the CD as defective an ask for a replacement CD. 5. Return the replacement CD as defective and ask for you money back (be sure to leave the CD at the store but do not loose the receipt). If they refuse to return your money notify the Credit Card Company of the false charge. The store will receive a $20 penalty for not refunding your money plus the chargeback. There is almost always a chargeback fee anyway. If you and your friends suck up the entire inventory of a particularly hot release, fun for everyone.

      TOM

      TOM

    4. Re:RIAA - Pursue by any means illegal? by Anonymous Coward · · Score: 0

      I havent bought a CD since 1997. Mainly because of their exorbitant prices. I refuse to pay over $10 for a CD.

    5. Re:RIAA - Pursue by any means illegal? by ConsumedByTV · · Score: 1, Offtopic

      Try being vegan. Its pretty easy to get rid of all that crap, and you look great naked :)

      --


      "Not my manner of thinking but the manner of thinking of others has been the source of my unhappiness." - M
    6. Re:RIAA - Pursue by any means illegal? by Anonymous Coward · · Score: 0

      Yep, pad're just don't pay the bastards a fsckin' penny ... don't buy the music they can't "drink" the CDs so they have ta crumble ... now convince every 12-year-old-girl in the county of that and the music folks are REALLY REALLY screwed.

  27. Good cover for the real K1dd1ez by rnd() · · Score: 2

    Look for a lot of spoofed IP attacks in which the "attacker" appears to be the RIAA. This will be great cover for malicious crackers.

    --

    Amazing magic tricks

    1. Re:Good cover for the real K1dd1ez by Anonymous Coward · · Score: 0

      You mean that the RIAA is going after Microsoft.com???? hum.....

  28. I was unaware that you could "virus" someone by bersrker · · Score: 0

    From the article:

    "We referred to it as the 'license to virus,'" said one congressional staffer.

    How exacly does someone go about "virusing" people?

    1. Re:I was unaware that you could "virus" someone by Anonymous Coward · · Score: 0

      Go to the West Villiage in NYC, find and a place called "The Manhole" and bend over. Within 5 minutes, you will find out...

    2. Re:I was unaware that you could "virus" someone by iforgotmyfirstlogon · · Score: 1

      I think it involves unprotected sex.

      - Freed

      --
      "Coffee should be black as hell, strong as death, and sweet as love." -Turkish Proverb
  29. License to virus by Green+Aardvark+House · · Score: 2, Insightful

    The subject is a quote from the article. And it's quite true.

    It's license to committing a criminal act. People who conduct this sort of activity can be prosecuted.

    It's like feeding your neighbor's dog antifreeze when it poops on your lawn. Definitely not the right thing to do, and just another way that the RIAA will piss off the public.

    1. Re:License to virus by cavemanf16 · · Score: 2
      I'm still confused on the logic of the RIAA's arguments. I thought the purpose of a copyright was to give credit where credit was due, and to make those using the copyrighted material, pay the person who created it when money was exchanging hands. For instance, if I buy a book from the bookstore, part of the money goes to the bookstore (the middleman in the transaction), part of the money goes to the publisher (the party that the author pays to massively reproduce his/her work), and the rest goes to the author.

      So why is it, that when I've payed the $15.99 for a CD with 12 songs, and I wish to make copies and give it away for free, that I should be labeled a 'music pirate'? I've already done my part to pay the proper person the fee to get their professionally produced CD, and I'm not charging everyone else to listen to the music that I find worthy of my $15.99. I'm trying to show them why they too should spend $15.99 on a professionally produced CD. Software is different because all those software companies have End User License Agreements packaged with the software, that basically say you're not allowed to copy it. You're in effect, leasing the software, not buying it outright.

      Eventually, bandwidth and drive space will get so large that we'll be able to send exact disc images of entire CD's around the internet without much hassle or time involved at all. What will they do then?

      My solution would be that either you sell the CD's at a higher price to compensate for all the 'sharing' going on, or you play more concerts, or make a person sign, in writing, legal documents saying they'll never copy the CD with your music on it. It's your music, you have the right to charge $100/CD if you want. But then you're alienating all but you most devout fans. If CD's only cost the $0.50 in actual materials it cost to produce them, I'd bet we'd see a lot more meaningful artists out there today. Unfortunately, the USA's capitalistic value system is all about "cheaper, faster, easier", not quality.

      So how long until the Japanese come in and revolutionize music production, just like they revolutionized the automotive industry?

    2. Re:License to virus by cavemanf16 · · Score: 1
      ...pay the person who created it when money was exchanging hands...

      I should have said: pay the person who created it when money and goods exchanged hands.

    3. Re:License to virus by Anonymous Coward · · Score: 0

      So how long until the Japanese come in and revolutionize music production, just like they revolutionized the automotive industry?

      You mean someone like Sony? ;)

    4. Re:License to virus by Anonymous Coward · · Score: 0
      I thought the purpose of a copyright was to give credit where credit was due, and to make those using the copyrighted material, pay the person who created it when money was exchanging hands.

      Under the terms of the Constitution, copyright is a means of promoting the public good. It creates an artificial monopoly incentive that is intended to get authors and inventors to work harder and release more works to the public. The incentive works by distorting the free market, but is meant to overcome the problem of "how do you get people who create for a living to create stuff, if they don't have a chance to get paid for up-front work plus a decent profit?"

  30. Matt by Anonymous Coward · · Score: 0

    Like that Goat Poem I wrote for you?

  31. Dos me and ... by josepha48 · · Score: 1
    While I am not a 'song swapper', but what is to stop them at just the song swappers? Oh I'm sorry I thought you were a song swapper.

    My system would log their IP address first, then it may scan their open ports (host, traceroute, and maybe nmap) to collect some more information on them, then maybe I'll tell my ISP and the Feds that I am being hacked by Oshitta Bitch Laden and really f*** up their day. Tell them I got their IP and route to host. Maybe find a way to traingulate the exact location of the incomming signal through some ip mapping program. LOL.. hahaha....

    --

    Only 'flamers' flame!

    1. Re:Dos me and ... by -=OmegaMan=- · · Score: 1

      "Maybe find a way to traingulate the exact location of the incomming signal through some ip mapping program. LOL"

      Someone's been watching too much Hackers.

      There are these awesome h4x0r tools called traceroute and whois that you can use to "triangulate" the "incoming signal." :p

      --

      This sig is xenon coated, and will glow red when in the presence of aliens

    2. Re:Dos me and ... by linzeal · · Score: 1
      Visualroute works sometimes....

      http://www.visualware.com/visualroute/index.html

    3. Re:Dos me and ... by Anonymous Coward · · Score: 0

      xtraceroute

  32. Time to use their own techniques in reply by WillSeattle · · Score: 1

    Seriously, remember that RIAA uses the DCMA to proactively shut down services on a system that has "their" music/software.

    What's to keep someone from doing some code with a segment declaration making it free open source except for RIAA or other such entities.

    Bury it in an app they're likely to want, and then when it's there go on a destructive search for it.

    I used to write free software for various campaigns. All such code had declarations embedded in the final executable and the declaration file (somewhere in the file structure, linked from the main copyright grant) which made it free for all except people or organizations working against feminism.

    The same thing applies. Use their techniques against them, use DCMA in a no-holds-barred way to inflict injury to them and simultaneously point out how deeply flawed DCMA is.

    That reminds me, need to go on a looksee to see if someone's using my code ...

    --
    --- Will in Seattle - What are you doing to fight the War?
    1. Re:Time to use their own techniques in reply by Anonymous Coward · · Score: 0

      Cool!

      Let's all fragment up the market.

      Let a thousand licenses proliferate.

      Let nothing interoperate. Let ideology rule the technology.

      Wonderful, dude, wonderful.

    2. Re:Time to use their own techniques in reply by Anonymous Coward · · Score: 0

      ...and then, sue them.

      What, you don't have as much money as the organization you're suing? Oh, well, life's a bitch.

      Nice try, though, however foolish.

    3. Re:Time to use their own techniques in reply by Anonymous Coward · · Score: 0

      I think that's a good idea. Don't give them the tools to get on the freenet, any P2P file sharing protocol, hacking^W network admin tools etc.

    4. Re:Time to use their own techniques in reply by WillSeattle · · Score: 1

      ...and then, sue them.

      What, you don't have as much money as the organization you're suing? Oh, well, life's a bitch.


      Using the DCMA for snipe hunts only involves getting a small claims court judge to agree that there might be a violation. That means I can then go on a destructive DoS search within the RIAA orgs to make sure they're not using my s/w.

      Justice is sweet. And cheaper than you think. Especially when you don't have much to lose ...

      --
      --- Will in Seattle - What are you doing to fight the War?
  33. And when they vfight back? by redhog · · Score: 1

    And what happens when millions of unhappy songswappers DOSes RIAA? RIAA just can't have that amount of bandwith and computrons... Muahaha! RIAA thinks they are strong on anyting, just because they have strong lawyers.

    --
    --The knowledge that you are an idiot, is what distinguishes you from one.
    1. Re:And when they vfight back? by Anonymous Coward · · Score: 0

      The RIAA just runs crying to Congress about how "hackers" are attacking the servers that they need to conduct commerce. Then they drop some money into various campaigns and before you know it, computer users are under even more scrutiny from the government. A government who is ready to kick in your door, confiscate all you have, and sell it before your trial. Just like what happens (and happened) to drug offenders.

      Or maybe I'm just paranoid, and the RIAA is really just that stupid.

      war on drugs, war on terrorism, war on hackers, war on liberty.

  34. Their resources are finite by CmdrTroll · · Score: 5, Interesting
    Speaking as an avid music pirate and warez trader, this is one of the best possible cases. Consider the alternatives:

    • They can contact my ISP and have my connection shut down. That would be very painful for me and disrupt my hobby. I would be forced to go outside, make friends, and do other social things. Bad.
    • They can send me threatening letters. I don't like threatening letters because that would also make me think twice before swapping warez or trading songs. My parents might see the letter and revoke my computer privileges, which would also be very bad.
    • They can pollute the swapping services with junk files. This is a huge waste of my time and pisses me off.
    • They can pollute the warez scene with virii. This would also piss me off greatly.
    • They can sue the owners of the swapping services. A good service is hard to find (I'm sick of the Aimster/AudioGalaxy kind of crap) and that would annoy me.
    • They can lobby ISPs to limit upstream bandwidth. That will cause my warez services to diminish in value and make it hard to remotely access my PC.

    OR, they can simply DoS the swappers. Unfortunately for them, they are relying on TCP, so they need to disclose their source addresses for the attack to work. And if they do that, we traders can make a database listing all of their IP addresses (kind of like MAPS/ORBS) and block their asses. We will find ways to thwart this approach and we will continue trading.

    So, in a nutshell, I am very pleased with their latest strategy. I haven't been so gleeful since they announced copy-protected CDs (which also have done little to discourage swapping).

    -CT

    1. Re:Their resources are finite by Anonymous Coward · · Score: 0

      The plural of "virus" is "viruses." See Merriam Webster's article on it here.

    2. Re:Their resources are finite by Anonymous Coward · · Score: 1, Funny

      It's thieves like you who make music and software cost so much these days. Shame on you.

    3. Re:Their resources are finite by Sloppy · · Score: 1, Flamebait

      They can send me threatening letters. I don't like threatening letters because that would also make me think twice before swapping warez or trading songs.

      Ok. Fuck you and quit swapping warez and other people's songs. Oh, I forgot the threat... lessee.. Um, stop it or else I will install win98se on your computer and fill whatever freespace remains, with Hee Haw clips.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    4. Re:Their resources are finite by Anonymous Coward · · Score: 0

      Miriam and Webster is american, yes? The REST of the world speaks English; virii.

    5. Re:Their resources are finite by LinuxHam · · Score: 2

      Unfortunately for them, they are relying on TCP, so they need to disclose their source addresses for the attack to work. And if they do that, we traders can make a database listing all of their IP addresses (kind of like MAPS/ORBS) and block their asses. We will find ways to thwart this approach and we will continue trading.

      They can easily spoof the source IP address in their attacks. Even worse, they may spoof the source address as coming from yet another swapper, and the system would collapse upon itself as swappers start blacklisting each other.

      --
      Intelligent Life on Earth
    6. Re:Their resources are finite by Anonymous Coward · · Score: 0
      "Virii" is incorrect everywhere. Merriam-Webster lists the plural of the word "dog" as: "dogs". According to your argument every plural of every word listed in an American dictionary is different than the plural of corresponding word listed in a standard english dictionary. Then please tell us what plural for "dog" does the rest of the world use.

      The plural of virus is viruses.

    7. Re:Their resources are finite by Anonymous Coward · · Score: 0

      Excuse me but 'viri' is the Latin word for 'men', NOT the plural of the word virus. And virii is even worse because it is not even a word.

    8. Re:Their resources are finite by QuMa · · Score: 1

      Nope, they can't. That's what tcp has sequence numbers for. All they could do is a SYN flood, which wouldn't be very effective.

    9. Re:Their resources are finite by Jay+L · · Score: 1

      If they spoof the source IP address in order to work around blocks on the target machine and get access, then they are violating the federal Computer Fraud & Abuse act, and can be sued or prosecuted for same. AOL won several lawsuits against spammers because they forged the headers of their e-mail messages.

      Jay, the ex-Mail Guy

    10. Re:Their resources are finite by maj1k · · Score: 1

      i like how this got a +1 funny.

    11. Re:Their resources are finite by user32.ExitWindowsEx · · Score: 1

      virii is the CORRECT plural form of virus. Virus pluralizes like lLatin nouns, not like English ones. The coward above got it wrong. 'Viri' IS men, but 'virii' is not. Get it right.

      --
      "Evil will always triumph because good is dumb." -- Dark Helmet
    12. Re:Their resources are finite by Anonymous Coward · · Score: 0

      Actually, the correct plural of 'virus' is 'viruses'.

      http://www.dictionary.com/cgi-bin/dict.pl?term=v ir us

      http://language.perl.com/misc/virus.html

      An education. Get it.

    13. Re:Their resources are finite by Anonymous Coward · · Score: 0

      What if they use your routers address as the source=/.

    14. Re:Their resources are finite by collar · · Score: 1

      Nope, they can't. That's what tcp has sequence numbers for. All they could do is a SYN flood, which wouldn't be very effective.

      The problem with sequence numbers is that even though the spec's say they are meant to be random, lots of OS's produce predictable sequence numbers (ie win9x).

    15. Re:Their resources are finite by 3247 · · Score: 1

      None of these work with systems like Freenet.

      --
      Claus
    16. Re:Their resources are finite by LinuxHam · · Score: 2

      Nope, they can't. That's what tcp has sequence numbers for. All they could do is a SYN flood, which wouldn't be very effective.

      WRT TCP Seq No's, isn't it true that the initiating host sets the TCP sequence numbers and all the ACK packets in the conversation (coming from the victim host) will always have the last SEQ# plus 1? Therefore the initiating host doesn't necessarily need to receive the ACK packets from the victim host to walk the victim thru a conversation, so long as it uses randomly increasing SEQ#'s. Granted the initiating host isn't supposed to send the next packet until it has received the ACK for the last one, but who's to say you can't just keep forcefeeding new packets assuming the victim host has had enough time to send an ACK for the previous packet?

      I'm willing to be wrong, but besides the receipt of the ACK packet itself, I don't think the initiating host really needs anything from each ACK packet to continue with the conversation. Spoof the source IP, randomly increase each outgoing SEQ#, and give enough time to the victim to send an ACK packet, and it seems you could blindly hold up a conversation using a spoofed source IP.

      As I considered later on, you could also use the LaBrea mechanism to spoof the source IP as an unused one from the same subnet as the attacker and hold a strawman session with the source IP literally being non-existant.

      --
      Intelligent Life on Earth
  35. Idle threats. by EllisDees · · Score: 1

    They say that they will connect and attempt to download things very slowly? How is that supposed to hurt me one bit? My limewire setup allows 30 concurrent connections with no more than 4 from any given IP. Even if they do manage to hold all thirty open by using different IPs to download, there is no possible way that they can do the same to any significant number of other users at the same time. Nevermind the fact that their IP ranges would quickly be built into the next release as automatically blocked...

    --
    -- Give me ambiguity or give me something else!
    1. Re:Idle threats. by Anonymous Coward · · Score: 0

      If they are willing to dos you and then spoof
      addresses, they are willing to find out where your access is at and deny you service by pointing to spoofed trusties.
      It would really make me mad for them to run dos scripts against me that get responses and graduate methods. The number of methods are limited-you can only block from so many before you start blackholing yourself.

  36. Legality of distributed systems. by Matt2000 · · Score: 5, Interesting


    If I as an individual decided to write a client for a distributed system such as Gnutella that took an innordinate amount of bandwidth from users it connected to it'd be considered a bad or malicious client, but not illegal.

    All the RIAA is asking for here is to play on the same level as us. I have difficulty counting the number of times I've read posts following an RIAA announcement saying "We'll just crack/hack this/that until their systems can't handle it," and yet the assembled masses get all self righteous as soon as the RIAA suggests they be allowed to do the same.

    I liken this struggle to the one surrounding the hacked satellite cards. The legality of hacking those cards has been accepted, so the company fights on a technological level. I find this completely acceptable, and perhaps the best/right reaction to a sitation such as this.

    I think we should encourage the RIAA to try to slow down file trading systems, and save the real fight for when they try to pollute our laws with amendments that will affect us far more comprehensively than the availability of the latest Spears track.

    --

    1. Re:Legality of distributed systems. by Anonymous Coward · · Score: 0

      These aren't even on the same levels. Not even *close*.

      Cracking an encryption method or coming up with some way to manipulate the data on a CD so that you can have and distribute a freely available digital copy on MP3 is a far cry from breaking into your computer and having carte blanche with it or DoSing your server and wasting/ruining your bandwidth, as the RIAA does (and wishes to make legal).

      The different is huge. It's like saying that someone who makes a photocopy of a book to lend to a friend for studying up on a class is the same as someone who breaks down every door and ransacks every house that they believe has a book inside, because that book could be copyrighted by them.

    2. Re:Legality of distributed systems. by Ace905 · · Score: 1

      I think the purpose of fighting the RIAA on a technological level is fighting their attempt to stop legal and legitimate file sharing.

      When we say, "We'll just work around their stupidity", it's because we're trying to let them know they can't stop us without using the law ; and they can't get laws made against our legal rights.

      At least, that's what I meant when I said I wouldn't allow them to stop me from transfering files I may very well (and do) have legal rights to. Fuck them.

      Eggplants!

      --

      Ace
    3. Re:Legality of distributed systems. by dbretton · · Score: 1


      I think you are off your rocker.

      If I were to DoS the RIAA computer networks, do you think that an FBI investigation would ensue?
      If the RIAA did the same to me, would you expect the same results?

    4. Re:Legality of distributed systems. by Sebby · · Score: 1
      I think we should encourage the RIAA to try to slow down file trading systems, and save the real fight for when they try to pollute our laws with amendments that will affect us far more comprehensively than the availability of the latest Spears track.


      I would tend to agree with you, but you seem to ignore the fact that they've been abusing their monopoly; far too long for me to feel sorry for them at this point.

      --

      AC comments get piped to /dev/null
  37. Hey, I posted this this morning... by Ioldanach · · Score: 0, Offtopic

    And got rejected :(

  38. Who's better at DoS attacks? by Ted+V · · Score: 5, Funny

    So who do you think can do a better job of DoS? The RIAA or a bunch of 31337 5kr1p7 k1dd135? Not that I condone DoS attacks (*ahem*slashdoteffect*ahem*), but it seems like a terribly stupid battle front for the RIAA to choose.

    If you want the best marksmen in the world dead, why would you challenge him to a pistol duel of all things?

    -Ted

    1. Re:Who's better at DoS attacks? by fermi's+ghost · · Score: 1



      I think the proper quote is, "You don't bring a knife to a gunfight".

    2. Re:Who's better at DoS attacks? by Fatal0E · · Score: 2

      I think Ted V's quote is better.

  39. LOL! RIAA are terrorists! (Not a Troll) by rkent · · Score: 2

    Oh man!

    Already a potentially contentious plan, the recording industry inadvertently sparked a further wave of criticism last week with plans to protect its strategy from being undermined by a pending antiterrorism bill.

    Ha! Gee, looks like someone clued up and realized this DoS-type of technique would count as "hacking" and leave them open to prosecution under the Anti-terrorism bill. Ah... that's just too classic!

  40. Killing Two Birds with One Stone by FFFish · · Score: 2

    Hey, wasn't Bush mouthing off about "ridding the world of evil-doers" the other week?

    When the US government going to solve all our problems by dropping RIAA executives and lawyers on the Afghans?

    [but, then, most of the Afghans don't deserve that much punishment!]

    --

    --
    Don't like it? Respond with words, not karma.
    1. Re:Killing Two Birds with One Stone by Anonymous Coward · · Score: 0

      When the US government going to solve all our problems by dropping RIAA executives and lawyers on the Afghans?

      Because the lawyers would join up with them.

      (I assume you mean the al Queda terrorist organization. Most of the Afghans have enough trouble keeping from staving to death while staying out of the way of bombs, bullets, and missiles...)

    2. Re:Killing Two Birds with One Stone by FFFish · · Score: 1

      Actually, I meant Afghans. That's what's happening anyway...

      --

      --
      Don't like it? Respond with words, not karma.
  41. Conspiracy to commit... by Robert+Hayden · · Score: 2, Funny

    The RIAA is now guilty of a conspiracy to commit a criminal act. Please notify your local congress critter, hope they aren't a paid lacky of the RIAA, and maybe something will happen.

    Then again...maybe not.

    1. Re:Conspiracy to commit... by Anonymous Coward · · Score: 0

      or FTC or FBI for possible illegal activities/business practices.

  42. DoS proxy by slickwillie · · Score: 5, Funny

    It would be more devious to make a site look like it's swapping music, then let the RIAA do your DoSsing for you.

    1. Re:DoS proxy by knick · · Score: 5, Insightful

      ..or even create RIAA Honeypots. Machines that will act like they have all of the hotest songs, and unlimited connections. Bog the RIAA machines down by trying to download 1000's of songs off a Honeypot server, and let the server throttle down the RIAA machine even slower then it's trying to get the songs.

      A couple of these could probably eat up the RIAA machine resources. A RIAA tarpit.

      --knick

    2. Re:DoS proxy by punchdrunk · · Score: 5, Funny

      Of course this would be illegal under the DMCA. The DOS attack is part of their copy-prevention mechanism and your honeypot is an attempt to disable that mechanism. Clearly anyone creating honeypots, distributing any related code, or publishing information discussing the use of honeypots is in violation and should be immediately arrested and exported to Afghanistan were they can be sufficiently bombed.

    3. Re:DoS proxy by Happy+Monkey · · Score: 5, Funny

      Even better: Set up a site and sell "Audio Advertisements" on it, where you are paid by the download. Then rename the advertisers' jingles to the names of top 40s tunes. Watch the money come rolling in!

      --
      __
      Do ya feel happy-go-lucky, punk?
    4. Re:DoS proxy by ZaneMcAuley · · Score: 0

      Run laBra TarPit :D

      Grab theyre connections then hold em :D

      --
      ----- Whats wrong with this picture? http://www.revoh.org:1234/whatswrong
    5. Re:DoS proxy by ZaneMcAuley · · Score: 0

      or aqua-im_A_Lamers_girl.mp3.vbs :D

      I hear kazaa wont show the last extension :D

      --
      ----- Whats wrong with this picture? http://www.revoh.org:1234/whatswrong
    6. Re:DoS proxy by Anonymous Coward · · Score: 0

      this was modded as insightful? Clearly a fine troll.

    7. Re:DoS proxy by Anonymous Coward · · Score: 1, Funny

      Send them you own copyright material instead of the file they requested (eg. picture of your finger at RIAA etc.) and then DOS RIAA for copying your copyright material.

    8. Re:DoS proxy by Anonymous Coward · · Score: 0

      It was sarcasm you dolt.

    9. Re:DoS proxy by Anonymous Coward · · Score: 0

      we definately need more moderation options

  43. Time to write some letters... by Dman33 · · Score: 2

    I think that instead of just writing to my congressmen, I will CC: it to John Ashcroft. This is clearly a criminal act no matter how much the RIAA tries to disguise it. I put faith in the community to stop this from materializing.

    The article quotes in reference to the RIAA's last attempt to stop filesharing: "We referred to it as the 'license to virus,'" said one congressional staffer. "It would have given them the incentive to employ lots of hackers trying to figure out how to stop (MusicCity), Morpheus or Audiogalaxy."

    So now the RIAA wants a 'license to DoS'. Give me a break.. This is by far more criminal than ripping some MP3s!

  44. Wanna play dirty eh? by Anonymous Coward · · Score: 0
    • The software technology, according to industry sources, would essentially act as a downloader, repeatedly requesting the same file and downloading it very slowly, essentially preventing others from accessing the file. While stopping short of a full denial-of-service attack, the method could substantially clog the target computer's Internet connection.

    I know! I know!

    1. filter out slow downloaders
    2. Filter known RIAA network connections (*.riaa.com), or create a list with 'known RIAA machines' or the sort
    3. DoS RIAA.
  45. By way of analogy: by cobol4me · · Score: 1

    Does this mean the US Army can now spread Anthrax around Afghanistan to stop future terrorists?

    1. Re:By way of analogy: by Anonymous Coward · · Score: 0

      I think it'd be more accurate to say they were packing every afganistan woman's room full of steralized males. Just no more space!

    2. Re:By way of analogy: by Anonymous Coward · · Score: 0

      No, smallpox would be *WAY* more efficient.

  46. Just another way to foil RIAA ... by ProfMoriarty · · Score: 1

    Get the source to GNUtella ... and modify it so that it will drop anyone running less than a predetermined bitrate ... so ... at lets say ... 10k/s not a problem ... however drop below that threshold ... and no more connection ... and the slot is opened up to another user ...

    --
    Karma? Karma? I don't need no stinkin' karma.
    1. Re:Just another way to foil RIAA ... by Anonymous Coward · · Score: 0

      Couldn't we create something similar to the spam blocking services.
      That way sites known to run the RIAA warware could be blocked (or smurfed) automatically.

      Just a thought.

    2. Re:Just another way to foil RIAA ... by Anonymous Coward · · Score: 0

      Since when can you get anything near 10k/s on GNUtella ? You are luck to get 1K/s if they didn't firewall the file you are looking for in the first place.

    3. Re:Just another way to foil RIAA ... by ttys00 · · Score: 1

      And what about those of us still on modems that won't ever see 10k/s?

  47. Interesting approach. by jd · · Score: 2
    It might even be legal, too, though I'm not sure about that. How they plan to tackle partially or fully distributed services, though, without damaging the integrity of the Internet in general, is beyond me. Also, I don't see how this differs substantially from their proposed amendment, except that it won't receive nearly as much public scrutiny.


    But, hey, I don't see people making that much of an effort to set up an alternative system, either. If there was a realistic alternative, there wouldn't be an issue, because there wouldn't be an RIAA to create one.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  48. 2 wrongs by Beowulfto · · Score: 1

    Apparently the RIAA has decided that two wrongs now make a right. Shame on them, guess their mothers never taught them.

    --
    There's no point in being grown up if you can't be childish sometimes. -- Dr. Who
  49. combating privacy by frknfrk · · Score: 4, Insightful

    the RIAA talks on and on about 'fighting piracy', etc, etc. they think the way to fight privacy is to break CD standards with 'security' measures, and issue DOS against users suspected in trafficking their 'property'.

    my suggestion is that these two strategies have never worked, and will never work, so maybe, just MAYBE they should try something new, something that has a chance to work.

    let me explain.

    they should look at the reasons piracy exists and see what they can do about them. (1) CDs are too expensive, (2) CDs are usually one or two good songs mixed with a lot of crap, and (3) downloading a song is SOOO much easier than fighting traffic to and from some shopping mall or waiting 3-5 days for shipping.

    (1) CDs are too expensive. LOWER THE PRICE OF CDs. Why does it cost 15 bucks for a burnt piece of plastic, which is debatably more valuable than a 50 cent blank piece of plastic? Bring the price down to 9.99 and a large chunk of piracy goes away.

    (2) CDs are usually one or two good songs mixed with a lot of crap. I don't really know what to do about this one. How about stop manufacturing boy bands and nurture the real artists out there?

    (3) downloading a song is SOOO much easier than fighting traffic to and from some shopping mall or waiting 3-5 days for shipping. Either build great new perfect highways between everyone's house and the mall, or build a store next to everyone's house, or perhaps (please) provide individual songs for download at a VERY reasonable price in a format i can use (a) on my computer, (b) in my RIO, (c) burned to a CD for my car.

    Fix it, or watch your empires crumble. You can't fight piracy with technology.

    --
    The REAL sam_at_caveman_dot_org is user ID 13833.
    1. Re:combating privacy by tenordave · · Score: 1

      Just a nitpick: Music CD's that you buy at the store are stamped, not burnt.

      --
      http://students.washington.edu/djwatson
    2. Re:combating privacy by Rombuu · · Score: 2

      This is brillant!

      1) You stuff is too expensive, so I don't want it
      2) Most of your stuff is crap
      3) Therefore, since I don't want to buy what you are offering, and its no good anyway, I'm going to steal it, since its more convienent.

      Therefore, the music business should come up with new infrastructure, marketing plans, etc... to gain someone who likely won't be a customer anyway. I mean, even if music is available for sale, people will still steal, becuase its free.

      I mean, the wide distribution of porn on the internet for reasonable prices sure hasn't make alt.binaries.multimedia.erotica.* go away, now has it?

      --

      DrLunch.com The site that tells you what's for lunch!
    3. Re:combating privacy by ruiner13 · · Score: 1

      As for the pricing of individual songs, all I've read suggests that they would charge $2.50/song. This is insane. With the price of a CD at $15, and there are usually around 10-15 songs/CD, they should charge the fair price/track, or (price of CD)/(number of tracks/CD), or roughly a buck/song. I'd pay that. I also agree that the price of CD's are WAAAAY inflated. The price hasn't dropped in 20 years. You cannot tell me that the manufacturing costs haven't gone down, adn the price of the media hasn't dropped. The price of the Cd should have dropped as well. Highway robbery if you ask me.

      --

      today is spelling optional day.

    4. Re:combating privacy by frknfrk · · Score: 3, Insightful
      I mean, the wide distribution of porn on the internet for reasonable prices sure hasn't make alt.binaries.multimedia.erotica.* go away, now has it?

      no, but how much money have porn websites made in the past year? TONS. and alt.* is mostly SPAM and other assorted crap. the porn sites offer much easier access to more and better stuff than alt.*, and they are making a killing.

      I'm going to steal it, since its more convienent.

      where exactly did i say i was stealing anything?

      -sam
      --
      The REAL sam_at_caveman_dot_org is user ID 13833.
    5. Re:combating privacy by frknfrk · · Score: 2

      what's funny is that they have been found in court (by they i mean the RIAA) as conspiring to artificially keep prices high, by basically forming groups (like the RIAA) and acting as a single monopolistic entity.

      yet, like microsoft, that didn't change a thing. in fact, they probably raised prices the next day :)

      -sam

      --
      The REAL sam_at_caveman_dot_org is user ID 13833.
    6. Re:combating privacy by frknfrk · · Score: 1

      thanks. i was going to say that but i didn't know the past tense of 'stamp'. i was going to say 'pressed' but that didn't seem right either. also i probably got the past tense of 'burned' wrong as well.

      --
      The REAL sam_at_caveman_dot_org is user ID 13833.
    7. Re:combating privacy by Anonymous Coward · · Score: 0

      You know what I always thought would be nice, custom cd's. With the ease of the internet now, it would be a neat feature to be able to go to a site, select a cd's worth of songs (from different artists or whatever), have them produced on cd and shipped to me. THAT would be a viable option also.

      But on the other side of that, no one would hear much of the less popular songs on an album, which often are good.

    8. Re:combating privacy by Anonymous Coward · · Score: 0

      Wow... how ironic.

      You say one reason song swapping is so popular is that CDs are too expensive. (Which is bullshit, but I digress.) You then reason that if the music companies would lower prices (among other things) people would start buying CDs again.

      Good... good, so far we have capitalism pretty well described. One problem:

      THE CD COMPANIES CANNOT COMPETE WITH A PRICE OF $0.00.

      If you STEAL the music, the company isn't going to try and compete with that, they will use legal means.

      The price ONLY COMES DOWN IF THERE IS A FORESEEABLE SUPPLY/DEMAND MEETING POINT. In other words, if the demand is 0 because the product can be easily stolen (in other words, obtained for a competing price of $0), lowering the price to compete with $0 means they will have to supply the CDs for equal to or less than $0.

      Duuu.... that's not good. Hence the reason STEALING IS ILLEGAL.

      What's that you say? You're not stealing? Ok, you can say that if it makes you feel better. I'm not trying to judge you. I couldn't care less. I do care when people try to use the "CDs are too expensive" argument to justify stealing.

      That's just spreading ignorance.

    9. Re:combating privacy by sharkey · · Score: 2

      combating privacy

      Seems a bit overdone. You can combat privacy with a good camera, and a willingness to peep into your neighbors windows.

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    10. Re:combating privacy by elmlish · · Score: 1

      I'd agree with you that stealing is indeed illegal and copying songs off of an album that you haven't paid for doesn't fit under the fair use provision.

      However, I do believe that it is my right to take all of my cds and make them playable on my computer i.e. mp3s. As far as I know this would fall under fair use. The problem is the very old problem of a legitimate tool being used (very often) for illicit purposes. The RIAA seems to want to rule out all possibility of a criminal act being carried out. This goes to far. It would be the same as if the city of Seattle decided to cut off everyone's legs in order to stop people from Jaywalking. "If they haven't any legs, they can't Jaywalk!"

    11. Re:combating privacy by maetenloch · · Score: 2, Insightful

      This is brillant!

      1) You stuff is too expensive, so I don't want it
      2) Most of your stuff is crap
      3) Therefore, since I don't want to buy what you are offering, and its no good anyway, I'm going to steal it, since its more convienent.

      Therefore, the music business should come up with new infrastructure, marketing plans, etc... to gain someone who likely won't be a customer anyway. I mean, even if music is available for sale, people will still steal, becuase its free.


      Not exactly - here's what he was really saying:

      1) Your stuff is too expensive, so I don't want it at the current price.

      2) Most of your stuff is crap so why not let me buy just the parts I like.

      3) If you can fix 1) and 2), put it in a form that I can use everywhere, and make it easy to purchase, I'd love to buy your product.

    12. Re:combating privacy by Anonymous Coward · · Score: 0

      I took that as an admission that half the stuff on a standard CD is crap anyway. I heard them quoting $4... so logically, they're saying all of the value in a CD is based on 3.75 songs. And, somehow, even though the distribution price is almost zero, there are no material costs, and there are no middlemen, they still manage to keep the price for online music more expensive than an actual physical CD, which I can rip myself for less. I can just hear them saying, "Online distribution is new -- we'll lower the prices when we reach mass production levels."

    13. Re:combating privacy by FrankNputer · · Score: 2, Insightful
      (1) CDs are too expensive. LOWER THE PRICE OF CDs. Why does it cost 15 bucks for a burnt piece of plastic, which is debatably more valuable than a 50 cent blank piece of plastic?

      Because when they first came out they were expensive to produce - albums at the time cost around $10. Now that the price has been set, they don't want to pass on the difference in production costs.

      (2) CDs are usually one or two good songs mixed with a lot of crap. I don't really know what to do about this one. How about stop manufacturing boy bands and nurture the real artists out there?

      Good question. Maybe it's because real artists require development, and the record co.'s don't want to invest in antists anymore when they can sell overpriced crap & gobs of useless merchandise to a bunch of preteens who wouldn't know what art is if it fell on them?

      (3) downloading a song is SOOO much easier than fighting traffic to and from some shopping mall or waiting 3-5 days for shipping.

      True, & if they had any sense they would provide a system for doing so, rather than trying to prop up their status quo by resorting to crap like this.

      I have spent a lot of time in this forum siding with copyright holders' right to do with their work as they choose, & I stand by that position. The fact that record co.'s et al have been ripping off artists for decades does not justify taking the few pennies (literally) that they get for their work.

      That said, I am appalled at the RIAA's latest actions on behalf of the "artists" - of course, it wouldn't be about their cut, would it? Why not boycott their products, & support local bands & alternative distribution methods instead? There are LOTS of good people out there, selling their music & giving it away for free. Michael Jackson doesn't need (or deserve) any more money for yelling "ow!".

    14. Re:combating privacy by Anonymous Coward · · Score: 0
      A dollar a song is still pretty expensive. Some people have thousands of songs (as MP3s), and I don't think they'll be willing to spend thousands of dollars on their music.

      And even if the music companies do make stuff available online, it will probably be as low-quality copy-protected WMA files or something (Microsoft says 64kbps = CD quality, so they'll probably use that).

    15. Re:combating privacy by ruiner13 · · Score: 1

      As a person who actually owns 95% of the music he's downloaded (I have over 200CDs), I think i've already spent that ($12 x 200 = $2400). I have 5 gigs of MP3 (about 1000 songs).

      --

      today is spelling optional day.

    16. Re:combating privacy by jhernand · · Score: 1

      > THE CD COMPANIES CANNOT COMPETE WITH A PRICE OF $0.00.

      They don't need to. Here's what they give you, beyond the $0 stream of bits:

      1) A compact disc
      2) A jewel case
      3) Liner notes
      4) Art & Lyrics
      5) Lossless audio (mp3 sounds worse than cdda)
      6) Time savings

      I'd pay a reasonable sum for these things. $17 is not reasonable in my view. My answer to this is to buy used CD's (amazon.com has a nice system for buying and selling used cd's) at a reasonable price; I often re-sell those with poor liner notes and art.

      If a download service provided FAST access to native (or losslessly compressed with shorten) PCM audio tracks, I'd likely be willing to pay $1.25 per 10 minutes. I'd expect a small discount for downloading an entire album. An md5 sum or other data verification method would be necessary, too.

      It really can't be that hard, people. Record companies are DRAGGING THEIR FEET and will continue as long as their legacy distribution model continues to be extremely profitable.

    17. Re:combating privacy by NeMon'ess · · Score: 1
      How are CDs stamped? It seems tough to do when the pits are so small.

    18. Re:combating privacy by NeMon'ess · · Score: 1
      Riiight, people spent hundreds or thousands of hours downloading songs and now they don't want to even pay a dollar per song. How sad. Consider if a CD of 12 songs was excellent and every song was a keeper. $12 bucks isn't too much to ask.

    19. Re:combating privacy by BrookHarty · · Score: 2

      newsbin = no spam, gigs of pr0n/mp3s.

      Thats why newsgroups are so popular.

    20. Re:combating privacy by mobets · · Score: 0

      You ever been to a store? Ever bought a pack of CD-R's? You can buy a few and pay a lot per CD. Or you could buy a big pack, pay more, but less for each one. This would be the same princible. You still come out paying less, by purchasing only a couple of songs, but if you wanted the whole CD, you are better off buying it as a unit.

      --

      It was me, I did it, I moved your cheese
    21. Re:combating privacy by SCHecklerX · · Score: 2
      (2) CDs are usually one or two good songs mixed with a lot of crap. I don't really know what to do about this one. How about stop manufacturing boy bands and nurture the real artists out there?
      Easy. Use the technology they are so deadset against. Put large servers (or fast pipes to a RIAA server) in every music store. You go in. Listen to a bunch of stuff. You burn a CD with only the songs you want on it, paying for each song. You leave the store with a custom CD with only stuff you like on it. You're happy, music store is happy, RIAA isn't happy though b/c they didn't rape you for money. Artists *should* be happy, b/c they not only sell songs, but now know what people like and what they don't. If they are profit motivated, they'll make more stuff people like. If they are true artists, why do they care either way?
    22. Re:combating privacy by Rogerborg · · Score: 2
      • I'm going to steal it, since its more convienent

      Careful with your wording. "Steal" still implies that you are taking an object, or denying use of it, that there is a victim, and that they have lost something tangible.

      Music sharing is not like that at all. Their argument is that they made 10 gzillion dollars last year, so if they only make 9 gzillion dollars this year, they've lost 1 gzillion dollars. Uh, wait. How you lose something that you never had?

      If this concept is still unclear to anyone, think towards it via this example. You go into a music store and walk out with a $15 CD that you haven't paid for. What's the value of your theft?

      The answer is 50 cents. That's what it costs to replace the CD. It's not $15 dollars. You weren't going to pay that. The store never had that amount of money from you. They never had it, so they can't lose it. They lost the replacement value of the object, 50 cents worth.

      Extend that to sharing files online. You weren't going to buy them (don't tell me I might, I haven't bought any music for the last 16 years, long before file sharing appeared). The RIAA never had my money. I haven't taken an object from them, or denied them access to anything.

      So, tell me, when I download (for the sake of argument) a Metallica track, who have I stolen from, and how much have I stolen? Quantify your answer, and explain how my victim has less after I have created a copy of the file.

      --
      If you were blocking sigs, you wouldn't have to read this.
    23. Re:combating privacy by Anonymous Coward · · Score: 0

      Well look at the numbers.

      Cd .50
      Case .25
      Pressing of Cd/cover .75
      Make it an old song for simplicity "breadfan" 0.00 (not produced undercontract, no cost)

      Album cost to produce = 1.50
      Expected profit, retailer cost (7) - Production cost (1.5). 5.50
      Now if your lucky you don't have to split this w/ anyone else. Now sense they have already been paid by the retailer you taken nothing but (C) material which they can choose to prosocute as it was "illegaly" obtained, at an emormous expense.

      Lawyer consult 150.
      Addidtional law fees 100. per hr x4
      Being generous 8 hours of personal time to/fro lawyer and court while under 2.5mil 2 year contract to produce another album with a 250 day work year thats 625.0 x 8hrs = 5k
      The copywrite material = 5.50 (can't charge for the material it's been payed for)

      At this point the path is clear you pay 5550 to recoup 5.50 + court costs 20.0 (good luck getting the judge to make them pay lawyer fees, he's apt to slap you after he sees the figures). The only reason for the band to persue would be to maintain (C) and prevent it going PD.

      Cd cost to retailer 7. - suggested retail 12. so 5. so you can argue either 7 to replace it or what they'd have profited if they could sell it for 5. Fortunatly for the retailer shoplifting is a quick clear cut court case, all they need todo is apprehend the criminal and fill out some paper work for thier reimbersal, note this costs us all .001 or some sillyness but i am deviating.

      If your downloading it for $ reasons, no one "looses" anything.
      If your buddy tosses you a song from a new band, mayhaps you'll buy the album, or be more apt to check them out live, in that case you just "made!" them money they wouldn't have had.
      If your downloading because your a clepto, well your gonna take it wether you can use it or not, i my self prefer you stick with digital objects, so the rest of us don't have to pay manufacturing cost for more junk thats going to wind up in a land fill.

      As for the monetary value of a downloaded track, if and/or when they haul you into court for it will depend what track off what album, manufactuering cost of media, and cost to retailer.
      Take the cost to retailer, subtract normal media cost, avg cost per minute and no matter what it's still a not going to come close to a felony.

    24. Re:combating privacy by mrogers · · Score: 2
      (1) Cutting the price of CDs to $10 would cut the record companies' revenue by a third. Piracy probably doesn't harm their revenue stream one cent and it certainly doesn't cut it by a third.

      (2) 90% of everything is crap. Producers will resist any tool that allows consumers to intelligently filter products before paying because 90% of what they sell is crap, and they know it. Do you think the people who write filler articles for MSN like the fact that Google is never more than a double-click and 11 keypresses away from their readers? Similarly, do you think record companies would encourage you to ignore 90% of what they sell?

      (3) A format that you can use on your computer, in your RIO, and in your car, and which is also suitable for downloading, is a format that's perfect for filesharing networks. Record companies are unlikely to encourage the widespread use of such a format.

  50. Not a normal DOS attack, also easily defeatable by eXtro · · Score: 3, Interesting

    First off, its not a normal denial of service, they're not swamping you with connection attempts and consuming all your bandwidth. What they're doing is downloading your file, repeatedly, very slowly. This is actually fine, and not at all questionable ethically in my mind. Its not going to work however. How long until the various file sharing software products implement blacklists? All you'd need is for somebody to set up a database of IP addresses to block. If they do the denial of service attack from corporate WAN then it'll be easy. If they lease IP addresses from the internet service providers it'll be a bit more tedious but still easily defeatable. Regexps are your friend.

    1. Re:Not a normal DOS attack, also easily defeatable by LinuxHam · · Score: 2

      How long until the various file sharing software products implement blacklists? All you'd need is for somebody to set up a database of IP addresses to block

      As stated before, source IPs can be spoofed, hence blacklists won't work. If you think the DoS'ing host has to be on the same segment as the victim, I believe that the way TCP works would allow the DoS'er to send multiple spoofed packets, simulating a conversation without actually seeing the ACK packets coming from the victim. The DoS'ing host won't need anything from the ACK packets, since the source sets the TCP sequence number.

      Of course if they actually do plan on downloading the file they will need to be on the same segment if they plan on spoofing the source IP. Hmm... maybe they'll have DoS hosts on a few IPs of a class C and spoof the source IPs from dead IPs on the same source network. The victims may never know the DoS'ing hosts.

      --
      Intelligent Life on Earth
    2. Re:Not a normal DOS attack, also easily defeatable by Anonymous Coward · · Score: 0

      Blacklist alone wouldn't , but blacklist + simple handshake, maybe in form of standalone TCP connection, maybe repeated at random during the download + CPS limit + some reasonable expiry time for IP on the blackslists + blacklist distibution built into clients would do the trick.

  51. New buzzword by SanLouBlues · · Score: 2, Funny

    "Oh great, my router just got fried by a freaking script fogey!"

  52. Briliant is an understatement by AnimalSnf · · Score: 1

    Oh, I just can't wait for this to begin. I can't imagine it will be even a week until people will create clients to connect to these networks and present false targets to download. At the same time, that stats for the use of Morpheus and such will spike, giving them increased legitamacy and and advertising revenue. Should anyone actually atempt this, it will only be bleasing in descise for the P2P.

    1. Re:Briliant is an understatement by kaimiike1970 · · Score: 2, Funny

      will only be bleasing in descise for the P2P

      Jesus, it sure is scary when you have a seizure right in the middle of a sentence isn't it?

      =)

      --


      Do a google search before posting.
    2. Re:Briliant is an understatement by AnimalSnf · · Score: 1

      That's what happens. Blessing in disguise becomes bleasing in descise .

  53. this is good... by Anonymous Coward · · Score: 0
    sooner or later (sooner please), after all their other options are layed out on the table and smashed down by people with common sense, the option everyone is happy with will surface.

    "Hey, i just thought of something. I have a great idea on how to stop music piracy, lets fire everyone in our offices!"

    "Wow, that's a great idea, ok, lets do it"

    And everyone will rejoice.

  54. Oh yeah, by the way... by Dman33 · · Score: 2

    The article also states: While stopping short of a full denial-of-service attack, the method could substantially clog the target computer's Internet connection.

    Could someone please clarify how this stops short of a DoS in any way??

    1. Re:Oh yeah, by the way... by wishus · · Score: 2
      Could someone please clarify how this stops short of a DoS in any way??

      You can't do anything about a DoS. You can stop this by killing Gnutella/whatever.

    2. Re:Oh yeah, by the way... by Anonymous Coward · · Score: 0

      Then they have successfullly DoS:ed you,
      so clearly this doesn't fall short of DoS.

    3. Re:Oh yeah, by the way... by Anonymous Coward · · Score: 0

      ...and you think that killing the song server isn't a denial of service.

      MoRoN.

    4. Re:Oh yeah, by the way... by dvdeug · · Score: 2

      > You can't do anything about a DoS. You can stop this by killing Gnutella/whatever.

      That's the same as saying you can stop a DoS by killing your internet connection.

    5. Re:Oh yeah, by the way... by wishus · · Score: 2
      That's the same as saying you can stop a DoS by killing your internet connection.


      Not quite.

      • You can close the slow connections.
      • You can find the RIAA IPs and put them in hosts.deny.
      • You could encrypt the files with a symmetric cypher and offer the passphrase as a download, or put it in the filename - thus fooling the RIAA name/filesize checkers.
      • You could use any of the "pig-latin" like naming schemes created for napster.

      Yes, none of those are "nice" solutions, but the RIAA is not flooding you with traffic - only filling the offered connections, nothing more.
  55. Run a polecat by tolldog · · Score: 2

    Something we did in football... line the long snapper up all alone... and all the other people further down the line. This caused the team to respect the move and move there line down as well... or else we had an 8 man screen.

    Following this idea... if we have songs that seem to be copyrighted ... match name, and size... and they do any form of attack to our system, wouldn't they be liable?

    They would have to respect this possibility and react to it... or else they would get some potentialy large lawsuits.

    Just an idea....

    --
    -I just work here... how am I supposed to know?
    1. Re:Run a polecat by jrockway · · Score: 2, Interesting

      I was thinking of something like a tarpit. Setup a server that has LOADS of "illegal" MP3's, except that the files are really named pipes connected to /dev/zero. After a couple days of downloading ENDLESS streams of zeros (or rather '\0's), they'll be out of bandwidth to dDoS us with :-D

      Or we could just dDoS them back, but that's less cruel and more illegal (prehaps even terrorist *sigh*)

      --
      My other car is first.
    2. Re:Run a polecat by motherhead · · Score: 2

      Sir, I admire your views and I wish to subscribe to your newsletter. Brilliant, since they seem to have really... just semi-clueless geeks on the payroll something like this could just about paraylize them. Bringing this war out of the courts and the world of the big money Washinton lobbying and down to the geek level is the brilliant stratagy i've heard since Gen. Westmorland said. "we should have these vietnamese on the run by '66"... I am also enjoying the fact that the Washington D.C. of October 2001 is so much different then the Washinton D.C of August 2001 (yes i hate the reasons for is passionately as well) and congressmen and senetors seem to have bigger fish to fry then glad handing the RIAA weasles.

  56. Speaking of piracy... by FFFish · · Score: 2, Offtopic

    ...I've become angry enough about the RIAA bullshit that I'm now actively interested in pirating music.

    IIRC, Napster is pretty much toast.

    What's a good place to start to begin tracking down jazz, blues, world music, and seventies/eighties pop?

    --

    --
    Don't like it? Respond with words, not karma.
    1. Re:Speaking of piracy... by Anonymous Coward · · Score: 0

      The best place to get seventies/eighties pop, AFAIK, is Gnutella. Dono about the rest of the stuff..

    2. Re:Speaking of piracy... by night_flyer · · Score: 2

      I dont know if they are any good now, but mp3.com had a ton of good blues acts available

      Garrett Big G Jacobson and Anthony Gomes come immediatly to mind

      --


      Thanks to file sharing, I purchase more CDs
      Thanks to the RIAA, I buy them used...
    3. Re:Speaking of piracy... by Anonymous Coward · · Score: 0

      By far the biggest and best service is Kazaa/Morpheus/Fasttrack. Search for any of these terms on google. Current stats:

      481,632 users online
      sharing 65576 thousand files of a total size of 360 Terabytes.

      I have managed to get about 500 mp3 tracks in the last 3-4 days, and over 30GB in total in the last 3 weeks.

    4. Re:Speaking of piracy... by wurp · · Score: 2

      Oh, sorry. FastTrack is the network protocol used by KaZaA (it's laden with spyware crap, but it's a no-brainer to use on Windows and supports multi-source downloads well), giFT (an open source client), Morpheus, and Grokster (don't know anything about these two).

      From what I'm told, it shares the files over port 80 so wget will get files from a FastTrack peer. The really great thing about it is the multi-source download. I can get full use of my bandwidth at home while I download the 300meg+ video files from multiple users. Of course, I only download bits to which I have a legal right.

      Bobby Martin
      Cosm Development Team
      http://www.cosmgame.com

  57. Have they started already? by Liquor · · Score: 2, Interesting

    I don't run gnutella or any other fileswap program. But my dial-up line was almost saturated for about 3 hours last night by attempts from multiple machines to connect to port 6346 - That's gnutella, isn't it?

    How are these people going to make sure that the machines that they are trying to DDOS aren't somebody who just happened to be assigned the same dynamic IP address as somebody they actually targeting?

    And for that matter, how are they targeting them? The variety of IP addresses the 'attack' came from was high and seemed to be all private users. Are they doing some sort of 'cache poisoning' to the gnutella database so that all requests for certain files are routed to a single slow dialup or something? So that they can effectively turn every gnutella user into a DDoS zombie machine?

    It would certainly explain my logs from last night.

    --

    Liquor
    Sanity is a highly overrated commodity.
    1. Re:Have they started already? by drodver · · Score: 1

      You probably got the IP address of someone who had been using gnutella. So when you logged on and got that IP address some other clients still remembered that there was a node there, and were sending you packets thinking you were the one who had been running gnutella. Its like calling 40 people from a pay phone and telling them the phone's number. Then someone else comes to the same phone and the phone might ring with one of those people looking for the origional person.

    2. Re:Have they started already? by Liquor · · Score: 1
      You probably got the IP address of someone who had been using gnutella
      Undoubtedly. But being bombarded by connection attempts (syn packets which were not answered) for around 3 hours from literally hundreds of different hosts - almost saturating a 28.8K connection - is NOT the normal pattern when this happens. This particular flood did not stop or even appear to be lessening off until I disconnected the modem temporarily and was assigned a new IP address. I have no idea how long this flood would have taken to die out if I had not disconnected.

      Normally, when I inherit an IP address previously used by a gnutella user, there are requests from perhaps 10 or 20 hosts, mostly all in the first 20 minutes, and never any after an hour has elapsed.

      So, I still wonder if this was part of the RIAA's new campaign.
      --

      Liquor
      Sanity is a highly overrated commodity.
  58. f**kedcompany by Anonymous Coward · · Score: 0

    I had to double check my browser's url to see if I was reading this article from f**kedcompany.com earlier today.

  59. Dangerously vague by Sloppy · · Score: 2

    No civil liability would result from "any impairment of the availability of data, a program, a system or information, resulting from measures taken by an owner of copyright," the proposed text read.

    If that wording had become law, then anyone would be able to legally DoS anyone, for any reason. That's good if you want a Terrorism bill, bad if you want Anti-Terrorism bill.

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    1. Re:Dangerously vague by jrockway · · Score: 1

      Heh, I own the copyright for a few Linux programs. Can I hack those boxen freely? And then NOT be liable for damage? Heh. Great.

      --
      My other car is first.
  60. WTF?! by harvord · · Score: 1

    It would be so ironic if they started purchasing back copies of 2600.

  61. Backfire by Mr.+Sketch · · Score: 2

    Couldn't this easily backfire on the RIAA? If I noticed a lot of DoS traffic coming to my site, couldn't I call their ISP and get them to shut down their internet connection since it's the source of a DoS attack? This idea would probably work better if they were DoSing a corporate firewall than the average joes computer. After all, if I was a network admin at a company and I noticed a lot of DoS traffic coming in from a specific ip address, I would try and contact the ISP and get them to turn them off temporarily, but maybe that's just me.

  62. Heh, 1337 5|R1P7 K1DD135 by jrockway · · Score: 2, Funny

    Well, they couldn't hack us, so they'll dDoS us. Oh great. Now we'll have to unplug our Ethernet before listening to the mp3. That'll stop 'em! I can see the synergy meeting at the RIAA:

    Person A: Let's hack 'em!
    Person B: Yeah!
    Computer Guy: telnet leet.mp3.trader

    Debian GNU/Linux testing/unstable
    leet login:

    Computer Guy: I r0073d their b0x0r3. I r0x0r!
    Person A: Yay! We stopped them!
    Person B: Cool!
    leet.mp3.trader: PAM_unix: Login timed out. Failure from box.riaa.com logged.
    Computer Guy: What does that mean?

    ~Later that day~

    leet.mp3.trader's ISP: Stop hacking our network. The FBI has been notified. Thank you.
    Person A: Cool! The FBI's gonna help us do illegal stuff!
    Computer Guy: Oh shit.
    FBI Agent: All of you are under arrest, please come this way

    ~Tomorrow~
    Person C: Well, our little plan failed! We'll show them! Boys, turn on the dDoS

    Oh great. How creative guys :)

    --
    My other car is first.
  63. Idea for RIAA by TheMMaster · · Score: 1

    I've got THE solution for ALL your problems: being above every law, it should be no problem for you to break into every backbone in the world and reroute all taffic trough your own servers, that way you'll be able set fire on the house of every copyright violator!
    Ow yeah and while you are at it, do the same for all /. readers, because they are likely to hate you...
    GRRR

    --
    Fighting for peace is like fucking for virginity
  64. Sheesh by AKAImBatman · · Score: 2, Insightful

    You know, if the MPAA & RIAA put half as much creativity into creating new entertainment as they do trying to stop piracy, we wouldn't all be stuck with Brtney Spears and N'Sync. Perhaps, we would even have had better "blockbusters" than Tomb Raider and Planet of the Apes this summer! What a concept, eh?

  65. Wouldn't This Just Backfire? by telstar · · Score: 2, Insightful

    Wouldn't this backfire? They're suggesting that they intend to kill these servers by downloading content very slowly ... in effect clogging the available ports. So serves will simply be configured to dump these slow transfers, and users with slow connections will be more inclined to spend money on broadband connections so that they can access this content, in effect making it easier for them to retrieve larger quantities of content faster. I say go for it RIAA!

    1. Re:Wouldn't This Just Backfire? by LinuxHam · · Score: 2

      slow connections will be more inclined to spend money on broadband connections

      I live 19,000 feet from my phone company CO. No DSL.

      My cable system was wired in the 1950's and has had 3 owners in 4 years. No investment in the infrastructure. (It is coming, tho.. just not here yet)

      I live in a condo and refuse to drop cable for satellite (@ $300 x5 tv's and for POTS up "broadband"), particularly when my home LAN is on the second floor.

      I don't refuse to spend a little more money on broadband. My employer even reimburses me for ISP access! There are no reasonable options available to me, and I live halfway between NYC and Philly.. not exactly in the sticks.

      --
      Intelligent Life on Earth
  66. Ok Just Sanity Checking by haplo21112 · · Score: 2

    If I DoS attack someone I go to Jail? This is a CyberCrime after all, isn't it? But if the RIAA does this its somehow legal? And their, and MY ISP are ok with this? Somehow I think not? Where do they come up with these schemes, they will never work, because of the Physical separation of the networks, and machines, and the dependancy on things inbetween they don't control.

    --
    Power Corrupts,Absolute Power Corrupts Absolutely, leaving one person(group)in charge is absolutely corrupt.
  67. This is funny, laugh. by Wyrvious · · Score: 1

    This should have been under "This is funny, laugh" instead of News. The RIAA bitches and moans about people "violating the law", yet turns around and asks for a waiver to perform illegal activities. I'm glad that congress had enough sense not to provide them the latitude they requested. Quite frankly, I'm surprised they even asked for it. Maybe we should get together and lobby congress for the ability to legally DoS the RIAA?

    --

    "Get the facts first. You can distort them later."--Mark Twain
  68. Not really. by jd · · Score: 4, Interesting
    Theft of computer resources is illegal in many countries, and certain parts of the US (such as Oregon). Theft of data is also illegal. Using a crime to justify a crime ("eye for an eye") is an interesting, but disputed practice ("two wrongs don't make a right", "the end NEVER justifies the means").


    Going by a democratic system, that's two sayings for the Nays, versus one for the Eyes. The Nays have it, by a majority of one vote.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    1. Re:Not really. by BradleyUffner · · Score: 2
      "Theft of computer resources is illegal in many countries, and certain parts of the US (such as Oregon). Theft of data is also illegal"
      It's not a crime to take something you already own. If the RIAA owns the rights to these songs, and they are available on PUBLIC servers, for anyone to download, on well known ports, then how can it be a crime for them to download? Even if they want to download at very slow rates they could jsut use real 300baud modems to connect to the itnernet. They arn't doing anything wrong then because they are downloading as fast as their hardware allows. The RIAA is fighting back using technology now, and they are getting innovating, that sounds like a challenge to me. Fight them on the same level.
    2. Re:Not really. by jfunk · · Score: 2
      It's not a crime to take something you already own.


      Oh, so it's ok for me to break into your house to retrieve my stolen DVD player you bought from 'a friend.'
    3. Re:Not really. by Niac · · Score: 1


      Intent makes it a crime.



      When you commit an act with the express intent of denying others the ability to commit said act, this is what we know as a Denial of Service attack.


      --
      http://gabrielcain.com/
    4. Re:Not really. by Anonymous Coward · · Score: 0

      The RIAA is not going to steal any of your computer's resources, at least not by using the inverse tarpit strategy. You are offering these resources to them just like you are offering them to anyone else, for free. You assume that everyone who is downloading from you is doing so to get what he is downloading. That assumption is false in the inverse tarpit scenario because the goal of the interaction is to slow your server down. The interaction itself however is indistinguishable from a modem user downloading, so you'd have a hard time proving that they didn't want the song. In addition to that, who in their right mind would sue the RIAA when that implies that you've been illegally offering copyrighted material?

    5. Re:Not really. by Fencepost · · Score: 2
      Oh, so it's ok for me to break into your house to retrieve my stolen DVD player you bought from 'a friend.'

      It's not illegal for you to possess that DVD player because you own it. It is illegal to commit an illegal act to retrieve it.

      --
      fencepost
      just a little off
    6. Re:Not really. by aridhol · · Score: 1
      In addition to that, who in their right mind would sue the RIAA when that implies that you've been illegally offering copyrighted material?


      It doesn't imply you've been illegally offering copyrighted material. It implies that the RIAA thinks that you're offering copyrighted material. There are thousands of songs out there. There are hundreds of groups. Consider this: My friend has a garage band. They write some music. I put it on the 'net for them. Is this illegally distributing the music?


      Take this one step further. The RIAA has never heard of my friend's band. They create a boy band that has the same name. Not only that, but they also create a song with the same name as one of my friend's songs. They find, on my server, a song that they think belongs to them. So they DOS me for it.


      Where does the boundary exist? Is it just having MP3s shared? The same song name? The same group name? Because they want to check "just in case"?

      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    7. Re:Not really. by Anonymous Coward · · Score: 0

      So in theory there is a possible trap which someone could use to sue the RIAA. In reality however, is that Metallica song really one of your brother's garage band songs or is it what both of us and the RIAA think it is? Hell, they could verify that they are "legitimately" slowing your server down by downloading at slow but realistic speed until they have enough evidence and continue slowing you down after that. Remember, you are sharing that song. The act of downloading that song from you does therefore not violate any of your rights.

    8. Re:Not really. by aridhol · · Score: 1
      Remember, you are sharing that song. The act of downloading that song from you does therefore not violate any of your rights.


      Does that mean it isn't illegal to DDOS a website by repeatedly downloading its front page? After all, the front page is there for people to view.
      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    9. Re:Not really. by SubtleNuance · · Score: 1

      It's not illegal for you to possess that DVD player because you own it

      Possession of Stolen property is certainly illegal.

    10. Re:Not really. by Anonymous Coward · · Score: 0

      It doesn't matter whether the repeated downloading is illegal or not. The song, or a part of it, is downloaded once to make sure that you are indeed violating some copyright and that it isn't just a nametrap. Only if evidence proves that you are a pirate, then repeated downloading begins. Of course you could still sue the RIAA for DoSing your server, but then, when you are up against the RIAA in court, you would have to give up whatever "anonymity" protected you and they have as much evidence against you as you have against them. Their position is in fact much easier to defend if they constantly switch IPs. Then you really can't prove their intentions because you can't prove that these downloads are not independent and it is probably assumed that they were just checking to see whether you violated their copyright. You however can't deny having offered that song. I don't think you are ready for that kind of shit.

    11. Re:Not really. by BradleyUffner · · Score: 2
      "Oh, so it's ok for me to break into your house to retrieve my stolen DVD player you bought from 'a friend.' "
      No, that's not OK, but that's NOT what is happening here. The files they plan on downloading are not locked up inside a house. They are made available on public servers, to the public, on public web and FTP sites.

      For example. You steal my DVD player, then put out a table by your sidewalk with a sign that says free on it, then fill the table up with stuff you are giving away. If I choose to bring a bunch of my friends and take everything off of that table that belongs to me in the first place without letting anyone else have anything, then there is nothing wrong with that. And that's what the RIAA is planning on doing. Its up to you to find a way to kep people you don't like out of your servers, but if you place something on a public server ANYONE can take it, and you cant do anything about it short of removing the content, or not making the server public.
  69. WTF? by bDerrly · · Score: 1

    Does the RIAA actually think this plan will work? I mean come on! They are going to constantly d/l the same song at slow speeds to keep others from getting it?! What kind of plan is that? Do they have any idea how much time and money that will take them? I don't know of any record labels that are going to want to front the cash to setup something of that magnitude. But, I guess all we can do is watch and see what they do...it will be funny in the meantime.

    --
    Animals have rights! ...TO BE EATEN!!!
  70. What if the software spoofed the IPs? by Shade,+The · · Score: 1

    Surely it wouldn't be impossible to design some software to do this? Then it would be much harder to filter these things out (you would probably need some authentication routines like in ssh).

    1. Re:What if the software spoofed the IPs? by knick · · Score: 1

      Uhh... If they spoofed the address, they couldn't really download the file, now could they?

      They HAVE to give the correct address, so they can establish a session to tie up the connections. This isn't really DoS, they want to clog up connections by downloading, but R-E-A-L-L-Y S-L-O-W-L-Y.

      --knick

    2. Re:What if the software spoofed the IPs? by Tolchz · · Score: 1

      I would assume that any connection requires more
      than one sent packet to initiate a transfer.

      A -> B Hey send me
      B -> A Ok here you go
      A -> B Thanks

      If the ip A is spoofed, then the actual computer
      A that B sends a packet to, is not expecting that packet and ignores it.

    3. Re:What if the software spoofed the IPs? by Anonymous Coward · · Score: 0

      "Uhh... If they spoofed the address, they couldn't really download the file, now could they?"

      Think about a reverse La Brea, one that establishes connections, then slooooooooowly gets and discards packets.

    4. Re:What if the software spoofed the IPs? by knick · · Score: 1

      Think about a reverse La Brea, one that establishes connections, then slooooooooowly gets and discards packets.

      Yes.. I understand the concept, but would the first step in slowly getting packets in supplying a real address to send the packets to?

      If they spoof a fake address, the connection would never establish, and your PC would never try to send the file.

  71. It's OK folks... by Anonymous Coward · · Score: 0

    As long as I have the 2nd Amendment to the US Constitution in my corner, the RIAA's illegal tactics can easily be remedied

  72. resistance is futile... by JbirdUAH · · Score: 1

    Record labels hope to make the point that subscription services such as MusicNet or Pressplay, which will
    launch on Yahoo, America Online, MSN and RealNetworks by year's end, will not be subject to the same
    doubtful quality of service.


    holy crap! there is only one way to read that statement if you're a non-riaa approved music trading service -- surrender or suffer...

    hmmm...i'm guessing that the riaa hasn't even given a second thought to what sort of retaliation might come of this...

    i'm seeing an application akin to seti@home, where, when the screensaver comes on, the machine instantly starts bombarding the RIAA/DOS machines... ;-) i'd run it...

  73. So when... by ChiChiCuervo · · Score: 1

    So when are we going to be let into the next plan, to trick mp3 listeners into getting their penises bit off by a pony? I'm sure Radiohead already thinks they're uncool...

  74. Are we allowed to fight back? by Ace905 · · Score: 1

    If they can DDOS legal file trading, are we in turn allowed to DDOS their servers? Say for example, if we had an open-source server-client based ddos tool that reads IPs and data from a central server locating these bastards?

    My only concern about music swapping is the RIAAs attempt to make their concerns look legitimate. "We're going after people who don't pay us money"; forget whether or not they're actually breaking the law, just shut them down? that's rediculous.

    Post any and all knowledge of how to shut these idiots down. I will dedicate all the bandwidth I can.

    Eggplants!

    --

    Ace
    1. Re:Are we allowed to fight back? by Anonymous Coward · · Score: 0

      If they can DDOS legal file trading, are we in turn allowed to DDOS their servers?

      According to the article, only if you hold copyright on something.

      Now, according to the Berne convention, you automatically have copyright on any fully original work you create (regardless of whether you register this copyright with the government), I'd say - YES - assuming you write something first (maybe a poem?)

  75. They should hire Mafiaboy by Bobuhabu · · Score: 0

    Maybe they'll hire mafiaboy to do a DDoS attack against all the people who share files since he was so effective against Yahoo, Buy.com and others. They'll probably hire a bunch of script kiddies that claim they can hack and the whole idea will kind of fizzle away after they realize the only people smart enough to code this won't sell their souls to the record industry.

    --
    Bobuhabu
  76. Humm let me Add by haplo21112 · · Score: 2

    Sounds like this new "Attack" it is an attack after all could easly be worked around in software. To many hits, or to slow a download, DROP, BLOCK, BAN!

    --
    Power Corrupts,Absolute Power Corrupts Absolutely, leaving one person(group)in charge is absolutely corrupt.
  77. Bring it on! by xZAQx · · Score: 1

    Go ahead and try it. Who here wouldn't retaliate against a terrorist/DoS attack?
    I sure would.
    So I say bring it on suckas, lets c what u got.

    --

    We dance to all the wrong songs.
    --Refused.
    1. Re:Bring it on! by slykens · · Score: 1
      Go ahead and try it. Who here wouldn't retaliate against a terrorist/DoS attack?

      Heh, reminds me of my favorite story of retaliation for attacks... I forget now where I read it but this kiddie had been breaking into this company's systems and deleting stuff, generally causing lots of no-fun problems. One would argue today that proper security would be a way to fix this, but I think this was before firewalls and the like were commonplace. The victims eventually flew to the attacker's town and staked out his house waiting for no one to be home. When the time was right they entered with baseball bats and destroyed anything with a chip in and left a note to the effect of, "How does it feel now?"

      Really now, most states do have anti-unauthorized access laws on the books and mechanisms for regular citizens to charge people with crimes. (In PA anyway you can file a private complaint against someone and prosecute them yourself in district court at least.) The trick would be filing the complaint against a John Doe and seeking a subpoena against the RIAA to produce the attacker to stand trial. A few trips down this road and either the RIAA will be out of attackers or the attackers will quit with the realization that "I just followed orders" is not an appropriate defense.

      I would recommend using federal court but I don't know what machanisms exist for prosecuting someone when you're a private citizen.

    2. Re:Bring it on! by stubob · · Score: 1

      If you would pay attention, they are asking for a legal justification to execute a DoS to protect their copyright. So any retaliation will still be illegal.

      I've encountered this same idea before, though. When I was six, my big sister used to pick on me trying to provoke me. When I would react, she would cry to my mom and I would get in trouble. They are trying to get us to react so the DMCA and all their other purchased legislation will seem justified. The next step will involve Cue:Cats somehow, I just know it.

      --
      Planning to be moderated ± 1: Bad Pun.
  78. Nice precedent being set here by cr@ckwhore · · Score: 1

    Very cool of the RIAA to set the precedent on this topic! Recently, they backed out of the right to hack amendment of the anti-terrorism bill... so now, could it be interpreted to mean that a DoS isn't a "hack"? Nice work RIAA.

    --
    Skiers and Riders -- http://www.snowjournal.com
  79. in other news by Dr.+Awktagon · · Score: 5, Funny

    RIAA officials will be sending groups of up to 2000 teenagers to any house party, block event, or apartment get-together where so-called "DJs" (i.e., pirates) are illegally performing protected works. By filling the space with RIAA agents, the hackers and pirates can't get in, thus protecting the vital intellectual property from misuse.

    Also, the RIAA and MPAA are continuing their plans to merge and become the fourth branch of US government, overseeing the executive, legislative, and judicial branches. Especially the judicial branch. Look for the RIAA seal in a courtroom near you! You PIRATE!

    1. Re:in other news by underpaidISPtech · · Score: 1
      FBI, CIA, NSA, ATF and the new 3MT (The bureau of Music, Movies and MicroCode TaskForce)


      Sorry, couldn't help it, I'm deep into Snow Crash ;D

    2. Re:in other news by Lord_Breetai · · Score: 1

      They [the RIAA] will be the Judge, Jury and Executioner:

      Judge RIAA: You are hereby charged with illegal distribution of IP.

      Judge RIAA: The punishment is death.

      Judge RIAA: How do you plead?

      MP3-Trader: N-n-not guilty!

      **BOOM**

      Judge RIAA: I knew you would say that.

      --
      "You are only young once, but you can be immature forever." -www.animemusicvideos.org
  80. The file sharing programs should fight back by Control-Z · · Score: 1
    If the RIAA really starts doing this, the file sharing clients should be updated to send a packet to the RIAA for every 100 packets downloaded. Just imagine the power of millions of file sharing programs sending packets to the RIAA 24 hours a day.

  81. Another half-thought-out attempt by Frizzled · · Score: 2

    the article states the the RIAA will use a program which will attempt to open multiple, slow speed, downloads to a computer holding a copyrighted file ...

    how long until someone adds a "download speedlimit" to their program? ie. a user has to be downloading at atleast some-K a second or they get the boot.

    for an group with millions at their disposal, this is a pretty weak solution.

    _f

  82. RIAA engages in piracy? by peccary · · Score: 2

    Do they legally have the right to download these files? It would be so sweet to sue the RIAA for copyright infringement.

  83. Firewall popularity by Coward+Anonymous · · Score: 1

    Something tells me firewalls are going to become all the rage among song swappers...
    Gotta block those pesky DoS IPs....

  84. southpark by psychalgia · · Score: 1

    reminds me of that southpark with chef against the recording industry where the balding comb over kept yelling, "I AM ABOVE THE LAW!!!!"

    *sigh*, i only buy from jade tree and the like anymore anyways. The last "commercial" cd I bought was Tenacious D, and I had to pay $20 for it...you guys rock, but damn that hurt. BTW, does the RIAA actually set like standards for pricing like you guys acuse them, I dont really understand them to be anything more than reps for labels...*cough* nazis *cough*

    --

    ________________________________________________

  85. I think this calls for... by Anonymous Coward · · Score: 0

    A Script Kiddie WAR! Let's show 'em who's boss, the people who know what's going on, or some MCSEs!

  86. Let 'em. by sulli · · Score: 1

    Then sue the fuckers under the anti-terrorism/hacking statutes. I for one would love to see Hilary Rosen in jail with abortion clinic bombers and drug traffickers!

    --

    sulli
    RTFJ.
    1. Re:Let 'em. by jrockway · · Score: 1

      When you get sued, you don't go to jail. You have to copensate with money.

      --
      My other car is first.
  87. What next? by blang · · Score: 5, Interesting

    Seems like RIAA is going through evolution at a fast pace. First they knew nothing. Then digital happened, and they still knew nothing. Then the net and digital and p2p happened, but this time they were prepared, armed to the teeth with DMCA.
    Then they tried out misc. tecnhological speed bumps, which all turned out to be trash, and when that was revealed, they tried to extort dr felten. And when he yelled "foul", they somehow managed to backpedal in a way that got felten's suit thrown out of court. bastards.

    And now they've evolved into script kiddies. I guess the goal justifies the means. However, they're still as dumb as brick. In the aftermath of September 11., the hawks have tightened things so that hacking is considered terrorism.

    Cool. Finally there is no need to go through expensive lawsuits to stunt these goons. All we have to do is wrap up the evidence, and hand them over to the feds.

    Extortion, cyberterrorism, sounds like a mob thing to me. Time for a grand jury to put these people away.

    --
    -- Another senseless waste of fine bytes.
    1. Re:What next? by Mtgman · · Score: 2

      And now they've evolved into script kiddies.

      My god man, did you just say that? Evolved INTO script kiddies? If there is a lower form of life, I don't want to know about it. I'll just be over here with my head in the sand, thankyouverymuch.

      Steven

      --
      -- I have marked myself unwilling to moderate-- I don't have other accounts to artificially inflate the karma of
  88. DoSing pirates is quite easy... by DocSnyder · · Score: 1

    All they need is a good headline on /., e. g. "RIAA grants free unlimited access to large music database on http://www.music-pirate.org/w4r3z/".

  89. Limewire is open Source! by Anonymous Coward · · Score: 0

    This is call to the hackers out there to add the ability to automatically kill all downloads in progress that do not maintain a minimum sustained bandwidth!!! Repeated attempts from those computers must be blacklisted as well!

    Lets get it done people! Move! Move!

  90. :) by jjshoe · · Score: 1

    well considering the brains of the riaa...

    filter out *.riaa.* :)

    --
    -- botsex is {grep;touch;strip;unzip;head;mount} /dev/girl -t {wet;fsck;fsck;yes;yes;yes;umount} {/de
  91. One important thing by Uttles · · Score: 2

    How exactly are these people going to identify the song swappers? The article says:

    ...one method uses software to masquerade as a file-swapper online. Once the software has found a computer offering a certain song, it attempts to block other potential traders from downloading the song.

    So, how are they going to define these "certain songs." Think about it: how many bands have played "My Girl" for example? If I have MyGirl.mp3 on my share list, do I get a DoS attack? What if that's an mp3 I actually made using a music production application? How in the world can they accurately say "this person is offering pirated music?" Are we going to be guilty until proven innocent, and at the whims of the RIAA have our sharing shutdown until we justify every song? This will never last, at least I hope it never does.

    --

    ~ now you know
  92. Just drop the packets by jchristopher · · Score: 1
    Could the programmers that work on AudioGalaxy, etc. not put in a feature that allowed you to drop all packets from RIAA networks?

    Surely it wouldn't be all that hard to simply ignore "flood" type requests... either would seem to solve this problem. It's my computer, I can easily set it up to ignore you if I don't like what you send me.

  93. Hilary how lame art thou? Let me count the ways.. by Cryptimus · · Score: 2, Insightful
    Check out how they're going to do this, it's hilarious.
    The software technology, according to industry sources, would essentially act as a downloader, repeatedly requesting the same file and downloading it very slowly, essentially preventing others from accessing the file. While stopping short of a full denial-of-service attack, the method could substantially clog the target computer's Internet connection.
    Hello? The clue meter is reading zero. Another big doh for the RIAA.
    It's unclear yet how much time and money any record label or industry group is willing to devote to the project. Given the huge number of file-swappers online, using this kind of direct-action technique against even a small percentage of song-traders could quickly soak up technical and financial resources.
    You're not kidding. DDOS attacks rely on the fact that you've hacked a shitload of luser's computers to do your bidding which are all focused on (usually) just one target. How do the geniuses at the RIAA think they're going to DDOS a million people at once?

    My advice: Ignore it. These people are technical buffoons. Remember that a lot of press-speak from the RIAA is focused upon manipulating public officials to put through the legislation they require. This press-release is trying to legitimise hacking for them alone.

    Actually I've got an idea. If they do try this, how about some of our nastier hackers get together, identify the source IP's of the RIAA machines and simply hack them to death. After all, how secure will their machines be? They still don't understand technology, so I suggest we give them an idea of just how nasty the big wide world can be.

  94. honeypot project? by coldmist · · Score: 2, Insightful

    So, who will volunteer a boxen to be a honeypot?

    Just use an .mp3 file that is a recording of someone chanting, "when the log rolls over, we will die, we will die!" and make a copy of it corresponding to every mp3 song name on your 100GB "archive" partition.

    Then, publish the results on /. in a couple of weeks.

    --
    Don't steal. The government hates competition.
  95. In related news... by chinton · · Score: 2, Funny

    The Ford Motor Company announced today that if they suspeced you would be speeding while driving one of their cars, they would sneak over to your house and pour sugar into your gas tank.

    1. Re:In related news... by Lee+Cremeans · · Score: 1

      They damn well BETTER not, hell, my 1984 Colony Park has enough problems!

  96. Boo fucking hoo by Anonymous Coward · · Score: 0

    I'll cry you a fucking river

  97. Hey, I'm a copyright owner TOO! by cemcnulty · · Score: 2, Insightful

    If their legislation had passed, and if in the course of trying to DoS my gnutella connection they had downloaded my own copyrighted files, I would have had the right, NAY the OBLIGATION, to hack into thier servers, retrieve my files, and if I damaged anything along the way, I'm completely free of blame because of their legislation.

    And yet, something tells me that it wouldn't have worked out this way.
    Too bad.

    -Chuck

  98. copyright problems by Anonymous Coward · · Score: 0

    hey just make your own songs, copyright them
    and them share them under popular names
    like "purple haze" etc....

    when they DL it, then you can sue them for infringement.

    1. Re:copyright problems by innocent_white_lamb · · Score: 1

      The song titles are part of the copywrited material, I would think. Therefore you would not be able to name your original music the same as the pre-existing RIAA material.

      --
      If you're a zombie and you know it, bite your friend!
    2. Re:copyright problems by fava · · Score: 1
      No. You cannot copyright a title.

      For example there are 4 different books by 4 different authors called "Windows 2000 Active Directory" on amazon.com, even if the books themselves are copyright the titles arent.

    3. Re:copyright problems by innocent_white_lamb · · Score: 1

      I wonder. For example, if I wrote a book called "Harry Potter's Guide to Magic Gardening" don't you think I would have Warner Bros on my case in very short order? What if I wrote and sold a book called "The Authorized Biography of Stephen King" when I've never met, talked to or had anything to do with "that" Stephen King and my book was actually about my neighbour, Mr. S. King, the fellow who owns the hardware store down the block.

      --
      If you're a zombie and you know it, bite your friend!
    4. Re:copyright problems by haruharaharu · · Score: 2

      I wrote a book called "Harry Potter's Guide to Magic Gardening" don't you think I would have Warner Bros on my case in very short order?

      You probably would - Harry Potter is most likely a trademarked term, so unless you could demonstrate that you were talking about a different Hary Potter (like, for example, your uncle), you'd be in some hot water.

      --
      Reboot macht Frei.
  99. Online music is dead anyway (for me) by tomaasz · · Score: 1

    The only way to _seriously_ trade music is: MAIL.
    Arrange the trade online and then send CD-R's.

    Using online mp3 archives is like reading books from the eye-level bookshelves.

    http://www.mp3th.net
    http://www.sweb.cz/yerbouti

  100. Dateline: 2006 - News Flash From the FUTURE! by jeff.paulsen · · Score: 5, Funny

    Here in the world of the future, 94% of all bandwidth is taken up by these three sets: machines falsely claiming to have resources, other machines falsely claiming to want same, and those two sets of machines pretending to transfer data very very slowly.

    --
    -- Jeff Paulsen
    1. Re:Dateline: 2006 - News Flash From the FUTURE! by glitch! · · Score: 2, Funny
      Here in the world of the future, 94% of all bandwidth is taken up by these three sets:
      • machines falsely claiming to have resources,
      • other machines falsely claiming to want same,
      • and those two sets of machines pretending to transfer data very very slowly.

      The more I think of it, the more this sounds like the three perfect applications for Microsoft products. (+1 flamebait)
      --
      A dingo ate my sig...
  101. Does the RIAA have the "Get Smart" team ... by -=OmegaMan=- · · Score: 3, Funny

    ... developing their wacky plans?

    This plan was deemed only slighty better than the "PC GPS/Abandoned Star
    Wars defense laser" and the "Anti-MP3 MP3" plans, the latter failing because
    of the obvious development of an Anti-Anti-MP3 MP3.

    --

    This sig is xenon coated, and will glow red when in the presence of aliens

  102. Fight Back by acoustix · · Score: 1

    I say that if the RIAA tries a DoS then we should fight back with a DoS of our own. If one of us is attacked/shutdown then we should go after their equipment.

    Sounds fair to me.

    --
    "A plan fiendishly clever in its intricacies"- Homer Simpson
  103. This is Scary by xenonsoul · · Score: 2, Interesting

    I can't imagine that they would be stupid enough to start a war with hackers. They're asking for it.

    I guarantee that the large portion of the people that use these systems are people who know their way around networks and systems, at least to some degree.

    -X

    1. Re:This is Scary by jrockway · · Score: 1

      I told you all to reprogram code red to DoS *.riaa.* (or whatever). But noooo, you modded me down. Ah well :-D

      --
      My other car is first.
  104. And for Freenet? by HanzoSan · · Score: 1

    How would this stop freenet?

    --
    If you use Linux, please help development of Autopac
    1. Re:And for Freenet? by jrockway · · Score: 1

      They would just end up mirroring all the illegal MP3s. HAHAHAHAHAHAHAH !

      Oh, that would be wonderful. And then you could say "well I got them from the RIAA", right?

      --
      My other car is first.
  105. pfft. by smack_attack · · Score: 1

    Fine, I'll just patent this process and sue the RIAA. Let's take this back to the courtroom where it belongs.

  106. These people are idiots by BryceH · · Score: 1

    so you put a cap on the min download speed from your server... and all their efforts are wasted.. yet again. they cant think that this would seriously work.

    --
    "Shut up brain or ill stab you with a Q-tip" Homer Simpson
  107. Hey -- it was a joke! by cduffy · · Score: 1

    Yes, we *know* what the guy was originally trying to say; AQM's interpretation was simply a Damn Funny Joke.

    Sheesh... ppl these days... no sense of humor...

  108. If the RIAA DoSes You...POST THEIR IP by deaddeng · · Score: 1

    A packet tsunami from /. readers with broadband should give the RIAA a whole new understading of the concept of "smother."

    --
    --- .085 as cool; proving that a little knowledge is dangerous
  109. Offer a solution by mc6809e · · Score: 1

    Someone here please offer a solution to the
    piracy problem. How can music copyright holders
    protect their works from piracy? The RIAA gets
    bashed for all their tactics. Okay. Nows your
    chance to give them a solution you can live with.
    What should they do? How can technology allow
    for both protecting copyright and fair use?

    1. Re:Offer a solution by Anonymous Coward · · Score: 4, Insightful

      The answer is that technology cannot solve the problem, because copyright is a social contract, not a set of absolute rights of control.

      There are NO technological methods to distinguish piracy from fair use. In the end, that is a legal distinction, and is based on a number of factors. In fact, quite often, the same, identical act can be either infringement or fair use, based on nothing more then the intent of the person committing the act.

      If I record a television show off the air so I can watch it later, when I'm home, that's fair use. If I record the same television show off the air so I can sell the videotape on ebay, that's piracy. There is absolutely no technology that can determine what I'm going to do with that videotape. The idea that technology offers a "solution" to the problem is a fallacy.

      The real "problem" is that copyright law is completely out of sync with the reality of how people use, and want to use, copyrighted works. The problem is that copyright holders have grown far too powerful, and have convinced Congress that they, and they alone, are the only "interested party" in matters of copyright, when in fact, the real purpose of copyright is not to protect them, but to serve the public by increasing access to and the availability of creative and useful works.

      The copyright industry is struggling to reduce and control access to and to limit the availability of copyrighted works -- the exact opposite of the constitutional purpose of copyright.

      The "solution" is for Congress to change the laws to maximize the availability and access to copyrighted works, through such methods as statutory royalties, and eliminating the "right" of copyright holders to control who may use and distribute their work.

      The problem is that unlike the recording and motion picture industries, which pay individual Congressmen directly through campaign contributions, the rest of the country -- the citizens at large, pay Congress indirectly through taxes. We've created a system where no one can get elected without selling out to the media corporations, then we wonder why Congress keeps repealing our freedoms, but leaving exemptions open for the recording and motion picture industries.

    2. Re:Offer a solution by Lonath · · Score: 1

      Put a tax on all recordable media and pay artists a living, but not a huge living.

    3. Re:Offer a solution by Anonymous Coward · · Score: 0

      $5 CD's

  110. DoS? Hehe.. by Kramer747 · · Score: 0

    Just post the RIAA's IP address. That will teach 'em to try a Denial of Service :)

    /. effect here we come.

    "The difference betweeen genius and stupidity is that genius has its limits." Albert Einstein

  111. The new home page for the RIAA... by uigrad_2000 · · Score: 5, Funny

    Welcome to the Recording Industry Association of America. We provide services for citizens who wish to protect their copyrights with might, instead of right.

    Has someone been pirating you're music and putting it on the web? We understand how you feel. Because of that big bad idea called liberty, you can't stop it, can you? Well enter the IP address of the offending site, and we'll blow them to smithereens!

    FAQ:
    1. Isn't DoS illegal?
    Not any more. We're the good guys, so it's ok.

    2. Will you DoS any server that's entered on this page?
    Discrimination is wrong. Always. You name it, we bomb it.

    3. I hate my brother. Can you beat him up?
    Watch for version 2.

    --
    Free unix account: freeshell.org
  112. The RIAA is skating on thin ice by eyeball · · Score: 2

    I use gnutella and other peer-to-peer systems to distribute many homemade mp3s that I compose, perform, and record myself. I am not a member of the RIAA. On my peer-to-peer systems I don't serve a single mp3 that is under the authority of the RIAA.

    If I see any evidence that the RIAA is disrupting my ability to distribute my own songs, they are going to be bitch-slapped with a lawsuit so quickly...

    --

    _______
    2B1ASK1
    1. Re:The RIAA is skating on thin ice by Megahurts · · Score: 1

      and if that's not enough, you could dos them too... >:-}

  113. Civil Liberties? by Anonymous Coward · · Score: 0, Flamebait

    It sickens me to see people refer to listening to stolen music or watching pirated movies as their civil liberties.

    How about you go live in China for a few months, then start talking about civil liberties.

    1. Re:Civil Liberties? by Anonymous Coward · · Score: 0

      You've missed the point in an incredibly underwhelming manner. Congratulations on your low IQ.

    2. Re:Civil Liberties? by linzeal · · Score: 1

      Think of all the piracy that you can do in china drool...

    3. Re:Civil Liberties? by rot26 · · Score: 1



      It sickens me to see people refer to listening to stolen music or watching pirated movies as their civil liberties


      Does it sicken you more or less than wearing white after labor day?

      --



      To ensure perfect aim, shoot first and call whatever you hit the target
    4. Re:Civil Liberties? by Peaker · · Score: 1

      Zionism IS a form of Racism

      Yeah, giving a home to prosecuted Jewish refugees all over the world is an evil racist idea. Idiot.

    5. Re:Civil Liberties? by Peaker · · Score: 3, Insightful

      It sickens me to see people refer to listening to stolen music or watching pirated movies as their civil liberties.

      Being terrorized and attacked due to their determination of me holding "copyrighted meterial" is violating my civil liberties.

      A) They cannot determine with certainty that I actually performed any illegal action, due to the uncertainty that the song/whatever is actually copyrighted, and also due to the fact it is not necessarily illegal to export copyrighted meterial, by accident/etc.

      B) If whenever you illegally throw a piece of paper in the street, or whatever, I break into your house and mess it up, I'm breaking your civil liberties. The broken civil liberties are NOT of throwing papers in the street.

      If the RIAA take the law into their own hands, and cannot be stopped legally, maybe citizens should take the law into their own hands, and fight back too.

    6. Re:Civil Liberties? by Anonymous Coward · · Score: 0

      How about you go live in China for a few months, then start talking about civil liberties.

      I lived in China for over a year, not sure how that helps but I'm glad it does.

    7. Re:Civil Liberties? by Anonymous Coward · · Score: 0

      Why does every idiot think that "but you could be dead" is an argument against civil liberties.

    8. Re:Civil Liberties? by linzeal · · Score: 1
      http://www.iclnet.org/pub/resources/text/history/i srael.html

      Understand this, that "refugees" from the original israel would be long dead since it had not existed for a very very long time.

      Displacing the native people of the region with new settlers that are adverse to them is what brillant?

      Refugees from eastern europe, russia, and elsewhere would of been welcomed in numerous countries after the war.

      Isreal was created out of pity and ignorance and now exists as a state that indiscriminately enforces a policy of revenge and proactive killings.

      ad hominem attacks with little insight, yawn...

    9. Re:Civil Liberties? by coats · · Score: 5, Insightful
      It sickens me to see the publishing industry, Congress, the Executive Branch, and the courts ignoring the Constitution's demand that copyright protection must have limited duration.
      • From a mathematical point of view, if Congress is free to extend the term of copyright at will, then by definition that copyright term is not "limited".

      • From an operational point of view, a copyright term that has been extended so that during my adult entire lifetime, past, present, and future, no work has had nor will have its copyright expire is operationally indistinguishable from an unlimited one (for no experiment I can perform can make the distinction).

      • From a human point of view, a copyright term that lasts for multiple human lifetimes is not limited in any meaningful sense.
      In the United States, the Constitution is the supreme law of the land. I say that the fundamental lawbreakers are the RIAA and their cronies in Congress, the Executive Branch, and the Courts.

      --
      "My opinions are my own, and I've got *lots* of them!"
    10. Re:Civil Liberties? by Anonymous Coward · · Score: 0
      Sounds the same as America. Which also was
      created by displacing the natives and taking
      citizen from of countries who could have gone
      elsewhere. And America is currently
      indiscriminately enforcing a policy of reverage
      and proactive killings, in its own deference.


      Both Isreal and America have every right to do
      whatever it takes to defend themselves against
      terrorist.

    11. Re:Civil Liberties? by Mattcelt · · Score: 1

      I had more in mind things like harassment of private citizens, jailing of people based on bs laws like DMCA (e.g., Sklyarov), which admittedly the RIAA hasn't officially done *yet*, but I certainly won't put past them.

      I don't know, does "fair use" in copyright law constitute civil liberty? Because we are sure losing that fast...

    12. Re:Civil Liberties? by Speare · · Score: 2

      Being terrorized and attacked due to their determination of me holding "copyrighted meterial" is violating my civil liberties.

      Whoa, big fella. There's two parts here. While RIAA's attempts at lobbying for liability protection is downright bad form, calling this DoS strategy "terrorizing and attacking" is way off the mark.

      If RIAA finds you have steal.me.baby.mp3 on your system, RIAA will just "download" it often enough to suck all your bandwidth dry. No other ports, no hacking your hard drive, no providing a virus to scan your subdirectories, no wiretapping your Audrey or even snooping your firewall. You offer the song, they oblige your offer in spades, so nobody else gets a satisfying download.

      Terrorism is killing innocent people in the name of a political objective. Abusing that term dishonors those innocent people and trivializes the barbarity in the world.

      The RIAA suck. However, they DO have the licenses to distribute music, and Mr. Gnutella user does not. This is a very valid way of combating the issue: suck the bandwidth dry. The RIAA should still be liable for damages incurred, and the artists should still undermine the RIAA's stranglehold by offering their own music instead of signing those contracts.

      --
      [ .sig file not found ]
    13. Re:Civil Liberties? by rmgrotkierii · · Score: 1

      Whoa, big fella. There's two parts here. While RIAA's attempts at lobbying for liability protection is downright bad form, calling this DoS strategy "terrorizing and attacking" is way off the mark.


      I guess you haven't paid attention to the current news from the Senate, PATRIOT bill defines HACKING as an act of terrorism, and the bill PASSED the Senate 96-1 (Thank you Sen. Feingold, atleast everyone isn't braindead in the Senate!) So hacking is more than half-way to becoming a terrorist act, seeing how the House dropped thier own anti-terrorist bill in favor of the bill produced by the Senate! Thank you very much.

      --
      Reality is for those who can't face Science Fiction.
    14. Re:Civil Liberties? by PhilHibbs · · Score: 2
      Terrorism is killing innocent people in the name of a political objective.
      I disagree that terrorism requires killing, but the rest of your post is insightful. It isn't hacking or cracking, but it is DoS though. It is deliberately abusing a service in order to degrade it, on a suspicion of illegal activity, with no due process.
    15. Re:Civil Liberties? by Peaker · · Score: 2
      http://www.iclnet.org/pub/resources/text/history/i srael.html

      I know my Israeli history, thank you.

      Understand this, that "refugees" from the original israel would be long dead since it had not existed for a very very long time.

      How is it relevant? At the time of the creation, many refugees existed, and there was not a single country in the world where Jews were free of all prosecution.

      Jews could not trust countries to protect them from the holocaust reoccuring. The only real solution is to create their own country, and the only people they can trust to do this - are themselves.

      The Americans and the British, and other countries, did not bomb concentration camps when they could, and could not be trusted with the fight of Jewish prosecution.

      Displacing the native people of the region with new settlers that are adverse to them is what brillant?

      The native people were not forcably 'displaced'.

      The Jewish who came to Israel, before the holocaust, bought lands with money.
      After the Jewish people were brutally murdered in the events of 1921, and 1929, the Jews of Israel set up some defensive organizations to protect themselves.

      The UN's division plan of 1947 was accepted by the Jews of Israel, and rejected by the Arabs of the region.

      They chose to violently attack the new state, instead. Arab leaders around Israel called the native people to leave Israel for reasons of ethnic purification, and because they will surely get rid of Israel soon. The native people left of their own free will, and as part of wars that were initiated by the arab side.

      Refugees from eastern europe, russia, and elsewhere would of been welcomed in numerous countries after the war.

      Israel was being set up long before the war. It started back in the 19th century. Back in 1927, America officially closed its doors to Jewish immigration, leaving Jews with nowhere to go. In the 30's, the only place Jews could run from the Nazis to, was Israel.
      After the holocaust, refugees had other countries to go to, but that is far too late, and Israel was already set up in the region.

      Again, the Jews cannot trust their fate to another nation again. Prosecution cannot be stopped by any other, but themselves, and their own state. You must understand that there were times it was the only answer to prosecution, and even now, there is Jewish prosecution all over the world.

      Isreal was created out of pity and ignorance and now exists as a state that indiscriminately enforces a policy of revenge and proactive killings.

      Israel was created out of the holocaust, as a trusty home for Jews, where they are safe from prosecution, which was unprecedented for thousands of years.

      Israel enforces a policy of striking terrorists, under the principle of self-defense, killing people who are known to be involved in acts of killing innocent people.
      I wouldn't call that revenge or proactive killing.

  114. Freenet isn't vulnerable to this. by cduffy · · Score: 2

    With Freenet's model, the documents would merely migrate closer to the nodes making the specious requests -- indeed, the extra requests would simply result in *more copies* being available throughout the network!

    I sincerely hope that a Freenet-based music search system (such as Espra) becomes consumer-ready soon; we may soon need one.

    1. Re:Freenet isn't vulnerable to this. by PureFiction · · Score: 2

      Freenet has its own vulnerabilities. If you want to force content out of Freenet, simply have a number of rogue nodes cooperatively insert bogus data and request it from multiple locations.

      This is a very quick and efficient way to force legitimate data out of the caches of various nodes.

    2. Re:Freenet isn't vulnerable to this. by kindbud · · Score: 2

      For this to work, the bogus nodes would have to substantially outnumber user nodes, and the bogus data files (keys) would have to substantially outnumber the popular keys.

      This is a very quick and efficient way to force legitimate data out of the caches of various nodes.

      Only if storage space allocated on the nodes is very small and easily overrun, resulting in frequent and sweeping cache purges, can this happen. The attacker also has no control over which data a particular node will throw away, except that he can be sure that it was less popular than what would remain.

      --
      Edith Keeler Must Die
    3. Re:Freenet isn't vulnerable to this. by PureFiction · · Score: 2

      For this to work, the bogus nodes would have to substantially outnumber user nodes, and the bogus data files (keys) would have to substantially outnumber the popular keys.

      You are wrong. The very thing that makes freenet work so well in caching oft requested content where it is needed is the very thing that makes it easy to exploit the finite cache space of nodes.

      This is a well known exploit in Freenet, but fortunately it has not been implemented and freenet itself has remained rather small.

      Only if storage space allocated on the nodes is very small and easily overrun, resulting in frequent and sweeping cache purges, can this happen.

      Freenet is unreliable storage. Data drops out of freenet all the time. And by default the cache size is 100M. The maximum cache file size (due to architecture contraints) is 2G. Very within the realm of exploitability.

      The attacker also has no control over which data a particular node will throw away, except that he can be sure that it was less popular than what would remain.

      Exactly, you could not force out specific data, but you could force out most or all legitimate data, leaving only crap in the caches of the nodes (which they mistakenly beleive is valid popular information)

    4. Re:Freenet isn't vulnerable to this. by BCoates · · Score: 1
      You are wrong. The very thing that makes freenet work so well in caching oft requested content where it is needed is the very thing that makes it easy to exploit the finite cache space of nodes.

      This is a well known exploit in Freenet, but fortunately it has not been implemented and freenet itself has remained rather small.

      This isn't really a practical attack, at the very best case, you'd need to be able to upload 1/100th of the entire storage space usable by Freenet in a reasonably small amount of time... In reality, you'd need a lot more than that, since you would overwrite the storage of some nodes repeatedly, and it isn't really possible to reliably send one file thru 100 nodes at a pass... and you only pick the first node, not any of the rest.

      You would also need a nearly exhaustive list of the nodes, that would be nontrivial, but not impossible.

      There is a trivial way to stop this from destroying popular data anyway, having a 'high-water mark' where the x% most popular data cannot be overwritten by new inserts. Freenet either does this now or could be easily modified to do so (i don't remember off the top of my head). In order to overcome the high-water mark system, you have to insert and successfully request the same junk data, which gives you substantially less leverage over the network for the amount of bandwidth used.

      The maximum cache file size (due to architecture contraints) is 2G. Very within the realm of exploitability.

      No, that's not true. The Freenet 0.3 java node can use up to the maximum bytes/files a single directory in the underlying filesystem. The Freenet 0.4 java node can use up to the maximum size of a single file in the underlying file system (or 2^63-1 bytes, whichever is less).

    5. Re:Freenet isn't vulnerable to this. by PureFiction · · Score: 2

      This isn't really a practical attack, at the very best case, you'd need to be able to upload 1/100th of the entire storage space usable by Freenet in a reasonably small amount of time

      Wrong. Read the Freenet architecture docs.

      No, that's not true. The Freenet 0.3 java node can use up to the maximum bytes/files a single directory in the underlying filesystem. The Freenet 0.4 java node can use up to the maximum size of a single file in the underlying file system (or 2^63-1 bytes, whichever is less).

      Wrong again. Due to implementation limits you can only use a maximum 2G datastore.

  115. ok then, everybody at the same time. by Lussarn · · Score: 2, Funny


    #!/bin/sh
    while true; do wget www.riaa.com; done

    Wait for 0.2.. It's threaded.

    1. Re:ok then, everybody at the same time. by Tackhead · · Score: 2
      >#!/bin/sh
      > while true; do wget www.riaa.com; done
      >
      > Wait for 0.2.. It's threaded.
      Whaddya wanna bet that RIAA writes 0.2 and fork-bombs themselves off the 'net the first time they try this?

      I can hear Hilary Rosen now - "Well, if one DOS client can block one file sharer, why not have a DOS client that spawns two DOS clients before it starts downloading! That'd be s00per 733+"

  116. *SIGH* by Anonymous Coward · · Score: 0

    Calling this a DOS misunderstands what a denial of serice attack does.

    No, you "Misunderstands" what a DoS does.

    A denial of service is just that: doing something that denies access to a service. Ping flooding/smurfing is one way to do it (the bandwidth is the service that's being denied), but it's hardly the only thing that can be classified as a DoS. Attempting to eat all connection limits also denies service.

    If a record company uploads Mambo No 5 from your achine again and again very slowly

    Before you spout off about misuse of terminology, you should learn to use it correctly yourself.

    Hint: You do not upload FROM. Nobody can "upload something from you". The correct term is download.

    upload means to send. download means to receive.

  117. Bogus Node Antipiracy by ers81239 · · Score: 2, Insightful


    One day, the RIAA is going to set up a few hundred nodes full of files which look like pirated music. Instead they will contain anti-piracy messages. The RIAA will keep up with p2p tools which try to verify checksums and signatures of music. After a while, it will be difficult to find music as 10%, 20%, 50%, 70% of the files available are actually anti-piracy messages instead of the song you think they are.

    How are we going to stop this?

    --
    there are 2 kinds of people. those who divide people into 2 kinds, and those who don't.
    1. Re:Bogus Node Antipiracy by Nicolas+MONNET · · Score: 1

      It will be an annoyance, however I think it can be countered. Theoretically, you could destroy eBay's market by posting shitloads of phony auctions. But they have that scoring system that prevents just this.

      It's not trivial, but not that difficult to set up a crypto-based trusting/scoring system.

  118. Position Available by Darth+RadaR · · Score: 4, Funny

    l337 h@X0rZ needed immediately for a position in the entertainment industry. 401K, Benefits, and Bad Karma included in employment package. Must have own h@X0r \/\/areZ. Apply on-line at www.riaa.org.

    --
    /*drunk.. fix later*/
  119. If this is real, did they realize what they need? by Lethyos · · Score: 2

    If there are N music traders, they may need as many as N^N systems in order to smack them all down. How economical!

    --
    Why bother.
  120. Meathead by Anonymous Coward · · Score: 0

    Funny why is the song writers' guild suing RIAA if they get so much money twatlicker ?
    Next time you pop off how about knowing ANYTHING about what you are talking about pindick.

    1. Re:Meathead by Anonymous Coward · · Score: 0

      Wow, have we not heard of punctuation? Not to mention that your mindless insults really drive home your point.

      The fact remains that you are trying to justify stealing music, which cannot be done. You deserve to be fined and arrested.

  121. This would be tough to fight by fobbman · · Score: 2

    Minimum average download speed > 3K/sec (sorry 14.4 modem users!)

    Maximum connections per IP series (correct me if there is a better term for XXX.XXX.XXX.*)=2

    Also, put a sign up at P2P software homepage of choice that says "We Reserve the Right to Refuse Service to Any IP Series Through Our Software".

    Doesn't seem to be a problem to me.

    1. Re:This would be tough to fight by rosie_bhjp · · Score: 1

      You could also put in the EULA of such software that members of RIAA, their agents, or relatives are prohibited from using said services.

      If they are found then they themselves are in copyright breach and could be sent a cease and desist order.

      --
      A radio maverick jumps to internet only. The Future of Rock n Roll
    2. Re:This would be tough to fight by smack_attack · · Score: 1

      Maximum connections per IP series (correct me if there is a better term for XXX.XXX.XXX.*)=2

      IP classes

      Class A - supports 16 million hosts on each of 127 networks
      24.255.255.255
      Class B - supports 65,000 hosts on each of 16,000 networks
      24.45.255.255
      Class C - supports 254 hosts on each of 2 million networks
      24.45.126.255

  122. The RIAA does NOT have that right - they are lying by jms · · Score: 5, Interesting

    I've read through the statute, and I think that the RIAA is attempting an enormous bluff.

    It seems to me that for the RIAA to attempt to hack into someone's internet-connected computer and disable it is clearly illegal under current law:

    18 USC 1030(a)(5)(C)

    (a) Whoever - (5)(C) intentionally accesses a protected computer without authorization, and as a result of such conduct, causes damage; ... shall be punished as provided in subsection (c) of this section.

    An internet-connected server would appear to be a "Protected computer" under the definition in 18 USC 1030(e)(2)(B)

    (e) As used in this section - (2) the term ''protected computer'' means a computer - (B) which is used in interstate or foreign commerce or communication;"

    "Damage" is defined in 18 USC 1030(e)(8)(A):

    (e) As used in this section - (8) the term ''damage'' means any impairment to the integrity or availability of data, a program, a system, or information, that - (A) causes loss aggregating at least $5,000 in value during any 1-year period to one or more individuals;

    If the RIAA really thinks that it is legal for them to hack into and disable other people's computers, then why aren't they doing it already? Answer, because they know that it's really
    illegal -- if they were to do more then $5,000 in cumulative damage, they could be charged with a felony, but they're hoping that they can fool Congress into making it legal for them to attack and destroy other people's computers by claiming that they currently have that right, and that the antiterrorism bill is going to take that right away from them.

    The RIAA appears to have adopted the strategy of making a completely false claim, then taking advantage of the runaway-train-antiterrorism bill to attempt to insert a brand new exemption for themselves, allowing them and only them to practice cyberterrorism under the guise of "protecting their copyrights."

    Dirty tricks as usual.

  123. When is the breaking point reached? by corky6921 · · Score: 2

    From the article:
    "Lawsuits filed against Napster, Scour, Aimster, MusicCity, Kazaa and Grokster have shut down some of these file-swapping gathering points, but the practice remains as popular as ever."

    I can't imagine what this list is going to look like in a year. Somewhere, sometime, there will be a breaking point, where either the RIAA gives up, or something happens whereby music piracy is stopped completely. This cat-and-mouse game cannot continue forever. How many more networks are we going to shuttle people to before the RIAA wins because music piracy is impossible? Remember, every time the RIAA shuts one service down and there is a mad rush to tell people to just use client XYZ to connect to a new network, more and more people just shrug their shoulders and say, "Well, I guess I'm just going to have to buy that Pink Floyd CD now."

    I think the future has to be that the RIAA allows music for download at relatively cheap prices. Enough people have already gotten fed up with downloading the client-of-the-week and finding a server that is a) open and b) has lots of good stuff on it. Right now, the RIAA is slowly strangling "piracy" with their endless lawsuits, but it can never be completely stopped until they offer a competing service. Until then, the lawsuits are going to continue, and that list is going to become ridiculously long.

    1. Re:When is the breaking point reached? by M_Talon · · Score: 2

      I think that the death of MusicCity and Kazaa is being prematurely reported. However, that's not the point. The point is that there will NEVER be a point when the P2P networks go away. Napster had a fatal flaw in that it indexed the files on a central server. Kazaa only makes an entry point, as the searches are handled by decentralized nodes that are actually user computers. Gnutella has neither of these issues. As for more people shrugging their shoulders, I'm finding more are actually turning to the P2P. That's partially publicity (bad press is still press) and partially because the RIAA is pissing so many of them off.

      The RIAA can sue themselves blue in the face, but the Pandora's box is open now. For every heavy-handed tactic they pull, more people boycott their products and turn to the P2Ps. That demand makes better and better P2Ps, thus it would be a losing battle. Eventually, RIAA will have to play nice, or they will cease to be.

      --
      Electronic Frontier Foundation for online civil rights information
  124. Plain illegal. by Anonymous Coward · · Score: 0

    I don't know how it is in other parts of the country, but in New Jersey, if any entity attempts unathorized access to any computer system, they are in violation of an 1986 hacking law, that is a felony, and punishable with a jail sentence of 5-25 years.

    So, if they try that shit with me, I'm going to my district attorney to file a complaint, and I am going to protect myself in a manner consistent with adequate self-defense - smurf the fuckers.

    I hope all /. readers will do the same. With our numbers, straight up pings can kill them. And if you find them trying to hack into your system, check your state laws. Although there might not be federal provisions, those fuckers are probably breaking local laws.

    WHY CAN'T THE TALIBAN SEND VALENTI ANTHRAX? DO US A FAVOR!!!!!!!!!!

  125. why stop there? Call in Charles Bronson by Anonymous Coward · · Score: 0

    this is pretty soft corporate vigilanteism; what these punks really deserve is some door crashing, two fisted, Magnum wielding justice, ala Deathwish I, Deathwish II, Deathwish 3, and of course Deathwish 4: The Crackdown.

  126. Fast-trak mis-uses the upload/download by Archfeld · · Score: 2

    terms incorrectly. They seem to think that someone downloading a song from me is uploading, and that I download only from others...strange but that is why you see the mis-use so many times.

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
  127. Really bog 'em down by Zen+Mastuh · · Score: 3, Interesting

    Sure, you're 31337 & you have already programmed your router to drop their packets, or you've set up an auto-smurfer. Good for you! Back up a second & try this on your Win* box instead:

    copy *.exe *.mp3
    copy *.vxd *.mp3
    copy *.dll *.mp3

    Just write a short .bat file to execute these commands recursively from your root folder. If you run *n?x, you already know how to do the equivalent.

    I think Hillary Rosen will shit live goats the moment her techies tell her that there are suddenly 6.02e23 mp3 files being shared on Morpheus. Didn't Sun Tzu specify a similar strategy centuries ago?

    --
    "What is the sound of one belly slapping?"
    1. Re:Really bog 'em down by ShoeHead · · Score: 3, Interesting

      Response from tech RIAA advisers:

      "That's not really that many files. You're making a mountain out of a mole, Hill"

    2. Re:Really bog 'em down by zerocool^ · · Score: 2

      jesus H christ. that's funny. I was wondering if anyone was going to notice that 6.02e23 was avagadro's number.

      Good work, if i had any mod points, i'd mod you up mad crazy.

      If anyone out there sees this with moderator points left, mod my parent post up.

      ~Z

      --
      sig?
    3. Re:Really bog 'em down by Anonymous Coward · · Score: 0

      Some dick modded it up Interesting. :-)

  128. SPAM attack? by EdMcMan · · Score: 1
    This looks to me almost identical to spam! Think about it: they are using YOUR bandwidth, for something YOU don't want to send/receive. Now, if the RIAA plans on paying me every time they do this, that is fine with me, but otherwise, don't touch.

    Just a thought as well, would it be possible to put something in the motd to the affect of: Owners of ANY disruptive automated clients agree to pay the amount of $9999999999999999 to the server owner. ? Just a thought, I'm not a legal expert by any means.

  129. Technological solutions by Pemdas · · Score: 3, Insightful
    I find it interesting that the crowd here, usually so quick to cry "trying to legislate against cracking/malicious users is pointless" is crowing about suing the RIAA for something akin to a DoS attack.

    Why not follow our own advice and look for a technological solution? It would be an interesting project to combine something like Advogato's trust metric with cryptographic signatures and connection quotas. In such a system, the hosers that are trying to screw things up would quickly end up locked out of most hosts.

    The downside of needing someone on the system to "vouch" for you to start would be relatively minor for the overall gains, methinks.

    The bigger downside might be the lessening of anonymity on a transfer; if you have to prove who you are before starting a transfer, then there's the potential for someone to put together a client that logs who you are and what you've downloaded. There would have to be a strict seperation between identity information and digital signature...

    1. Re:Technological solutions by srvivn21 · · Score: 1

      Here's what I find interesting:

      I'm surfing at (Score:3), and I don't see any suggestions of using legislation. Just a) posts stating how dumb the whole DoS idea is and b) posts suggesting technical ways to prove its "dumbness".

      I think the moderators are with you on this one.

    2. Re:Technological solutions by nathanh · · Score: 2
      I find it interesting that the crowd here, usually so quick to cry "trying to legislate against cracking/malicious users is pointless" is crowing about suing the RIAA for something akin to a DoS attack.

      Did it occur to you that there might be more than one crowd?

  130. Some simple code change to overcome such efforts by Wolfier · · Score: 2

    RIAA_HAX0R_CLIENT: Request NSync crap song
    GNUTELLA_SERVER: Sending...

    RIAA_HAX0R_CLIENT: Request NSync crap song
    GNUTELLA_SERVER: Sending...

    RIAA_HAX0R_CLIENT: Request NSync crap song
    GNUTELLA_SERVER: Sorry, too many clients

    RIAA_HAX0R_CLIENT: Request NSync crap song
    GNUTELLA_SERVER [sending to other GNUTELLA servers]: HAX0R found: RIAA_HAX0R_CLIENT

    GNUTELLA_SERVER_A [to RIAA_HAX0R_CLIENT]: Request Nsync another crap song

    GNUTELLA_SERVER_A [to RIAA_HAX0R_CLIENT]: Request Nsync another crap song

    GNUTELLA_SERVER_B [to RIAA_HAX0R_CLIENT]: Request Nsync another crap song

    ...

    GNUTELLA_SERVER_ZZ [to RIAA_HAX0R_CLIENT]: Request Nsync another crap song

    RIAA_HAX0R_CLIENT crashes.

  131. too expensive by greysky · · Score: 2, Insightful

    There's simply no way that they could afford to be able to do this. Assume that there are just 250,000 illegal distribution points, and that a single $2000 client machine can tie up, say, 10 of these machines at a time. They would need 25,000 machines running to take down those 250,000 "pirates". Add in their bandwidth costs, which would be sky high, and you've got a solution that costs way more than the problem. Now you could try and do it with fewer bigger machines ( E450's come to mind ), but you still need multiple nic's and a sh!tload of bandwidth, and e450's aren't exactly cheap either. For a task like this it could actually cost more to go with the larger machines, since they're going to need tons of bandwidth.

  132. Don't see how this is gonna work by M_Talon · · Score: 2

    Hypothesis time:

    Ok, assuming the software allows multiple downloads of the same file (why wouldn't it, it's not writing the file, just reading it), how could this have an effect? You start 20 downloads at .5kps...that's 10kps you've eaten up. Gee, I'm not gonna notice that on my screen and kill the requests. If you keep at it, I ban you from downloading anything. Ok, then you spoof IDs or hit me from multiple sources. Fine, I report you to the company for a violation of terms of service. You're now banned from getting on that network.

    Or let's say I'm on Gnutella, which you can't be banned from. I still see your IP you're coming from, and even if you use multiple systems I can still see which net you're on. Spoof an IP? No biggie, I still got a log on you. I'll just keep blocking IPs for each multiple attack that comes in. Eventually, you'll find you can't hit my system.

    All legality aside, cause we know this is really walking the dark side, this plan of the RIAA is going to have two neat effects. One, it's gonna make the P2P networks stronger as they adapt to defeat the threat. Two, it makes the RIAA look like the cartel bullies they are. When are they gonna quit fighting the customer and start working with us to find a solution that makes everyone happy?

    --
    Electronic Frontier Foundation for online civil rights information
  133. Is it legal to counterattack? by Anonymous Coward · · Score: 0
    One question I have: is it legal to counterattack
    in the United States?


    Meaning, if I find a computer attempting to DoS one of my machines, is it legal to DoS them back as a way of protecting my private property?


    Under what I understand of the law, it probably is not legal, but I wanted to know if there were any lawyers in the crowd that could answer this.


    Since the RIAA thinks they have the right to defend "their property" via these types of tactics, I believe that anyone should have that right.

  134. Encrypt it by bowb69 · · Score: 1

    They should just put in some encryption in file swapping protocols and then when the RIAA trys to get around the encryption they would be breaking the law. Hackers are always going to be a step ahead of the RIAA and they should save their money going to the lawyers for the artist.

  135. This is why... by Anonymous Coward · · Score: 0


    ...Intellectual Property is a dumb idea.

  136. No, this is scary, not funny. I mean that. by Kasreyn · · Score: 3, Insightful

    Look.

    Up until now the RIAA's sole method of business has been suing people and trying to get fascist legislation passed, and nothing else. As I'm sure we all know, the massive civil disobedience of file sharing doesn't bat an eye at the law, in fact kind of snickers at it, so that hasn't worked.

    What this means is, the RIAA is finally getting with the program. They're finally employing a technological solution to a technological problem. Some might claim they already had with SDMI but that was a joke, plus it wasn't aimed at going after the file sharers. Now, with this plan, even though there are ways around it, it looks like it could be semi-successful, especially if their online music services are attractive enough. Picture: J Random Musiclover, uses WinMX and KaZaA, until they bog down terribly slowly. He doesn't know it's the RIAA attacking, and he should "damn the man" and keep on truckin'. He just thinks they've become lame and it's time to move on. And then he sees one of the RIAA offerings, and if they're smart enough to finally go for some sort of cheap subscription or micropayment, he might very well be sold.

    And I'm not so sure that's a bad thing. The RIAA has been an ogre in the past, but if it goes the way of micropayments and accepts the fact of filesharing (and that it will never, never, never go away), then perhaps the RIAA will find itself able to move into the future as, if not a friend, then at least an ally of humanity. I would hope so. Otherwise, let's destroy the fuckers.

    But let's give them a little respect, because they're finally starting to get with the program.

    -Kasreyn

    --
    Kasreyn: Cheerfully playing the part of Devil's Advocate to hairtrigger /. flamers since 1999.
  137. Boxing Image by Anonymous Coward · · Score: 0

    I cannot get Michael Buffer out of my mind now.

    "Llllllllllet's get ready to rumbulllllllllll!"

  138. what's good for the pirates is good for RIAA by swinginSwingler · · Score: 1

    If they have the right to DOS a site then so should we. DDOS RIAA and all memeber companies back to the stone age if they try that shit.

  139. but what about.... by Anonymous Coward · · Score: 0

    if i name some file, like a 3 mb, dictionary file as "Dido - Thank You.mp3" that is not copyright fraud, but they'll have no way of knowing and can just steal my bandwidth when the file name leads them to believe it is a copyrighted song. How can they justify that as legal?

  140. Exactly...isn't this what we want?!? by Mdog · · Score: 1

    Since we /.ers don't advocate ip theft, and since we at the same time don't like new laws being shoved down our throats that restrict digital freedom, isn't this the course of action we want the RIAA to be taking?

    <Flaimbait>
    How dare you slashdot morons claim that the RIAA can't download ITS OWN IP!!?!?
    </flaimbait>

  141. audio honeypots by xeno · · Score: 4, Informative

    Hrm. I don't think they mean DoS in terms of swamping trading communities with requests. And I don't think we should talk about this in the future tense; it's happening now. A few weeks ago, I fired up Limewire and spent some time poking around in a couple of communities.

    What did I find? Searching for songs from certain artists/labels returned *hundreds* of hits on essentially identical audio files with slight filename changes and incrementally varied byte sizes. Any attempt to download the songs would be successful -- until the server killed the session at precisely 80%.

    Then I noticed that *all* of the files were being hosted on three IP's. A quick look showed the IPs in a range belonging to a major commercial hosting operation. Nice. A honeypot of sorts. And of course, they have my home IP (fixed) logged as requesting the same songs over and over until the lightbulb went off over my head.

    Oh, well, back to anon-ftp for me...

    --
    I think not...(*poof*)
    1. Re:audio honeypots by Anonymous Coward · · Score: 0

      Yeah, because anonymous FTP certainly leaves less trace of your IP address than any other PTP solution.

    2. Re:audio honeypots by Anonymous Coward · · Score: 0

      Care to share the IPs?

    3. Re:audio honeypots by xeno · · Score: 2

      Anon-ftp is easier to relay, use remotely, or use from a location that otherwise filters gnutella or other napster-ish traffic but does not pose a trace hazard.

      Besides, ftp draws less fire. Ftp depends much more on the human being to find/judge/navigate the servers and content in ways that make it more difficult for corporate RIAA DoS'ers to deal with. Not that couldn't; but chances are they'll just keep gunning for the high-profile swap tools/communities.

      --
      I think not...(*poof*)
  142. Re:The trouble with blacklists by agedman · · Score: 1

    If They can start injecting "legitimate" trader's IPs into the blacklists, the value of the lists would be considerably reduced!

  143. It denies a service... - definition of DOS. by Anonymous Coward · · Score: 0

    If I have my personal computer set to allow 10 download connections for my personal property that happens to have a name similar enough to something RIAA is DoSing... (not too hard, lots of songs have one/two word names - and there's overlap amongst _published_ songs)...

    RIAA says hey, there's one of our songs, and starts up 10 sloooow downloads... I have no access to my own service -> denial of service.

    There's a zillion types of DoS attacks, _some_ of which are the bandwidth overloaders - but there's others that are very simple (sending a single SYN caused a thread to wait forever looking for more on some OSes...).

  144. More proof that we are moving away from democracy. by stuffman64 · · Score: 1

    In a democracy, everyone is guaranteed equal rights. There are no double standards. But what the RIAA is proposing, that for some reason, they should be given the right to do legally what is illegal for everyone else. If I were to launch a DoS attack on riaa.org, I would most surely be arrested, fined, called a terrorist, or all of the above. Yet, if things go thier way, they will have special dispensation to deny me (and others) service.

    This shows that, with enough money, you can essentially buy and modify our government. Last time I checked, this is called a plutocracy. Let's stand up for democracy, and contact our senators!

    --
    --- At my sig, unleash hell.
  145. And for all us who are NOT U.S. resident... by Anonymous Coward · · Score: 0

    I don't remember voting to bring the entire world under US law and regulations. What filtering and discrimination are they going to use for international users IP addresses?

  146. What about universities by nuintari · · Score: 3, Insightful

    So....... they intend to DoS attack every college campus in the united states? riiiiight.

    --

    --Nuintari

    slashdot : where an opinion can be wrong.

  147. Shhhhhhhh! by pimpinmonk · · Score: 1

    Shhhhhhhh! Don't say anything... we can just sue them under the DMCA for reverse-engineering our p2p software! (How is it encrypted? Well, ah, Morpheus does use multiple, uh, sources to assemble the file, Your Honor...) Then it'll be unrestricted file sharing for all!

  148. Missing the point by Anonymous Coward · · Score: 0

    *snicker* Your all missing the point. By downloading these files, even to delete them imediately, they are contributing to piracy.

    Thats the argument they are using against others, remember? Here they are, downloading HUNDREDS of songs... and they can be countersued to force them to pay punative damages for piracy. What fun.

  149. Anti-RIAA Groups by darrylballantyne · · Score: 1

    There are already lots of groups "watching" the RIAA and getting on their case all the time. One of the most prominent ones is boycott-riaa.com, and there's also Die RIAA.

    There are also numerous groups which arguably monitor the RIAA and it's actions along the course of their actions. These include The Future Of Music Coalition, The Velvet Rope and Pho.

    Not to mention all the news outlets that keep a close eye on them - this article being a prime example, as well as The Register's occasionally inaccurate coverage.

    --
    ----------
    Darryl Ballantyne
    http://www.darrylballantyne.com
    1. Re:Anti-RIAA Groups by Mattcelt · · Score: 1

      Good deal. I wasn't aware of the breadth of groups already out there. Still, there's room for one more, at least for the time being.

  150. Re:More proof that we are moving away from democra by eclectric · · Score: 1

    Hmmm... perhaps it's time to go back to poly sci class. America isn't a democracy and never has been. The founding fathers feared what would happen if power should ever fall into the hands of the common man. On another point, your topic seems to suggest that somehow this one case makes money a more relevant issue than "rights" or "freedom." The fact of the matter is, in terms of the law and politics, money has *always* been able to crush rights and freedom if enough of it is spread around.

  151. Anyone Else Noticed Dl/s That just stop? by Anonymous Coward · · Score: 0



    Seems mope and more often when I try to get a song instead of ripping my CD to save myself some time I download the mp3. Now I get a quick burst of bandwidth then it just slows to a crawl or even a stop... So when you try to dl a bunch what happens is all your downloads are just sitting there hanging and you have to keep going in and stopping the hung ones...

    something is very fishy...

    1. Re:Anyone Else Noticed Dl/s That just stop? by Anonymous Coward · · Score: 0

      you use mediacom/@home.

      They are shit.

  152. Heh... by tcc · · Score: 2

    DoS me, I've been upgraded to BSOD'ing since '95, that won't change much in my life :)

    --
    --- Metamoderating abusive downgraders since my 300th post.
  153. If I were sysadmin at an ISP... by Bonker · · Score: 3, Interesting

    And I have a few good friends who are, so I have a basic idea about how they think...

    I would start banning IP's and entire Class C's at the edge or backbone level that I knew belonged to record companies or the people who worked for them to distribute this kind of attack^H^H^H^H^H^Htechnology. This is the same kind of tactic that sysadmins use against DOS attacks, but in this case there's likely to be no distribution since there is no way to get around that legally, and no ability to spoof ip's since they are planning to act like they're really downloading a track. They have to negotiate a connection and send ack's back and forth, right?

    It's a very simple argument if you look at it from a financial or a resource usage point-of-view. It is in an ISP's best interest to keep as much of its network resources free for its customers. If my customers are subject to frequent DOS attacks, then I may ban certain services, such as Ping or Telnet and refuse those packets at my edge router or on my backbone connection if I have a decent backbone provider.

    It's the same deal here. It's in an ISP's best interest to keep the RIAA from using up their network resources as well, because the number one reason people leave an ISP (at least when I worked at one) was a perceived 'slow connection'. If a joe sixpack-type customer knows he's going to get online to find music, and if he has heard from his buddies who got him hooked up in the first place that one ISP is worse than another when it comes to having RIAA related problems, then he's not going to sign up for service with that ISP.

    This war of words and technology isn't just confined to the elite circles of geekdom, as most of you know. The RIAA has made a big enough a deal out of it that they're starting to build a Microsoft-like reputation for evil and greed. Joe-sixpack *does* know that the industry wants to keep him from trading music online.

    By the same token, even a marginally experienced user is going to be picky about his service when he has better luck running his file-sharing apps with one ISP than a another, and we do know that ISP's are starting to refuse to TOS their users more and more often, just so they don't get negative reputations.

    In the long run, this is going to be just another class of people who are routinely denied network access for their actions, via organizations similiar to MAPS RBL or the like. I've already seena few posts by people who plan to 'collect' offending IP's. Again, you can't spoof IP's if you have to send Ack's or do any sort of encyrption negotiation for your attack to work.

    A humourous side-effect of what I beleive is going to happen will be the fact that the RIAA companies and 'attack dogs' will by able to claim 'success' because they'll perceive a drop in file-trading because of the network blocks that will no doubt be up hours after this sort of thing gets off the ground.

    Good try, Hillary, but you're playing with boys who have been doing this sort of thing for a very long time now. Why don't you try again later.

    --
    The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
  154. Does anyone at the RIAA have any sense? by exceed · · Score: 1

    Does anyone in the RIAA have any sense whatsoever? Don't they understand that by DoSing people they not only lag and bog the person they are trying to get, but the network path it takes to get there as well? Don't they understand that they'd be overloading other innocent companies' routers and switches, etc. too? My God, someone send a Slashdot geek over to the RIAA ASAP.

    First they want to 'hack,' and a few days later, they want to DoS! Sounds like the RIAA is a true terrorist group, and we need to erradicate them. They think like criminals. Such evil, evil people.

    --

    void women (int money, time_t time);
  155. We've won... by Patoski · · Score: 2, Interesting

    The most interesting thing about this whole "We'll DoS'em to the stone age!" statement is not so much what they said but what is implied. The RIAA is basically admitting that they can't sue _everyone_ that they need to in order to shut down file sharing services. They can't shut down the services in a litigious manner so they're going to try another route (DoS attacks). The RIAA may have bucket loads of money but their cash reserves are not without end and lawyers don't come cheap. The RIAA must see this and is exploring other avenues.

    The only way for the RIAA to benefit from the internet music sharing phenomenon is if they stop trying to be the phone company and monopolize the market. If they just charged everyone a nominal fee for downloading the music that they _don't_ own then they'd be raking in the cash. Instead they spend all of their time, money and resources suing anyone who _dares_ oppose them.

    The RIAA is becoming more desperate with their latest actions. It's about time people said no to thugs like the RIAA and the Harry Fox agency who attack our fair use rights at every corner. Now, if we could only come up with a file sharing system to share OLGA tablature then we'd really be on to something!

    --
    G. Washington on Government "it is force. Like fire, it is a dangerous servant and a fearful master."
    1. Re:We've won... by kindbud · · Score: 2

      If they just charged everyone a nominal fee for downloading the music that they _don't_ own then they'd be raking in the cash.

      They do. It's an added surcharge to the CD-R media and other recording media you buy. You pay the RIAA a royalty for the privilege of recording your own music, that is original to you, copyrighted by you.

      It seems to me that they have judged our tribute to be inadequate, and it is time to set fire to the crops.

      --
      Edith Keeler Must Die
    2. Re:We've won... by Patoski · · Score: 1

      I wonder if they even realize that they're slitting their own throats? They can either climb aboard with everyone else on the train or they can shake their fist from the station. Either way this train is leaving the station and music sharing over the internet will continue unabated.

      --
      G. Washington on Government "it is force. Like fire, it is a dangerous servant and a fearful master."
  156. that's not flamebait by Anonymous Coward · · Score: 0

    that's accurate. like everything in american politics, it becomes easier with ungodly amounts of money/the forces of satan as your lobbyists.

  157. Cool Hacker DOS tool courtesy RIAA by DickBreath · · Score: 2

    Let me get this straight. The RIAA just has to think that you are a pirate to try to DOS you? So what if I can make Joe over there look like he's a pirate?

    --

    I'll see your senator, and I'll raise you two judges.
  158. Wait until something similar happens to ???... by concepthouse · · Score: 1

    Wait until some hacker out there does a similar attack on a large commercial entity. Take, say....MSNBC or CNN.com.

    If they were continually attacked in just such a way (although I'm sure that a real hacker would be much more ingenious about it) then the government would be finding and prosecuting him for illegal acts aimed at the corporation.

    How is this different? Sure it's probably technically legal....but it is riding the line and the line would certainly be "re-interpreted" by the powers-that-be if it were a single hacker doing the deed.

  159. The Simple Fact of the Matter by eclectric · · Score: 1

    Suppose the RIAA wins the right to actually get into your computer and delete files. There is simply no way for them to know which ones you actually have the copyright to. Right there are grounds for *countless* lawsuits. Secondly, if the RIAA decides to start DoSing a bunch of machines running WinMX or gnutella or whatever, then they're going to be attacking millions of computers at once. That's better than most worms and viruses can claim. How many class action lawsuits, or business lawsuits can the RIAA face? The point made about universities is important. A lot of file trading goes on through their networks, but so does a lot of very *costly* information. Block the important stuff so you can stop a few music pirates, and you're going to piss off a lot of very rich and very influential people and organisations.

  160. Let's make this simple... by sterno · · Score: 1

    ipchains -A input -s -j DENY

    --
    This sig has been temporarily disconnected or is no longer in service
    1. Re:Let's make this simple... by sterno · · Score: 1

      doh...

      I meant:

      ipchains -A input -s [RIAA ADDRESS] -j DENY

      unfortunately I put the RIAA ADDRESS inside the wrong kind of brackets. duh :)

      --
      This sig has been temporarily disconnected or is no longer in service
  161. why why why?? by AssFace · · Score: 2, Funny

    how come the retarded people get to be in charge?

    I really don't get it sometimes. like do they seek them out? are they the only ones applying for these positions?
    I imagine the interview process must be interesting - "well, george here does have two legs but can barely walk, drools, and babbles incessantly about bugs 'eating his skull' - sounds like the perfect canidate to lead this deal"

    I on the other hand am obviously perfect. and handsome.

    --

    There are some odd things afoot now, in the Villa Straylight.
  162. My zombies are better than yer zombies.... by jspaleta · · Score: 3, Insightful

    I don't think the RIAA's new on-line music distribution systems are going to fair very well, when all the rogue file swapping DoS-etteers target the Pressplay and MusicNet servers, bringing them to their knees. In an all out DoS war, my money is on the seedy underbelly of the internet versus a collection of music corporations intent on seeing thier profit margins increase.

    They RIAA might be able to DoS a few file swappers out there, and knock them off the net for a few days at a time...but they are going to be placing a huge target on themselves for every script kiddie out there with an army of @home windows zombies just waiting for a reason to unleash them.

    A script kiddie knocking down the Pressplay or MusicNet servers for even a few hours at a time is going to hurt the RIAA bottom line more than the handful of file-swappers they will be able to DoS off the net.

    -jef

  163. Re:No, this is scary, not funny. I mean that. by kilgore_47 · · Score: 1

    But let's give them a little respect, because they're finally starting to get with the program.

    Taking down a legitimate file sharing network like KaZaA using a denial-of-service attack is not "getting with the program". It's malicious hacking.

    --
    ___
    The way to see by faith is to shut the eye of reason. --Ben Franklin
  164. RIAA terrorism by Peaker · · Score: 1

    RIAA is trying to terrorize civilians, by first trying to legalize cracking into computers, and now with DoS attacks.

    How about putting back a fight?

    If they have too much money, and the legal system is too corrupt to handle it, there are plenty of other means available to American citizens, and not all of them are legal, but perhaps it is worth it?

  165. short of full DoS? by Mike+McTernan · · Score: 1

    While stopping short of a full denial-of-service attack, the method could substantially clog the target computer's Internet connection.

    So they are going to attempt to clog a users' Internet connections... Seems to be that this could be a very dangerous thing to do. Depending on a user's ISP or LAN configuration, blocking one machine may well cause problems for others (Take the example of 'bandwidth hogs' bogging down a neighbourhood on cable...).

    Also, say I work at a large multinational company and decide to use file-swapping from there (assumming it is allowed or I want to risk my job). They might not take kindly to a DoS attack and may well kick back.

    Finally, I believe that DoS attacks were present in early versions of the Gnutella network - people were forming ping/pong packets with large bogus payloads and sending them out with a high TTL... Some of the simpler clients didn't strip off spurious junk after a valid header on a packet (probably using a strategy similar to wormhole routing...) and thus forwarded it. Guess what? Those clients got fixed and the problem went away...

    A good resolve would be to discover the IP's of the computers used to launch the attacks on the P2P networks, and build it into each P2P client to ping these computers, or even better some router in front of them (remembering to spoof source IP address). Might make for a very nice DDoS...

    --
    -- Mike
  166. As an old guy I have much luck by Archfeld · · Score: 2

    on morpheus, which is at this point windows only I think, but 600,000 users gievs a great shot at finding anything :)

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
  167. Compromises like this won't work long-term. by Draxinusom · · Score: 5, Interesting

    All that sounds good, but in the long term there is nothing the music industry can do to solve the problem of piracy without fundamentally changing their business model. Right now it looks like this: 1) Manufacture flashy new act 2) Market the product like it's going out of style 3) Milk it, milk it, milk it 4) When it goes out of style, go to step 1.

    The problem is that a model that is so driven by marketing is especially vulnerable to piracy. Why?

    • Marketing is good at creating desire, but poor at creating support.

      The music labels have pretty much stopped telling people to buy their stuff because it's good, but because it's popular, and at some level their customers realize this. People will buy a product because it's the hot thing, but if that is its sole source of appeal, at the end of the day the buyers won't feel obligated to support the people behind it.
    • Marketing-driven products have no value apart from their marketing.

      If you have an act that's good but undermarketed, MP3-trading will function like free marketing, resulting in increased sales. But if you have an act that's well-marketed but crappy, MP3-trading will function like lost sales, as people say, "Okay, I've been told by Mr. Television that I should have this; well, now I have it."

      No one is going to "discover" Limp Bizkit by hearing an MP3. The product is the marketing and vice versa. Similarly, in tend years, that Limp Bizkit CD isn't going to be on the shelves waiting for the next generation of music fans; if you want to make money off it, you have to make money now.

    Take a look at the publishing industry. The book world is also driven by marketing, but to a much lesser extent. If you publish a book, you can expect that it will provide revenue independent of the amount of money you spend to hype it. That's because the book industry is actually about selling the content instead of the hype.

    Furthermore, the publishing houses have stayed alive by acting as finders and screeners of content. Instead of riding one or two major cash cows, they cast their nets wide, trying to get everything that has some quality. There are tons of great music albums that never get major label release, but there aren't that many great novels out there haven't been published in one form or another. Conversely, I know that anything published by a major house will be better in quality than 90% of what I could get for free.

    So why don't the record companies adopt a model like the publishing industry, where they nurture a variety of intrinsically good acts that will provide more modest but longer-lasting and more stable cash flows? Simple: the quality-based model doesn't make nearly as much cash as the marketing-based model.

    The fact is that there is no way for the record companies to make a "fair" profit doing what they do now. Nothing less that the survival of their way of doing business is at stake; it's no surprise that they're going down swinging.

    1. Re:Compromises like this won't work long-term. by frknfrk · · Score: 1

      what you said is what i would have said if i knew anything about marketing or business models, or, well, just about anything. the analogy with the publishing industry is excellent - but don't forget how much crap you see walking down the SFF aisle :)

      --
      The REAL sam_at_caveman_dot_org is user ID 13833.
  168. DoS attacks on ISPs by Peter+H.S. · · Score: 4, Interesting

    I work as a volunteer Sys Admin (BOFH) for my apartment block; 300 users, on a 2mbit leased line, so we are a small time ISP of sorts.
    Our users are dynamically assigned private IP numbers, so we use NAT on our gateway.
    As I see it, any kind of DoS attack on one of our users, will effectively be an attack on our gateway /firewall, and our commonly shared bandwith.

    If such an indiscriminate DoS praxis was instigated by the RIAA against us, we would excersise our legal options to retaliate and defend ourself:

    Eg. even though such DoS'ing may become legal in the US, it would still be a criminal activity by my countrys laws (Denmark). Since RIAA has presence in Denmark, it may be possible to persecute them.

    Also, perhaps such DoS'ing from the US to other countries, may be illegal even by US law, since it is likely to conflict with international law.

    And our humble organisation, might just be politically so well connected, that we could make it an EU case. Certainly we could make it a case in our own parlament, since we occasionally negotiate with high level civil servants, regarding various laws for community(?) based ISPs.

    A huge amount of all Danish Internet traffic, goes through the so called DIX. So permanent choke points for RIAA IP numbers there, (and on our backbone providers routers), could also be an option.

    We would also bitch and complain to RIAAs backbone provider, suggesting that harbouring DoS script kiddies like RIAA, might be a bad buisness idea, that perhaps could mean trouble for the overseas connectivity for the rest of their costumers (filtering on the DIX, RBL-style, peering agreements, perhaps even lawsuits).

    In short, if such a law became a reality in the US, I would strongly advise the RIAA, to individually check the national identity of their DoS-targets IP, before commencing any attack.

    1. Re:DoS attacks on ISPs by Erasmus+Darwin · · Score: 2
      "As I see it, any kind of DoS attack on one of our users, will effectively be an attack on our gateway /firewall, and our commonly shared bandwith."

      Usually, yes, however you need to be careful about sweeping generalizations. It looks like the RIAA is trying to fill up the upload slots on the P2P "server" in your neighborhood -- usually this is only 10 or so connections. So your neighbor's P2P client sees it as 10 out of the maximum 10 upload connections being in use (100% utilization), but those connections may only be running at 10 bytes per second (or faster if there's a minimum speed threshold). As a result, your firewall only sees it as minimal bandwidth and connection utilization, even though it's clogging up the machine further along. I could, however, be misinterpreting the RIAA's plan.

      Still, I think it's a stupid thing to do overall. But it's just not stupid in this one small way. Regardless, people should try baiting them with songs that only superficially appear to be illegal material (if the service only checks filenames and sizes) -- then they not only have a decent legal standing with the RIAA DoSes them, but the RIAA has no means to counter-attack.

  169. Re:No, this is scary, not funny. I mean that. by Anonymous Coward · · Score: 1, Interesting

    I don't think the RIAA suits are that smart. An all out cyberwar might ensue, with the RIAA blown clean out of the internet waters. No ISP will put up with that garbage from the RIAA and any ISP that does will be a pariah to all of the others! If I was an independent ISP, I wouldn't accept traffic from any domain if they are involved in clogging up my T1.

  170. nice sig by Anonymous Coward · · Score: 0

    and some spare char's for the lameness filter

  171. Re:No, this is scary, not funny. I mean that. by Anonymous Coward · · Score: 0

    All true, but the RIAA is going to have to learn at some point that they can't go to war against their customers. No business can. The RIAA "hackers" are never going to be a match for the true freedom-of-information kind of hackers that are their antithesis. The RIAA can go to war, but even with their great resources, they will never win, and for the same reasons the America is here today. The American Revolution was fought against a larger and better equipped British army. A large part of the reason for the American victory was that the Americans were fighting out of principle...to get what they thought was right...to not be taken advantage of. Imperialist Britain was fighting for money, nothing more (well, little more anyway).

    People who want to listen to music are fighting to be able to have the freedom to do just that. Anyone who thinks that Metallica should still get paid for something that they recorded in a studio 20 years ago probably doesn't have the sense to know that they are being taken advantage of anyway.

    By the way...Has anyone compared how much the RIAA is spending trying to battle this to how much they are actually losing in record sales because of it (I mean how much they claim they are losing)? I'm willing to wager that their war on file sharing doesn't make financial sense at all.

  172. Next Generation P2P Protocols by Coniine · · Score: 1

    Will have to use more advanced techniques to negotiate transfers... http://vip.poly.edu/mehdi/papers/summary/The%20Coc aine%20Auction%20Protocol.htm

  173. Freenet invulnerable? by Anonymous Coward · · Score: 0
    IIRC, Freenet would invulnerable to these silly plans for a DoS attack, without launching a DoS attack against all of Freenet, and not just the music piracy. This is because of the distributed, decentralized nature of Freenet, and the inherent privacy and anonymity that Freenet employs.

    Music piracy on Freenet is sparse, I should note, and Freenet was created with much higher political causes in mind than pirating music.

    For more information on Freenet, see http://www.freenetproject.org/

  174. Please PLEASE NO! by Mtgman · · Score: 2

    I promise, next time I sign onto the gnutella network I won't trade any music! I promise, I promise, I promise! Just please, please, please don't take my P2P porn source away.

    *Rushes out to buy a copy of the latest Britney Spears and NSync CDs to help appease the RIAA. Holds them up over his head.* See! I'm not hurting your business model! Leave my P2P network alone, please?

    Steven

    --
    -- I have marked myself unwilling to moderate-- I don't have other accounts to artificially inflate the karma of
    1. Re:Please PLEASE NO! by Anonymous Coward · · Score: 0

      Pay for your porn too you masturbatory, pre-tumescent, antisocial, waste of skin, stupid fuckwad.

  175. Bump by Anonymous Coward · · Score: 0

    If I had mod points you'd get some...

  176. Re: Bin-Laden by t_allardyce · · Score: 1

    Dear Mr Bin-Laden,

    Please could you kill COUGH!, i mean 'take-out' the members of the RIAA, and MPAA. They are responsible for all the bad foreign policies that America has pushed, and the election of G.W.Bush (the ape man). For years they have bribed judges, and politicians to do their bidding, and have recently funded a number of airstrikes on your country which they have dubbed: "Drop CD samples onto Afghanistan" where they are attempting to fix the lack of market penetration in that area.

    P.S
    They are all high on crack too

    -------

    Dear Sir,

    Thank you for your recent letter requesting Jihad on the RIAA, and MPAA. Here at al-Qaeda, we pride ourselves in devlivering professional terrorist solutions in a competitive world. After reviewing our records, we have chosen to declare Jihad (this will take approximately 24 hours) and will be taking measures to 'take out' the members by use of 38000 trained hampsters. The hampsters will be used to swarm the meeting rooms at the RIAA and MPAA, thus smothering them and relieving them of the oxygen that they didn't pay for. In usual form, we will stagger the events by half an hour to give the press a chance to get their cameras in location. Don't forget, Thursday 18th October @ 8 (10 central). Only on FOX!

    Yours, Osama Bin-Laden, al-Qaeda.

    --
    This comment does not represent the views or opinions of the user.
  177. I can sum it up in one word by pantaz · · Score: 1

    GREED!

  178. Not going to be effective. by SonicRED · · Score: 1

    It sounds like their plan is to masquerade as a client and request multiple copies of copyrighted songs and then download them really slow.

    So to defeat this, you just tell the program to allow only 1 upload per client and set a minimum download speed.

  179. Just one more challenge for P2P by URSpider · · Score: 1

    This is just one more challenge that peer-to-peer networks will have to recognize and avoid. Right now, the biggest problem for Gnutella is that a large percentage of network nodes aren't actually sharing any files, they're just downloading everything they can get their hands on. But, clients are already getting smart to the freeloader crisis. In the same way that LimeWire allows you to dump users who aren't actually sharing any files, future clients will have to be on the lookout for RIAA DoS-bots.

  180. Re: Bin-Laden by Anonymous Coward · · Score: 0

    suicide hampsters...

  181. Filter out RIAA's IP connections by Anonymous Coward · · Score: 0

    I see a solution to their attempt, filter out all connections coming from certain known IPs belonging to RIAA; the list could be automatically updated and I don't think there is much to do for RIAA if I don't want to allow them in my system, after all, it is my computer and my resources and if they connect uninvited, then it is hacking, I'll sue them and some others will join me, I'm sure.

  182. RIAA and ISPs by wysoft · · Score: 2, Informative

    I'd like to see what happens when the RIAA is swamped in complaints and threats of lawsuits from ISPs of their "target" customers.

    Imagine this: If the RIAA were to actually make a move on this threat, there could be some serious side-effects. RIAA systems causing major traffic congestion at the offending customer's ISP, possible equipment failures, and overall rise in tech support costs when customers begin to complain about these problems are a few examples.

    --
    -- I'll cut you up so bad, you'll wish I'd never cut you up so bad!
    1. Re:RIAA and ISPs by Anonymous Coward · · Score: 0
      And this traffic consumption differs in WHAT way from the LUSER downloading the pirated material in the first place?!? Fuck you're clueless.

      ISPs need to block ALL p2p lameness, THEN we'd see an increase in available bandwidth, and no more whining from the RIAA and the idiots that STEAL copywritten material.

      Fucking kids.

  183. Re: Congressional investigation? by jswitte · · Score: 1

    As I asked one person in a email, can "ordinary citizens" lobby Congress (the U.S. one) to open congressional hearings? Oh, wait, they already have opened congressional hearings..

  184. My MCSE2000 was MUCH HARDER than my RHCE!!!!! by Anonymous Coward · · Score: 0

    I guess you hadn't gotten the memo that M$ took the gloves off after all the complaints about how easy the NT4 track was.

  185. Well. by mindstrm · · Score: 4, Insightful

    Isn't that like running around selling sugar as cocaine?
    Can one charge a drug-dealer selling bunk drugs with fraud?
    This is a serious question.. is there a statute that makes the laws against misrepresentation not apply if the intended transaction is illegal?

    If they put up lots of 'bogus' files.. can we not sue theM?

    Personally, I'm happy to see the RIAA go to war with the common folk.

    1. Re:Well. by renehollan · · Score: 1

      IANAL, but in a civil case, you can't collect if you have acted illegaly. I believe that attempting to buy restricted drugs would count as "acting illegally", so no, you couldn't collect damages if the drugs turned out to be bogus. It's called "coming into court with unclean hands".

      --
      You could've hired me.
    2. Re:Well. by Jay+L · · Score: 1

      I do not believe there are laws against misrepresentation except as it applies to a commercial transaction.

      It is perfectly legal for me to say "In this package is a machine that will make you permanently ecstatic" when in fact the package contains bricks.

      It is even legal for me to say the above and then hand you the package.

      It is illegal for me to say the above and then *take your money* for the package.

      IANAL.

    3. Re:Well. by DrSkwid · · Score: 2

      In the UK it would be illegal to buy/sell said sugar if you beleived it to be cocaine.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  186. Yes! PLEASE DoS all pirates! by The+Man · · Score: 2, Funny
    Pirates, as we all know, are people who forcibly hijack vessels at sea, usually stealing their cargo and occasionally killing the previous crew. This activity must not be allowed to continue. Far too many innocent sailors have been killed in recent years. Pirates using advanced compootanator technology have dramatically enhanced their communication networks. These pirates must be stopped! It's long past time to end terror on the high seas. Ping-flood or smurf your local pirate operation at every opportunity. Furthermore, I believe Slashdot should, as a public service, create a pool of DDoS volunteers and assign them to known pirate groups a la distributed.net. This is an opportunity to do good; don't be left out!

    Oh. You meant people who violate copyrights, not pirates. That's quite different. Carry on, then, with the flame fest.

  187. In related news... by Anonymous Coward · · Score: 1, Funny
    In related news, the RIAA have been attempting to train pilots and acquire flight maps covering Napster's offices. Upon being told that may prove illegal, an RIAA executive said, "Really? Does that mean we can't mail anthrax either?"


    It's only a crime if you can't buy enough politicians to get out of it.

  188. So when will there be a version of ... by fermi's+ghost · · Score: 2, Insightful


    LaBrea to trap the RIAA .mp3 scanners, instead of CodeRed?

  189. Now THERE'S a vivid image by dswensen · · Score: 1

    I think this post should receive an extra mod point just for including the phrase "Hillary Rosen will shit live goats."

  190. RIAA Says: by Anonymous Coward · · Score: 0

    Record labels hope to make the point that subscription services such as MusicNet or Pressplay, which will launch on Yahoo, America Online, MSN and RealNetworks by year's end, will not be subject to the same doubtful quality of service.

    Oh, we'll see about that...

  191. Just a bluff by DeadPrez · · Score: 4, Insightful

    I think someone else said it best on the other thread (about RIAA attempting to make it legal to hack copyright infrigers).

    Posted by sphealey:

    This technique has been honed to perfection in the last 20 years. Pressure group floats a ridiculous and unbelievable trial balloon. Public outcry ensues. Pressure group "retreats" to a "compromise" position, showing its "reasonableness" to legislators and the courts. The so-called "compromise" position is 120% of what the presssure group wanted in the first place, to give them a little more wiggle room.

    I think you can be pretty sure this will be followed by a similar proposal, probably slipped under the radar screen by a pet legislator.

  192. Here's the score, folks: by Anonymous Coward · · Score: 0


    1) Multiple download requests can be beaten with a simple firewall rule (-m iplimit), and if not, will cause at least the application in question to become useless. Its services are therefore unavailable, in other words the user has been denied the service of the application.

    2) Multiple upload requests run the risk of filling the partition, which certainly qualifies as at least an attempted denial of service. If a single filename is chosen, with multiple attempts, then a smart client will flip the bird, and a dumb client might tickle some kernel buffer problems.

    3) In every permutation this strategy will overload the network infrastructure between the attacker and the alleged pirates, causing
    widespread network overloads, and by extension denials of service, like when BGP4 starts shafting its peers.
    4) United States law does not apply to denials of service. IANAL, but last time I checked DoS attacks fell under Interpol's jurisdiction, even if the attack was launched against Boston from New York.

    On a side note... many people rely on their computers for their livelihood, including me. I would personally choose to interpret such an attack against my systems as an attack against my livelihood, and therefore against my life. I would then invoke a self-defense argument, and take any and all measures necessary to eliminate that threat.

    Other possible approach: Stop using those idiotic p2p programs that any asshole with a law firm can figure out, and go back to swapping lists of ftp sites on IRC. Out of sight and out of reach. Better transfer speeds, too.

    If I catch any attacks in my packet logs, you can be certain that the offending machine will A) be blacklisted 2) get its IP publicized as widely as possible, and D) get its bits hacked as close to permanent disability as I can manage.

  193. lets be REALISTIC by mozkill · · Score: 1

    I think that its really cute that the RIAA comes up with a handy little idea like this one, and everyone seems embrace it like the little lemmings that they are!

    sure, its a cool idea. a hackers pipe-dream. but the REALITY is that for every idea, there are equal and better ideas just waiting to be found.

    i just want people to open their minds, don't get too excited, settle down, and REALIZE that there is a better way. someone just has to use a little more creativity than the previously mentioned kindergarden crusade.

    --

    -- Betting on the survival of the media industry is a serious risk. I advise investing elsewhere.
  194. Indie labels by LinuxHam · · Score: 2

    Note to those who will say that I'm a dirty rotten no good pirate: I don't pirate music. I simply buy from indie labels. At least then, I'm sure that the artist gets most of my money.

    I grew up on college radio (Rutgers and Princeton). Here is an article about my one of my favorite labels, Touch 'n Go Records. Current or past home of Steve Albini (Big Black, Rapeman, Jesus Lizard, Shellac), Butthole Surfers, Wedding Present and more. Apparently the Butthole Surfers tried to take over the distribution rights to their old albums (mmmm... Locust Abortion Technician) and the Touch n Go said "no way, I own the distro rights forever. that's how I make money." Made me think twice even about indie labels.

    For a diatribe by "the greatest songwriter of all time"(tm) Steve Albini, visit Negativland's website.

    In classic Big Black style, the liner notes for the Rapeman album "Two Nuns and a Pack Mule" contained descriptions of the songs instead of the lyrics. For "Steak and Black Onions", he wrote "We don't hate vegetarians. We just think they're funny."

    --
    Intelligent Life on Earth
  195. Re: File-trading rings by jswitte · · Score: 1

    I've been thinking of setting up a CD club in my town, basically a bunch of people who put what CDs they own (probably aided by cddb [ironic]/freedb) on the internet, and then do the rest with hand-to-hand swaps. No MP3s, no CDRs. No copies either, except for audio tape. It should be completely legal and protected by AHRA. Unless posing a list of CDs you own on a public forum is illegal (might be stretched out by a court).

  196. Respond in kind. by Anonymous Coward · · Score: 0

    That the RIAA see their own interests as being more important than the civil liberties of their *customers*. Should this vigilante BS be responded to in kind?

    Bastards. I say we download every friggin' MP3 we can get our hands on, and share with every friggin' person in the world. And then respond in kind by suing them in court under the DMCA for infringing on our rights or being terrorists or whatever...

  197. Revenge by jhanson · · Score: 1

    We must get revenge on the RIAA for their sleazy DoS plans. I propose we link every slashdot story to their website.

  198. Kill them, kill them all! by yasa · · Score: 1

    If I would be in a Death-Metal band this would be the title of our CD, and from every sold CD we would donate 1 Dollar to an assasin to kill some RIAA Guys. That's called good marketing, because this would increase our credibility as a DEATH(-Metal) band! ;-) If they use our methods to attack some so called haxors (;-)) we would choose their methods to buy some assasins!

    - Yasa
    :: The anger inside me kills my realistic thinking

  199. Payment by __aawavt7683 · · Score: 0

    I can't help but wonder... who pays for all the bandwidth used by this?

    Surely not the ISP...

  200. What we need is to support other music venues... by malfunct · · Score: 2, Insightful
    Quit listening to Briteny Spears and the ilk and start listening to bands that are more open. If your money was where your mouth is the RIAA would be out of business right now. Granted it will take a while to find music that is "cool" but I kind of like listening to unpopular bands that sound good.

    Someone needs to start something that allows artists to promote themselves online and sell music and make it profitable for the service and the artists but also so it helps consumers. MP3.com was like this at one time, now its to commercialized I think. If you want your music you will have to pay but we need to work out the evil middleman that eats all of our money and doesn't pay the artist.

    --

    "You can now flame me, I am full of love,"

  201. For certain. by Perianwyr+Stormcrow · · Score: 2

    If the fight moves to technology, that's a fight that the individual can win.

    I see, in the future, most Gnutella clients having a CPS minimum on files, just like most decent IRC file clients do. This is quite easy to route around.

    Dishonesty in such a network can temporarily harm it, but just as in the case of spam, we make do and live.

    --

    What we call folk wisdom is often no more than a kind of expedient stupidity.-Edward Abbey

  202. DMCA? by Bert64 · · Score: 1

    Couldn`t you prosecute them under the DMCA for reverse engineering the file sharing protocol for purposes of disrupting it`s operation?

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  203. Comments by dh003i · · Score: 1

    Ok, here are my comments.

    #1. The RIAA/MPAA etc are not law enforcement agencies. They have no right to take direct action against any individual without going to a court. The idea that because some copyright holder THINKS someone else is violating his copyright, he can clog an entire network is absurd and dangerous. What if he's wrong? Inevitably, such efforts to identify "copyrighted files" being traded will more often be wrong than right. Even so, what if they're right about the "trading of copyrighted material"? That doesn't give them the right to violate MY computer or MY system, or OUR network of communications. P2P neworks are in effect little different from a LAN at an office(except slower). The office has the right to maintain that LAN without people destroying or hindering it from the outside. Why? Because they paid for it, set it up, and are currently using it as their method of communiation, etc. In the same way, WE have the right to operate on our "LAN" -- which in this case is a P2P network -- without it being hacked.

    #2. At least those nut cases in our government had the good sense not to encorporate this into their already grievant anti-terrorism bill. The bill is an assault on almost all of the civil liberties we should hold dear.

    #3. Prevention. Of course, just as we are able to trade copyright files whether the law says so or not, and are effectively immune to consequence due to the massivity of the internet; so are copyright holders able to violate our rights, whether or not the law says so. Congress and the Senate may outlaw such attempts at DoS attacks on PUBLIC networks(which is what P2P effectively is), but that will not stop them from acting. On the internet, irrelevant of how hard the govenrment may try, it is difficult if not impossible to delegate responsibility, or to place blame for a particular action. This is not because there is no trail of logs/records to follow, but rather the opposite: there are so many that making sense out of it is impossible, unless they know exactly what they are looking for.

    So, government laws cannot stop copyright owners from doing DoS attacks on OUR networks. What can stop them? Obviously, US.

    LimeWire, the only program I use to trade files, already has several features that may be able to effectively eliminate such DoS attacks. Here are my suggestions for features to battle DoS attacks(these, of course, would all have to be automated):

    1. Blocking greedy users. You may block people from downloading files, if they are not offering more than a certain number of files. Perhaps it would also be good to be able to determine the average size of the files people are offering, and also have other parameters.

    2. Blocking repetivie requests. Block a user from downloading from you if he tries to download many things from you at once, or tries to download the same file repetively.

    3. Block users from downloading who are downloading at very slow rates. Create a preference for who gets the download priority: people with low pings and large bandwidths, who are downloading quickly, would get the download.

    4. Limit the amount of upload bandwidth you will devote to any user downloading files. Also "limit" the number of files one user can simulaneously download from you. That is, allow a user to download as many files from you as he wishes, as long as there are no other requests; when other requests some in, start limiting the number of uploads per user). The idea here is to prevent one person from hogging all of your upload bandwidth. Also, DO NOT limit the number of uploads at any given time: if you limit the number of uploads to say 1, then one user may be downloading a file, and only using up 50% of your upload bandwidth; the other 50% is wasted if anyone else wants to download from you. The idea here is that if say 20 users want to download from you, ALL of your upload bandwidth will be used, and spread between them accordingly, such as to minimize the overall time for ALL of them to get what they want.

    5. Going back to setting priorities on which users get the upload. If one user starts downloading a file, and another user comes on who could download that file before the first user, priority is given to the other user. The goal here is overall utility, not "fairness"(i.e., first come not necessarily first serve). Each uploading node "wants" to get one user done uploading as quickly as possible and then offer upload to the next requester.

    6. Setting up a system for dynamically identifying users who are clogging the system(DoSers) -- or contributing to clogging the system -- and blocking them. Obviously, anyone can clog the system an inordinant amount, depending on his or her bandwidth and certain conditions. However, users that perhaps over a half an hour display behaviour which indicates they are DoSers(or having that effect) can be blocked.

    7. As explanation for #6, let me say that clearly, any user who has been determined to say have a 500Kbps bandwidth and is using say 1500 bytes of bandwidth to download each of say 341 files, that person is clearly intending to clo the system. That user should be dynamically put on a list of users who are intentionally clogging the system, and blocked from downloading, so long as that behavior continues. Obviously, if everyone blocks him/her, (s)he won't be able to continue any behavior; but one should be able to set up a system which will determine what kind of behavior that person is attempting to do, and then keeping the person on the ban list if they attempt to continue the DoSing behavior, but removing them from the list if they don't continue.

    8. As another way of establishing #6, here's a simple system. Consider a user who has 2.048kbps of bandwidth. Now, that user should obviously be allowed to download enough files to fill up his/her entire downloading bandwidth.

    Obviously, we wouldn't want a person with 4000Mbps of bandwidth "filling up" their bandwidth -- so, depending on the situation, there should be a limi to how much "informaation" any one user can download at any one time. This is very important. As the RIAA and MPAA can afford to get access to high bandwidth "modems" -- i.e., T3 lines, OC12's, etc -- they could use that to download huge amounts of information and prevent anyone else from utlizing it.

    The overall idea is that at any given time there must be a "net uploading bandwidth" on the entire P2P network, so to speak. Now, each file-requesting user should have approximately equal access to that "bandwidth", unless of course they're a DoSer. After all, you want to get the maximum number of files(of average size) to people as you can.

    9. A general way to increase the speed of a P2P network. At any given time, a person with a very large uploading bandwidth may not be using any of that uploading bandwidth to give his files to the public, while a person with a very small uploading bandwidth may be using all of his bandwidth to give files to the public. Now, wouldn't it make sense if the person with the large uploading bandwidth could automatically download highly-requested files from the person with the small bandwidth, and offer them himself? What this would effectively amount to is users automatically downloading high-traffic files when they log into a P2P network(that is, if they aren't using their downloading bandwidth to download files of their choice), placing those files into a temporary folder whose contents are to be offered to the public. This would increase the redundancy of the system, thus giving each individual downloader more options for places to download from, thus making things faster. Of course, this option would be optional to the individual user -- no one would "have" to download a certain number of files from other people upon logging on, but such would rather be an option they could check or uncheck. Also, perhaps this option would be something which they'd like to modify -- they may want to devote a certain amount of HD space on their computer to this, depending on how much space they have. With that space, they may want to place in there all files of one type, or all large files, or all small ones, etc etc. In short, there could be many parameters for files a person automatically downloads from another and offers for uploading in his temporary upload folder.

    10. Back to blocking greedy users. Obviously, a person who devotes less size in MB of files to this "cache upload file set"(that is, downloads less MB in memory for this purpose) is somewhat "greedy", depending on how much less he devotes than the average; also obviously, a person who devotes more is somewhat benevolent, depending on how much more he devotes than the average. Individual users may want to block download requests from users defined as "greedy" by this standard.

    The idea here is to eliminate reduce parasitic behavior on the P2P system. Users who do not offer files but download them are somewhat parasitic(after all, it costs little ot offer files, as most people don't need upload space anyways). Users who hog all sorts of download offers(DoSers) are also parasitic and greedy, as they prevent others from utilizing that bandwidth. Users who do not offer "redundant downloads" of high-demand files are also somewhat parasitic.

    The idea here is that the P2P system works best when everyone is contributing as much as possible: when everyone is contributign their own files, offering lots of their upload space, and contributing redundant offers of "high-demand files".

    11. More on dealing with greedy users. Another functional definition of an easy user is one who gets on a P2P network, downloads stuff, and then immediately gets off. Obviously, users who stay on P2P networks less time are greedier, and those who stay on it more are more benevolent. This because a user staying on a network a long time keeps his "node" open to the public longer. Even after a user has gotten what he desires from a P2P network, what hindrance does it do him to stay on longer? After all, most bandwidth used on internet surfing is downloading not uploading bandwidth. What harm does it do to an individual user to always leave his P2P program open, always having his files available, except in cases where he's gaming? After all, most internet browing is downloading stuff, and other computer activities do not require internet bandwidth(i.e., it doesn't hinder you while using your word processor to also have the P2P program open). A "minimal" version of the P2P program should be set up, so as that the user can go into "inactive mode" in which as little P2P program information is loaded on the RAM as possible: only that relating to uploading information to other users. This would further reduce the "cost" any user pays for leaving his P2P program open continuously.

    12. In other words, the P2P system is a "symbiotic" system. Users who are more benevolent should somehow be rewarded in how much they can get. Benevolence in this case does not simply mean offering most of their upload bandwidth, but also offering many files. After all, what good is it if they're offering all of their upload space, but only offering one file, which isn't too popular? Automated protocols should be set up in LimeWire or other P2P programs which reward the most benevolent users, and repriment the most greedy ones. (all of this, of course, would depend on the majority of P2P users selecting these options in their Options boxes).

    THE POSITIVE FEEDBACK LOOP:

    The system I have described for eliminating greedy users, dealing with DoSers, and overall optimizing the P2P network effectively sets up a positive feedback loop. Benevolent users are rewarded for their benevolence by having more access, and greedy useres are punished by having less. Thus, users are discouraged from being greedy(offering nothing, while taking alot), but encouraged to be benevolent(offering alot). This results in a continual reinforcement of "benevolence" which feeds onto itself: users act more benevolent because it gives them greater access, and this eventually leads to a higher "average benevolence level". Then it starts all over again, users again being encouraged to act more benevolent than the average level. It should be noted that this results in an "increased standard of download speed" for everyone, no just the benevolent users(note, benevolent would be relative, and always an more "difficult" status to obtain). Even greedy users would benefit from this sytem, because the motivation for increased benevolence results in more redundancy, more upload bandwidth, and less cloggers/DoSers. More redundancy means that more users will be offering the exact same file: thus, any particular user who wants to download that file would likely download it faster, as his program could automatically compare the different sources and determine which one would result in the fastest download time for him. As users offering more bandwidth are more benevolent, users would obviously be encouraged to offer more bandwidth.

    Finally, it should be noted that this system is a creates MAJOR incentives for individual users to contribute to actively UNDERMINING a creators so called "right" to control information. As this positive-feedback benevolence loop will tend to increase the number of files users will offer, and the amount of bandwidth they devote to offering that information, it will encourage users to OFFER more informaion that "creators" have claimed to have the right to control. That is, users will not only be encouraged to take advantage of others offering "copyrighted" information, but also encouraged to offer copyrighted information themselves.

    This system could greatly undermine the attempts of organizations such as the RIAA/MPAA/AAA(Authors Association of America) to control information. After all, people would be encouraged to -- out of an interest for their own interests -- distribute information. Thus, this would turn many people into what the RIAA/MPAA/AAA calls "pirates". I prefer to think of them as Information Liberators, because that's what they're doing -- liberating informaion from the control of the information Nazi's(the RIAA/MPAA/AAA aren't the kind of Nazi's who want to burn books, they're the kind who want to prevent books from being read). Now, furthermore, as this system would turn the vast majority of internet users into Information Liberators, it would also change their feelings about "intellectual property". Note, "intellectual property" is a shortened euphemism for what it really is -- the enslavement of information to be controled by a few information-Nazi's.

  204. Easy to block them... by Gottjager · · Score: 1

    What they are doing is sucking up available download connections with very slow downloads. A lot of new software is starting to support kicking connections that fall below a predetermined limit (a la xDCC scripts of yore) so this won't work for long.

  205. /. effect. by Anonymous Coward · · Score: 0

    So they want to DoS us eh?
    Well we know how to fix that...how come there is no link to the RIAA in the article???

  206. career op. by geekoid · · Score: 2

    I think I'm going to go to work for RIAA as a developer for anti-piracy. Chrage High dollar to be on a neverending development p[roject, shweet.(plus I could download music from server that I choose to ignore... for a price.MUAHAhahahahah)

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  207. American Media by Bugmaster · · Score: 2, Insightful
    I think it's very depressing how the media spins the facts in the news stories. The news article basically says, "RIAA invented a new shining sword of holy justice to use against the demonic hackers". Now, imagine if the title of the article read "Little Johnny DDoS-es RIAA servers". I bet the article would be a lot less sympathetic to the attacker. Yet, in both cases, it's one entity DDoSing another, there is almost no difference in means or goals.

    Hey, someone on /. must know - are there any unbiased news sources left online ?

    --
    >|<*:=
  208. What about the children! by JonnyCalcutta · · Score: 1

    Won't somebody think of the children!!

  209. riaa is listening by kippa · · Score: 1

    Call me paranoid, but I think the riaa is making these ridiculous statements to see what the reaction is from various parts of the net before making their real move. Hey riaatards! Kiss my ass!

    BTW: Ramsey Electronics has a kit for you to build that will hook up to your computer and broadcast your MP3's for you! Enjoy!

  210. I like this qw: by Sebby · · Score: 1
    "We have a legitimate concern that the measure currently being debated could unintentionally take away a remedy currently available to us under law that helps us combat piracy,"


    Then how about giving people what they want? I still haven't seen any RIAA-money-grabbing-member distributer make CDs full of artists' songs in MP3 format available for sale. Not that it's an excuse to pirate songs, but if at least they were available and there was a choice, people would probably actually buy them.


    Of course, I'm sure they're too stupid to give it a try

    --

    AC comments get piped to /dev/null
  211. Waiting on this headline by iocc · · Score: 1

    RIAA is quite desperate now... Im waiting on:

    "RIAA will send Anthrax letters to all pirates"

  212. Concern noted by kindbud · · Score: 2

    "We have a legitimate concern that the measure currently being debated could unintentionally take away a remedy currently available to us under law that helps us combat piracy," said RIAA spokesman Jano Cabrera.

    Your concern is noted, but I'm afraid that just now, we're a little busy trying to figure out how to keep crazy people from crashing airplanes into buildings, while not giving the Homeland away to the FBI in the process.

    So if you'd kindly put a sock in it, we'd be grateful. Really.

    --
    Edith Keeler Must Die
  213. Artists need to get out of RIAA by Sebby · · Score: 1

    Problem is that the artists should no longer be part of the RIAA in any way. Boycotting RIAA will only result in them spreading more of their propaganda

    --

    AC comments get piped to /dev/null
  214. Then they will try to own the rights to... by einhverfr · · Score: 2

    DoS.mp3.exe...

    DoS.mp3.mdb...

    DoS.mp3.doc...

    Come to think of it, they can't be doing THAT good of a job as far as shielding where they are coming from. How about a target virus that seems to be what they are looking for sitting officially inaccessible on an unsecured server waiting for them to "find" it. I wonder if this would be legal.

    --

    LedgerSMB: Open source Accounting/ERP
  215. Freenet is immune by kindbud · · Score: 4, Insightful
    It seems to me that Freenet is immune to the tactic described in the article:

    The software technology, according to industry sources, would essentially act as a downloader, repeatedly requesting the same file and downloading it very slowly, essentially preventing others from accessing the file. While stopping short of a full denial-of-service attack, the method could substantially clog the target computer's Internet connection.


    This will never work on the Freenet. Attempting to do so will cause each node along the request path to store a copy. Attempting this on Freenet will cause the targeted files to be spread more widely, making them MORE available, not less.
    --
    Edith Keeler Must Die
  216. Another way ... trustworthy peer-to-peer networks by tyoud1 · · Score: 1

    Why don't we make it so that we use the six degrees of separation that we think exists?

    I am willing to share music with any of my friends, even not listen to it while they're listening to it. Why don't we share something like PGP-keys between us and our close ( 20 people) friends, sign each others keys and agree to share?

    Then if someone wants music, check your friends lists, and if they don't have it available, ask them to ask for what you're looking for from their friends. The latency might be a day or so. And the chain spreads outwards. If someone eventually connects to someone inside of RIAA, about 6 steps out, the person who shared with them, someone they presumably _knew_ worked for RIAA, that's the only person that's really guilty of anything.

    Thanks, just my 2 cents.

    --Tom Y

  217. Britney Spears caught pirating music! by sprayNwipe · · Score: 2

    http://66.96.196.244/john/misc/britney_bikini/03.j pg

    Look at the CD she's taking out. Look at the case she's taking it out of.

    Hopefully, the RIAA will stop people like this pirating music, so that music artists can get the money they deserve.

    Pot. Kettle. Black.

  218. Remedial Math! Grade 5 lesson! by Telek · · Score: 3, Interesting

    Number of napster/gnutella/imesh/audiogalaxy/etc/etc users : well over 10,000,000 (on at one time? easily well over 1,000,000)

    Assuming a bandwidth of 50kb/s avg per user, they're going to need ... A PRETTY FAT PIPE if they hope to DoS anyone. And with the technology (ideas?) that have been created in order to fight the spreading of virii, there's no way they could possibly hope to do anything.

    They're truly grasping at straws.

    But you have to give them merit for one thing:

    They are finally going after the source of the problem instead of trying to introduce legislation to hurt everyone. Yes yes yes you do hurt some of the indy artists who are legitimately trading online, but you can't deny that well over 90% of online trading through any sort of mp3 sharing service is going to be pirated.

    It's a futile attempt, just like all of their other ones, but finally they've gotten their heads out of their asses long enough to come up for air to see that maybe they're headed down the wrong path. The question is to see how far they put them back up once they're done.

    --

    If God gave us curiosity
  219. Mr. Riaa does not care about isp's? by freaker_TuC · · Score: 1
    What about cybercafe's where programs get downloaded and started like Napster, Kazaa and others? They all need to go down because these people are flooding the entire connection with a DOS attack?

    Since when are DOS attacks legal?

    An article about the claim against the RIAA and others is available here.



    Maybe it's going to be time to have blacklists with ip's to block Mr. Riaa's attempts to put networks down that way.

    --
    --- I am known for the ones who want to find me on the net. Is that a privacy risk or a privilege? One might wonder..
  220. Sounds like they're playing with fire to me... by slainfu · · Score: 1

    I can see it now. The RIAA launch a succession of DDoS attacks on unsuspecting MP3 traders, only to recieve a barrage of assorted attacks in retaliation. Now, I'm not doubting the might of the RIAA, but come on.... let's be serious. I doubt even they could survive the pending onslaught from the IMTU (Illegal Music Traders Federation, of which I have appointed CmdrTaco as the President). ;)

    --

    slainfu
    "I can't be a terrorist if you're sucking my bum."
  221. 4 songs for a dollar by Anonymous Coward · · Score: 0

    Don't you think if the RIAA were to set up a service whereby one could purchase high quality MP3 songs for download at a rate of 4 songs for $1, to be used however and whenever the purchaser wanted, they would be swamped with users...and make tons of money.

    After all, when you make it easy enough, and inexpensive enough, to download songs legally, the pirate market will effectively dissappear.

  222. Re:No, this is scary, not funny. I mean that. by kz45 · · Score: 0

    All true, but the RIAA is going to have to learn at some point that they can't go to war against their customers. No business can. The RIAA "hackers" are never going to be a match for the true freedom-of-information kind of hackers that are their antithesis. The RIAA can go to war, but even with their great resources, they will never win, and for the same reasons the America is here today. The American Revolution was fought against a larger and better equipped British army. A large part of the reason for the American victory was that the Americans were fighting out of principle...to get what they thought was right...to not be taken advantage of. Imperialist Britain was fighting for money, nothing more (well, little more anyway).

    comparing the RIAA keeping pirates from swapping music, and the american revolution is the biggest joke i've heard today. The american revolution was about british control of our every day life. The RIAA is about getting totalcontrol of their business investments. (IE. the artists/music).

    People swapping music is kind of like the terrorists that bombed the world trade towers (kind of a bad comparison, im not claiming copyright infringers have anything to do with terrorists) they HATE america, yet lived here for months, enjoying our strip clubs and bars. Need I mention the fact that there are people by the thousands trying to get into the U.S. each day.
    People swapping music HATE the RIAA, yet continue to "steal" the music. Why? because it's sounds great! If the music wasn't worth something, why steal it?
    It's kinda like a "forced" gnu license for music, except you're not getting the owner's permission.

    if you really think the RIAA is raping you, stop buying/sharing their music. If the answer is no, then it must mean the cost is reasonable.

    People who want to listen to music are fighting to be able to have the freedom to do just that. Anyone who thinks that Metallica should still get paid for something that they recorded in a studio 20 years ago probably doesn't have the sense to know that they are being taken advantage of anyway.

    Really......I guess people who did a job 2 weeks ago shouldn't get paid either. Point being, just because they recorded something 20 years ago doesn't mean EVERYONE has heard it already.

    as for the hacking laws..Let me just say that I think that all the laws that the RIAA has or has tried to get passed are wrong, but if they did the equivalent of what file-sharing users are doing, they would D.o.S any copyright infringer they found, without trying to legalize it.

  223. Re:More proof that we are moving away from democra by stuffman64 · · Score: 1

    Ok, sorry, how about I say we are a Republic to be more correct. However, the fact remains that we can buy into our government if we had enough money.

    --
    --- At my sig, unleash hell.
  224. My hopes... by Phigs · · Score: 1

    I hope that they take to sending virii as a method to preventing online trading. It would then be fun to download a song that you have (you actually own the cd, tape, etc) and then when your machine gets infected, boom, instant law suit.

    "What are you going to do, release the dogs? Or the bees? Or the dogs with the bees in their mouths and when they bark they shoot bees at you?"
    ~Homer Simpson

  225. So easy to stop by oolon · · Score: 2

    Lets start with the easy stuff!!!

    Peers to support multiple downloads and rate limit the over all bandwidth going out on all the connections, so if they don't want the data someone else can have it! Rate limit the connections to no one connection can Hog all the bandwidth.

    A quick IP ban on subnets that look like they are playing the system this could be distributed accross the system. There are only a limited number of subnets they can use. They need a leased line to do this, which would have a static IP, which is easy to find, if they used dsl or modem to get a dynamic one, they could not do enough damage, unless they had lots of lines, which would be a bulk buy from an ISP which could then be banned, customers would then leave that ISP which would lose money, and kick the RIAA from their net.

    ban any host that has riaa.org reverse look up ;-)

    Do not allow the same subnet to download stuff from any one peer to much.

    Monitor the network for repeated downloads of the same track from the same subnet communicate this info to others.

    Use the "Mojo" system, so if you don't share and get downloads you don't get to do any downloads!
    (Now that would be amusing the RIAA would have to provide songs that people wanted to download!)

    Use the freenet system, so as data is being requested from one node so much, the data can be buffered on other nodes.

    I can just see it... The RIAA are dosing me, clickery click IP banned, day later, they got a new net connection, repeat.... repeat 100 times, they get bored and go away.

  226. The only way to protect their preciousss music by demo9orgon · · Score: 1
    As it stands, the public has been getting too much enrichment from music...we're spoiled rotten. Really. What they really want is for us to pay $5 US to listen to a song on a little disk...they sell that crap to kids and market it as _cool_. At 8 to 14 songs a CD they're really taking on the chin. And then there's that whole "reseller" gig, where they can't make a cent on it.

    The only way they're ever going to truly protect their property and charge us per beat is to wrap the audio signal in an encrypted wireless stream which requires an implant that will contain the key that was used to purchase the song from a device and will be used to decrypt it in real time and play it back to the user through a direct neural overlay/shunt.

    People who want to hear music played in public places would probably have to subscribe or the company playing it would have an "event license" which would service only a specific number of listeners within a specific radius...this kind of technology could be used to recieve broadcasts from a local relay. Because each implant also serves to identify the customer, it's easy to determine subscriber counts per performance delivery node, which gives advertisers a very good data stream...right down to the user's ID, which of course is going to be sniffed by about every market-device in the area...blocking "proximity ads" would probably cost you.

    This technology will initially be developed to overcome hearing loss, or enable criminals to lead some kind of life/rehabilitiation, and eventually will be sold to the citzenry as an extremely cool way to interface with the environment, computers, and each other.

    If a lowly bastard like myself can see this coming, don't think the greedy aren't working towards it right now. They're going to sell it to us, and we're going to assume that "come hither" position we always do...because it's what we're trained to do as good little citizens and we love our toys.

    Mommies will love to know exactly where their vandals are, goverment will enjoy being able to track people--anywhere--and the RIAA will happily give you a reason to pay to hear music. Can you imagine a concert where someone with this technology would hear the music without any degredation or at least without their ears ringing, while the "unchipped" would just hear the crowd, and maybe the drums if they were close enough to the stage? That would be some weird shit.

    Hey, on the upside, the rebels would just make their own music...too bad they'd have to do it in secret or face licensing issues.

    --
    Every new form of media has it's own Requirimento
  227. Re:Hilary how lame art thou? Let me count the ways by SubtleNuance · · Score: 2

    the method could substantially clog the target computer's Internet connection.

    I dont think they understand, no matter how you ubstruct my usage of my computer or the net its a DoS. They can smurf me, they can ping-flood me, or do this - whatever - its all a Denial of Service Attack.

    Sheesh, these people want to argue semantics... give me a break.

  228. About your sig by Hektor_Troy · · Score: 1

    So - you're one of the very few slashdot zealots who will admit to being braindead?

    :-)

    --
    We do not live in the 21st century. We live in the 20 second century.
  229. how many more ideas? by malfunkti0n · · Score: 1

    Hey, maybe they will next try to send those users on the sharing "SITES" as they call them some anthrax thru the mail. Or maybe the will petition the gov to drop bombs on our houses .. COME ON .. this is about the most idiotic thing ive ever heard a company try. They are going to "hack users". I think the RIAA has just run out of ideas and they are paying some idiot off the street to think of stuff. Hey RIAA, pay me, ill give you stupid ideas too, ive got plenty of them!

  230. Re:Remedial Math! Grade 5 lesson! by emoon · · Score: 1

    You're making the assumption that all the hosts are sharing files.

    I don't recall the exact figures, but an analysis of napster showed that well under 10% of users provided the bulk of files (75%+)

    I knew a guy who used napster a lot to download songs, but was bothered by the idea of someone downloading *his* collection of mp3s. He made sure that napster never pointed to his main collection. Only songs he downloaded were eligible for upload. Bandwidth wasn't an issue as this was at work sitting behind 2 T1's.

    Then there's people who through firewalls and/or NATing can't serve files.

    The RIAA would still need a honking big pipe, but not as large as your calculations would indicate.

  231. Re:No, this is scary, not funny. I mean that. by shepd · · Score: 2, Insightful

    The american revolution was about british control of our every day life. The RIAA is about getting total control of their business investments.

    No, the RIAA is about controlling what, when and how you can use your computer and your media.
    The British were about controlling what, when and how you can use your life.

    The RIAA are about taxing your media (they already do this in America, and successfully duped our idiot "heritage" minister Sheila Copps into charging Canadians for media. As if protecting Eminem were important to Canadian Heritage).
    The British were about taxing your life (boston tea tax anyone?).

    I'm very surprised you don't see the exact parallels between the two. I'm not even American and I understand what the basis of the war was about.

    >People swapping music is kind of like the terrorists that bombed the world trade towers they HATE america

    You really don't have any clue about what the Revolution was about, do you?

    It was about your freedom. This freedom includes the freedom to use your computer in any manner that doesn't harm anyone else. They were so clear about this they made sure even the thickest man on the US could understand how important this fact is to America -- they even made sure that you can own guns, the only purpose of which is to kill.

    Canada, however, was a little less extereme. Our guaranteed freedoms pale in comparison to yours, yet strangely we have more digital freedoms! I can even hack your satellite TV services without fear of reprisal! Heck, the Canadian government even allows me to walk over to my neighbours house and burn copies of any of their original CDs I like! Really!

    Why does America accept having less freedoms than the country they fought against so long ago? Don't you want to be the freest country in the world again? Or do you let the RIAA destroy what your forefathers gave their lives to protect?

    >People swapping music HATE the RIAA, yet continue to "steal" the music. Why? because it's sounds great! If the music wasn't worth something, why steal it?

    I fail to see how making a copy of someone elses copy takes money out of the RIAAs pocket. That is, unless you come up with a hypothetical situation, which is quite a faux-pas fallacy as far as debating the issue goes. You'll find using hypothetical situations a no-no in any speech making textbook. They guarantee someone in your audience will attempt to out-think you. [INT(J/P) s will exist in your audience]

    Just mentioning that since the usual rhetoric is "But you would have bought it if you would have copied it!". Proof again is in the fact Canadians can hack DirecTV yet again can't pay for it. If they can't pay for it then they obviously would have done without if they couldn't hack it. Same thing with MP3, except in that case you can (not will) pay for it.

    Besides that, the RIAA doesn't make the music! Find out who our enemy is before you support them with your vitriol. I want to pay the artists more than they have ever made through the pathetic rotting carcass of a business the RIAA is. They won't let me. Whenever an artist tries to let me pay them more than the RIAA would the RIAA shoves a contract up the musician's ass.

    That and most have better things to do than seek out every single artist (however, I suppose I don't -- but I get my music for free legally -- read lower). But that seriously cannot cost the majority of my money put down on the CD.

    >if you really think the RIAA is raping you, stop buying/sharing their music.

    It isn't their friggin music (except in a weak legal sense)! They didn't make it, they didn't encourage it (unless you count shitty fabricated groups like NSync) and their only business is a mob-like racket to get a product from point A to point A.1

    They do virtually nothing (apart from hyping up shitty boybands) yet recieve the largest part of your dollar spent on music.

    As a volunteer radio DJ I'll even let you in on a secret: As far as I'm concerned, the RIAA does jack-squat for getting artists on the radio. When I want promo CDs on an artist from a company I simply whip off an email to the label (or the musician themselves, if they are independant) and they send me a copy of whatever it is I asked for. I don't even pay postage!

    >I guess people who did a job 2 weeks ago shouldn't get paid either.

    If you worked like the RIAA does, I'd sue the hell out of you for doing nothing and then overcharging for your non-product. If you work as hard as a good full time musician does I'd pay you very well.

    If you ran a cartel on your service just to ensure that I had to pay you (and you only) to get through to your "suppliers" I'd say you work like a drug dealer (or a diamond dealer) and I'd get the government on your ass [Thanks EU! Now can you do something about DeBeers?].

    >Let me just say that I think that all the laws that the RIAA has or has tried to get passed are wrong,

    Then why do you appear to defend them so wholeheartedly?

    Personally I think I'd be cool with them using reverse hacks and/or DOS techniques to shut down people "pirating" their service. Of course they have no experience at it, and are at the same stage (as far as preventing hacking) GE was with the VideoCipher (actually their anti-CD ripping technology is much more pathetic -- its worse than 80's scrambled cable PPVs!), and just look how far anti-hacking Satellite technology has come (In Canada I can just open the classified ads and have no trouble finding a dealer less than 5 minutes away. I can be setup with a full TV hacking solution and have set up working faster than actually paying the money to Dave himself! [if paying for DSS were legal here, which it is not]).

    The RIAA is almost two decades behind on ECM technologies and they will never catch up. I, for one, am not afraid, especially since unlike satellite technology I can actually try to hack them back.

    >It's kinda like a "forced" gnu license for music, except you're not getting the owner's permission.

    The legal owner or the rightful owner? If it were the rightful owner, well, things between me and them would be very different than the currently wretched situation between myself and the RIAA. As a DJ I very much appreciate the efforts that go into making music (even if all I do is flip CDs at a radio station). Also, as a DJ, I'd be angry as hell if I thought I had to make everyone buy RIAA approved radios to listen to my show, which is what digitally encrypted music and "hackpoof" CDs are all about.

    If I were a musician I'd be angry that I can't release music myself and expect to "make it". The RIAA has the market so monopolized artists are pawns to their practices.

    How many of the artists at Universal are happy about their CDs being degraded? If I were an artist I'd see it as being forced to take the RIAAs license at the cost of your livelyhood.

    Sorry for the long post, but there just seems to be a lot of points on which you are uninformed. I'm planning on cleaning this up and posting it to a website at somepoint so I don't have to keep typing it up all the time. :-)

    --
    If you could be told what you can see or read, then it follows that you could be told what to say or think - BoC
  232. Who Bears The Cost? by The+Artificial+Kid · · Score: 2, Interesting

    Let's say I attempt to download some music over a peer-to-peer file-sharing system. One of the keen, young whizkids from the RIAA's l33t anti-theft squad spots me and begins hosing me down with ultra-large packets. Who pays for the bandwidth? The RIAA? Or me? IF I start downloading and leave my computer on over the weekend the RIAA terrorist could, in theory, feed me 10-20 gig of meaningless 'data'. At my cable provider's rates that's AU$1700-3400 (US$850-1700). Since that would instantly bankrupt me, causing my bank to foreclose and me to lose my house, would I have some recourse against the RIAA? Bear in mind that I live in Australia and so this would constitute a violation of even the meagre 'jurisdiction' that the RIAA claims in the US these days...

    I invite responses

  233. RIAA and Gnutella by Th0th · · Score: 4, Interesting

    This is a bit off topic, but regarding the RIAA and DoS attacks, and the recent /. article about the RIAA trying indemnify themselves from damages resulting from hacking into computers.. I query whether anyone has been out on Gnutella lately and noticed all the 1k files, the names of which exactly match the query entered. I always assumed that these were viruses, porn site ads, etc. I wonder if the RIAA have gnutella servers out there trying to cripple, create security breaches, etc on the machines of people violating copyright by trading mp3s, movies, etc. Does anyone wanna load up gnut and do some detective work???

    --
    "BadTimes will make you fall in love with a penguin" - Laika
  234. I wouldn't worry by Salamander · · Score: 2

    How fast do you think they'd find themselves black-holed if they tried this? One minute, or two?

    --
    Slashdot - News for Herds. Stuff that Splatters.
  235. Re:The RIAA does NOT have that right - they are ly by Anonymous Coward · · Score: 0

    An internet-connected server would appear to be a "Protected computer" under the definition in 18 USC 1030(e)(2)(B)

    (e) As used in this section - (2) the term ''protected computer'' means a computer - (B) which is used in interstate or foreign commerce or communication;"

    Me thinks the key here is communication: foreign commerce or communication. OR communication.

    Send a email to a bud in another country. It is now used for foreign communication.

    Case closed.

    ac

  236. You don't vote for an RIAA by Foehg · · Score: 2, Funny

    Who VOTED for them?

    Better yet...

    Which watery tart threw THEM a sword?

  237. MCSEs (offtopic) by Dwonis · · Score: 2, Funny
    Heh. What's funny is that in Saskatchewan, it's illegal to use a title containing the word "Engineer" without being licensed by APEGS (Association of Professional Engineers & Geoscientists of Saskatchewan), so all those 31337 certificate-holders can call themselves MCSEs, but they can't expand that acronym anywhere.

    Sort of exposes Microsoft's attempt at sophistication, no?

  238. Yes... by taniwha · · Score: 2
    this is basicly my feeling about the whole thing .... the comet has landed and the RIAA is wandering around like a bunch of dinosaurs bitching about the approaching winter.



    Trouble is they are dinosaurs with lawyers and large bank accounts to feed them .... they are going to make a lot of trouble before their way of life goes belly up .... long term however they are toast .... it's a great time to be a mammal.



    The RIAA represents a bunch of people who'se basic job is being middle men - it used to be that it cost lots of money to get music to people - you had to run an expensive recording studio, have a pressing plant, infrastructure for distribution, payola for marketing, cocaine, etc etc and you got to take a goodly chunk off of the top. The real problem is that now days it costs pennies to make a copy of some music and send it to someone - you don't even need a retail store (there's yet another markup gone) - the whole reason for the existance of these middle men is going away.



    We may yet get back to the way things were just 300 years ago when the only way to distribute popular music was free (word of mouth - someone taught you a song and you sang it if you liked it).



    However in our world there's still the problem that the artists need (and deserve) paying - we do need to solve that problem in a just and fair way.

  239. I bet there are. by mindstrm · · Score: 2

    Though they may be indirect. Perhaps not a law against it directly, but you are causing me to waste my own time and resources on a lie. Therefore, I can probably sue you for damages.

  240. Re:No, this is scary, not funny. I mean that. by kz45 · · Score: 0

    You really don't have any clue about what the Revolution was about, do you?

    It was about your freedom. This freedom includes the freedom to use your computer in any manner that doesn't harm anyone else. They were so clear about this they made sure even the thickest man on the US could understand how important this fact is to America -- they even made sure that you can own guns, the only purpose of which is to kill.

    Canada, however, was a little less extereme. Our guaranteed freedoms pale in comparison to yours, yet strangely we have more digital freedoms! I can even hack your satellite TV services without fear of reprisal! Heck, the Canadian government even allows me to walk over to my neighbours house and burn copies of any of their original CDs I like! Really!

    Why does America accept having less freedoms than the country they fought against so long ago? Don't you want to be the freest country in the world again? Or do you let the RIAA destroy what your forefathers gave their lives to protect?


    The laws the RIAA are trying to get passed, and FILE-SHARING on the internet are two separate issues. I am talking about the latter, rather than the former. I believe that people should be prosecuted for sharing copyrighted materials, BUT the new, strict laws (such as the DMCA,SSCA,etc.) are wrong. The music industry is intitled to protecting their investment. It's equivalent to a software license.
    Besides that, the RIAA doesn't make the music! Find out who our enemy is before you support them with your vitriol. I want to pay the artists more than they have ever made through the pathetic rotting carcass of a business the RIAA is. They won't let me. Whenever an artist tries to let me pay them more than the RIAA would the RIAA shoves a contract up the musician's ass.

    That and most have better things to do than seek out every single artist (however, I suppose I don't -- but I get my music for free legally -- read lower). But that seriously cannot cost the majority of my money put down on the CD.

    >if you really think the RIAA is raping you, stop buying/sharing their music.

    It isn't their friggin music (except in a weak legal sense)! They didn't make it, they didn't encourage it (unless you count shitty fabricated groups like NSync) and their only business is a mob-like racket to get a product from point A to point A.1

    They do virtually nothing (apart from hyping up shitty boybands) yet recieve the largest part of your dollar spent on music.


    I think you have to learn a little something about the business world. Artists go to the RIAA by CHOICE, not FORCE. When they sign a contract, they know FULL well that their music is now mostly owned by another "partner".

    a recording company does provide a service: Marketing and studio time for starters. (do you think these things come cheap?)

    If I were a musician I'd be angry that I can't release music myself and expect to "make it". The RIAA has the market so monopolized artists are pawns to their practices.

    Have you heard of something called the INTERNET?

    If you worked like the RIAA does, I'd sue the hell out of you for doing nothing and then overcharging for your non-product. If you work as hard as a good full time musician does I'd pay you very well.

    If you ran a cartel on your service just to ensure that I had to pay you (and you only) to get through to your "suppliers" I'd say you work like a drug dealer (or a diamond dealer) and I'd get the government on your ass [Thanks EU! Now can you do something about DeBeers?].


    Aside from the fact that the above is a "no-no" in speechmaking (a little rule about life: Practice what you preach), it does seem a little strange that no-one was complaining about this issue until the beginning of napster. People were fine paying $10-15 dollars for a CD, until they were getting it for free, and it was taken away.

  241. Needs to be said (Offtopic) by Karl+Cocknozzle · · Score: 1

    What's really screwed up about the entertainment industry is that they freaked out about the potential writer's strike last year and went into high gear producing every script in sight.

    End result? A gut wrenchingly bad lineup at the local megaplex that includes movies like Legally Blonde and Corky Romano.

    Could somebody please revoke Lorne Michaels license to make a movie please?

    --
    Who did what now?
  242. Endless bitching - stop it! by reynolds_john · · Score: 3, Insightful
    Every other day here on /. there is another article about the RIAA. It's so simple - STOP BUYING MUSIC FROM THE LARGER LABELS. Your only vote is your pocketbook. No one here in this forum has the power, clout, or means with which to oppose them. We know they print cdroms for probably 2cents a piece, yet everyone flocks to the nearest Tower Records to pay $17 a smack for a cdrom - of which probably two tunes might be worth having.


    Start supporting and frequenting your local bands and musicians. Let them know (while you have their ear) what you think of the larger labels and their tactics. More importantly, find out what the *musicians* think, since not only do they love the music they play, but eventually might like to [GASP!] make a living playing their music! [[insert thunderous silence]]


    If it means you go without the next Backstreet Boys [sic] albumn, then so be it. Why not make your own music, then post it to the web for free. Heck, this might even be the predecesor for turning a large portion of the population into the 'artists' they didn't know they were.

  243. Interesting idea the RIAA has, lets expand on it.. by bozo42 · · Score: 2, Insightful

    >> An RIAA spokesman said the group was simply trying to protect its existing tools, not expand them...

    So by this way of thinking, banks, convenience stores, etc should be able to do drive-by shootings on houses and neighborhoods they think are housing robbers???

    Could the police get several hundred people to drive past street corners where they know drug traffickers hang out so folks who are really looking to buy drugs can't stop to buy???

    --
    If you're not on somebody's shit list, you're not doing anything worthwhile.....
  244. Change the quesiton to... by mickeyreznor · · Score: 1

    ...

    I buy a car from someone. It looks fine, and he assures me that nothing is wrong with it. The next day it blows up because of a problem that the owner knew about.

    Assuming I survive the explosion, I think that's grounds for a civil suit right there. Important Note: The act does not have to be illegal in order for him to get sued.

    1. Re:Change the quesiton to... by Jay+L · · Score: 1

      Of course that's different - money is changing hands. If I *sell* you something based on misrepresentation, the Uniform Commercial Code is going to apply. But if I *give* you something that isn't what I claimed, you're not out any money.

    2. Re:Change the quesiton to... by mickeyreznor · · Score: 1

      How about the I Love You Virus?
      (And yes, i know the people who actually clicked on it were complete and utter morons)

      IANAL, but I think even if you *give* someone something that appears benign and it does something malicious, you are responsible.

    3. Re:Change the quesiton to... by Jay+L · · Score: 1

      Yes, but the responsibility for the virus is because it's malicious, not because you said it was good.

      Take away the maliciousness and you have no case. There's nothing malicious about a song claiming to be Madonna's "Music" but actually being some RIAA geek saying "Don't pirate."

      If you want to find an exact analogy, find a case where I claimed something had value, gave it to you, and it turned out to have zero value while causing no harm. I don't think there is such a case.

    4. Re:Change the quesiton to... by Anonymous Coward · · Score: 0

      What if i give an envelope with a postcard and a dose of anthrax spores ? Do I walk ? Because that's what the second wave of terrorists essentialy do.

  245. To the RIAA: Business Plan (up for grabs) by Anonymous Coward · · Score: 1, Funny

    Latest Press Release from the RIAA:

    "After intense criticism from our customers, e have now come up with a plan to use our resources and make money off of file swapping. We are deciding to take legal action against swapping companies. By doing so we will make them pay liscensing fees to distribute our material. They, in turn, will charge their users a small monthly fee so that they can make a profit. Everyone will then be happy. People will now be able to download our songs and we will legally be able to make money on our (artists) property. Everyone will be happy."

    "Just kidding... we aren't that smart."

    "Wouldn't it be nice though?"

    "Instead we are going to take the law into our own hands and clog your already slow @home connections."

    "All your bandwidth are belong to us!"

    "Your friends, the RIAA"

  246. It seems the RIAA is probably running out of ideas by AnimeFreak · · Score: 1

    I can bet that this is true because no real sane (then again this is the RIAA) group/company/organisation/etc would come to the point or level of Jeff K. unless it was absolutely necessary (with the exception of the government who could use this in espionage).

    Again as I state every time I hear something along the lines of this, thank-god I live in Canada. Then again, our government is attempting to bring in something similar to the DCMA.

  247. DoS War by 00Monkey · · Score: 1

    If they want to start a DoS war then everyone will lose. It's just like who will be the first to launch the nukes...only difference is that we can stop DoS'ing eachother immediately and have everything working shortly after and nukes are a bit more permanent.

  248. wait a minute...... by Anonymous Coward · · Score: 0

    There are actually people who go to the riaa website??

  249. In other news today, by meatspray · · Score: 1

    CD prices skyrocket to $24.99 and album as RIAA dues increase to allow the organization to buy equipment and hire help to attack pirate systems.

    as much money as they spend on these (fun but) ridiculous adventures and their lawyers and court cases, this money has to be coming from somewhere right?

  250. You know what they say by bruns · · Score: 2, Interesting

    You know what they say, someone is always going to have a bigger pipe then you. Frankly, doesn't self defense come into play if they try this? If I am an ISP, and they are as so brazen to attack my network, why shouldn't I throw everything I have back at them? One good screw deserves another. I hope they rethink this idea - obviously they dont have anyone on staff that was once an EFNet operator. :)

    --
    Brielle
  251. DCMA by bolarnava · · Score: 1

    Cant see why the authors of this software cant just copywrite their softwares communication protocol, then sue RIAA under the DCMA if they try to reverse engineer the software in order to make their downloading programs. Provided the lisence says something to prevent them from using the released version, RIAA cant touch the system legally no matter what laws they get through, without breaking other ones.

  252. Re:No, this is scary, not funny. I mean that. by sam_handelman · · Score: 1

    Picture: J Random Musiclover, uses WinMX and KaZaA, until they bog down terribly slowly.

    In order for this to work, they're going to need to do denial of service attacks against Gnutella. Sure, our professors have all sold out. Sure, they're just another brick in the wall. However, do you think the former hippies who constitute the nation's CS faculty are going to take it sitting down when "the man" starts doing DoS on *their* (heavily infiltrated by KaZaA, not to mention, good lord, gnutella and freenet) computers? *Especially* when they don't even have to *do* anything, just look the other way while their students do (at my undergrad institution they do this allready, for chrissakes) their very worst?

    The RIAA has enough hubris to try it anyway. They could be intelligent and not pick on anyone who might concievably fight back, but I don't think they've gotten that much smarter, and I don't think they understand at all what causes people who aren't empty suits to act or react the way they do.

    --
    The good and new comes from no quarter where it is looked for, and is always something different from what is expected.
  253. Maybe I'm wrong but .... by Mofo_abc123 · · Score: 1

    Wouldn't spending that much money on bandwidth cost more than to just let the people pirate it? Can you imagine how much bandwidth you'd use, and if you are getting charged per meg... bye bye profits

  254. Two Words: CORNERED ANIMAL by nate.sammons · · Score: 1


    The RIAA is acting exactly like a cornered animal that knows its time has come. Unfortinately, this cornered animal has enough money to buy more than a few congressmen and senators.

    *joy*

    -nate

  255. the GNU Millennium by Anonymous Coward · · Score: 0
    We're plotting to offer a few cuts from one of the gnu world's most legitimate lyricists/vocalists. We'll see how IT works out. I hope we don't get killed? She has love. We're actually hoping to be able to pay her/charities independently.

    In the mean time, you should investigate your chances of acquiring this gnu world style set of URLs, including a year's free hosting.

    Have you seen these face scans, of the REAL .commIEs? know?

    fud is dead.

    1. Re:the GNU Millennium by Anonymous Coward · · Score: 0

      CoreWreckDead MiSpelling. you're write. fud IS dead.

  256. Re:MCSEs (offtopic but why not) by Mandelbrute · · Score: 1
    Perhaps Microsoft should be prosecuted for running a degree mill?

    You give them money, study for a few months and you can call youself an Engineer.

    In Australia, a telecommunications company found itself in legal trouble when they called the untrained guys that put cable TV boxes in peoples homes engineers.

    Anyway, why pay money to become a MSCE when you will get paid money to become a Microsoft Certified Supreme Court Judge!

  257. Wow! by Anonymous Coward · · Score: 0

    I really didn't think that it was possible for anyone to be any greedier or more stupid than M$! This sounds like a Darwin award in the making

  258. Re:The trouble with blacklists by Mandelbrute · · Score: 1
    If They can start injecting "legitimate" trader's IPs into the blacklists, the value of the lists would be considerably reduced!
    That would be impersonation, which is against the law virtually everywhere. They could get around it if caught, because the rights of the corporation often exceed that of the individual in the USA (which is in direct opposition to the intentions of the founders). Everywhere else the laws vary, but usually favour large organised industry groups.
  259. They can be sued?! by epsalon · · Score: 1

    You are talking about the USA. If you have money, you win the trial. Preiod. If you want to break the law so wildly that you can't win with oyour $$$, just lobby congress and change the law.

    1. Re:They can be sued?! by bfree · · Score: 2

      Then maybe this is another one of those times where not aving the entire planet under USA law (remember the USA only holds a few percent of the worlds population, it has just a smidge more pollution though). Imagine if they try this on Freenet or something similar, the distributed nature of the beast would mean that it would quickly become in the entire networks interest to fight back, and the best approach IMHO would be to DOS the RIAA machines back. Preferably hunt for exploits and use them to wipe out the networking code (or cripple it so they can't threaten the service) but just plain bombarding them with packets would do. The likes of Freenet has a completely legitimate purpose (off-site backup of non-private data for one) and so if the networks fought back it would be interesting to see if it could ever be taken to court, or even if users of the network could be. Personally I can't imagine the RIAA are going to have employed the staff they need to win a technological battle.

      --

      Never underestimate the dark side of the Source

  260. There is some good news... by matusa · · Score: 1

    ..At least this will provide us with a great chance to develop anti-DoS (and DDoS) attack tools =)

    *snicker*

    honestly though, if they actually initiate this ridiculousness, then you can see us doing this

    -mateusz-

    Linux Violinist

  261. Try a Little Customer Action by alfredw · · Score: 1

    Dear RIAA:

    I have recently read a story saying that you were intending to make Denial of Service (DoS) attacks against file-sharing services. In addition to the dubious legality of this, I find that position morally offensive.

    In protest, I will never purchase another compact disc. I will never purchase any other form of recorded media. I will buy music only from artists directly, and only in purely downloaded, digital form.

    Furthermore, as I run a server that is part of a file-sharing network, I will respond to any DoS attack with legal action.

    This letter is governed under the following terms:

    1. If you are an agent of the RIAA or any organisation which is a member thereof, you may not copy, delete or modify this letter in any way
    2. If you do not fit into the above category, this letter shall be governed by the GNU Public License.

    Signed,

    Alf

    --
    In Soviet Russia, sig types you!
  262. How this came about... by ChenLing · · Score: 1

    In a meeting of top RIAA execs.....

    Hilary: Ok everyone, how do we stop these thieves? Well, geek boy?
    Geek Boy: Well, there really isn't a technically feasible way...
    [Hilary glares, Geek Boy shudders..]
    Geek Boy: And......do you have to put your hair in points like that?
    Hilary: Alright, that's the last time!
    [Hilary pushes button; the floor opens and Geek Boy falls into a burning pit.]
    Hilary: Well, that's the last of them....I guess we have the make Congress let us import more of them, eh? [grins evil grin]
    Hilary: Any other suggestion? Johnson?
    Johnson: Uhh.....well.....I've always learned that a good offense is a good defense! We can attack their computers!
    Hilary: Yeah! That's a great idea! [frowns; looks at the smoking spot where Geek Boy was sitting.....] Umm...who do we have that can do that?
    Johnson: Well...I have a couple of 13 year old boys......

    *snicker*

    --
    "You have the option of insanity. I do not. And that makes me crazy!" - Brian to Angela, My So-Called Life
  263. Re:No, this is scary, not funny. I mean that. by jd10131 · · Score: 1

    The article seems to imply that their robots will download the files very slowly, presumably under the theory that they will simply fill all the download slots. This would actually reduce the network traffic.

    Of course, the filesharing boys won't stand for this. It will be a few weeks before someone lets slip with some software that circumvents the RIAA. Perhaps a server that "registers DoS attackers" and "provides DoS addresses to client dynamically"

    This entire battle has been measure vs countermeasure. The problem is that the RIAA cannot move fast enough against all the open source hackers who love their music.

    No one can say that the RIAA has "got it" until they finally give this up, and just sponsor "buy this album" links inside the file sharing programs. They need to realize that people who starting listening to music they download online BUY MORE MUSIC.

  264. Somewhere in a file sharing chat room... by hyrdra · · Score: 3, Funny

    R7I7AAHaxor from DHCP-stp.loc-5-1.riaa.superhacker.robin.hood.hq.ri aa.org just entered #mpthreeWaReZLEET
    HotBalls: u got any mixed britney spears tracks?
    Bsblvr: i want the new Justin Timerlake solo from the BSB new album!
    R7I7AAHaxor: trading MP3's is illegal, u know.
    Bsblvr: yeah so what????
    BigDisks (3,400 GB of MP3) began sharing.
    HotBalls: bigdisk, I missed u! I bet u have the new britney spears mix, huh?
    BigDisks: Yes, I do. It's on my third Maxtor 100 gig.
    R7I7AAHaxor: Bigdisk, you shall die!
    BigDisks: Who is Haxor?
    HotBalls: Just one of the lame RIAA goons.
    R7I7AAHaxor: I am NOT LAME! I can DoS all of u! I will destroy u cable modems!
    Bsblvr: ur gay
    R7I7AAHaxor: I AM NOT GAY. I HAPPEN TO WORK FOR THE RIAA AND MP3 TRADING IS ILLEGAL! I HAVE U IP ADDRESS!
    BigDisks starts file transfer to HotBalls.
    R7I7AAHaxor: I HAVE STARTED DOS ON BIGDISK. I WROTE THE SHELL SCRIPT MYSELF; I AM LEET.
    BigDisks exited (ping timeout)
    HotBalls: u jerk, u cut my dload off at 53%!
    R7I7AAHaxor: I AM MIGHTY RIAA HAXOR I WILL PREVENT ALL MP3! I AM ONLY 14 BUT I CAN KICK YOU, I AM LEET.
    Bsblvr: u suck
    R7I7AAHaxor: I WILL BE BACK. I HAVE TO STUDY FOR A BIOLOGY TEST TOMORROW, BUT I WILL BE BACK TO STOP ALL OF U FROM TRADING UR MP3s'!
    R7I7AAHaxor exited.
    BigDisks entered.
    BigDisks: Who was that?
    Bsblvr: One of the RIAA's employees. He's gone now, he has a biology test tomorrow and has to study for it.

    --


    "I'll just chip in a bit for RedHat: I actually have that installed on my university machine." - Linus, '95
  265. RIAA and artists on MP3.COM by Black+Plague · · Score: 2, Interesting

    I write my own music, and upload it as MP3's onto MP3.com. I do this as a hobby, and never felt like paying someone to copyright my music, because, It's a hobby, and I am just doing it for fun. Am I at risk for DoS attacks, from my ISP, because I didn't copywrite my music? (If the RIAA found out about it) Do the RIAA treat all non-copyrighted MP3's as Pirated music? (Even those who where written by Amateur artists on MP3.com?)

    1. Re:RIAA and artists on MP3.COM by Anonymous Coward · · Score: 0

      You get U. S. copyright automatically, whether you register your works with the Copyright Office or not.

      However, if a record company decides to rip you off, having registered the song and/or performance give you certain advantages (such as the ability to sue for punitive damages).

  266. RIAA is shameless! by KoshClassic · · Score: 1

    Ok, I know that there is a great legislative tradition in this country of attaching riders to Bills. None-the-less, is anyone else as disgusted as I am by the RIAA's attempt to take advantage of our reaction to the senseless killing of ~5000 innocent civilians (not to mention ~5000 of their customers) by attempting to couple their own self-serving interests with Congress's reaction to this atrocity?

    --
    Understanding is a three edged sword. - Ambassador Kosh Naranek, Babylon 5
  267. Re:No, this is scary, not funny. I mean that. by Balp · · Score: 1

    > They're finally employing a technological solution to a technological problem.

    But the problem is that this is NOT a technological problem, this is a social problem. People has always wanted and copied music. In the early days one needed to be able to play one self to "copy" the tunes of one other musican. Then came the music technology, and we have useded it since then to copy music.

    It the copy is on tape from the radio as was very common a couple of year back or on digital files over the internet dosn't realy matter it's the same. It's a social problem, the main problem is when does the music get worth the pricetag. Actually most people like to give a contribution to the creators if they like the work. Thats why street musicans could survive. But not necessary like to pay the money in the form that currently in use by the music indistry.

  268. Not a conspiracy theorist.. but by SyntaxError · · Score: 1

    I'm not a big fan of conspiracy theory, but I've been reading through all of these articles things just started to form in my head.

    The SirCam worm hit the Internet in July and mysteriously did nothing. Someone spent a whole lot of time creating code that propagated very well, but seemed to miss the code that would release the payload, filling up disk space.

    Now, the RIAA, in it's most cowardly move ever, is trying to piggy-back on an anti-terrorism bill that would allow them to "hack into computers and delete copyrighted filed" without having repercussions, using the DMCA as it's backing of course.

    The RIAA, in their infinite wisdom, now shares their plans with the public:

    "We referred to it as the 'license to virus,'"

    Personally, I wouldn't put this past the RIAA, but I'd like to hear what others have to say!

  269. riaaa by Anonymous Coward · · Score: 0

    you could just change the .ext to zip or something, or even uuencode it and then zip it.

  270. Great! by RyuuzakiTetsuya · · Score: 1

    This means I can now put a bunch of free and legal mp3s onto my FTP, watch it get DoS'd then charge RIAA for the bandwidth fees.

    --
    Non impediti ratione cogitationus.
  271. Can't they be bitten by their own pet law? by Fredflintston47 · · Score: 1

    Clearly, IANAL, but doesn't this qualify as hacking?

    Doesn't this mean that the RIAA are now guilty of attempting to hack, thereby violating the DMCA, and therefore the directors of the company should be put into jail just like Dmitry?

    In the land of the capitalist, it will never happen, but it seems that what's good for the goose...

    --
    Go, Springboard, Go!
    1. Re:Can't they be bitten by their own pet law? by PigleT · · Score: 3, Insightful

      "Doesn't this mean that the RIAA are now guilty of attempting to hack,"

      The RIAA wouldn't know how to hack. Crack, maybe, anyone can be a skr1pt k1dd1e these days...

      However, the implications of someone wantonly DoS-ing a company's connection because of an employee's (or, better, a wandering consultant's) illegally downloaded file, is phenomenal: you piss off a whole company, you get sued, very quickly, for DoS-ing them without good reason. IOW, it's very easy to miss the target...

      --
      ~Tim
      --
      .|` Clouds cross the black moonlight,
      Rushing on down to the circle of the turn
  272. And I wonder why I still buy music from them.. by einTier · · Score: 2
    I've never seen an industry or major manufacturer so damn hostile to the people that puts money in it's pocket, not even General Motors (they just don't care about the customer -- they don't try to bugger him) or Microsoft (evil, but not overtly hostile to people that use their product).


    Some days I wonder why I still buy music from them -- oh wait, I don't. Haven't ever purchased a GM automobile or recently purchased any MS software either. Don't plan on purchasing any of the above any time soon unless I see a fundamental change of business.


    Note to the RIAA, if you are listening: I don't want to pay $20 for a CD, especially when only a dollar or two at best goes back to the artist. I don't appreciate not being able to purchase certain items from your back catalog, even in a medium that costs you no money. I really don't like this new "War on Pirates" thing you're pursuing. I'm not a pirate, but you just might make me one.

    --
    -------------------------------------------------- $665.95 -- retail price of the beast.
  273. Re:No, this is scary, not funny. I mean that. by Sabriel · · Score: 1
    Aside from the fact that the above is a "no-no" in speechmaking (a little rule about life: Practice what you preach), it does seem a little strange that no-one was complaining about this issue until the beginning of napster.
    Oh, some folks have been complaining for ages. They're just louder / easier to hear / more numerous now.
    People were fine paying $10-15 dollars for a CD, until they were getting it for free, and it was taken away.
    Some people. Not all people. Count me in the latter group.
  274. Isn't that a Federal Ofence??? by Anonymous Coward · · Score: 0

    Viral contamination it's a crime...

  275. RIAA to hire Slashdot by Amon+CMB · · Score: 2

    If the RIAA hired Slashdotters to use the Slashdot effect, that would really work!

    --


    Men believe what they want. - Caesar
  276. Sounds like... by Scoria · · Score: 2

    ... they have a Rage Against the Machine to me. :)

    ::ducks::

    --
    Do you like German cars?
  277. A musician's take on the RIAA, piracy, etc. by killer_roach · · Score: 1

    For the record, I am an alternative rock somgwriter/vocalist, and am forming a band at the present time. I was once offered a record deal by Capitol Records, but I refused the offer, deciding that I wasn't at the time wanting to relocate to Nashville to start my singing career. I have released no records or singles at this time. Most people wonder why, for the most part, when there is complaints about music piracy, they originate more often from the RIAA than from the artists themselves. Why is that? Look at what an artist will receive off of an album, and that should explain it. The typical wholesale cost of a CD is between $8-$10. Of this, the artist will receive (normally) somewhere between 50 cents and $1.50. If you have an album go platinum, then it works out (usually). However, those earnings are only from the first release of your album. If the album is re-released, you will rarely see a cent from the sales. In addition to this, you, as the artist, have to pay for your agent, management staff, assistants, music videos, etc., which usually means you end up breaking even off of the sale of an album. "If I knew how much this damn job paid earlier, I'd have taken a job at McDonald's." - Courtney Love I could go into many of the other perils of an RIAA-based record contract (such as being forced to reside in a certain area), but that is beside the point. The main thing is that artists usually don't make their money off of the albums that they sell. Where do they get it? From touring. If your songs are available online, it means you can expose your music to a larger audience, whom, in turn, may later on attend your concerts, buy your merchandise, etc., which are sources of income for the artists. This also explains why many artists will go on the road for as much as two years at a time; they often do it out of necessity. Only the few make exorbitant amounts of money in the industry as artists. "Well then," you might ask, "but how come artists like Metallica, Dr. Dre, and Madonna decried MP3's?" Simple: THEY OWN LABELS. If you're getting up to $5 an album because somebody else sold a record of their music, you'd want them to be selling as many records as possible. There are notable exceptions to this, most of them being in the metal/alternative bend (Korn, for example. Love them or hate them, they own a label, yet support MP3, since they know that, in a non-mainstream genre, you need to find alternate sources of getting your music out to fans). As an artist, I find it appalling that outside sources are trying to dicate how your music can be distributed. Even worse, I find it deplorable that they would sink to the level of attacking people's home, business, and school computers to further their financial well-being. Attacks with a financial benefit are usually considered assault as well as larceny. Shouldn't somebody have the District Attorneys in Nashville, New York, and LA looking into this? Such action, if commensurated, would certainly violate numerous criminal laws. Crime is never justified, even if it is to maintain your financial well-being. If a homeless person steals your wallet, wouldn't you want them put in jail for what they had done? The RIAA is the homeless person in this story, albeit a very rich, arrogant homeless person. In addition, from the technical aspect, I find such an action to be half-baked at best. Such attacks could easily be stopped with a firewall, or by releasing a new version of the P2P client that would filter out DDoS attack traffic or add automated administative control, or by administering your P2P client manually (such as limiting connections per IP or kicking very slow connections). What about other options of this vent? Back Orifice? USE of Back Orifice is generally illegal, and it would probably be so in this case as well. Re-engineering the P2P clients themselves? Not likely, they don't own them, and it would be hard for them to pressure any one of them due to their decentralized nature. Suing all client makers? Well, what about open-sourced clients? Would that mean that, by default, you could have to sue the entire community of that software? You know that would never fly in court. What about other anti-piracy efforts, like copy protection on CDs? Some can be defeated by downloading a "fix" DLL for your system (as is the case with the Macrovision-based solutions), some can be worked around, and all can be recorded to MP3 through an analog recording program such as the one that exists in AudioCatalyst (it slows the process down, sure, but doesn't come close to stopping it). Public service announcements? You've got to be joking. If PSAs worked that well, you'd see a drug-free, violence-free, well-educated society. If you just casually look around, we have about the polar opposite, which is a testament to their effectiveness. Musician spokespeople for the RIAA? Nope, Metallica has been crucified over this, and Dr. Dre has stepped aside a bit in recent months. None of these has seemed to put a dent in music swapping online. Here are some suggestions to the RIAA to try to diminish piracy: 1) Eliminate "copy-proof" CDs. All that's gonna do is convince people to develop ways to copy them, and it adds to the cost of each CD substantially. 2) Abandon tbe "studio system" in the music industry, making artists literal "free agents". With more pressure on labels to appeal to musicians financially, it will take a toll on the level of administration as well. Of course, this would also essentially be the death knell of the RIAA, but that's not that bad, is it? 3) Re-examine retail price points. A CD should, in theory, be able to possess as low of a wholesale cost as $4.50 according to a more balanced distribution of money ($3 to the artist, $1 to the label to cover publicity expenses, which could be handled by the band's manager in the case of a smaller label, and the 50 cent cost of production, recording, and distribution). If this were done, you could theoretically see the retail cost of CDs drop to around $7-$10 each, far more palatable to the consumer. 4) Include a digital version of the album on the CD in a mixed-mode session. There, give people their MP3s for their own use with each copy sold of the album. 5) Stop price fixing. Of course, if point #2 occurs, the labels will really be unable to work together on all that much, but prices cannot just be kept artificially high. Cassetes cost more to produce, the artist gets about the same cut per copy sold (about 80%, normally), but they cost half as much as CDs to buy. Hmm... something's up when I can buy the DVD for Pink Floyd's The Wall ($20) cheaper than I can buy the CD album ($33). Just some random suggestions of mine, feel free to analyze and leave comments.

  278. Sumimasen... by killer_roach · · Score: 1

    Hmm... this is definitely strange. The formatting of this document did not take place, making it damn near impossible to read. Man...

  279. What we need to do by purplemonkeydan · · Score: 2
    1. Find out where Hilary Rosen lives
    2. Set up a 'security checkpoint' outside her front door. Strip search, metal detectors, armed guards, the works, you know, to see if she has violated any Open Source licenses.


    After all, if they are allowed to break into people's computers and DoS them, can't we DoS her?
  280. Re:Locust Abortion Technician by MrFudd · · Score: 1

    IMHO Locust Abortion Technician is the best Butthole Surfers record. Why shouldn't Touch n Go want to make money off of it? Didn't they provide the sound techs or studio engineers? That record did a lot to promote the Surfers. They shouldn't feel too exploited.

    Did you ever go to a Butthole Surfers show? Now that was insane. The second time they came to town, they could have charged $100 a head and still sold out. Without Locust, they wouldn't have had that level of success. Maybe they didn't need to deal with Touch n Go in order to make Locust, but they did and they should live with it.

    Even if Touch n Go wants to make money, it's not the same as what the Music Recording Cartel is doing, i.e. using their monopoly of distribution networks to jack up prices and then going after the kids who use MP3's and just don't respect the suits who want to shake them down. And indies like Touch n Go aren't writing legislation to strip us of our liberties. (Granted, they're probably not too upset about shit like the Bono extension. But as long as they stay out of the RIAA, I don't have a problem with them. But hell, if indy X pisses you off, be pissed off.)

    So just fuck the RIAA, and fuck the poor jerks who signed with RIAA members. If a "recording artist" wants my money, he's going to have to sign with a decent label. And if a musician wants my money, he's going to have to come to my town and perform.

    --
    If you meet the wabbit on the woad...
  281. Neuromancer by dh5fbr · · Score: 1

    And I always wondered how the dark worlds in Gibsons novells evoluted. But I think I now beginning to understand.... first it is the illegal song swapping fought with DOS...then...

    P.S:Note I am not swapping, but worrying...

  282. Re:Remedial Math! Grade 5 lesson! by Rogerborg · · Score: 2
    • Assuming a bandwidth of 50kb/s avg per user

    Go do some remedial comprehension. The idea is that they max out peoples' upload connections by not actually downloading the tracks, same as if they just logged into an anonymous ftp server fifty times and sent a keepalive every couple of minutes.

    It's utterly pointless though; how long will it take developers to put in a "drop upload if under X kbs" tick box? Five minutes? Then "do not accept connection from IPs that have dropped Y connections for the next Z minutes" box? Another five minutes?

    Or hell, just change "number of simultaneous uploads" to "bandwidth available for simultaneous uploads".

    --
    If you were blocking sigs, you wouldn't have to read this.
  283. Re:Freenet is immune (sort of) by BCoates · · Score: 1

    Well, sort of. The file itself would indeed be copied around based on the request, but you could prevent a node from being accessed by other nodes (thus keeping it from contributing its storage and bandwidth to the network) by doing that... I think the default incoming connection limit is like 50, and it's not practical to increase it by very much (consumes too much memory/cpu).

    So you'd have to attack the entire network, not just one file... I guess it depends on how much bandwidth you need to make a lot of TCP connections sending very little data.

  284. Re:No, this is scary, not funny. I mean that. by DullSod · · Score: 1
    And then he sees one of the RIAA offerings, and if they're smart enough to finally go for some sort of cheap subscription or micropayment, he might very well be sold.

    My (and most other peoples) problem with the RIAA is that they charge so much for the music, yet give so little to the artists. If they started charging resonably and/or gave a decent share to the musicians, then why not support them? Of course, that would mean giving less to their shareholders, so I doubt it would happen. but one can hope....

  285. More numbers. by leuk_he · · Score: 1
    The software technology, according to industry sources, would essentially act as a downloader, repeatedly requesting the same file and downloading it very slowly, essentially preventing others from accessing the file. While stopping short of a full denial-of-service attack, the method could substantially clog the target computer's Internet connection.

    Ok, this will solve the problem of needing a very fat pipe to disconnect one user. To disconnect 1 PC from the network they need 10 connections (most peer to peer software have a default limit of 5 to 10 simultanous connections allowed.

    Number of napster/gnutella/imesh/audiogalaxy/etc/etc users : well over 10,000,000

    Suppose they need 10 packets to keep a connection alive eache minute. lets say that is possible in 10x40 bytes = 400 bytes per minute. times 10Million =400Mb/min= 6.6Mbyte /sec ~= 50Mbps. Quite a lot if you have to fill it up and use it, but very well possible. (Their ISP will love it)

    From another reply to the same root: ...an analysis of napster showed that well under 10% of users provided the bulk of files (75%+)

    (/10)=5Mbps to lock out a big percentage of the files.

    There are strategies agianst them, called out a lot here: -Block out the IP range of RIAA. --> Very hard for normal users. and they are the big target for this. (HaX0Rs will find the files anyway, i.e. on IRC) -Increase the allowed connections in the P2P software. --> Most users will stick to the defaults. If the RIAA is serious the builds of the software will increase this and build some minor anti-slow-download stuff in. This means the RIAA will need more and more bandwidth. (If you increase the number of allowed connections from 10 to 100 they will need a (1)lot more bandwidth.) -Have more p2p users on your network. This is the most realistic: more users -> more files -> more users -> better armed against a DOS.
    -Have a freenet like client they are more resitent agains this kind of attack. -/. required item: Have them DOS my beowulf cluster... gna gna gna. I am a little supprised freenet is not named here more. Freenet is resistent to the kind of attack thay name here. (isn't it?)

  286. I think you got it backwards by budgenator · · Score: 2

    The incomming traffic is mainly getting a directory listings and requesting files, this is by nature small stuff. Look at the top of your web browser you send maybe 100 bytes to request most webpage and the server sends back about 100K.

    With file sharing Joe Luser is the server, the RIAA-enforcer program sends Luser a couple hundred bytes and he sends back a couple meg. Blocking them at the firewall doesn't stop the couple 100 from slowing down the pipe, but the effect is minimal unless thousands of requests are made a second. Stoping the couple of Meg going back upstream however has a big effect on speed, especialy considering that most pipes are optimised for download not up load.

    Since Joe Luser is probably using Windows, and not going to have a real firewall, he's going to get real angry in no time at all. Windows users typicaly expect their 'puter to respond right now, when the computer is servicing a request that he's not aware of and doesn't respond immediatly to his keyboard or mouse, he thinks it's broken. Sooner or later they are going to realise that its the RIAA that "broke" their mmachine and feel attacked.

    In order for them to DDoS your 'puter they are going to have to use a whole bunch of IP addresses "attacking". It doesn't take a rocket scientist to figure out that the next-generation file sharing programs are going to include a throtling mechanism to keep them from sucking up to much bandwidth upstream making the RIAA stratagy un-workable.

    Also there is nothing to keep people from putting a small garbage file to attract the RIAA that's only 1 K long, and naming it as if it was a copyright protected work just to confuse them.

    --
    Apocalypse Cancelled, Sorry, No Ticket Refunds
    1. Re:I think you got it backwards by Anonymous Coward · · Score: 0

      If the requests are blocked at the firewall, regardless of that packet-filtering router's capability, then there will be no upstream data - the sharing program will never see the request and obviously won't respond. Therefore, as cloudmaster said, there will only be an issue with connect time for clients. That'll slow down the lazy pirates, but most won't care because they're used to waiting a while for peer's machines to respond.

    2. Re:I think you got it backwards by cloudmaster · · Score: 2

      The incomming traffic is mainly getting a directory listings and requesting files, this is by nature small stuff. Look at the top of your web browser you send maybe 100 bytes to request most webpage and the server sends back about 100K.


      Umm, that was my point. If the firewall works, then it will stop requests from ever getting to the server. All the RIAA can do is send a lot of small requests to the server, which will never get past the firewall that's blocking all traffic from them. I suppose that you'd have a point if this hypothetical firewall didn't actually stop any traffic, but then it wouldn't be a firewall. I made the asusmption that, when the poster said "block at my firewall", his firewall would actually block the traffic.

  287. turn about is fair play by Anonymous Coward · · Score: 0

    The Yahoo article notes that RIAA members will be setting up their own 'sharing' services in the near future.

    So (aside from whatever fees they charge,) what's to discourage people from downloading files, or accessing anything on these sites, on the same slowly slowly basis?

  288. Price of CD's is out of line by pnutjam · · Score: 1

    Isn't it strange that you can buy the exact same music on a cassette (maybe not anymore, but a couple years ago) and pay about 2/3 of the price you pay for a CD, when cassetes are actually a more expensive medium then CD. Obviously CD's are overpriced and could be sold for considerably less and still make a considerable profit.

  289. Re:Locust Abortion Technician by LinuxHam · · Score: 2

    Unfortunately, I never made it to a Surfer show. I was born in '70, and really started getting into this stuff when I was 13. Then, as I learned about more bands like Joy Division, New Order, Big Black and Wedding Present, it was always in the context of "That was so-and-so. Too bad broke up last year." I had to resort to seeing things like the Pixies/Love and Rockets/Cure triple-bill and the Peter Murphy Deep tour. I was lucky enough to catch the PIL/Sugarcubes/New Order (Technique) triple-bill in '89, and for the perfect birthday present, my wife and I saw Bauhaus in Philly in 98.

    I'm not really pissed off about Touch 'n Go, the guy absolutely does deserve to make money. I was just throwing it out there that indie labels aren't necessarily angels. I closed with Albini's diatribe since it very clearly outlines how badly the recording industry assrapes listed artists. I don't think I could ever be pissed off at Touch 'n Go :)

    --
    Intelligent Life on Earth
  290. Re:The RIAA does NOT have that right - they are ly by Anonymous Coward · · Score: 0

    Exactly. If you use your computer to browse web sites in other states, you are using your computer in interstate communication.

  291. But that is illegal. by mindstrm · · Score: 2

    Yes. But that sale was illegal; it was fraudulent.
    I realize that we're getting into splitting hairs over the definition of 'illegal'. I suppose it's not a 'felony' or whatever y'all call it in the US.
    In my mind, if I can have someone in court over it, and the courts will punish them, then whatever it's about was ILLEGAL.

  292. You too can be a copyright holder by mrogers · · Score: 3, Interesting
    People who oppose extensions to the powers of copyright holders often forget that "copyright holders" doesn't just mean big corporations - "copyright holders" can refer to any schmuck who can string a semi-coherent sentence together. Yes, I'm talking about YOU!

    YOU TOO can become a copyright holder, and YOU TOO can have the right to break into ANY COMPUTER YOU LIKE to look for evidence of copyright infringement and then DO WHAT YOU LIKE TO THAT COMPUTER! Don't worry about actually FINDING PROOF of copyright infringement - once you've wiped their hard disk, how are they going to prove they DIDN'T have a copy of your data?

    Sounds too good to be true? Just follow these simple steps:

    1. Write some half-baked nonsense and post it on a well-respected weblog. Be sure to include a copyright statement. Hey presto... you're a copyright holder!
    2. Pick a target computer. Maybe there's a political viewpoint you want to censor, or a business you want to destroy? Perhaps you want to read the personal mail of the head of a recording industry cartel? Or maybe you just want to find out the medical records of a friend or co-worker. These activities would be called "hacking" if they were done by an ordinary person, but remember: you're no ordinary person, you're a copyright holder!
    3. There's a pretty good chance that someone uses your target computer to browse the web. And there's a fairly good chance that they read the same well-respected weblog where you posted your copyrighted material. Well then, there's a chance that those bastards are infringing your copyright! Better break in and find out. They've probably got a copy of your data in their browser cache RIGHT NOW! (By the way, don't worry too much about the definition of "a fairly good chance" - you don't have to waste time with any of that pesky legal stuff like probable cause. You're not a policeman, you're a copyright holder! Or maybe you ARE a policeman. Well that's OK - policemen can be copyright holders too!)
    4. Hack into the target computer and look for evidence of copyright infringement. Criminals are devious people so you should look everywhere for evidence: /etc/passwd is a good place to start. If you find any evidence, or even if you don't, wipe the hard drive to prevent any future infringement. This would be criminal vandalism, or even terrorism, if it was done by an ordinary hacker. But you're no ordinary hacker. That's right... you're a copyright holder!
    The copyright in this comment belongs to Sony Music Corporation. Copying and distribution in any form, electronic or otherwise, is strictly prohibited and will one day be retroactively punishable by death. You have been warned.
  293. Re:No, this is scary, not funny. I mean that. by kz45 · · Score: 0

    if it was a minority that was complaining before, it shouldn't have mattered, because it must not have been that big of a problem. Napster was on every new channel/newspaper (time magazine) you can think of. That is why there are so many people complaining about the RIAA now. The ability to "pirate" their material was amplified 10 fold, so that even the average joe blow user could get their hands on free music.

    Even so, IRC has been out for YEARS before napster, including FSERVES with a proliferation of "pirated" music/software. The record industry and the BSA have shut these servers down left and right, but still, there was never a real outcry until napster.

    It's just human nature. This is going to happen with anything. (It's the same reason people hate LARS from metallica, yet he's not passing laws that impede on our freedom). When you are getting something for free, and someone takes it away, and makes you pay for it, you are going to get pissed off. (even trying to legitimize it)

    The record industry's control over their own music is identical to certain software licenses on the internet. I hate to get off topic here, but think about this: Why should things like the GNU software license be followed, if a person who uses another license (copyright) is considered wrong. It would equate to me taking gnu sotware, and using for my own commerical gain in a closed source project. People in the slashdot community would be up-in-arms, even getting the law against me. Sounds JUST like what the RIAA is doing.

    I will admit, the RIAA has taken it too far with their DMCA and SSCA, but they do deserve some control over their own property.

  294. maybe they started already? by jlseagull · · Score: 1

    as i go onto morpheus the get some more bela fleck live shows it's showing 18.1GB of files shared. this is a network that usually has into the 100's of TB(!) available.

    something's going on here...

    --
    'Be always mindful, even when ditch-digging.' --D. T. Suzuki
  295. citizen's arrest limitations? by Anonymous Coward · · Score: 0

    Does this apply merely to criminal cases? civil cases? which? any restrictions?

    1. Re:citizen's arrest limitations? by uslinux.net · · Score: 1

      No sure, but I believe any case. I'm *sure* it applies to criminal cases - you may invoke your right to a citizens arrest at any time (although I imagine most criminals would probably "put a cap in yo' ass" before they'd be arrested - so the usefulness of that law in modern times is somewhat flawed). That doesn't mean you necessarily have the right to *charge* someone with a crime (to do that you need to be a party to the crime or a lawyer), but you can arrest them and drag their sorry butt down to the local police station.

  296. On-line free books by Anonymous+Brave+Guy · · Score: 2
    Take a look at the publishing industry. The book world is also driven by marketing, but to a much lesser extent. If you publish a book, you can expect that it will provide revenue independent of the amount of money you spend to hype it. That's because the book industry is actually about selling the content instead of the hype.

    Curiously enough, some people have published full editions of technical books on-line. Bruce Eckel's well-regarded "Thinking in C++" is available in its entire form at his website. He apparently regards this as a great idea, because people like to have a hard copy of a book like that. Having seen that it's actually pretty good, a lot of people go out and buy it. His sales went up when he put it on-line.

    Compare and contrast with the music industry, who keep claiming that their sales are down. Gee, why could that be? :-)

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
  297. Re:No, this is scary, not funny. I mean that. by Anonymous+Brave+Guy · · Score: 2
    But the problem is that this is NOT a technological problem, this is a social problem.

    I was about to post the exact same thing.

    I don't quite agree with the reasoning, though. People don't just copy the music because they want to. They copy it because they know they're being outrageously ripped off by the record companies' pricing of CDs, and so they treat those companies with the contempt they deserve.

    If the record companies were more reasonable -- making a fair profit, but not an insulting one -- then I believe that most people would be prepared to buy CDs. Look at shareware; for all that many people are on the Open Source and/or Free Software bandwagons, many of us are still prepared to pay the small amounts asked for a good bit of shareware.

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
  298. What's next...? by xl4bs · · Score: 1

    I'm just waiting for the next (very amusing) idea the smart brains at RIAA come up with. It appears that it can't go crazy enough with them and so I wouldn't be surprised if they would come up with a new campaign to shut down the internet :P RIAA for President...


    l4bs
    http://terroristornot.l4bs.com/

    --
    :: xl4bs ::
  299. Oh... by Rogain · · Score: 1

    The lawyers are drooling over this one. A chance at RIAA cash, wow!

    --
    The current Slashdot moderation system is made by gay communists!