Slashdot Mirror
RIAA Plans Cyberwar Effort
Richie Z writes "This article at the New York Times talks about new anti-piracy efforts from the music industry, some of questionable legality. One idea simply redirects users to a website with legal downloads. But two other programs freeze the user's system or delete music files determined to be illegal. Another proposed idea is basically a DoS attack against downloaders. I guess the RIAA believes the law only applies to their enemies." They had a solution to illegality planned.
DALnet is dead, DDoS attacks, and supposedly no one knows who was doing it, strange coincidence that the RIAA is "planning" anti-priracy acts. It isn't to much of a leap to say that they are already doing them.
Bit torrent is gaining popularity and is difficult to directly attack, but relies on various websites to distribute .torrent files for the program to work, so what happens? These web-sites are attacked.
The "war" has already begun...
I think turning off autorunning on CD's should be considered necessary for basic system security. It would be too easy for a music CD to run a fast installer and bang you have a anti-pirate virus installed. Even if they don't "delete files", they could (if you didn't have an outbound firewall) scan for music and send lists to the RIAA. Report on installed P2P software. Send any and all usage logs from that software, etc.
Sure they will hold off till they can get laws on their side, but right now I'm not sure congress really is looking after consumers all that much. This "right to hack" nonsense has come up too many times recently.
I seriously hope the RIAA does try to go the cyberwar route.
They will get absolutely and utterly bent over and destroyed if they open that Pandora's Box.
Please RIAA... I am begging you... Start a "cyberwar."
-Michael
Threshold RPG
The RIAA never ceases to amaze with their stupid antics. Within a couple of days of the successful iTunes deployment, they leak this bit of lunacy. I can not think of another industry doing so much to alienate its customers, all the more amazing given that a CD is a totally discretionary purchase. How long before they cross the line and get hit with a general boycott?
The idea of launching destructive software is really mind-boggling. IANAL, but it sure seems to me that they could get hit with some massive liability lawsuits if one their destroy bots is a bit more successful than intended. Gotta admit though, it would be sweet irony to see these idiots sued out of existence.
What about Sony? While the record division is trying to impede piracy, the hardware people are abetting it by producing CD-R drives, among other things. What happens if a legit use of a Sony hardware product is impacted by a Sony Music destroy bot?
Maybe something else is going on. Perhaps the real panic in the industry is caused by the notion that a smart artist could put their files on p2p to get exposure w/o signing a record deal. If technology can improve the bargaining position of the artist before signing a deal (of their choice), the extreme reactions of the industry are a bit more understandable. NOT agreeable, however, and as stupid as one can imagine, but understandable if one takes the perspective of those who have been feeding at the music cartel trough for so long.
Dang, I was looking forward to getting an iTunes account, but now I'm conflicted. I'd like to support Apple and the artists, but I hate the idea of any money going to the RIAA overlords who should have been supporting iTunes-like products a long time ago. The pirate networks aren't really free, they just take a lot less time than going to CD store, have better selection in many cases, and allow one to sample. A good pay service with reliable connections, selection and organization, let alone the absence of all the spyware would be much preferable to the "freeware." That's why I think there is something else on the RIAA's mind - Not loss of the customer, but rather loss of the artist...
Imagine how much harder physics would be if electrons had feelings! -Feynman, maybe
I have my doubts that they could even get these attacks to work on my computer. 1.) It's Linux, 2.) I'm paranoid about my security, and 3.) I'm a programmer and will just write a detection script to locate and remove these trojans. If I can defend against this bullshit than I'm sure other geeks will do the same. All the RIAA seems to be doing is creating a market for secure P2P software and quite possibly giving Linux a good chance for a killer app.
Now the DoS attack might be effective but that game goes both ways. If they start attacking individuals how long will it be until P2P clients come with the ability to detect DoS's and trigger the whole P2P network to do a DDos on the source of those attacks? They'd be hard pressed to handle such a DDoS with legal threats if they did it first and I can just imagine the negative public relations off an Internet war that'd no doubt disrupt large portions of the Net at once.
Why don't these morons figure out that the only way to beat P2P is to offer cheaper cd prices and affordable (non DRM) downloads of songs themselves. Legal or technical attacks aren't going to be very functional and have dangerous tailspins off their customer base.
At what price learning? At what cost wisdom? The price is a man's peace of mind, and the cost is his life.
1. Set up a honeypot.
2. Make sure the content looks "illegal" but, in fact, is not
(i.e., MP3 files named for popular songs but containing only commentary on them).
3. Get hit.
4. Sue for damages.
5. Profit!
OK, joking aside, in most countries, even accessing a computer without authorization is illegal.
The Canadian criminal code forbids it (look here for a longer version).
TITLE 18, PART I, CHAPTER 47, Sec. 1030 of the US code also looks applicable (but IANAL so if somebody who IAL reads this, please comment).
So, with the law on your side, you can also sue them in a small claims court. That way, they cannot use their financial advantage to subvert justice.
Vigilante Justice will NOT be tolerated. They do not want the wrath of the Telecom industy and ISPs, who will gladly turn over reams of data detailing these illegal denial of service attacks.
They also do not want computer scientists angry at them. They have no right to go into my computer and erase MP3s of some CDs that I owned and ripped.
The RIAA does not have the power to do that. They are a trade organization, period. They are not judge, jury and executioner. They will be well advised not to start a war with us.
I have a better idea: The RIAA should ignore the fact that the internet exists. It will save them and us a lot of grief.