Slashdot Mirror


Ask Ed Felten About Watermarking Analysis And More

Dr. Edward Felten is in a funny position -- or perhaps not so funny. He's the Princeton researcher who took up the challenge posed by the music industry to find flaws in the SMDI watermarking scheme, but didn't enter into the 'no-telling' bargain (here's the click-through agreement [pdf]) which would have made him eligible for a reward, so wasn't bound by non-disclosure terms. When a scheduled academic presentation on the weaknesses [pdf] that he and his colleages found in SDMI became the object of lawsuit threats from the RIAA, and caused him to cancel the planned presentation, Felten decided to turn the tables, and in cooperation with the EFF, sue them instead, for interfering with his scholarly research. Though he did eventually get to present his research, the legal action is still going. Dr. Felten is at a hearing today in Trenton, NJ, but he's agreed to answer questions from Slashdot readers. Please confine your questions carefully (one per post), and we'll pass the highest-moderated ones on for his answers.

191 comments

  1. Did you use Napster? by glrotate · · Score: 0, Offtopic

    Or one of it's alternatives?

    1. Re:Did you use Napster? by Anonymous Coward · · Score: 0

      Noich Noich Noich
      Schmokin weed schmokin weed
      Doin coke, drinkin beers

      Packerass my good man,
      time to kick back, drink some beers, and schmoke some weed!

    2. Re:Did you use Napster? by Anonymous Coward · · Score: 0

      I think it's
      pack a 'rettes my good man
      because Jay's buying a pack of smokes.
      Took me many years of watching that movie to realize that that was what he said.

    3. Re:Did you use Napster? by Anonymous Coward · · Score: 0

      Score 1? Where are you guys getting your crack?

      NR

  2. Mathematical feasability by Mdog · · Score: 4, Redundant

    Do you believe that what the RIAA is trying to do is mathematically feasable, and that their attempt was merely the wrong way of going about the problem, or do you believe that what is being attempted is fundamentally impossible?

    1. Re:Mathematical feasability by Gaijin42 · · Score: 0, Offtopic

      There is no such thing as moral feasability. Moral justifiability perhaps.

      But this guy is a scientist, not a philosipher or priest :)

    2. Re:Mathematical feasability by Eloquence · · Score: 2
      Do we believe we can defeat any audio protection scheme? Certainly, the technical details of any scheme will become known publicly through reverse engineering. Using the techniques we have presented here, we believe no public watermark-based scheme intended to thwart copying will succeed. Other techniques may or may not be strong against attacks. For example, the encryption used to protect consumer DVDs was easily defeated. Ultimately, if it is possible for a consumer to hear or see protected content, then it will be technically possible for the consumer to copy that content.
      from here.
    3. Re:Mathematical feasability by Anonymous Coward · · Score: 0

      Before reading about PKI & limited by knowledge of symmetric keys, I never thought that encryption/decryption were possible without the
      receiving party knowing your key.

      Public/Private Key Technology make the seeming impossible possible. Now is there any technology they can exploit.

      Hmm.

  3. How scary is the RIAA? by Philbert+Desenex · · Score: 0, Troll

    I've heard at various times that the RIAA has some mob connections (you know, like the Teamsters, wink wink, nudge nudge). Sure, threats of lawsuits are enough to keep a fellow up late at night, but how scary is the RIAA, really?

  4. Question regarding precident by Carmody · · Score: 3, Offtopic

    If you win your lawsuit, what type of precedent will it set? Will it encourage others to sue to regain their freedom of speech? Was this idea something you thought about when you were deciding upon filing charges?

    --
    God is real unless declared integer
    1. Re:Question regarding precident by elem · · Score: 1

      How would you compare your stuggle against the RIAA to the Adobe vs. Dmitry Sklyarov, do you think that there is a comarison?

    2. Re:Question regarding precident by Anonymous Coward · · Score: 0

      A better question is; "What if you lose?". For better or worse laws in this country have always been skewed to the benefit of big business. If the RIAA wins do you see the academic landscape in respect to publishing research changing dramatically? Do you foresee a future where scientists have to accept the idea that they have to continually look to big business for permission before their publishing research? Or will this be seen as totally unacceptable and be a continual point of contention that others will fight in the future

  5. Best case outcome for your lawsuit? by wmshub · · Score: 5, Interesting

    What is the best case outcome for the lawsuit that you and the EFF have started. Is it possible that the DMCA (or parts of it) can be found unconstitutional? Or would a "best case" just be a weaking of the DMCA, where for certain purposes people would be allowed to discuss their findings regardless of the DMCA.

    Also, how likely (in the opinion of you or your lawyers) are the different possible outcomes of this case?

    1. Re:Best case outcome for your lawsuit? by gnovos · · Score: 2

      (Sorry, I had to do it)

      What is the best case outcome for the lawsuit that you and the EFF have started

      Thats easy: the *best case* outcome would be that a fleet of freedom-loving super-model alien beings, in awe of our free operating systems and just legal system, land on Earth and hold a celebration in honor of Dr. Felten and the EFF thereby bringing peace, wealth, flying cars, and of course, love to all of humanity. Unlikely? Perhaps... But definitly the best outcome all around. :)

      --
      "Your superior intellect is no match for our puny weapons!"
    2. Re:Best case outcome for your lawsuit? by Anonymous Coward · · Score: 0

      Doesn't really sound like the best for everyone though, as im still going to have to wake up the next day and go to my lame ass job..

  6. What do you further hope to accomplish by ruebarb · · Score: 3, Redundant

    As of today, I understand that you are able to give presentations based upon the flaws you've discovered in digital watermarking. In essence, you have won this battle...However, you are still continuing your lawsuit against the RIAA.

    What do you hope to accomplish further, and in your opinion, what could be the best possible outcome from your lawsuit against the RIAA.

    --

    ----------
    ah honey, we're all resplendent - Bill Mallonee
    1. Re:What do you further hope to accomplish by Relic+of+the+Future · · Score: 2

      "What do you hope to accomplish further."

      I thought that, when the annoucement was made that he could present the research, that Felton (or his lawyers or someone) came out and said that it was specifically to form a precedent, so that other researchers couldn't be bullied/hassled/hampered by similar attacks.

      --
      Those who fail to understand communication protocols, are doomed to repeat them over port 80.
    2. Re:What do you further hope to accomplish by Anonymous Coward · · Score: 0

      The RIAA stated that they won't sue over this particular paper, however they reserve the right to sue/harass Felten or anyone else in the future.

      Felten wants the court to declare that the RIAA can't harass them over any research into copyright protection, ever.

  7. Re:weaknesses? by apathy21 · · Score: 0

    nevermind...i'm stupid...pull that post :) i overlooked the linked pdf on this

  8. If you were the RIAA by Mdog · · Score: 5, Interesting

    If you were in the position where you were trying to get a handle on rampant piracy of your work, what (digital) means would you pursue to secure your work?

    1. Re:If you were the RIAA by cavemanf16 · · Score: 1

      Please explain to me how an annual increase in sales of CD's and other media shows a level of "rampant piracy." Despite the fact that Napster, Gnutella, KaZaA, and other P2P networks have millions of copyrighted works flying around on them, there is absolutely no way to definitively put an amount on how many people have illegally profited from these works by reselling them as their own production. I'm pretty sure that the 95% software 'piracy' rates in China and other Eastern Asian countries by big businesses over there, far outweighs a bunch of American teens sharing the latest Britney Spears top-40 hit that they wouldn't buy an entire CD for anyways. Sorry this argument may be a little thin, but your question is just simply irrelevant, given its obvious bias without supporting facts.

    2. Re:If you were the RIAA by Anonymous Coward · · Score: 0

      I have a friend who works for the RIAA. Her name is Nakoruru. Here is an account of when I first me him or her. I'm still not sure.

      "Nakoruru, what is that, Indian? Go make me a slurpee, Nakoruru, and give me one of those little "wassup" ligthers, too. I love that shit. Is it true you people eat your own children? I think I'll pass on that hot dog, Nakoruru. I don't want to be muching on little Nakoruruette. Hey, what are you doing? Why are you unzipping your pants? Put your pants back on! Oh ... I get it. "Little Nakoruruette." Ha ha. Cripes, look at that thing. Looks like a fleck of curry. How do you wack off with that, wrap that little dot on your head around it? Okay, I gotta go Nakoruru. See you tomorrow morning when I get my paper and coffee, ya little sand nig you."

    3. Re:If you were the RIAA by Anonymous Coward · · Score: 0

      Easy. Don't publish.

    4. Re:If you were the RIAA by Anonymous Coward · · Score: 0

      He didn't say there was rampant piracy, he said IF. You know, hypothetical and all

    5. Re:If you were the RIAA by Anonymous Coward · · Score: 0

      He was using "If" to refer to the possibility of Ed Felten being in the position the RIAA is in, not whether or not there was 'rampant piracy', so yes, he's still off base, and yes, you are still a retard.

  9. Why did you do it? by Exmet+Paff+Daxx · · Score: 0, Troll

    Dear Ed,
    It's clear to almost everyone that your lawsuit was nothing but an attempt to set up the RIAA. The RIAA has been nothing if not exceptionally clear about the fact that they never intended nor attempted to suppress anyone's research.

    My question is: Why? What was your actual motiviation? Were you just trying to cause a ruckus, or were you attempting to further some political agenda?

    --
    If guns kill people, then CmdrTaco's keyboard misspells words.
    1. Re:Why did you do it? by Anonymous Coward · · Score: 0

      Will some moderators please censor this obvious troll?

      If you read timothy's article, it is quite clear: Felten == good, RIAA == bad.

      Suggesting otherwise pollutes slashdot, and must not be permitted.

    2. Re:Why did you do it? by powerlord · · Score: 2

      I have the feeling I'm feeding a troll but,

      It's clear to almost everyone that your lawsuit was nothing but an attempt to set up the RIAA. The RIAA has been nothing if not exceptionally clear about the fact that they never intended nor attempted to suppress anyone's research.

      With all due respect, if someone received a "Cease and Desist" letter demanding they stop doing something, such as preset a paper at a conference, or else face litigation from an exceptionally large and well funded organization with a possible (ie. unproven in court) leg to stand on, most people (and I'll grant you may be the exception) would not present the paper. This could have (most would argue would have) a chilling effect on research. I think it is unethical to say the least to demand this sort of thing and then back-peddle once their objectives have been completed (he didn't present the paper as they demanded). To notice that it might not have been in their best interest and claim "Oh we were just kidding", is a tad insulting.

      If they had wanted to be exceptionally clear that they wouldn't sue, then they should never have threatened to.

      --
      This space for rent. All reasonable inquiries will be entertained at proprietors discretion.
    3. Re:Why did you do it? by Anonymous Coward · · Score: 0

      and if you take timothy's word as the gospel then it is quite clear: you == stupid!

    4. Re:Why did you do it? by markmoss · · Score: 2

      To me, it looks like the RIAA attempted to use the threat of a lawsuit to attempt to deter Dr. Felten from presenting his results, even though they knew there was no basis for such a lawsuit. This attempt was only temporarily successful. I have heard many other instances of threats of unfounded lawsuits being used "tactically".

      My question is for Dr. Felten's legal team, not himself: Is there any precedent in American law for collecting damages for legal threats made without actual intention to sue or any good reason to think a suit could be successful? Would you recommend legislation to make it possible or easier to collect such damages, e.g. for the cost of a lawyer to check out the threat and delays incurred in planned activities while studying the matter?

    5. Re:Why did you do it? by Anonymous Coward · · Score: 0

      > Suggesting otherwise pollutes slashdot, and must not be permitted.

      Censorship good...free speech bad...

      NR

    6. Re:Why did you do it? by Anonymous Coward · · Score: 0
      The RIAA has been nothing if not exceptionally clear [riaa.org] about the fact that they never intended nor attempted to suppress anyone's research.

      Since you seem to be a goon for the riaa, if the above is true, why did he get sued?

  10. A better way by Yiddishkite · · Score: 1

    So, without revealing anything revealing, is there a better way to please the RIAA without sacrificing user-friendly concepts like "fair use" ?

    --
    "Time flies like an arrow. Fruit flies like a banana." - Marx
    1. Re:A better way by Anonymous Coward · · Score: 0

      Do your butt cheeks clap when you fart?

  11. Research and its applications by EFGearman · · Score: 5, Interesting

    Do you feel that research, your specific research and/or research in general, should be presented in an 'open' forum, if said research is paid for, in part or in whole, with tax-supplied funds?

    This gets down to a licensing issue, on the public being charged twice for the research and it's benefits.

    Eric Gearman
    --

    --
    Atomic batteries to power! Turbines to speed!
  12. Re:Control is good by Anonymous Coward · · Score: 0
    Moderators are stupid, by the way! As clearly shown by this, and many hundreds of moderations every day that do not make any sense.

    Q: Do you think that people should need a doctorate in order to moderate on Slashdot?

    Q: In your opinion, how do you feel about the restrictions that the RIAA imposed upon you regarding SDMI after you did your research and found problems?

  13. Expectations/Precedent by LaNMaN2000 · · Score: 3, Redundant

    I wish you the best with regards to your suit against the RIAA; their intimidation tactics are despised by almost everybody in this community. But, though IANAL, I was wondering what precedent there is for this type of lawsuit. What damages have you suffered as a result of the RIAA's actions (you were ultimately able to present your research) and what resolution do you ultimately hope to attain? Do you really believe that such a goal is within reach, given the DeCSS/Napster rulings?

    --

    ByteMyCode.com: A Web 2.0 code sharing community.
  14. Academic Integrity by efuseekay · · Score: 5, Interesting

    Hi Prof Felten,

    As an academic myself, I am gratified by your colleagues and your decision to publish your findings instead of claiming the $10000 prize (personally, I find the $10000 "prize" for the HackSDMI challenge measly, and even bordering on insulting.).

    The fact that you are suing the RIAA for intefering into your academic activities indicates your stance on the issue of academic freedom to research. However, the RIAA has deep-pockets, and the fight has just begun. It is not inconceivable that in the future, the academia may come under the control of rich corporations manipulating research for their own selfish ends.

    So, my question is, do you see a bright future for a "free academia" or do you see a academia that willi increasingly be locked down by corporate interests and their lawyers/lobbyists?

    --
    Mode (3) smart-aleck mode. Press * to return to main menu.
    1. Re:Academic Integrity by Stiletto · · Score: 2, Insightful

      It is not inconceivable that in the future, the academia may come under the control of rich corporations manipulating research for their own selfish ends.

      It already has! In fact, I graduated from Pepsi University several years ago. Sure, it wasn't actually called "Pepsi University" but I challenge anyone to find a Coke vending machine anywhere on campus.

      Why do professors use different books for each semester of classes? Does the field of calculus really go through revolutionary changes every six months, enough to warrant selecting a whole new book to teach from? Of course not, but if you used the same book year after year, the publishers (who apparently own the professors) wouldn't be able to continuously rake students over the coals for new $100 textbooks.

    2. Re:Academic Integrity by CtrlPhreak · · Score: 1

      Pepsi University? Sounds awfully alot like Penn State. PepSi University, Blue and White colors, no coke on campus at all (of course why would I want anything other than my trusty Mountain Dew?).

      --
      WikiAfterDark.com It's a sex wiki, go now!
    3. Re:Academic Integrity by rtkluttz · · Score: 1

      The parent is a good question but IMO centers too heavily on just the academic ramifications of what the RIAA is trying to pull. This goes much much deeper. The results of this, if the RIAA were to go unchecked, would touch each and every person in the United States. Fair use rights would be trampled by any person anywhere with even the remotest claim to intellectual property. This is just the beginning. I would like to see this question posted if it were slightly re-phrased to cover the "big picture" of how this will eventually affect EVERYONE... not just researchers or computer geeks like us.

      --
      Digital is, by definition, imperfect. Analog is the way to go.
    4. Re:Academic Integrity by Paracelcus · · Score: 1

      Hey!

      Iv'e got an idea, how's about some poor white trash crackers, like me cause the same kind of trouble that the eminent Professor did? They can't get anything from guys like us, we can gum up the greedy bastards forever. But we need guys like the Prof. for guidance as we are much too busy with drugs, booze and prostitutes to notice anything like this

      --
      I killed da wabbit -Elmer Fudd
    5. Re:Academic Integrity by OmegaDan · · Score: 2

      I am completing a degree at UCR which does the same damn thing ... Im alergic to pepsi (but not coke), I've often wondered if I could sue under the Americans with Disabilities Act or something :)

  15. Lawsuit by JASegler · · Score: 3, Interesting

    In looking at the lawsuit, it looks like to me that it hinges on the facts that the click thru agreement did not apply if you never had any intention to try to collect the reward. If that is held up in court. Does your legal counsel believe that the RIAA's fallback assertion of we (RIAA) never meant to sue you hold up in court?

    Or is it more likely that the judge will actually tackle the real issue of the DMCA stifling research (and now foreign visitors presenting papers re: Sklyarov)

    -Jerry

    1. Re:Lawsuit by Marasmus · · Score: 2

      I think you bring up possibly the most intriguing point of these lawsuits - How will the Judiciary react if given the option to opt-out of these lawsuits and the heavy hand of the RIAA? Will they give in and buckle to the big industry, or maintain their expected neutral poise and address the issues of civil liberties being threatened by the DMCA and its abuse?

      In many ways I see the answers to these questions being more important to us in the long-run than the answers to the lawsuits themselves. If the Judiciary doesn't even give citizens a chance to defend their rights, all of our future battles will be over before they begin.

      --
      .... um, i lost you after "0110100001101001".
  16. Flawless technology, how close are we? by vocaljess · · Score: 1
    It seems that whenever a new technology is implemented, there are automatically hackers and every day people finding ways to get around security protocols. For example, in my area digital cable was considered completely secure, that there was no way to pirate free access. Then, of course, people figured out the loopholes and there are illegal boxes all over town.

    Do you think the music industry will ever perfect security measures on cds and other media, or will there always be some flaw to be exploited? Will research such as yours perhaps lead to impregnable copy protection, and is that a good or bad thing in your opinion?

    --
    "Why is all this crap here?" -- 4-year-old Brandon
  17. A couple questions by InterruptDescriptorT · · Score: 5, Interesting

    Dr. Felten, thanks for your time to answer our questions. We do appreciate it. :-)

    First, when you started your research, did you ever expect that you would be at the forefront of a legal battle to keep academic speech free and protected? Do you ever have any misgivings about taking a high profile in this matter? I know there are some researchers (some of my colleauges included) who shy away from anything legal and would rather just do work that might not be as controversial. It's good to see you getting involved and make sure that our rights as academics are preserved.

    Secondly, what has it been like working with the EFF? I have a great deal of respect for them and have been a member for a couple of years now. I am just curious as to the 'behind-the-scenes' process that you and the EFF lawyers have been persuing as this case pans out.

    --
    Karma: Excellent Birds (mostly as a result of listening to Laurie Anderson)
  18. Why? by joenobody · · Score: 5, Interesting

    Why'd you do it? I understand why it had to be done - the onerous law can only be harmful - but what made you decide you, personally, should get involved like this to change it? I've kept and eye on the case and you've been very smart about how you're doing everything, so don't try to sneak off with a "it just happened this way."

    --

  19. Advise For Others In Your Situation by UberOogie · · Score: 5, Interesting
    You've had the good fortune to have the support of a major educational research institution in your fight to publish your research. What would your suggestions be to someone in the same legal situation without the resources at your disposal?

    Thank you

    --
    "Enough of this wretched, whining monkey life." -- Marcus Aurelius, _Meditations_, Book 9, 37
  20. Wind direction by Anonymous Coward · · Score: 0

    Why did you do a 180 degree turn twice: publish, not publish, publish? I can understand one change but not two.

  21. Was this a trap? by www.sorehands.com · · Score: 5, Interesting
    Was part of the intent behind your actions to trap the RIAA into making a threat so that you could attack the DMCA? Or was the threat from the RIAA unexpected?


    I am not talking about breaking the watermark itself, but the planned presentation and then you not presenting because of the RIAA threat?

    1. Re:Was this a trap? by bnenning · · Score: 2

      I'd be curious to know too, but this may not be a good question to ask while the litigation is ongoing.

      --
      How to solve most of our problems: 1.Lots of nuclear plants. 2.Cure aging.
    2. Re:Was this a trap? by Anonymous Coward · · Score: 0

      In other words, do you take plastic? Because if thats true, you're hired.

  22. Re:weaknesses? by Anonymous Coward · · Score: 0

    Shut up, dumbass. Moderators, please mod both parents to -1.

  23. Crypto Protection vs Copyright issues by Alien54 · · Score: 3, Interesting

    Given the attempts of the RIAA to ensure encryption of music products, etc. where do you stand philosophically on the issues of Copyright protections, etc?

    --
    "It is a greater offense to steal men's labor, than their clothes"
  24. Is watermarking safe? by toupsie · · Score: 2, Funny

    I was always told in my computer studies that water and electronics do not mix. So if you were to mark data with water wouldn't that actually damage it to the point that it would be useless to the user?

    --
    Strange women lying in ponds distributing swords is no basis for a system of government.
    1. Re:Is watermarking safe? by Derek · · Score: 1

      I'm pretty sure the water is distilled (so as to NOT conduct electricity) and that the whole watermarking process is carefully implemented by a crack team of RIAA engineers! ;-)

      -Derek

    2. Re:Is watermarking safe? by su-geek · · Score: 1

      Distilled water will still fuck electronics up, although you can use deionized water with electronics. One of my friends who is a laser geek uses deionized water to cool is Yag laser.

      Adam

  25. Lessons to Learn by eAndroid · · Score: 1, Insightful

    Groups such as the MPAA and RIAA are making it a scary time for people invovled with technology. Obviously many decisions made now will have great effects on the future, very possibly in bad ways. From your experiences what do you think is the best way to stop the threat from these organizations?

    --

    I can't spell or type, but that doesn't mean I'm unusually stupid.
  26. Experimenting with fear over your shoulder... by Anonymous Coward · · Score: 0

    How badly has the RIAA letter affected academia and how it operates? Do you see it getting worse if the Felten v. RIAA decision goes decidedly against you?

  27. RTFA by Anonymous Coward · · Score: 0

    Please confine your questions carefully (one per post)

    No one else seems to have followed this simple directive, but you are perhaps the worst offender.

    T

    1. Re:RTFA by Anonymous Coward · · Score: 0

      Yea, I find it amazing that in the article, it states one question. In his title of the post, he says, a couple questions, and proceeds to ask 2 questions. But he then gets modded a 5 for it?

  28. Academic Freedom by Anonymous Coward · · Score: 1, Insightful

    Dr. Felten, do you believe the big corporations are going to destroy academic freedom within the American education system? I'm currently enrolled in a major university and many big corporations openly participate and fund some of the class projects we do, as part of our education. One major concern of mine whenever we have these projects has always been whether my or my groups work will conflict with the interests of the participating corporation and will summarily result in the cancelation of my/our initial designs.

  29. Research Disruption vs. Precident Case by jgaynor · · Score: 4, Interesting

    It looks like since you weren't bound by an agreement you have every right to disclose your findings. The RIAA is saying your actions "would subject your research team to enforcement actions under the DMCA and possibly other federal laws."

    I understand the reasoning behind countersuing for disruption of research, but why would you choose this option over a direct countersuit to challenge the DMCA? Your victory could theoretically mean the end of the DMCA by setting a valuable precedent.

  30. Lockpicking and decrypting by rnd() · · Score: 5, Interesting

    There are people in the world who can easily pick the kind of lock that most of us have on our front door. Nonetheless, it is illegal to pick the lock in order to gain entry. However it is not illegal to write lock picking instructions, or to present a paper on lock picking.

    (now to my question)

    It seems that if laws against breaking and entering were not enforced, people (particularly those who wanted to protect themselves and their valuables) would be a lot more concerned about lock-picking. What do you think can (or should?) be done to enforce our existing copyright laws so that measures such as the one you are fighting will eventually be unnecessary?

    --

    Amazing magic tricks

    1. Re:Lockpicking and decrypting by oooga · · Score: 1

      Just as a footnote: in most states, it's not actually illegal to pick a lock to gain entry, although in most cases you could be busted for trespassing, I guess. It is illegal to own a lock-pick with the intent of using it illegally, and it is also illegal to use a lock-pick to burgal a house. Not really important, but just to clarify.

      --
      -- Nerds on toast in the new millenium
    2. Re:Lockpicking and decrypting by martyn+s · · Score: 1

      Your analogy is just as flawed as the analogy (and to often the equation) of copyright priveleges and property rights.

    3. Re:Lockpicking and decrypting by rnd() · · Score: 2

      The comparison I was making was between things traditionally thought of as property and the stuff that people use encryption to try to protect (if it's not property, what is it?).

      If you think the analogy is flawed, please elaborate. I would be interested to hear any intellegent commentary on the issue.

      --

      Amazing magic tricks

  31. How to balance circumvention research and security by sid_vicious · · Score: 4, Interesting

    Dr. Felten,

    I don't think that anyone on this site would argue for an instant that current law has had a chilling effect on researchers such as yourself. The government has forbidden legitimate research into security circumvention tools, essentially sticking its head in the sand and pretending that crackers and citizens of foreign countries won't continue security research themselves.

    That having been said, the events of September 11th really came as a shock to the system for a lot us here. Suddenly, the idea of someone, say, cracking Triple-DES and distributing the crack on the Internet seemed a little more scary than it did on September 10th. If someone (*cough*Al Queda*cough*) were able to read our military secrets, you can bet there would be a real loss of human life associated with it.

    Obviously, discussing flaws in SDMI and publishing a Triple-DES crack are two different balls of wax. So, the real question - do you think anti-circumvention legislation is *ever* warranted? Or is any legislation at *all* simply more sticking our heads in the sand?

    (proudly wearing my DeCSS t-shirt :-)

    --
    If it ain't broke, it doesn't have enough features yet.
  32. how has this affected you personally ? by cats-paw · · Score: 4, Redundant

    Everybody likes to talk about standing up for free speech, but many would rather sit on the bench than actually step up to the plate.

    How has this situation affected you personally ?

    Has it increased your level of day to day stress ?

    Do you lose sleep over it ?

    I'm referring both to your original decision to publish your work and your current legal effort.

    --
    Absolute statements are never true
    1. Re:how has this affected you personally ? by Anonymous Coward · · Score: 0

      Duh. It makes him feel like a badass.

  33. RIAA by mshomphe · · Score: 3, Interesting

    What has been the tenor of the lawsuit with respect to the RIAA, what has their attitude been? For example, has the RIAA offered concessions, or have they been confident in their position?

    --
    She sat at the window watching the evening invade the avenue.
  34. Public research by Chatterton · · Score: 2, Insightful

    Research has started as a public research for the good of everybody, everything public researcher discovered was made public. Now, we can see a trend that some public founded researchs get screwed because of some ridiculous patents or laws. Did you try to make some clear ruling about that with your case against the SDMI? What are your hopes about the results?

  35. What's your opinion of the RIAA & copy protect by oooga · · Score: 4, Interesting

    All of us here have our own opinions of the RIAA, copy protection, fair use, and the legal actions the RIAA has taken (mostly along the lines of Hillary Rosen must be atomized), but, as someone who has been directly affected by the RIAA's hubris, what's your opinion all this? Do you think the RIAA is legitimatly -- albeit illegally -- interested in protecting the interests of musicians, or do you think their loyalties lie with the producers and labels? Do you think they think they are really the good guys? Do you think they are after money or control?

    One more thing: what do you anticipate will be the end result of the intellectual-property fiasco? Will we be condemned to a world of SDMI and single-use music, or will fair use win out in the end?

    --
    -- Nerds on toast in the new millenium
  36. How much.... by KingAdrock · · Score: 2, Interesting

    At what point would you have said screw my convictions, I'm taking the money. 100k? a million? five million?

    No, really!

  37. Is copy-protection even possible? by mini+me · · Score: 3, Interesting

    It seems like every time someone creates a new method to protect copyright works, the protection is bypassed, sometimes within days. Everyone on Slashdot always says if you can hear it, you can copy it and that is very much true, it is just the nature of the technology we have today.

    From a technological standpoint, do you feel the RIAA is wasting thier time or do you think they will reach a certain level of protection that will be worth thier efforts?

    1. Re: Is copy-protection even possible? by schon · · Score: 1

      Bruce Schneier said it best:

      "Trying to make bits uncopyable is like trying to make water not wet."

  38. Is Copy-Protection Possible? by Sven+Tuerpe · · Score: 5, Interesting
    Dear Dr. Felten,

    From a scientific point of view, is there any evidence that technologies could be invented which enable producers of digital content to control how this digital content is used, and by whom? Should there be a difference between theory and real life, I'd be interested in an answer under real-world assumptions, that is, there is an Internet and people connect to it using devices fully under their own control.

    --
    http://erichsieht.wordpress.com/category/english/
    1. Re:Is Copy-Protection Possible? by siphoncolder · · Score: 1

      well, it's not about controlling content, but the idea of a quantum key/signature to control content seems rather feasible if we ever reach that threshold.

      see:
      http://slashdot.org/article.pl?sid=01/06/29/2023 24 2&mode=thread

      and check the linked story. it talks about quantum transmission.

      note: this may apply more to say, encrypting transmissions for military use that we wouldn't want, say, al-qaida sniffing & decrypting.

      --
      i'm amazed that i survived - an airbag saved my life.
  39. Do you think an unbreakable copyprotect can happen by Sonicboom · · Score: 2, Interesting

    I'm curious to what your take is on copy protections and the history of their circumventions.

    In my view it seems that no matter what copy protection technology comes out, someone makes something to circumvent and defeat it.

    Do you think there will there ever be an "unbreakable" protection scheme?

    And how easy/hard is it to "alter" an image or a sound clip to defeat it's watermark?

    Thanks.

    --
    [Connection closed by foreign host]
  40. Edward - your next project by Anonymous Coward · · Score: 0


    I loved you in part I & II - do you think you will have an increased or diminished role in Terminator III? I wondered if they'd focus more on you or the mother. I also understand that you've had some personal problems around Hollywood, and that they make want to downplay your part a bit. Why do you think you've been so successful at the Terminator movie, but haven't been able to branch out more? Was the role just made for you, or are you still looking for that majic script? Anyway, thanks for all the great fun! C-Ya in T-III!!!

  41. The impact of new legislation by f00zbll · · Score: 3, Interesting

    Since your encounter with RIAA, have you come across other researchers/projects that are hindered in real academic or corporate research? If so, what is the depth and range of the effect? If not, what do you see as potential unintentional implications, which legislators and companies have no considered, but is possible under the new copy protection laws?

  42. Advice by r.suzuka · · Score: 5, Interesting

    I am currently a student and my friends and I all have an interest in "hacking", both hardware and software. Many of the laws that have bound you in the United States will also bind us here in Japan due to the multinational nature of many corporations and agreements on Intellectual Property.

    Do you have advice for the curious student, perhaps someone interested in research or experiments similar to yours, but without any resources to assist him in a court of law? I have had a friend who received threats of a legal nature from a large company and he chose not to continue his research since he did not have the resources for a lengthy legal battle.

    To conclude my question, what would you recommend to the student who wishes to do as you have done, but does not have similar resources?

    Thank you.

    R. Suzuka

  43. Not a question! by James+Skarzinskas · · Score: 0

    Not a question, ignore this if you are planning to moderate me on that basis. I'm just saying, to this topic, any man who can stand up to these new communist IP laws is brave, and deserves a big pat on the back, like the doc here.

  44. Leave the country? by mocm · · Score: 3, Interesting

    Is it possible that scientist like Dr. Felton who are working in areas where they might come in conflict with the DMCA or similar legislature, will choose to work at non-US universities rather than subject themselves to possible lawsuits and imprisonment in the US.
    And in the same context might foreign scientist refrain from coming to conferences in the US for the same reason.

    --
    ***Quis custodiet ipsos custodes***
  45. Regrets? by thesolo · · Score: 3, Interesting

    Dr. Felten,

    As the old axiom goes, "Hindsight is 20/20". At this point in your battle, having become a public representative of academic freedom and constitutionality, is there anything you regret, any decisions you would have made differently if you could do all of this over again?

    As an avid slashdot reader & EFF supporter, I'd like to wish you the best of luck in your fight! I'm sure I speak for the entire slashdot community when I say that you are truly an inspiration to us all.

    -Mike

  46. IP and the Law by way0utwest · · Score: 5, Interesting

    Dr Felton,

    Any security protection will deter 80-90%of the people. Of the remaining people, 1-2% will not be deterred by anything and the rest will take advantage of the work of the 1-2%. Copy protection doesn't work in the digital world as well as it works in the analog world. It would seem that perhaps the laws governing the digitial world ought to be different from the analog world, perhaps even different for different types of digital "ideas".

    What is your opinion of the best way to implement copyright, patent, or other Intellectual Property protection for authors while protecting fair use rights of consumers?

  47. What would the realistic impact be? by DJFelix · · Score: 5, Interesting

    What do you think the realistic impact on illegal music trading would be if the technology you tested was implemented on a widescale basis now that your research is in the public domain?

  48. Re:weaknesses? by Anonymous Coward · · Score: 0


    Moderators, please put your little pee sprouts in my poop shoot and leave a load of nad nectar all over my butt-cheeeeeks.

    Thank you,

    Vincent Price

  49. Flanders? by FortKnox · · Score: 1, Offtopic

    Don't you think Flanders is a bad football coach?

    Yes, folks, I am indeed on a roll.
    I'll keep the bad jokes coming!

    --
    Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
    1. Re:Flanders? by Anonymous Coward · · Score: 0

      Boy, I tell ya, Flanders can't coach. He's taking the team nowhere!

  50. Dr. Felten, the Slashdot community wonders.. by Anonymous Coward · · Score: 0

    We all know that Natalie Portman is a beautiful up and coming young actress. However the hot item of debate is the following: Do you prefer Ms. Portman with or without hot grits? We thank you sincerely for your time and consideration with our question and eagerly await your response. Cheers.

  51. Fair Use by SirSlud · · Score: 3, Interesting

    A social question .. do you feel that the pervasion of technology as a means of security contributes to the number of people who feel comfortable with trying to do something illegal (ie, Napsterize, for example)? Do think disproving the effectiveness of current watermarking schemes is an incentive for the RIAA to combat piracy as a social problem, or simply as an incentive to develop more secure, uncrackable copyright protection schemes?

    --
    "Old man yells at systemd"
  52. Do you ever feel like... by john@iastate.edu · · Score: 3, Interesting
    ...Don Quixote?

    MicroSoft, RIAA, DMCA...

    You're playing with the big boys.

    Where do you see yourself ending up?

    • Karen Silkwood (dead),
    • Ralph Nader (increasingly an irrelevant parody of himself),
    • ??? (surely somebody was successful at windmill-tilting), or
    • Somewhere else?
    --
    Shut up, be happy. The conveniences you demanded are now mandatory. -- Jello Biafra
  53. Re:It's goot the hearings are in Trenton... by Anonymous Coward · · Score: 0

    Your gonna come down with the gay flu if you don't watch it.

  54. What about individual watermarking by imrdkl · · Score: 3, Interesting
    I've seen some discussion that leads me to believe that the RIAA will eventually want to sell music with individual watermarks, based on individual's keys. (Possibly from the National Identity Card key).

    Is it much more difficult (outside of mass distribution issues) to mark each distinct copy with a unique watermark, than it is to use a single generic watermark?

  55. Your opinion about false claims?` by Anonymous Coward · · Score: 0

    Dr. Felton,

    Recently an article was written by Jon Katz about an e-mail he received from an old friend in Afghanistan. It was obvious to just about everyone but Jon that the e-mail he described was either a hoax or a complete fabrication by Mr. Katz himself.

    What is your opinion of these events? Would you sign a petition to rid Jon Katz from Slashdot?

  56. Use of EFF Donations. by bstadil · · Score: 3, Interesting

    Assuming that you win the case and the court awards reimbursement of legal cost. I read that it is expected to reach up to $2M. How much of that is covered by donation and what will the money be spend on. Further efforts against DMCA or some of the newer Sept. 11 induced attacks of civil liberites?

    --
    Help fight continental drift.
  57. Effects of American "IP" laws on a global scale by Anonymous Coward · · Score: 1, Insightful

    Hi Dr. Felton,
    I admire you and your colleagues and consider you part of my group of personal heroes. My questions is this, with technology (namely the internet) serving as a the most accelerated vehicle for globalization, and with America leading the world in many technologies, and especially those concerning entertainment industries -- where IP is king -- how do you see the interests of Private parties such as corporations extending the reach of American law to the entire global market. For example, if it was a Russian, Chinese, Isreali professor who cracked the SDMI would the RIAA still have credible threats. I think they would, but I don't think they should. Can you talk a little about the domain of (US) IP law and the negative effect of IP laws in academic research, which has always benefitted from global networks.
    Thanks, Patrick

  58. My question, which I wrote is by Anonymous Coward · · Score: 0

    WTF? "Watermelon analysis"? Is this something I really need to hear about? Is this stuff that matters?

    Watermarking? Oh... Never mind...

  59. Edward, I need your help by Anonymous Coward · · Score: 0

    Any advice about relaying my desire to have anal sex to my wife? She's kind of a prude about it.

  60. "secure your work?"??? by orionpi · · Score: 1

    Try the work they contractualy bind artists to create. I might feel sorry for them if they accualy created it, or didn't cheat the artists.

    1. Re:"secure your work?"??? by $0+31337 · · Score: 0

      The only problem with this is that, like you stated, it's a contract. The artists aren't forced in to anything. I find it amusing that even though everyone across america is hellbent on "...defending the freedom that makes america great..." they still bitch about free enterprise and how, in this situation, record companies shouldn't be allowed to get as much money as they do.

    2. Re:"secure your work?"??? by orionpi · · Score: 1

      Freedom for the people, who or what gave corperations any rights? They don't even have the right to enter in to a contract under the Constitution. They are not even mentioned. Hmm, are corperations uncostituional?

  61. How did this happen? by DaoudaW · · Score: 5, Interesting

    First, congratulations on a nice piece of work!

    The RIAA seems clearly out-of-line in their legal attempt to stop the publication of your work. Hopefully your legal case against them will set usable boundaries for Intellectual Property disputes in future.

    My question is: How did the RIAA get themselves in this situation? It appears really stupid for an organization of their stature. Didn't they know where to find a good mathematician when they developed SDMI? With all due respect, surely you weren't the only guy out there who could solve this problem. Then to lay it out on the table and bet the world, it couldn't be read. It just all seems like a comedy of bad management.

    How did it happen???

    1. Re:How did this happen? by Anonymous Coward · · Score: 0

      They didn't hire a good mathematician because any good mathematician would have told them that what they were trying to do was impossible. So they hired a bad one.

  62. The beginning of a new age? by Vicegrip · · Score: 4, Interesting

    People have long decried the increasing trend in university scientific research whereby private corporations seem to be dictating more and more what should be the subject of academic interest.
    Now we have a private entity blazanly attempting to suppress research they didn't even finance because it shows critical weaknesses in their technology (even if they make the weak claim they have a disinterested motivation for their action). Not withstanding the incredible poor taste of telling a professor he can't present his work, after having asked for said research to happen in the first place, because the conclusions the work comes to aren't the ones desired. I am left with the bitter cold feeling that we are slowly slipping into a new era of corporate meddling where all manner of 'unpopular' academic research will find itself the subjects of lawsuits because some crafty lawyer has found a new way to extropolate the clauses of the DMCA in such a way that it protects his clients product in some fashion.
    What are your thoughts on this and how do you assess the willingness of america's academia to resist this trend?

    --
    Do not spread "09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0" over the internet, thank you.
  63. Time & Money vs. security by thundercatzlair · · Score: 1

    As a developer myself, I have given a lot of thought to protection schemes and what-not, but really feel like it may not be worth the effort at a certain point... Is there a "magical" formula that can approximate the amount of time and money that goes into protecting your software from being copied? I firmly believe that no matter how hard a person/corporation tries, they're never going to come up with something that can't eventually be cracked. I also believe that it is reasonable to spend some time and money on protecting your software, at least from the everyday user. The amount of people that can/do crack some of these protection schemes is small in relation to the total number of users in most cases. If a person/company can at least protect his software from the masses... then maybe that's good enough at a certain point? I tend to believe that's why the RIAA has really been up in arms about all of this... ever since Napster become so popular and so easy to use that all of the non-technical people could also pirate music. I guess my question is mainly "do you think it is worth the RIAA's effort and investment to protect music from being copied? And at what point would/wouldn't it be worth it?" Thanks, thundercatzlair

  64. What do you want to do with your life? by jack+deadmeat · · Score: 0, Offtopic

    Do you wanna rock?

  65. Re:weaknesses? by apathy21 · · Score: 0

    Why is it all the morons who post on here won't take credit for their posts? I made a simple mistake, but obviously I can admit to it and take credit for my post by not posting anonymously. Grow up people!!

  66. Reverse Engineering by Coniine · · Score: 2, Insightful

    Personally I feel very strongly that legislation banning or regulating reverse engineering is wrong in the moral sense. Scientists, mathemeticians and students of literature reverse engineer nature and the human mind. Reverse engineering a few man-made items seems to me to be part of the same pursuit of curiosity. Would you care to comment?

  67. Speak for yourself. by Anonymous Coward · · Score: 0

    Speak for yourself, you bastard. I don't need your annoying words in my mouth.

  68. If the watermark.. by sporty · · Score: 2

    If the watermark was of a tree falling in a forest, and no one was around to hear that tree, would it make a sound? Could be a good watermarking scheme ;)

    --

    -
    ping -f 255.255.255.255 # if only

  69. Credentials by Coniine · · Score: 1

    The DMCA seems to contains the seeds of a very dangerous concept - that of requiring credentials to perform research into cryptography. My position is that anyone who cares to has a right to perform "research" and to publicize the results. To limit research to guild members is incredibly offensive. Any thoughts or comments?

  70. So.... by hrieke · · Score: 2

    Where do you feel that academic research and law will go from here?
    Who do you blame for the current debacle? Those who drafted the law or those who in an over zealot reach asked for the law (and possibly wrote it)?
    And, what's your worst fear of these groups trying to legislate their commercial rights?

    Henry

    --
    III.IIVIVIXIIVIVIIIVVIIIIXVIIIXIIIIIIIIVIIIIVVIIIV IIVIIIIIIVIII...
  71. Why doesn't the RIAA hire people like you? by Lepruhkawn · · Score: 1

    Do you think that the RIAA's suit against you implies that they are themselves skeptical that they can create a good security scheme?

    --
    Jesus saves....And takes 1/2 damage.
    1. Re:Why doesn't the RIAA hire people like you? by Legion303 · · Score: 2
      I'll bet they do hire people like him. Hell, I'd work there if I could. Can you imagine the typical day of a "Content Control Coordinator"?

      CCC1: "Dude, they want us to come up with something stronger."
      CCC2: "Shit, haven't they got it through their thick skulls yet? It won't work."
      CCC1: "Let's tell them we need to spend more to come up with an effective system."
      CCC2: "Cool, time to buy some more Nerf guns!"
      CCC1 & CCC2 (unison): "Man, I love this job."

      -Legion

    2. Re:Why doesn't the RIAA hire people like you? by Anonymous Coward · · Score: 0

      Geez. Shades of http://userfriendly.org
      !!

  72. why did you cancel it? by vikool · · Score: 1

    dr, felton. why did you cancel you first presentation. were u afraid of them?

  73. Multimedia content copy-protection and the future by stain+ain · · Score: 2

    After Napster and all the other file-sharing services it seems downloading music (and movies) without paying a cent has become the norm.
    Do you think that, by using cryptography, watermarking or other copy-protection/prevention technologies, the entertainment industry can go back to the past situation when everyone paid (a lot) for having their copies of music/movies or, on the contrary, the technologies don't exist and will never exist to prevent the parallel distribution that we have nowadays? .

  74. Rephrasing the above post by mshomphe · · Score: 1

    Not to step on toes here, but I thought that the above question was good, but phrased a bit awkwardly:

    Dr. Felton, do you think that a scientist who is working on research that may come into conflict with the DMCA or similar legislature will choose to work at a non-US university to avoid legal trouble?

    In the same vein, do you think that laws like the DMCA will prevent scientists from foreign countries from coming to the US to do research?

    --
    She sat at the window watching the evening invade the avenue.
  75. Water Marks by t_allardyce · · Score: 0, Offtopic

    How do I get rid of those water marks on ceilings? i think they are coming from pipes or a tank in the roof. I have tried painting over them, but it doesn't work (the water causes the paint to run). Also, i have hired a plumber to check for leaks but he found none, and the marks continue to appear. Anyway, What are your views on water marking bank notes? i don't know how it works in America, but here we have water marks on our money to tell if its been faked. Is this a useless technology? (seeing as anyone who had the correct machine could also fake the money with a water mark). Also, i heard someone over there was in court because they found out how to fake a watermark, and they wanted to tell everyone, but the company who made them said they couldn't. Is this a restriction of free speech? isn't that protected under the first amendment? isn't the first amendment some sacred law that signified everything your country was based on and couldn't be taken away by anyone no matter how rich or powerful they were?

    --
    This comment does not represent the views or opinions of the user.
  76. Isn't intellectual rights a two way street? by Anonymous Coward · · Score: 1, Interesting

    Dr Felten,

    It has been my experience that academia tries, or atleast pretends to try to protect intellectual property. I think its really cool you stepped up to the challenge of breaking the watermark, but the course of action seems strange. The industry although bloated and corrupt is trying to protect their intellectual rights, and now you to are trying to do the same thing in a legal battle. So my question is then, why did you take this project on? Was it get your name out there (which is important in academia), to help the industry out (which is why they gave you $10,000), or some reason I missed. It seems strange that you would go public with the watermark information if you are worried about your own rights..

    Thanks

  77. Re:weaknesses? by Anonymous Coward · · Score: 0


    We post as ACs because we all live with the same of having Cmdr Tacos little penis in our anus at one point in time. I used to have an account, but Taco emailed me and asked me if he could personally evaluate my slashdot experience. Then he drugged me and raped me. It happens all the time. Most rapes don't get reported because the victim feels ashamed or embarassed. I never understood this mindset until it happened to me. We have a support group in the Yahoo forums if you ever need to join us.

  78. Do you plan to research future watermark schemes? by BitterOak · · Score: 1
    Presumably since the recording industry's current attempts at watermarking schemes have been cracked, they will try to implement new systems.

    Do you plan to try to find weaknesses in newer schemes, or do the current legal headaches discourage you from doing so?

    Was it simply the existence of the contest which prompted you to do the research you did, or would you try to work on cracking future schemes even if there were no such contest?

    --
    If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
  79. Open source music? by Anonymous Coward · · Score: 0

    Do you believe in open source music?

  80. SDMI = Dead? by sulli · · Score: 2

    Is my assessment that SDMI is dead as a doornail correct, or not?

    --

    sulli
    RTFJ.
  81. The future of digital media by mttlg · · Score: 4, Interesting

    What do you see as being the future of digital media: a business model based on consumers having little or no control over the information they pay for and consumers willing to put up with this, or something more similar to traditional rules where a company has little control over its product once it is sold, digital or otherwise?

  82. Hate to state the obvious but by sulli · · Score: 1

    cracking 3DES is perfectly legal, and if someone did find a way to crack it, its millions of users would definitely like to know! Al Qaeda or no Al Qaeda.

    --

    sulli
    RTFJ.
    1. Re:Hate to state the obvious but by sid_vicious · · Score: 1

      cracking 3DES is perfectly legal

      You don't think that would be considered trafficking in a security circumvention device?

      ... if someone did find a way to crack it, its millions of users would definitely like to know! Al Qaeda or no Al Qaeda.

      Absolutely, I agree that millions of people would want to know. And they should know, but perhaps the research should be classified by law for a reasonable period of time after the discovery, to allow time for a new encryption method to be deployed.

      Imagine for a moment that I post the magical Triple-DES crack on the Internet. Wham, bad guys now have access to everything from credit card numbers to troop movements. If we had time to deploy a new encryption scheme, we could minimize the damage that was done.

      Now, granted, this won't stop everyone (e.g., foreign citizens) from publishing their research. And any reasonable U.S. citizen probably *would* turn their research into the government before publishing something like this. This would just be a way to keep honest people honest.

      --
      If it ain't broke, it doesn't have enough features yet.
    2. Re:Hate to state the obvious but by Anonymous Coward · · Score: 0

      > Imagine for a moment that I post the magical Triple-DES crack on the Internet. Wham, bad guys
      > now have access to everything from credit card numbers to troop movements. If we had time to
      > deploy a new encryption scheme, we could minimize the damage that was done.

      Neither the sending of credit card numbers nor the military uses triple DES...

    3. Re:Hate to state the obvious but by Tom7 · · Score: 1


      > You don't think that would be considered trafficking in a security circumvention device?

      The DMCA doesn't outlaw the trafficking of a security circumvention device. Only tools which circumvent access to a *copyrighted work*. I agree that it's a bad law, but we should be careful about what it actually covers.

    4. Re:Hate to state the obvious but by sid_vicious · · Score: 1

      The DMCA doesn't outlaw the trafficking of a security circumvention device. Only tools which circumvent access to a *copyrighted work*. I agree that it's a bad law, but we should be careful about what it actually covers.

      Good point, you're right - thanks for catching that.

      --
      If it ain't broke, it doesn't have enough features yet.
    5. Re:Hate to state the obvious but by martyn+s · · Score: 1

      Just asking, but is it known that 3DES is not used at all to protect copyrighted works? Also, the fact that the DMCA only applies to digital works reveals the inconsistency in the whole thing.

    6. Re:Hate to state the obvious but by schon · · Score: 1

      Imagine for a moment that I post the magical Triple-DES crack on the Internet. Wham, bad guys now have access to everything from credit card numbers to troop movements.

      Ehrm, No, they don't. (Even assuming that 3DES was used to encrypt this information.)

      They have the potential ability to decrypt the information if they already have the access. Being magically able to decrypt a specific protocol doesn't mean that you automatically have the information to decrypt.

      I have no idea about troop movements (but I somehow doubt that they're being broadcast on some civilain-network) but in order to decrypt SSL (to get credit cards), you still need to be able to listen to the packets during transmission - which (for anyone outside of a NOC) is extremely difficult. I'm guessing that troop movements would be similarly hard to get access to.

    7. Re:Hate to state the obvious but by Tom7 · · Score: 1

      Well, I'm sure that people use it to protect (encrypt) copyrighted works, but I think you'd be hard pressed to really find a situation where 3DES is the thing which *controls access* to a copyrighted work. Basically, the intent of the relevant section of the law is exactly to protect movie companies from DeCSS. (Though, they were thinking about hardware devices more than they were thinking about software tools, which is why there has been the great speech vs. device debate.)

    8. Re:Hate to state the obvious but by Tom7 · · Score: 1

      > you still need to be able to listen to the packets
      > during transmission - which (for anyone outside of
      > a NOC) is extremely difficult. I'm guessing that
      > troop movements would be similarly hard to get
      > access to.

      You're right that there is something to consider here, but I don't think this is as hard as it sounds. Just think how easily the Nimda and Code Red worms spread (or how common buffer overflows are in unix daemons, too) -- all you need is control of a machine on the target machine's local network to sniff packets.

    9. Re:Hate to state the obvious but by sid_vicious · · Score: 1

      They have the potential ability to decrypt the information if they already have the access.

      Sure, and you don't think that the information we're talking about can be snagged during battle? Guess the Germans didn't either when Turing cracked their Enigma machine.

      But that's not the point ...

      Granted, the Triple DES example is a little bit hokey (I *highly* doubt that troop movements are transmitted over the Internet -- if they are, I'm moving to Canada, I hear they've got a tank now --and I have no idea whether they use Triple DES), but that wasn't the point. I was simply trying to manufacture a simple (albeit admittedly bogus) example to raise the question of whether security research should ever take a backseat to public safety.

      --
      If it ain't broke, it doesn't have enough features yet.
  83. why not do it? by Anonymous Coward · · Score: 0

    Maybe you would have prefered if
    he just knukled under to these bullys.
    Not everyone is a monopolist money-monger.

    Bravo! How dare these fasholes at RIAA try
    to take over digital distribution.

    If they want to protect their content then
    they should release it only for their own
    propratory network and stay off of public networks.

    Greed destroys invoation. RIAA is a mafia and designed to maintain a monopoly of money mongering fat-cat fasholes

  84. I've got fuck sores on my cock by Anonymous Coward · · Score: 0

    What should I do? Sure don't want to give up fucking.

  85. Involvement by Syberghost · · Score: 1, Offtopic

    Can Wil Wheaton be in your paper?

  86. Disclosure in general by Anonymous Coward · · Score: 0

    Do you think there are situations where research results should be kept confidential, or should research and the information resulting from it be public, even if it might cause severe damage?

  87. "Gambler's Ruin" and the RIAA lawsuit by DG · · Score: 4, Interesting

    Dr. Felten,

    It seems, from the outside, that you are in a position similar to the "Gambler's Ruin" fallecy.

    (For those not familliar with this, it works like this: Bob goes to a casino. He bets $2 on a game of chance. If he loses, he plays again with $4, and with $8, $16, $32 etc, doubling his bet each time he loses. The idea is that if he wins, he wins back all the money he lost up to that point, and the odds of his losing streak continuing very deep - assuming reasonable house advantage - are pretty small.

    The "fallecy" par crops up in that the casino has access to far greater resources than Bob. Bob's bet gets pretty big in a hurry (and the amount spent is culmulative, until he wins) so the odds are that for reasonable values of Bob's bankroll, the casino can outlast him and take his money in the end)

    The RIAA (and Microsoft, and Hollywood studios, and similar offenders) have very deep pockets, whereas individuals like Dr Felten are close to Bob. The problem seems to be that any of these rich organizations can keep the legal battle going indefinately (spending money on lawyer's fees all the while) and eventually bleed Bob (or Dr Felten) dry.

    Dr Felten, based on your recent experience

    1) Do you agree with this analogy, and

    2) How can you expect not to be bled dry, financially, by the process?

    .

    --
    Want to learn about race cars? Read my Book
  88. Re:Water Marks - MOD UP!! by t_allardyce · · Score: 2, Funny

    If you live in student halls, and the marks are yellow, then i think i can answer your question...

    --
    This comment does not represent the views or opinions of the user.
  89. Q: SDMI Watermark Enforcement VS. 3rd Amendment by aphor · · Score: 1

    I've been thinking about what is fundamentally wrong with SDMI and digital watermarking, and I wonder if a technical expert would object to my characterization of exactly how the stuff works.

    Technically, how well does software that verifies SDMI-watermarks fit into the metaphor of "quartering of soldiers" in terms of privacy? Can we make the argument that SDMI is an invasion of privacy because the cryptographic software extends the influence of publishers into the private domain of users' legally purchased hardware?

    --
    --- Nothing clever here: move along now...
  90. Microsoft ruling... by madopal · · Score: 1

    Hello Dr. Felten,

    In a slightly related topic, you were very active and instrumental in the DOJ's case against Microsoft. What is your opinion on the settlement talks and the outcome so far?

  91. The University's Role by meara · · Score: 3, Interesting

    How supportive has Princeton been during this process? Have you ever felt any pressure from within not to expose the University to costly lawsuits, or have they been behind you all the way?

  92. In Answer To Your Sig by Anonymous Coward · · Score: 0
    Can bin laden get a fair trial?

    If by fair trial you mean a flury of bullets in the head and chest then by jobe you are damned right!

    If by fair trial you mean he is able to continue breathing my air, then I would say it is not likely he is going to get a fair trial, refer to outcome stated above.

  93. How do I uninstall IE? by MillionthMonkey · · Score: 1

    I can't get rid of this thing!

    1. Re:How do I uninstall IE? by catdevnull · · Score: 1

      have you tried fdisk? that should do it.

      --

      I might know what I'm talkin' about, but then again, this is Slashdot...
  94. Better question by Srin+Tuar · · Score: 1

    If you were in the position where you were trying to get a handle on rampant piracy of your work, what (digital) means would you pursue to secure your work?


    Since your question is so loaded with industry propaganda words, Ive composed a more logical alternative:


    "If you were in the position where your outdated business model was poised to become unprofitable as the market began realize that your company was a useless fat layer that provides no added value, what digital algorithm could you deploy to extend your control over distribution while preserving high profit margins?"

  95. DMSI and Sound Distortion? by catdevnull · · Score: 2, Interesting

    After reviewing the paper on the the DMSI's
    watermarking techniques, I was curious about
    the effect this has on the quality of the recording--especially in classical music.

    Are there any audible artifacts?
    (even the SLIGHTEST?)

    Do the watermark techniques you've seen affect the timbre or pitch?

    thanks,

    Bill Klemm
    Rice University

    --

    I might know what I'm talkin' about, but then again, this is Slashdot...
  96. How will watermarking (SDMI) affect my DVD/CD/MP3? by WillSeattle · · Score: 1

    I just bought a set-top box to play DVDs, CDs, CD-R/Ws, CD-Rs, and MP3s.

    Unfortunately, some CDs sold as music may not play on my home sound system using this device, as I understand the implications of watermarking.

    Is this a true statement? The watermarking which you researched - is it equivalent to someone selling me a defective game disk? And does it distort any of the frequencies my dog and goldfish enjoy, so that we will not all enjoy the desert trance music in the same way?

    -

    --
    --- Will in Seattle - What are you doing to fight the War?
  97. Watermarking and Stenography by Anonymous Coward · · Score: 0

    It seems that watermarking-- the insertion of codes into a document without altering the document's appearance, is rather close to stenography -- the insertion of secret messages into a document without altering the document's appearance. When I was in academia, stenography wasn't researched very much (it wasn't a neat math trick like RSA), but thanks to reports that Al-Queda used stenography, there's probably going to be more research. My question is
    a) How does your work relate to stenography
    and
    b) In what specific ways do the RIAA's efforts cause problems for stenography research?

  98. The release of copyright material after 'x' years. by mungewell · · Score: 1

    Part of the arrangement of the copyright system is, that works that are given copyright protection (by law) are to have that copyright expire after a number of years.

    Do you believe that the corporations that are using copyright laws to protect their works (which make a vast profit for them) will ever permit these works to be available in the public domain once this period of protection has expired?

    and how will it be possible to enforce the general public rights at the time of expiration if they are only available in an unbreakable encrypted form?

    sorry that's 2 questions, but one is intimately linked to the other.

    Simon Wood.

  99. Realism? by ForbidnDonut · · Score: 1

    After reading your paper on the SDMI Challenge it seems the scheme they chose (an "oracle" on a remote system) is not a real world solution. It would seem that in such an implementation file verifiers would run locally on a user's machines or at the very least the player would run locally and send samples for authentication to a remote server. In the former case a potential hacker would be able to analyse the verifier and thus have a somewhat better understanding of the scheme than you started with. In either case one could simply crack the player to always play the file without verification.


    So my question is, even if the challenge had not been met, would the scheme be applicable to general use, or was it simply an interesting problem with no real use whatsoever?
  100. How about Tarjan's watermarking work? by Goonie · · Score: 5, Interesting
    As well as Sedgewick and Kernighan, Robert Tarjan (major graphs algorithm researcher) is also in your rather star-laden department, and according to a friend of mine is currently working on digital watermarking methods.

    Given that you've been so prominent in demonstrating the weakness of watermarking techniques thus far, how do you like his company's chances of succeeding, and has your academic interest in defeating watermarking schemes resulted in some interesting debates in the lunchroom?

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
  101. Conflicts in Intellectual Property Law by hearingaid · · Score: 3, Interesting

    Dr. Felten:

    Some commentators would characterize the last 25 years or so as a conflict between patent holders (the manufacturers of consumer technology) and copyright holders (the producers of consumer culture). The landmark U.S. Supreme Court case, Sony v. Universal, was set up as typifying this conflict.

    However, it would seem that, many years after the movie studios lost their attempt to prevent consumer VCRs from being sold, the VCR has, if anything, benefitted the motion picture industry.

    Similarly, in the recent Napster case, it is worthwhile noting that after the RIAA successfully shut down Napster, their sales started to immediately decline, and have continued to decline. Many have argued that Napster provided a vastly superior method of music promotion, especially for older records, than radio, and its shutdown has resulted in music fans not finding out about records they might otherwise buy.

    Do you think that this conflict is more imagined than real? In other words, is it more likely to the benefit of the cultural industries to work with technological development, rather than fight it?

    --

    my old sig used to be funny, but then slashcode ate it and now it's not funny anymore

  102. Bad Question! by dbretton · · Score: 1

    "... in their legal attempt to stop the publication of your work"

    You need to re-examine the details of the acse. The RIAA did not make a legal attempt to stop the publication of his work. They only threatened with a legal suit.
    There is a HUGE difference between the two: the RIAA can (and, IMO will, be able to successfully) argue that no damages were incurred as a result of their actions, as they did not actually sue, nor did they act in an illegal matter.

  103. Is any protection possible. by autopr0n · · Score: 2, Interesting



    We keep seeing cryptographic copy control attempted and broken. DVD-CSS, SMDI, the high bandwidth crypto stuff mentioned on slashdot recently.

    Do you think it's at all possible to create a true playback control system? Perhaps using public key crypto and un-hackable hardware? Or do you believe that it is truly mathematically impossible to do

    --
    autopr0n is like, down and stuff.
  104. Are you going to appeal? by thumbtack · · Score: 1

    With todays decision in which your case was thrown out, are you planning an appeal?

  105. In other words, DMCA is nothing without Sonny Bono by yerricde · · Score: 1

    The DMCA doesn't outlaw the trafficking of a security circumvention device. Only tools which circumvent access to a *copyrighted work*.

    And because works in the public domain are not copyrighted, it only takes one person to use access control on a public domain work to allow Americans to release tools designed to decrypt that specific public domain work and that "happen" to also decrypt copyrighted works. (See also Charlie Chaplin DVD.)

    This is why is why Congress passed the DMCA and the Sonny Bono Copyright Term Extension Act during the same week, during the same media cover (both Kosovo and Lewinsky), and using the same unaccountable method (voice vote). Disney didn't want to be the one to provide the loophole mentioned earlier by releasing a DVD of "Steamboat Willie" and "Plane Crazy," two of the first five Mickey Mouse films.

    --
    Will I retire or break 10K?
  106. Actor *still* seeks work by Anonymous Coward · · Score: 0

    So, can CleverNickName be in your movie?

    What, you don't have a movie deal? Never mind.

  107. Response to dismissal? by SiliconEntity · · Score: 3, Interesting
    The news today is that your lawsuit has been dismissed; you have lost this first round. No doubt you will appeal, but it seems that the main legal issue is that the chilling effect has been completely hypothetical. You feared that you would be sued, and you have many statements from other researchers sharing these concerns, but no one has actually been sued yet.

    It appears that until you or some other legitimate researcher goes forward with publication and is sued or prosecuted for it, the courts may think you are just crying wolf to try to get a law you don't like changed. A number of researchers have stated that they now intend to stop working on analyzing content protection. If this court decision is upheld, that will prevent the DMCA from being overturned.

    Are you willing to go forward with research and publication in violation of the DMCA? The only way to stop you then will be to actually use the DMCA against you, and it can finally be tested in court. Will you take this risk when so many researchers are backing away?

  108. Watermarking and Jpeg2000 by t · · Score: 2, Interesting
    It seems to me that Jpeg2000 will automatically disable watermarking by its very nature. A key aspect of Jpeg2000 is that it encodes images by bitplanes of significance. You have the option of say cutting out the least significant 10% of the data.(It's currently only still images but I'm sure it'll be easy to extend the technology to everything else.)

    Watermarking on the other hand seems to rely on hiding in the least significant bits of the data. Pretty soon any images that are supplied in Jpeg2000 format or converted to it would have an automagic way of killing any watermarks present.

    I think watermarking has already lost. What do you think of this?

    t.

  109. Tell us about the proceedings... by InferiorFloater · · Score: 1

    What was going through that judges head when she dismissed your case in 25 minutes? What was the scene in the courtroom?

    On the flip side, do you think this makes your case for appeal stronger?

    --

    ---------
    Get back to me when my brain starts working.
  110. Crypto Research by dracken · · Score: 1

    Dr Felton,
    In the cryptography community it is a well estabilshed fact that "security by obscurity of the securing process" is not only weak but also dangerous, giving a false sense of security. In this context I would like to pose two questions

    1. What do you think will be the future of effective cryptography research in this context ?

    2. Do you, in your personal opinion, think that organizations like SDMI are playing a double game by inviting review but preventing publication ? Do you think this unhealthy precedent will affect cryptography researchers ?

  111. recent developments by mixonic · · Score: 0

    were you told your case would be thrown out fo court if you presented you findings? If not, would that advice have mattered?

  112. Go get 'em Felton! by bradipo · · Score: 0, Flamebait

    Sue them for all their worth; which may not be much in some people's opinions. :-)

  113. Question for Felton by Iguru42 · · Score: 1

    Since it is true that anti-piracy schemes do nothing more than incovience the end user why do you think the producers of music keep trying to invent and implement them? The real pirates laugh at the attempt to protect the music and it seems to me that a fairer pricing scheme would cut significantly into pirating efforts. I.E. If CDs cost 5 bucks it would be worth it to buy those disks that only had the one song that I wanted.

    (Rhetoric for illistrative purposes)

    Why does a CD still cost 15+ dollars but a tape (whose manufacturing costs are higher) costs 11?
    What does that 15 dollars actually pay for?
    Why is intellectual property considered worth more than tangible items (by weight how many CDs = a refigerator)?