Slashdot Mirror


Clay Shirky: RIAA Succeeds Where Cypherpunks Fail

scubacuda writes "Clay Shirky has an interesting take on encryption: 'The RIAA is succeeding where the Cypherpunks failed, convincing users to trade a broad but penetrable privacy for unbreakable anonymity under their personal control. In contrast to the Cypherpunks "eat your peas" approach, touting encryption as a first-order service users should work to embrace, encryption is now becoming a background feature of collaborative workspaces. Because encryption is becoming something that must run in the background, there is now an incentive to make its adoption as easy and transparent to the user as possible. It's too early to say how widely casual encryption use will spread, but it isn't too early to see that the shift is both profound and irreversible.'"

342 comments

  1. Here's a link to the article... by tcopeland · · Score: 4, Informative

    ...for some reason it's not listed (at least, I couldn't find it) on the front page of shirky.com yet:

    http://www.shirky.com/writings/riaa_encryption.htm l.

    1. Re:Here's a link to the article... by kj0rn · · Score: 3, Funny

      It's gunna make it real interesting for future historians to figure out how to decrypt and read those old data formats.

    2. Re:Here's a link to the article... by scifience · · Score: 1

      The only problem is that it is already linked in the original Slashdot posting. Therefore, there is no need for the link you posted. Sorry!

    3. Re:Here's a link to the article... by tcopeland · · Score: 1

      > it is already linked in the
      > original Slashdot posting

      When the posting was first made, the "interesting take" link went to the Cypherpunk home page.

      Looks like they've fixed that since then, although, suprisingly, without putting a little "Ed:" entry in below the original post - they just fixed it in the original post.

  2. Seems obvious. by Violet+Null · · Score: 4, Insightful

    The Cypherpunks never went around suing people (that is, actually costing them money) who weren't using encryption to mask their illegal activities. The RIAA is.

    Real world practicality will always be a much better motivator than abstract idealism.

    1. Re:Seems obvious. by plover · · Score: 5, Interesting
      What will be most interesting is if the crypto "wars" play out through all the theorized stages of attack, counterattack, and man-in-the-middle attacks that the cryptographers have worked out over the past 20 years. We already expect the RIAA won't take kindly to encrypted networks sharing their music, so we should expect to see some countermeasures.

      So what will be their strategy? Will they first attempt to "join" these networks, posing as users looking for Britney's latest, and entrapping systems that serve up the bits? Will they put out bogus trojaned clients on the services? "Dude, download LockTella 1.9, it's l33t!!" only to find that it hoovers up passwords and music lists, and forwards them on to DUDE@RIAA.COM?

      Will cypherpunks come to the rescue, providing signed versions of the clients? Will the users finally understand the need to verify the signatures before running them? It's a big stick -- "run an untrustworthy client, get a lawsuit."

      And finally, will this come full circle, leading to a true "Web of Trust" as originally envisioned by Zimmerman et al with PGP? I can see the further parallels to Prohibition, with entry to speakeasies controlled by passwords like "John said to tell you I'm OK" whispered through a hole in the door.

      This could be a very interesting time to live in.

      --
      John
    2. Re:Seems obvious. by jaxdahl · · Score: 5, Insightful

      Or just boycott the RIAA and be a good guy and support cheap music, not downloading music you don't own. Or learn how to make your own music.

    3. Re:Seems obvious. by Anonymous Coward · · Score: 0

      Where have you been living, under a rock? That already exists - its called private ftp rings. I joined my first back in 2000.

    4. Re:Seems obvious. by Kallahar · · Score: 3, Informative

      The reason that the RIAA is coming down so hard on file sharing is that there are so many people doing it. Years ago before napster came about, there were just as many songs available online. However, they were harder to get. Your average person wouldn't know where to go or how to get them. If RIAA is able to get the piracy back down to that level then they'll back off.

      It only takes one person to break the encryption and put a song up on the net, but if he's likely to get sued/arrested then he'll think twice, and only those "in the know" will know where to go to get the songs.

    5. Re:Seems obvious. by Anonymous Coward · · Score: 0

      God Forbid if they learn of ews-nay oups-gray and such..

    6. Re:Seems obvious. by Anonymous Coward · · Score: 0

      The RIAA isn't out to stop you from listening from music, their goal is to take away all your civil rights and put you in jail.

    7. Re:Seems obvious. by Anonymous Coward · · Score: 0

      You know, I will download the music from artists (and distributors) whose income is more than the triple of doctors, engineers and any vital profession without a single scratch in my conscience

    8. Re:Seems obvious. by AndreyF · · Score: 1

      If RIAA is able to get the piracy back down to that level then they'll back off.

      Just like they backed off after they shutdown Napster? They'll back off untill the next popular thing comes around. Question is, who will get there first: will we come out with a fast, distributed, encrypted, and safe p2p network, or will consumers begin to be willing to pay $0.99 to be able to download a song in seconds?

    9. Re:Seems obvious. by supertaster · · Score: 1
      A lot of music has merit enough to make it worth being able to listen to it regularly. As a musician and someone who likes a lot of music, I could not hope to own all the music I enjoy at the retail prices if I were making many times what I am right now (I'm a student. Maybe if I were an RIAA lawyer I could buy it all and still eat).

      The whole time, my favorite thing about Audiogalaxy (my favorite, R.I.P.) was being able to grab singles instantly of incredibly arcane music (most of the bands I'm after don't turn up in the Apple store), and really, honestly, to try before buying. Especially with local bands, I'll burn a friend's copy, then if I actually listen to it much, I'll grab one at their next show, and I REALLY WILL feel bad until I do.

      But there really are albums that I don't wanto to disregard and never hear again, but just aren't worth $15.00, or even $6.00 if I can find it in the scuffs bin.

  3. Cypherpunk is a stupid name by ObviousGuy · · Score: 1, Insightful

    No wonder no one was taking their advice.

    Encryption is good, as long as the people using it are good. When people use encryption to hurt other people, it becomes a serious liability.

    --
    I have been pwned because my /. password was too easy to guess.
    1. Re:Cypherpunk is a stupid name by sqlrob · · Score: 5, Insightful

      Encryption is good, as long as the people using it are good. When people use encryption to hurt other people, it becomes a serious liability.

      Well, DUH, it's a tool, nothing more.

      You can say the same about cars, knives, guns and just about anything else.

    2. Re:Cypherpunk is a stupid name by swb · · Score: 4, Funny

      You can say the same about cars, knives, guns and just about anything else.

      Especially dihydrogen monoxide.

    3. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 0

      Well, DUH, it's a tool, nothing more.

      Did you notice his nick? Seems you missed the humor boat. =p

    4. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 0

      OK, now give an example where encrption doesn't hurt somebody, somewhere.

      If somebody deems something important enough to encrypt it, then that information could be used by somebody else for their own personal gain, thus by not having the information, it is hurting their future circumstances.

    5. Re:Cypherpunk is a stupid name by warpSpeed · · Score: 5, Insightful
      Encryption is good, as long as the people using it are good.

      Encryption, like all technology, is amoral.

      Good and evil come from people. This is ultimatly where most legislation fails at stopping evil. You legislate away the technology that evil uses in the hopes of stopping it. However, evil rarely follows laws. So the laws are draconian to compensate for evil not following thems. The end result is that good does not benifit from said technology while evil thumbs thier nose at good.

      Encryption will be used for evil, regardless. If you do not outlaw it then the playing field will be level.

    6. Re:Cypherpunk is a stupid name by grub · · Score: 5, Funny


      When people use encryption to hurt other people

      You mean like when I throw my copy of Applied Cryptography at people's heads?

      --
      Trolling is a art,
    7. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 0

      So what you are saying essentially is that Evil will always triumph over Good because Good is dumb.

    8. Re:Cypherpunk is a stupid name by Squideye · · Score: 5, Funny

      dihydrogen monoxide

      We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today...

    9. Re:Cypherpunk is a stupid name by grokster · · Score: 0
      You can say the same about cars, knives, guns and just about anything else.

      Don't you just hate those carpunks?

      When cars are outlawed, only outlaws will have cars!

    10. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 1, Informative

      Yep - dihydrogen monoxide is much nicer than dihydrogen dioxide.

    11. Re:Cypherpunk is a stupid name by PossibleMat · · Score: 1

      "Guns don't kill people. I do."

      --
      Have you Meta Meta Moderated lately?
    12. Re:Cypherpunk is a stupid name by FooAtWFU · · Score: 5, Funny

      We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today... Man, be careful! It can be fatal if inhaled! It causes erosion, and is a primary component in acid rain! It's been found in the tumors of terminal cancer patients! It contributes to global warming! It's one of the world's top industrial chemicals... and it regularly works its way into our water supplies!

      --
      The World Wide Web is dying. Soon, we shall have only the Internet.
    13. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 1, Interesting

      Encryption, like all technology, is amoral.

      Technologies like weaponised anthrax?

    14. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 3, Insightful

      Encryption, like all technology, is amoral.

      Technologies like weaponised anthrax?


      Well, yes. Anthrax in the hands of the "good guys" will be used to do research on how to prevent fatalities in the event that one of the "bad guys" tries to use it.

      Get it?

    15. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 1, Funny

      I prefer Hydrogen Hydroxide.

    16. Re:Cypherpunk is a stupid name by ReelOddeeo · · Score: 4, Interesting
      You mean like when I throw my copy of Applied Cryptography at people's heads?

      Careful! Applied Crypography is a thick book!

      I am currently reading that book. (Second Edition) I was amazed at the prophetic words on page 97 (or maybe 99)? The book is discussing Key Escrow and Clipper. He says something to the effect of:

      If there were a major terrorist attack on New York what sorts of limits on the police would be thrown aside in the aftermath?
      The copyright on the book says 1996. I'm assuming that even in the Second Edition that these words are prophetic. Sorry I don't have the exact quote, and am not positive on the page number because I don't have the book here with me. But you could find the Key Escrew form the TOC.
      --

      Those who would give up liberty in exchange for security and DRM should switch to Microsoft Palladium!
    17. Re:Cypherpunk is a stupid name by plover · · Score: 4, Funny
      Am I the only one thinking "Spaceballs" here?

      "Now you see that Evil will always triumph, because Good is dumb."

      --
      John
    18. Re:Cypherpunk is a stupid name by warpSpeed · · Score: 4, Insightful
      Technologies like weaponised anthrax?

      A weapon can be considered technology, and it is still amoral.

      A Weapon and/or technology, can only be put to use by people for thier own purpose, good or evil.

      "Outlaw guns and only outlaws will have guns", etc... Look how well outlawing guns in Washington, DC has worked.

      Weaponised anthrax could be put to good use, such as using it to find an antidote to protect people from it.

    19. Re:Cypherpunk is a stupid name by Frank+T.+Lofaro+Jr. · · Score: 2, Funny

      You mean like when I throw my copy of Applied Cryptography at people's heads?

      Or force them to read it! :)

      --
      Just because it CAN be done, doesn't mean it should!
    20. Re:Cypherpunk is a stupid name by Loopy · · Score: 1

      Thus, Evil will always triumph because Good is dumb!

      Keep firing, assholes!! :P

    21. Re:Cypherpunk is a stupid name by mpickut · · Score: 3, Insightful

      Encryption will be used for evil, regardless. If you do not outlaw it then the playing field will be level. Who says we want a level playing field? We're not playing D&D here -- this is real life and there is no great balnce between Good and Evil that has to be preserved. Evil for lack of a better term is always bad and society depends on those doing evil to not be on even ground with the law in order to protect the rights we all hold dear. So yes -- encryption is amoral, but that just means that the forces of good need to be that much better at it. The problem is that evil is almost always better motivated because in our society no good deed goes unpunished. Generic Sig -- compare and save!

      --
      Sigs are for losers.
    22. Re:Cypherpunk is a stupid name by Tackhead · · Score: 2, Funny
      > > dihydrogen monoxide
      >
      > We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today...

      You think you're far gone? I'm cutting my DHMO with caffeine!

    23. Re:Cypherpunk is a stupid name by ungleichschaltung · · Score: 2, Funny
      >> We've gotta ban that stuff, all the kids are
      >> gonna start using it, and then we'll never get
      >> them to stop. It's addictive... I've had like 5
      >> doses today...
      > You think you're far gone? I'm cutting my DHMO
      with caffeine!

      I find that when I dilute mine with malt whisky, I can manage with very little DHMO. Still, it's hard to cut back.

    24. Re:Cypherpunk is a stupid name by salzbrot · · Score: 3, Funny

      That is why I drink only Smirnoff 100 proof. 50 % less dihydrogen monoxide than tap water!

    25. Re:Cypherpunk is a stupid name by Dr.+Evil · · Score: 1

      Terrorist attacks on the U.S. were not completely unexpected or unprecidented. I think the fertilizer bomb attack on the WTC was 1993.

    26. Re:Cypherpunk is a stupid name by lynx_user_abroad · · Score: 5, Insightful
      Who says we want a level playing field?

      Well, you do (for one), or at least you would if you thought things through.

      Almost no one whom you'd consider to be "Evil" considers themselves to be evil. And they would likely tag some people as "Evil" even if you would disagree with their assessment. And almost no one would agree with you on what is good and what is evil completely. To do that, they'd have to be you.

      Which means that if the world were to function by your own self-centered definition of good and evil, you'd be all alone.

      Nature itself doesn't have a concept of good or evil. Which means regardless of wether we'd each want a level playing field, it's ultimately a level playing field on which we must play.

      Evil for lack of a better term is always bad and society depends on those doing evil to not be on even ground with the law in order to protect the rights we all hold dear.

      Now "society" is just one of the teams on this playing field; a big team, I'd admit, and one you're likely so familiar with as to believe that no others exist, but it's just a team nonetheless. As you point out, your society has created your society's laws and has it's own interest in seeing that people on any other team are placed at a disadvantage. After all, it has to protect those "rights" which your society holds so dearly.

      Is it possible that members of some other society might have their own values, profess their own beliefs, and institute their own laws to protect the rights they hold so dear? Some of these might conflict with the values, beliefs, and laws of your society; does that make them "Evil"?

      Only a troll would believe so.

      Yet even at this point, we're making a judgment call saying that one kind of "society" can be more "good" than another in a way that a "non-society" could never approach. That's a widely held belief, but there's still a lot of time left on the clock. Maybe Douglas Adams was right and some day we'll decide that even the trees were a bad idea, and we should have all stayed in the oceans..."

      If you continue to insist that the playing field be tipped selfishly in your favor, then you must admit that, over time, more and more people will become aligned against you in their own self interest. Each time you exclude someone by calling them (or their team/society) "Evil" you build a greater force which sees you the same way. And the stronger you hold your beliefs, the more motivate they are to hold theirs.

      The problem is that evil is almost always better motivated because in our society no good deed goes unpunished.

      I could not possibly have said it better myself.

      --

      The thing about things we don't know is we often don't know we don't know them.

    27. Re:Cypherpunk is a stupid name by NanoGator · · Score: 1

      "I prefer Hydrogen Hydroxide." -- (Score:1, Funny)

      We're such fun loving people. How come none of us have friends?

      --
      "Derp de derp."
    28. Re:Cypherpunk is a stupid name by identity0 · · Score: 2, Funny

      We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today...

      Wow, me too! But I think I've found a safe way of ingesting it - I mix it with hops and yeast, allow it to ferment in a large vat, and drink the resulting liquid! You can hardly even tell it's mostly dihydrogen monoxide! We must amend the constitution to ban straight dihydrogen monoxide, and allow only these 'brewed' concotions!

    29. Re:Cypherpunk is a stupid name by warpSpeed · · Score: 1
      So yes -- encryption is amoral, but that just means that the forces of good need to be that much better at it. The problem is that evil is almost always better motivated because in our society no good deed goes unpunished...

      My point is that you cannot legislate evil away by taking the tools that evil uses away from everyone. If Encryption is a tool, and it is used for evil, and you take it away, you expose good, to more abuses from evil. You also prevent natural innovation(tm) from happening.

      If legislation is the answer it should be in the form: "Encryption cannot be used for evil". Which, of couse, is pointless. When does evil play by the rules?

    30. Re:Cypherpunk is a stupid name by seafortn · · Score: 1

      Funny, but... If you drink too much pure DHMO, you actually can die from it - Google hyopnatremia if you want all the gory details... Short version is that it blows your electrolyte balances, which blows the proper function of ion channels in your cells, which are important for things such as neural conduction, which is important for stuff like thinking (although most of the body can work just fine without nerves, thank you). There are plenty of articles about people almost dying of hyponatremia if you use google news to search for the term, including some articles about dumb hazing stunts at a fraternity at SMU.

    31. Re:Cypherpunk is a stupid name by wirelessbuzzers · · Score: 2, Funny

      Yeah, it's in most milk these days too... more people drink it that way... tho if you're really worried about it, you can get reduced-DHMO or even DHMO-free milk at most grocery stores, though like organic milk, it's more expensive per ounce than milk with DHMO.

      --
      I hereby place the above post in the public domain.
    32. Re:Cypherpunk is a stupid name by mgg4 · · Score: 1

      ...the prophetic words on page 97 (or maybe 99)?

      You had it almost exactly right. On page 99, the quote is:

      Imagine a major terrorist attack in New York; what sorts of limits on the police would be thrown aside in the aftermath?

      And now the bibliography:

      Schneier, Bruce. Applied Cryptography, 2nd Ed. 99. New York: John Wiley & Sons, 1996.

      --
      -- This space for rent.
    33. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 0

      The fact of the matter is, an ANFO device, one that of the size of a small box truck, COULD NOT have caused the damage that occured.

      Evidence of two or more blasts which are clearly shown in the OK Geological survey, depict two seismologist blips @ 9:02 13 seconds and a second wave at 9:02 23 seconds, with the second blast off the chart; as a flat wave explosion with the usual surge then sag, caught a 5.2 / 6.0 +/- Richer Seismograph wave at the exact time of the detonation @ ground zero. The tons or pounds of a fertilizer bomb that would have been necessary to cause this # 2 seismograph reading as calculated from a equivalency ratio to cause such an event was 40,000 tons or 80,000,000 million pounds of TNT, to equal the second blast as recorded at the University of Oklahoma Geological survey Richer Seismograph wave on April 19th, 1995 @ 9:02 and 23 seconds.

      What do you know about the McVeigh case? Have you read about the facts surrounding the supression of evidence in that case? And the fact that even the validity of his execution is in contention?

      Do a search, there's plenty of info out there. But they don't force feed it to you like the evening news of course.

      T

    34. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 0

      Everyone knew there would eventually be a major incident in New York, especially after the 93 WTC bomb. The big surprise was the airplane angle (very dramatic pictures) and the lesser surprise was that it did not involve ex-soviet fissile materials.

    35. Re:Cypherpunk is a stupid name by nametaken · · Score: 1

      This is where people shout, "It's the criminals, stupid!"

    36. Re:Cypherpunk is a stupid name by mpickut · · Score: 2, Insightful

      Rather than get completly off point let me say this:

      You are completly correct if good and evil are relative terms that represent no real values.

      However, the very fact that you are trying to convince me that your point is more 'good' than mine tells me you don't agree with that fact. Your use of terms with values attached such as troll and selfish defeat your own argument.

      Please understand that I do not mean that believing in good and evil gives one the right to crush what is considered evil by any means available. Nor may we or must we make value statements about every event and cultural norm or mores -- that is just bigotry. One cannot take the missuse of the belief of good and evil, however as an argument agianst thier existance as a real things.

      With that said I do not want a level playing field: I do not want cops to be on a level playing field with criminals (I want criminals locked up and cops paid well) and I do not want to be on a level playing with theives (I will lock my doors).

      My point is simply this: if we are convinced that something is right (good as opposed to evil) the only way that we will fight for our beliefs is to be better at using the tools good and evil have in common. One will never succeed by whining and complaining -- don't get mad, just get better educated.

      Is it still a sig if it just says:Blah, Blah, Blah

      --
      Sigs are for losers.
    37. Re:Cypherpunk is a stupid name by warpSpeed · · Score: 1
      This is where people shout, "It's the criminals, stupid!"

      or better yet, "Give us Barabas!"

    38. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 0

      :)

      I read slashdot a lot and this is my first post. I like the articles but find that most people are dualist. Just wanted to say thanks for not being one.

    39. Re:Cypherpunk is a stupid name by Qacker · · Score: 1

      Yes H2O2 has a nasty habbit of starting fires in high percentages! :)

      --
      Learn lisp today!
    40. Re:Cypherpunk is a stupid name by lynx_user_abroad · · Score: 1

      However, the very fact that you are trying to convince me that your point is more 'good' than mine...

      The closest thing in my post to a "point" was the statement "Only a troll would believe so." Everything else was interrogative (Is it possible..), general comment (Well, you do..., Almost no one..., Nature itself doesn't..., Now "society" is..., Yet even at this...) or deduction (Which means that..., If you continue...) I suppose there was the "I could not possibly have said it better myself." compliment.

      ....tells me you don't agree with that fact.

      "Fact" being that my point was not as "good" as yours. Are you sure that qualifies as "fact"? ;-)

      Your use of terms with values attached such as troll and selfish defeat your own argument.

      All words have values; that's what makes them words. Perhaps you meant "connotations". Certain words in certain contexts can have positive or negative connotations. For example, "selfish" is generally accepted to mean "seeking or concentrating on one's own advantage" but that is neither good nor bad by itself. For example, in the context of a Capitalism vs. Communism debate, the term "selfish" would more generally describe people in the Capitalist camp, for whom selfless behavior is considered bad for shareholder value.

      And I stand by my statement that only a troll (small "t") would believe that having beliefs in conflict with society makes one "Evil", although I'll admit the trolls may yet win that battle.

      Please understand that I do not mean that believing in good and evil gives one the right to crush what is considered evil by any means available.

      I hope I'm understanding you correctly to mean that opposing that which our beliefs identify as "Evil" is proper, even if not every means should be availed in the process. If so, then I agree with you. (The alternate interpretation would leave us all as just inanimate observers in this world.)

      With that said I do not want a level playing field: I do not want cops to be on a level playing field with criminals (I want criminals locked up and cops paid well) and I do not want to be on a level playing with theives (I will lock my doors).

      So, are you saying that thieves should not be allowed to lock their own doors? Or are you saying that you choose not to break into a thief's house, regardless of wether he has availed himself of door locks? The former case describes a "selfish" tipping of the playing field, while the latter simply displays moral fortitude while leaving a level playing field for others (theif or not) to lock their own doors as they see fit. If I understand your argument correctly, perhaps you really do want a level playing field.

      Just a thought; is it possible that leaving one's door unlocked could reduce crime, by forcing residents of the community to address the causes of crime rather than just forcing the criminals down the street to the house with the weakest locks? I suspect that those who take the "us vs. them" mentality of always locking their house would soon find themselves fighting not only the criminal element, but also their neighbors with weaker locks whereas those seeking a root cause would find allies among their weak-locked neighbors as well as among the criminals who'd really rather be doing something else than breaking into homes and dodging police.

      My point is simply this: if we are convinced that something is right (good as opposed to evil) the only way that we will fight for our beliefs is to be better at using the tools good and evil have in common.

      A point well stated and well taken. Also a point which is applicable from any point of view; wether good/evil are relative or absolute. Hmm.

      --

      The thing about things we don't know is we often don't know we don't know them.

    41. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 0

      That shit will fuck you up. Hell, too much of it and you'll die.

    42. Re:Cypherpunk is a stupid name by Dirtside · · Score: 1
      Or force them to read it! :)
      You monster! Thank god that Saddam never got his hands on any copies of Applied Cryptography before he was caught...
      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    43. Re:Cypherpunk is a stupid name by DickBreath · · Score: 1

      I think my favorite has to be the Protocol #2 at the top of page 135.

      Alex and Bob are in a resturant arguing over who's is bigger. Niether one wants to reveal their measurement. They could tell the waiter, but they would have to drown him. etc...

      Then the author goes on to describe a protocol where both Alex and Bob can determine who's is bigger without either one revealing their measurement.

      --

      I'll see your senator, and I'll raise you two judges.
  4. Bad reference in the original posting by techmuse · · Score: 1

    The posting is pointing to the cypherpunks website, not to the article. Me no grok.

    1. Re:Bad reference in the original posting by mitheral · · Score: 1

      The article has been updated now

  5. Re:Jesus Saves by Anonymous Coward · · Score: 0

    what does the H stand for?

  6. Re:can someone explain by Anonymous Coward · · Score: 0

    yeah really.....maybe its just too early, but I read the submission 3 times and still makes little sense. WTF???

  7. Re:Most poorly written slashdot comment...ever. by Anonymous Coward · · Score: 0

    Ryan's Law: Make three correct guesses consecutively and you will establish yourself as an expert.

  8. exactly what is this about? by Anonymous Coward · · Score: 0


    I read the post, and the link goes nowhere...
    What the hell is this talking about?

    Something about the RIAA and encryption needs to be in the background? Damn it, organize your thoughts BEFORE you speak!

    1. Re:exactly what is this about? by nolife · · Score: 1

      Same here..
      Can someone give us give a brief description of what this articles is trying to say?

      --
      Bad boys rape our young girls but Violet gives willingly.
    2. Re:exactly what is this about? by Anonymous Coward · · Score: 0

      Q: How do you keep a mindless Slashdotter occupied for hours?

      Click here for answer!

  9. Shirky, Clay Shirky - who the hell is he? by Anonymous Coward · · Score: 1, Funny

    I just heard some sad news on talk radio - some goomer named Clay Shirky is still unknown as of this morning. There weren't any more details. I'm sure everyone in the Slashdot community will continue to not know who the hell he is - even if you didn't enjoy his work, there's total denial of his contributions to popular culture. Truly an American cipher.

    1. Re:Shirky, Clay Shirky - who the hell is he? by popo · · Score: 2, Informative


      He's another guy who goes "Big Picture" and "Philosophical" because the nuts and bolts of technology, programming, and in this case encryption are (and always will be) beyond him.

      He's a lightweight.

      If you're still confused: See "Esther Dyson"

      --
      ------ The best brain training is now totally free : )
  10. Re:Jesus Saves by Anonymous Coward · · Score: 0

    Harold.

  11. Re:can someone explain by securitas · · Score: 4, Informative


    what eating peas has to do with encyprtion? I'm totally lost.

    Shirky means that using encryption is good for you and that's the approach that proponents (Cypherpunks) have used, even though using encryption has historically been difficult and an unpleasant experience for the average user. Hence the "eat your peas" reference, similar to parents who try to get children to eat vegetables which they find distasteful (an unpleasant dining experience).

  12. Re:Most poorly written slashdot comment...ever. by devoss · · Score: 1

    oooooh.... him card read good.

  13. Apple, meet Orange by Squideye · · Score: 3, Insightful

    Before I read the article, I'll just point out that the Cypherpunks' "eat your peas" approach actually gives the users control over how their anonymity and security takes place. Sure it gives you more responsibility -- you have to buy the locks yourself -- but it also gives you control over how it happens. You basically only have to trust the person who made the lock, but you can have the blueprints so that you know it works.

    RIAA-style privacy is basically a Housing Company telling you that they'll take care of everything, and that you don't need to worry because you're probably safe. Note, of course, that the RIAA companies are the types whose security has been foiled by such stunning feats of ingenuity as writing on a CD with a magic marker, or an algorithm written by a 16-year-old that can be implemented using as much space as fits on the side of a pencil.

    What the RIAA gets people to adopt is the style of "no-brainer" security people are used to when they get their lockers broken into at the gym, as opposed to asking us to take some frickin' responsibility for ourselves as the Cypherpunks would urge.

    1. Re:Apple, meet Orange by PossibleMat · · Score: 1

      Funny that you mention yourself that you didn't RTFA. What Shirky is saying is that by suing its customers, the RIAA is giving the long-awaited incentive to people to use alternatives to Kazaa that use encryption to protect privacy.

      --
      Have you Meta Meta Moderated lately?
    2. Re:Apple, meet Orange by jovlinger · · Score: 1

      I thought apples and oranges too, but with a different twist.

      It appears that the two tools linked to do not provide what he discusses. The first red flag was when he said that diffie-hellman was an anonymity tool. not so! Diffie-Hellman is secure key exchange over insecure channel.

      This means you know with whom you're exchanging.

      The tools he lists are both meant to be used to create small *closed* groups where the participants are invited in -- much like the Amiga warez scene, which is completely different than the open p2p napsterish clients. And for all intents and purposes, you don't need encryption for that, merely an invite-only membership policy. I really don't think the RIAA is going to do physical wire-taps.

      What I *expected* the article to describe would be mixmaster-like forwarding p2p networks.

      I remember ATT having such a network called clouds, although I don't remember to what extent encraption was used. Given that it's open to join, it wouldn't gain you much. The point with these networks is that while it is openly known that you are a part, no-one knows whether a request to the outside or inside from your machine was instigated by you, or forwarded to you from another machine on the net. Basically, the blame for any action is shared over all participants.

      There are a couple of weaknesses I can see, if one party (or cartell or group of people) own a sizable fraction of the machines; since they'll know which requests they've instantiated/ forwarded/ serviced, you should be able to get a pretty good model of the real origin of other requests. I think. Need to muse on this some more.

      You'd have to look into your local laws to see whether you are required to self-police such areas: for example, is a mall responsible if a mugging occurs on its floors? Probably not.

  14. changing laws by toasted_calamari · · Score: 5, Insightful

    from the article:
    to a first approximation, every PC owner under the age of 35 is now a felon.

    This may or may not be an exaggeration, I have no idea, but Shirky makes a good point. When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

    At this time, it seems that the RIAA is winning, and we are moving inexorably towards a world where large corporations control what people do with there computers. However, because there is so little popular respect at the moment for copyright law, it follows that eventually those laws will change.

    Over the next 5-10 years, I predict that many laws will be completely rewritten to better accommodate the changes that the internet has brought upon society. Many of these changes will be for the better, and the end result will almost certainly be a more free and open society. Unfortunately, democracies are slow to act, so there will be years more of legal confusions and abuses of power before things finally straighten out.

    1. Re:changing laws by Jafafa+Hots · · Score: 4, Insightful

      I wish I could be as optimistic as you... but personally I think we'll have a "War on Piracy" to go with our "War on Drugs" rather than more sensible laws.

      --
      This space available.
    2. Re:changing laws by Anonymous Coward · · Score: 0

      You'll give a shit while receiving a blowjob? Ew! I'm certainly not blowing you!

    3. Re:changing laws by poot_rootbeer · · Score: 4, Interesting

      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      Most people routinely travel 5-10 miles above the speed limit on the highway -- regardless of what the posted limit is. Should we change the limit from 65 to 75 so most of us aren't breaking the law anymore? Should we consider the studies that show traffic fatalities increase when speed limits are raised?

      It's human nature to choose the course of action that benefits one's self the most, but if that action has a net effect of reducing benefits to others (by not compensating them for their work, or by killing them in a car crash), it is right for the state to restrict your ability to follow that course of action.

    4. Re:changing laws by multimed · · Score: 4, Insightful
      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      This is certainly an excellent rule of thumb and our legislators should follow popular opinion to laws or at least in theory, they won't be re-elected. Just keep in mind that this is concept should never be taken as an absolute. The Founding Fathers were concerned with what the potential for what they called "tyranny of the majority," South Africa being the typical example.

      Regarding legislation to change copyright laws to make them more reasonable, it's just not going to happen for two major reasons. First, I really don't think there will ever be enough critical mass of informed, upset people. Probably 90% of the population either doesn't care or just assumes that copyright is a natural phenomena rather than an artificial constraint created as a means to an end--creation of works and the betterment of society. And second, the entertainment industries have too much money and are unified on this issue. Compare this to the do-not-call legislation. That is an example of what it takes for a grass roots movement to defeat an industry lobbyist on a big issue. The entertainment industries have tons more money than the DMA and telemarketing phone calls were in people's faces, constantly annoying them into complaining to their legislator. For the vast majority of the people they don't ever see any impact of unbalanced copyright laws on their lives.

      --
      Vote Quimby.
    5. Re:changing laws by MisterMook · · Score: 4, Interesting

      That's exactly what happened when they raised the speed limit from 55mph though, stopped the ban on alchohol, started examining segregation, and probably a whole bunch more that my soda blurred brain can't think of right now. If a minority chooses to do a thing then it's a cancer, if the whole organism begins to act a certain way and the minority are the people who don't...Is it selfish for a society to not act hypocritically? If all of society begins to act a certain way and the left hand chooses not to, should society sit idly as the left hand stabs the right because it's not acting the same as before? Now the question comes, is filesharing the issue and if it is such a prominent component of something that hasn't been identified properly as the issue, then what is that issue? A huge segment of society obviously is chosing to act this way, is it selfishness or consensus?

    6. Re:changing laws by milo_Gwalthny · · Score: 1

      Studies have shown that the average speed in excess of the posted limit has dropped from more than 10mph to about 1mph on roads that raised their limits from 55mph to 65mph. Arguments about its impact on highway deaths go both ways, but it's hard to imagine that, since the actual speed driven remains virtually unchanged, more accidents can be attributed to the change.

      Personally I think that, aside from the whole erosion of respect for the law thing that is usually argued, the lower overhead from stopping the enforcement of useless laws is a good in itself.

      --
      Milo
    7. Re:changing laws by Anonymous Coward · · Score: 0

      The speed limits were set nation wide at 55 mph as a response to one of the gas crisii (sp?) in the 50s or 60s, I forget when it happened, and don't care enough to look it up. At the time, cars got significantly better gas mileage at 55 mph than 65 mph. It had nothing to do w/ traffic fatalities and such. Which is why speed limits have gone up; modern cars can get efficient gas mileage even at the higher speeds.

    8. Re:changing laws by freeweed · · Score: 1

      "tyranny of the majority," South Africa being the typical example.

      Correct me if I'm wrong, but I thought that whites were by far the minority in South Africa, but they held the power for a long time. Perhaps a better counter-argument being the slave trade?

      I've always held that "tyranny of the majority" is only dangerous when it impacts an individual's rights and freedoms. Slavery certainly does this. Copyright infringement? I don't see it. You're free to make music as much as you want, but I don't see it as a basic human right that you should profit from it, unless our society so agrees. What if everyone agreed to never listen to music again, save for a small minority? Are we infringing upon their freedom?

      --
      Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
    9. Re:changing laws by zeasier · · Score: 2, Informative

      Over the next 5-10 years, I predict that many laws will be completely rewritten to better accommodate the changes that the internet has brought upon society. Many of these changes will be for the better, and the end result will almost certainly be a more free and open society.

      Alternative lisencing scemes have already been created, which are the copyright equivalent to the GPL. These alternative copyright systems will compete with full copyright instead of replaceing it. As more and more artists put their work into liberal lisencing scemes it will become harder for others to do business the old fashoned way. The fact that these alternative lisences exsist ensure the future of full copyright, because now producers and consumers have a choice. For this reason there will always be some content locked out of the public domain. Old fashoned copyright law will not change, but it's perseption and proliferation of use will.

      Take the Microsoft anti-trust case for example. It's no coinsedence that the issue puttered out at the same time Linux was gaining in popularity. It seems that legal alternatives, (the GPL) and public action beat the government to the punch. For the most part, copyright will follow the same path.

    10. Re:changing laws by orb_fan · · Score: 1

      A little offtopic, but pro-pot advocates have been saying the same about the drug laws for years, and look at where that's go them.

      While you have the government in the pocket of corporations (whether music or law-enforcement) you'll get no changes to the status-quo. If we fix campaign financing, then initiatives to change laws will actually get a chance.

      The article does refer to the simularities with prohibition, but one of the reasons for it's repeal was that politicos liked a drink as much as the rest of us - I don't see many downloading the latest boy-band.

    11. Re:changing laws by mjh · · Score: 2, Informative
      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      I like the way that John Parry Barlow expresses this idea:

      "Neither the best efforts of Judge Patel - nor those of the Porsche-driving executives of the Recording Industry Association of America, nor the sleek legal defenders of existing copyright law - will alter this simple fact: No law can be successfully imposed on a huge population that does not morally support it and possesses easy means for its invisible evasion."

      - Quoted from this wired article.

      --
      Key to financial independence: Spend less than you earn. Save and invest the difference. Do it for a long time.
    12. Re:changing laws by Myopic · · Score: 1

      You say that if enough people are violating a law, then the law is probably bad. In general I agree with you, and in this instance I agree with you, but (to me) it's clear that the pragma is not an absolute: consider apartheid or spousal abuse or drunk driving, all of which were once more widespread than today, and each of which required a change on the part of society.

    13. Re:changing laws by Zork+the+Almighty · · Score: 1

      They don't have a clear, overwhelming majority like the file-sharers do.

      --

      In Soviet America the banks rob you!
    14. Re:changing laws by Tackhead · · Score: 1
      > The article does refer to the simularities with prohibition, but one of the reasons for it's repeal was that politicos liked a drink as much as the rest of us - I don't see many downloading the latest boy-band.

      Which is to say that we won't see the end of the Copyright Wars until 30-40 years from now. When people currently swapping Britney and Eminem MP3z rule the country.

      I'm sure there's a lesson somewhere in there about being very careful about what you wish for.

    15. Re:changing laws by orb_fan · · Score: 1

      What? Pot smokers are a minority ???

    16. Re:changing laws by Zork+the+Almighty · · Score: 1

      People who regularily smoke pot, versus people who regularily share files ? I'm not so sure anymore.

      --

      In Soviet America the banks rob you!
    17. Re:changing laws by orb_fan · · Score: 1

      Except no politician will bite the hand that feeds. Look at how many of those ex-hippies are calling for the legalization of pot.

      Besides, I don't see this as the Copyright Wars. The RIAA and artists have the right to protect their livelihoods, just as I would have the right to go after anyone copying software that I wrote.

      However, I think their reasoning is wrong. It's not that people don't want to pay for music, otherwise iTunes would have tanked, rather it's the ease of acquisition people like, and the broad choice available (look how well those Now XXX compilations sell).

      Someone-else mentioned this, but I think it's worth repeating - artists should set up online tip-jars, or the RIAA/labels should set up sites where people can buy a 50c license for each song they've downloaded.

    18. Re:changing laws by orb_fan · · Score: 1

      Some would say it's the same group...

    19. Re:changing laws by Anonymous Coward · · Score: 0

      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      Tell that to the six millon people who died in the Holocaust.

      I don't mean to equate filesharing with genocide, but I am disputing your premise. Just because the majority of society is breaking a law, doesn't mean the law is bad and needs to be changed.

      Besides, sweeping generalizations are invariably wrong...

    20. Re:changing laws by Karadryel · · Score: 1
      To a certain extent I agree with you - however, I think people need to be a bit more careful in how they argue it. This particular position is really pretty untenable:

      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      Why is this wrong? The standard response is going to be Nazi Germany. Or take modern-day Rwanda. Mid-90's Serbia. The fact that a bunch of people are doing something does *not* make it right. All it means is that there is a disconnect between the rules and the popular perception of what's appropriate. Arguing that the popular perception is always right ... that's a dangerous position to start adopting.

      I mention this not because I think that you are incorrect in attacking the RIAA's "eternal copyrights and death to those who oppose us" strategy, but because this argument weakens the position of people presenting more well-considered positions. In the same way that the community needs to be wary of supporting DDOS's on SCO (real or imagined), we need to be wary of adopting hardline rhetoric which will only alienate.

      Focus on the easy points, the low-hanging fruit that the RIAA is giving out by the bushel, to point out all the problems that are wrong with the current model. Just don't try to abstract it into some untenable moral absolute. They're wrong - just point that out, don't adopt some crazy extremist position just to distance yourself from them.

    21. Re:changing laws by cpt+kangarooski · · Score: 1

      Besides, I don't see this as the Copyright Wars. The RIAA and artists have the right to protect their livelihoods, just as I would have the right to go after anyone copying software that I wrote.

      But should they have these rights? It's not as though they're self-evident. I'm willing to say that there may be a good reason to permit it, but that means there'll be other factors to consider that might weigh against such a right, and that in the final analysis we might want to limit the extent of the right.

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    22. Re:changing laws by orb_fan · · Score: 1

      But should they have these rights? It's not as though they're self-evident.

      As we don't live in a socialist utopia, of course anyone who produces, for want of a better word, intangiable products has the right to be able to make a living from them. It definitely can be argued that the artist's lifetime + 70 years (or whatever it stands at now) is way to long and is only there for the benefit of corporations, not artists. Just what percentage of the music available on the P2P networks are from dead artists where it can be claimed the song should be in the public domain? Practically zero.

      The laws need to be there in one form or another to allow artists to produce works that others can then enjoy - and it's not just for entertainment, but also for "useful" products as well.

      Let people make a payment for music that they've downloaded, but leave the distribution channel alone - they would make far more money that way.

    23. Re:changing laws by Anonymous Coward · · Score: 0

      I disagree. I think the corporate bought laws and legal crackdowns will continue, and the situation will get worse, not better; I think the US in particular is going to want to establish (re-establish?) its control over the internet, and will do so under the auspices of putting it under the control of the United Nations. It will, via the WIPO, lobby for censorship with wide-treatied laws that it has already bought, like the DMCA and the EUCD, and more close corporate control of the internet.

      I also predict the coming of an anonymous communication network capable of hitting critical mass, like Napster and Kazaa did. There's real interest in that area, many failures or semi-failures like Freenet, GNUnet and Entropy, but sooner or later someone will come up with something good and very quickly - about as fast as the adoption of Bittorrent, maybe only a matter of mere weeks from the 1.0 release - almost everyone of note will be using it leaving the authorities in a rather tricky situation since this network is, in time, likely to replace or augment every standard internet protocol with a better designed, more secure, anonymous version.

      To counteract the censorship, I really think the entire internet, more or less, is going to become a global anonymous darknet.

    24. Re:changing laws by cayenne8 · · Score: 1
      "Most people routinely travel 5-10 miles above the speed limit on the highway -- regardless of what the posted limit is. Should we change the limit from 65 to 75 so most of us aren't breaking the law anymore?"

      Yes...PLEASE raise the limits. By the way, aren't most of the limits already at 70 mph that aren't in the city?

      As another poster said, the lowering of the limits to begin with were NOT for safety reasons. They were to conserve oil during the 70's gas shortages. And yes...I would agree that accidents with fatalities might increase with higher limits.....but, I don't know that accidents themselves would increase.

      I find that 85 or so is perfectly safe on the highways on a long interstate trip. Thanks God for radar detectors!!!

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    25. Re:changing laws by cpt+kangarooski · · Score: 1

      As we don't live in a socialist utopia, of course anyone who produces, for want of a better word, intangiable products has the right to be able to make a living from them.

      You still haven't supported your argument.

      America was not a socialist utopia in 1790 either, but they didn't give copyrights to anyone other than Americans that wrote books or drew maps. Painters, musicians, sculptors, choreographers, so forth, were screwed. How could that possibly be, if your so far unfounded premise is correct?

      It definitely can be argued that the artist's lifetime + 70 years (or whatever it stands at now) is way to long

      Why is it too long? First you say artists have a right to make a living off their works, and now you're saying that it's not too much. Your statements so far seem to lack rhyme or reason.

      I'm looking for you to back up your wild ass claims with some sort of overarching theory. It should explain WHY artists should have a right to make money from their works via copyright, why it might apply to some artists and not to others, why we would make some rights exclusive to the artist and not others, why we'd choose certain term lengths, etc.

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    26. Re:changing laws by Prior+Restraint · · Score: 1

      [O]f course anyone who produces, for want of a better word, intangiable products has the right to be able to make a living from them.

      I would clarify your comment by stating that people have the right to try to make a living from them. I produce the intangible product of unintentionally amusing people with my frequent social gaffes. I should not, however, expect to make a living from it. Being a dork is not a growth sector in this economy.

      As much as people don't like to think of it in these terms, Kazaa and the RIAA are competitors offering nearly the same goods. As long as consumers don't think the RIAA's "value-add" is worth the price differential, Kazaa will win.

      Personally, I do think the RIAA offers something that Kazaa can't: the ability to re-rip the songs with my preferred quality level/file format. Granted, most of their selection sucks, but Kazaa matches them there, so it's a moot point.

    27. Re:changing laws by Josh+Booth · · Score: 1

      In New Jersey, most roads are still 55, with only some streches of roads, like 295, at 65. Thankfully, most of the two lane roads are already at 45 or 50, where I would say that 55 is probably the maximum you could safely do, considering how winding they tend to be. The multilane highways could definately all be made 65, and 295 could even be made 75. Route 1 would be dangerous above the posted 55, and during rush hour you are lucky if you go above 45. Maryland is horrible, since it is one giant city and every road is 35 MPH. Of course, I drive a 4 cylinder Geo Tracker, so I couldn't make use of an 85 MPH speed limit. :-)

    28. Re:changing laws by cayenne8 · · Score: 1
      Where I live, and travel, in the Southeastern and South Central part of the US...you just aren't that congested. And when I've driven west to AZ and all...such great open stretches of highway, with nothing out there...Hell, I had truckers blowing past me and at times I was at an easily sustained 103+ mph.

      I rarely look at the speedometer these days...just when the detector goes off...I drive about what everyone around me is doing...or just a little faster.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    29. Re:changing laws by Anonymous Coward · · Score: 0
      one of the gas crisii (sp?)
      The plural of "crisis" is "crises" (pronounced CRY-seez). No, not every word with an odd ending pluralizes to -ii like "radius" does :)
    30. Re:changing laws by Anonymous Coward · · Score: 0

      Drivers tend to travel 5-10 mph over the speed limit regardless of what the speed limit is, so speed limits do make a difference. ("20 limit? I'd better slow down to 30!")

    31. Re:changing laws by tambo · · Score: 1
      This is certainly an excellent rule of thumb and our legislators should follow popular opinion to laws or at least in theory, they won't be re-elected.

      It may well work that way in the United States of Idealism, but here in America, that's terrifically naive.

      Look - your government is currently conspiring against you. They've assumed the power to spy on your library habits and credit statements while barring anyone from notifying you. They've assumed the power to designate you (quite arbitrarily) an "enemy combatant," so that they can whisk you out of your life and out of the justice system without ever charging you or letting you talk to an attorney.

      These powers were authorized by Congressmen at the behest of our President. They're some of the most maliciously hostile pieces of legislation ever passed.

      So why haven't we voted them out of office yet? Partly because these abhorrent laws were dubbed the "Patriot Act," and most Americans like feeling supportive of patriotism. And partly because Americans have been whipped into such a constant state of fear and panic that we'll tolerate anything as long as someone tells us we'll be safer as a result. (Seldom mentioned is the fact that we're trading one kind of safety - terrorism by foreign terrorists - for another - terrorism by a government gone nuts.)

      But largely - and this is why your notion is admirable but unrealistic - Americans just don't care about their representatives. They care about the must-see-TV-style presidential elections - it's like a political Superbowl, and Americans line up picking sides! But Congress? Mention the term "Senator," and the average American's eyes begin to glaze over. They barely know their representatives' names, let alone their voting histories.

      If you think this is cynical, then consider this: Senator Fritz Hollings successfully retired after seven terms in office, despite being a ridiculous shill for big media's hostility toward consumers (cf. DMCA and its odious big brother, the SSSCA.)

      - David Stein

      --
      Computer over. Virus = very yes.
    32. Re:changing laws by Alsee · · Score: 1

      >To a first approximation, every PC owner under the age of 35 is now a felon.

      This may or may not be an exaggeration, I have no idea


      It isn't. Essentially anyone who has ever used P2P is guilty.

      The NET act (No Electronic Theft) makes it a felony to infringe for "for purposes of commercial advantage or private financial gain" with a prison sentence of up to five years.

      There's a catch though. The NET act also added a new DEFINITION to the law:
      The term "financial gain" includes receipt, or expectation of receipt, of anything of value, including the receipt of other copyrighted works.

      If you transmit one copyrighted file and download one copyrighted file you're guilty.

      Hell, you're guilty if trade audio cassettes of radio broadcasts with a friend.

      Other lovely laws bought by the RIAA and friends:
      AHRA - Audio Home Recording Act: Mandates DRM in all digital audio consumer products. This law exterminated all new products in the field for an entire decade. DAT (Digital Audio Tape) - dead. Digital Compact Disc - dead. Sony Minidisc, dead. Dat was a particularly promising technology, all the benefits of CD's on an almost standard cassette tape. iPods are only legal because of a loophole in the law.
      DMCA: probably everyone here knows about this abomination. Exterminates fair use, allows copyright holders to issue themselves suboenas without judicial review and with a non-functional "under penalty of perjury" clause, and an endless list of nasty side effects.
      Sony Bono Copyright act - also known as the Mickey Mouse copyright act: denied the public free access to all materials rightfully due them for the next twenty years. It retroactivly extended all copyrights. The sponsor of the bill called for copyright to last "forever less a day", frustrated by the fact that the constitution prohibits "forever". Expect another extention in the early 2020's when Mickey Mouse approaches copyright expiration again.

      I forget which law, but one requires all VCR's to be crippled with Macrovison.

      Feel free contribute any bad laws I missed.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    33. Re:changing laws by multimed · · Score: 1
      I think you should have actually read the rest of my post before going off on a rant about my idealism--here's link just to make it easier.

      I said it was a rule of thumb they should follow, not one they do follow. Clearly I was implying they don't and should. I'm not quite sure where you drew the conclusion that I was in the least bit disillusioned about the the sad reality. I did say that in theory elected officials who act counter to public opinion won't be re-elected. Assuming you missed the "in theory" part, maybe I could see how you jumped to the conclusion my glasses are rose tinted. But had you read the next paragraph intead of going off on a rant about the Patriot Act (which however true, is still way offtopic) you might have noticed that I was critical of public apathy and corrupt politicians taking money instead of doing the right thing. Seems to me those were the same points you made, minus the name calling and offtopic rant.

      --
      Vote Quimby.
  15. How about "Fear of RIAA" by JUSTONEMORELATTE · · Score: 4, Informative

    The RIAA isn't setting out to do this, it's happening as a result of peoples' fear of a RIAA lawsuit.

    --

    1. Re:How about "Fear of RIAA" by Squideye · · Score: 1

      Having now read Shirky's article, I think that the Slashdot headline should absolutely be changed to read "Fear of the RIAA". Right now it's misleading, resulting in ill-informed or slightly off-topic posts like the first one I made (*blush*)

    2. Re:How about "Fear of RIAA" by fruey · · Score: 1

      I'd love to know if anyone actually buys those mod points. I mean, apart from trolls who are desperate to be seen, who else cares? We can all write good posts, and post early, to get modded up...

      --
      Conversion Rate Optimisation French / English consultant
  16. Interesting, but apathy will prevail by Tangurena · · Score: 5, Interesting

    Nice article. Unfortunately, apathy will ultimately reign supreme. People want to turn on their computer to get something. They don't want to be car mechanics in order to be able to drive a car. If the p2p software comes preconfigured to use encryption, then it will get used. If it has to be enabled, then it won't happen very often. It does not really matter if I want to use PGP, if no one else I communicate with is willing or able to install and use it.

    1. Re:Interesting, but apathy will prevail by mitheral · · Score: 2, Informative

      The point of the article is that there are now enough users (even if only a small percentage) that want the encryption. Therefor the developers as including it as the the default. And as you stated users don't change the defaults. Encryption is just there.

    2. Re:Interesting, but apathy will prevail by ScooterBill · · Score: 1

      "If the p2p software comes preconfigured to use encryption, then it will get used"

      Exactly! Why do you think that there are all these unsuspecting RIAA targets out there. Simply because Kazaa and other clients default to sharing your hard drive with the world. The default install becomes the standard whether you like it or not.

      M

    3. Re:Interesting, but apathy will prevail by jafac · · Score: 1

      I didn't buy a radar detector and jammer because I'm an idealist about the illegal search and seizure of my private vehicle speed information.

      I did it to get out of getting caught speeding. Speeding saves ME time. Time is money. Not paying the fine saves me money. My standard of living is measurably improved by my ability to increase the efficiency of my commute.

      Idea #1, people will be apathetic about.

      Idea #2, is pragmatism.

      I veiw anti-P2P download enforcement as similar to speeding. They can't enforce the law for everyone. Nobody wants to be that unlucky 1 in 1000 who gets sued for $5000 (or more). And downloading music - free or not, is a convenience factor that improves one's standard of living.

      --

      These are my friends, See how they glisten. See this one shine, how he smiles in the light.
  17. Re:Most poorly written slashdot comment...ever. by archen · · Score: 4, Funny

    It was unintelligible unless you read it three or four times.

    Wait for about three days and Slashdot should have a sufficent ammount of dupes to make it much more clear =P

  18. Digging their own graves... by Noryungi · · Score: 5, Interesting

    Anybody else thinks that, if encrypted file-sharing becomes a reality, the RIAA will simply implode?

    From the article:
    to a first approximation, every PC owner under the age of 35 is now a felon.

    Now remember what the Cypherpunks said a few years ago?

    If crypto is outlawed,
    only outlaws will have encryption


    There you have it: goodbye RIAA. We hardly knew ya. You made us all felons, and by doing so, you opened the floodgate that were going to drown you.

    --
    The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
    1. Re:Digging their own graves... by Feyr · · Score: 2, Informative

      there's multiple problems with anonymous, encrypted peer to peer whitout users oversights.

      1. your IP address is still visible (lesser of all)
      2. WHO are you trusting to view your files? who's to say it's not a RIAA-mandated agency ?

      3. WHO are you trusting to download from?

      4. even if you KNOW who you're talking to, if you don't manually verify, on a secure medium, the key used. how do you know there's no middle-man? the dsniff tool widely show this (sshmitm) by assuming users always click "yes" when prompted about unknown or changed hosts keys, that's sysadmins we're talking about, imagine joe-nowhere now?

    2. Re:Digging their own graves... by xie · · Score: 1

      Anybody else thinks that, if encrypted file-sharing becomes a reality, the RIAA will simply implode?

      They seem to be set to waste every cent they currently have on protecting there music. So even if they couldn't sue every user, what would keep them from wasting more $ on flooding the next wave of p2p with hundreds of thousands more copies of corrupted music files? The average user I think would just "move on" to the next up and coming p2p and the RIAA only has to repeat there effort.

    3. Re:Digging their own graves... by lynx_user_abroad · · Score: 2, Interesting
      there's multiple problems with anonymous, encrypted peer to peer whitout users oversights.

      Those are not problems of the encryption, nor even of the system which employs it. The problems you mention result from trusting an untrustable contact.

      It's not an IP address you're trying to conceal, (having an IP is not illegal) it's the activity occuring at that IP address which you're concerned with. Similarly, if you get your content only from and offer your content only to trustable people, then you don't have to worry about them linking your conduct with your identity.

      The hard part is finding trustable contacts. Encryption does not help in this, but it is an effective tool for ensuring that information is only being disclosed to to whom you think you are disclosing it to.

      Any, yes, stoopid people can shoot themselves in the foor even with an encrypted gun. Nothing can prevent that. Onlt the advice "Don't have stupid friends." seems of any help for that.

      --

      The thing about things we don't know is we often don't know we don't know them.

    4. Re:Digging their own graves... by stwrtpj · · Score: 2, Insightful
      Anybody else thinks that, if encrypted file-sharing becomes a reality, the RIAA will simply implode?

      Not before they attempt to lobby Congress to pass laws banning encryption use by the masses.

      --
      Karma: Frotzed (mostly due to the Frobozz Magic Karma Company)
    5. Re:Digging their own graves... by Troed · · Score: 1

      All those issues are already solved.

      Freenet

    6. Re:Digging their own graves... by PorkNutz · · Score: 0
      But wouldn't those things make for a pretty innefective "P2P" network?

      One of the things that makes current P2P schemes most effective is the openess with which it is done. Evevrybody shares with everybody else.

      If you can only share with a selected few people who you can be 100 percent sure you can trust, then you would have nowhere near the content available, making your little private network..... well,... Crappy.

    7. Re:Digging their own graves... by lynx_user_abroad · · Score: 1
      Well, which do you want? Essential Liberty or Temporary Security?

      --

      The thing about things we don't know is we often don't know we don't know them.

    8. Re:Digging their own graves... by Anonymous Coward · · Score: 0

      If crypto is outlawed, only outlaws will have encryption

      Always love it when bleeding heart liberals borrow from the pro-gun people. This original quote is:

      If guns are outlawed, only outlaws will have guns.

    9. Re:Digging their own graves... by Anonymous Coward · · Score: 0

      Always love it when bleeding heart liberals borrow from the pro-gun people. This original quote is:

      If guns are outlawed, only outlaws will have guns.


      And I love it when the opposite happens:

      Achtet nur ist Kommunisten, wenn Kommunismus geachtet wird. -- Karl Marx.

      Okay, I just made that up and ran it through the fish, but I thought it was pretty funny.

    10. Re:Digging their own graves... by Anonymous Coward · · Score: 0

      Man-in-the-middle attacks are meaningless on distributed networks.

      You should be talking about Sybil attacks.

      Trust me, all of this is possible. Sybil attacks are hard to guard against, but it is not in fact impossible, just specifies one of the parameters of the problem to solve.

    11. Re:Digging their own graves... by Feyr · · Score: 1

      i'll admit i had never heard of sybil attacks before now. i just read about them a bit

      at first i thought "hey, no big deal it looks just like a ddos" but i see the anonymity issue with such an attack now, you'd need an inordinate ammount of nodes for an effective attack of that type though (depending on the size of the anonymizing groups i guess)

      thanks for pointing it out

    12. Re:Digging their own graves... by UserGoogol · · Score: 1

      I'm pretty sure those Cryptopunks might've been not Liberals, but Libertarians. Libertarians agree with you about guns, and their hearts do not bleed.

      --
      "Never attribute to malice that which can be adequately explained by stupidity." -- Hanlon's Razor
    13. Re:Digging their own graves... by Anonymous Coward · · Score: 0

      You clearly don't know peer to peer applications.

      Go read up on GNUnet. It takes care of every issue you mentioned plus many more. It's superior to Freenet as well.

      It's only current disadvantage is that it only runs on Unix.

  19. I prefer visible encryption by dnoyeb · · Score: 4, Insightful

    I do not like hiden encryption. I like to know everything is working and not get to confortable. Don't want to be cought ignoring that lock icon on your browser these days.

    1. Re:I prefer visible encryption by Dibson · · Score: 1
      But the great thing about encryption being implemented transparently is that you won't know it's happening, and you can keep your privacy from whover may try to keep track of your dirty little secrets. It doesn't affect you at all (you get all your data, and so do the people you communicate with) and it keeps you away from trouble.

      How often does the lock on your browser change how you surf the web?

      -----

      --
      -- Why keep us waiting? We are not made of time.
    2. Re:I prefer visible encryption by xchino · · Score: 1

      So you're saying if they put an icon of a lock in the program, you'll use it? What greater guarantee does that really give you? You still have to put your trust in the browser, and assume that it works as you expect. How is that different than the trust you put into a p2p program's encryption? Unless you're sniffing the actual traffic, there's no way to tell if it's actually being encrypted during transmission. What they are talking about is not necessarily hidden away from your prying eyes, it's just transparent in the normal operations of the program, so that people won't "ignore that lock icon", because by default it would be encrypted.

      --
      Everyone is entitled to their own opinion. It's just that yours is stupid.
  20. Re:Jesus Saves by Anonymous Coward · · Score: 0
  21. A bit rambling... by fruey · · Score: 4, Interesting
    What the article is basically saying is that because people are now losing their anonymity in a more obvious way, because they're getting sued... then they are more likely to turn to crypto.

    However it's a rather tenuous link to say that the RIAA succeeded where Cypherpunks failed. Advocates are one thing, but really the rise of P2P applications and the growing Internet user base are what have caused P2P to become a real PITA for the RIAA. Therefore they make high profile legal cases to grab media attention. However, they could not realistically target piracy any more than the police raids on weekend markets in London will stop home-burned DVDs from being sold on a stall.

    So, some people will use encryption just like Del Boy and Rodney (UK reference to Only Fools and Horses) used a suitcase for their wares and ran whenever the Police came close by. But massive public adoption of cryptography will only be because it will be built in for a reason (rather than optional) and because processors are fast enough to encrypt/decrypt on the fly with long keys... and still, it's a prediction. It's not mainstream yet - and the main thing this guy is forgetting is that the RIAA will bait and trap users with or without encryption on the wires.

    --
    Conversion Rate Optimisation French / English consultant
    1. Re:A bit rambling... by plover · · Score: 1
      First, encryption is already "built in" to Windows via the Crypto API. However, I don't know who is using it (apart from Microsoft) for anything, simply because trusting Microsoft with security has not proven to be the winning horse at too many races.

      I understand your point that encryption won't be widespread until it's "built-in", and that's been the bane of widespread adoption of crypto. But the whole point of this article is that if the most popular filesharing services adopt encryption, users will indeed begin using it as a part of their download and install of the newest filesharing client. Filesharing and the RIAA pressures will drive the spread of underground crypto.

      --
      John
    2. Re:A bit rambling... by fruey · · Score: 1

      First of all, encryption built in to Windows is not what we're talking about when it comes to filesharing. The article is saying the RIAA are succeeding in doing something which hasn't happened, to my knowledge. The author would seem to suggest everyone in P2P land is already encrypting their communications, but that's not the case. All the popular clients are still totally open - any random person can pull down a file for any other; there is no chain of trust between sharers.

      --
      Conversion Rate Optimisation French / English consultant
  22. Sad, but the truth. by Bill,+Shooter+of+Bul · · Score: 3, Insightful

    I'll even risk my Karma on it. The Slashdot communioty needs to be able to point out ways for the /. editors to improve. Making sure that there is a link in the blurb to the story mentioned in the blurb is sorta important. Don't ya think? Perhaps mr Coward, was a bit terse in his language, but honestly there are quite a few posts already that ask for the real link. So if it takes a few sarcastic, but on topic, barbs to motivate them, so be it. There is no better motivation than sarcasam. Except perhaps for a well written piece on the need for sarcasam. ;)

    --
    Well.. maybe. Or Maybe not. But Definitely not sort of.
    1. Re:Sad, but the truth. by Anonymous Coward · · Score: 1, Interesting


      Put in a cached copy of articals...
      Google does it, why not slashdot?
      Just put a "[cached]" link after the actual link in the post, so if it gets slashdotted, we can still see the artical page.
      This would help out a lot.

    2. Re:Sad, but the truth. by Anonymous Coward · · Score: 0

      I agree with you 100%, and would like to add that too often I see stories that make so sense to me. They either contain a plethora of undefined acronyms, or as in this case, assume I know some obscure reference. (Sorry, but who the hell are the Cypherpunks???)

  23. Re:Jesus Saves by Anonymous Coward · · Score: 0


    Harold.

    Read your Bible, when Jesus is nailed up he looks down and says to his followers "Cry not for me, lest you forsake my middle name 'Harold'!" At which point he got a spear in the side, his loincloth fell off and his small weiner made the crowd laugh.

  24. Adversaries help in spite of themselves by redelm · · Score: 5, Insightful
    This is yet another manifestation of how adversarial relations backfire. As Nietzsche said "What doesn't kill you makes you stronger". Unless you can force a total a total paradigm shift (Bush invading Iraq), lesser measures will be counterproductive (Iraq sanctions). Do not start a fight you cannot win.

    The RIAA has blunders at least twice. First it shutdown Napster 'way late (because it wasn't easy), now it is harassing KaZaa users with even less success. The next incarnation will be even tougher. They ought to be putting their energies into a paradigm shift like iPod. Or maybe even running their business competantly, with decent A&R budgets and better terms for musicians and customers since their distribution monopoly has faded.

    1. Re:Adversaries help in spite of themselves by Anonymous Coward · · Score: 0

      "Unless you can force a total a total paradigm shift (Bush invading Iraq), lesser measures will be counterproductive (Iraq sanctions)."
      This is offtopic but the sanctions aim was to curtail Iraqi aggression and to prevent Saddam Hussein building and keeping weapons of mass destruction. The sanctions succeeded. Iraq didn't invade anyone after kuwait and they didnt have WMD.

    2. Re:Adversaries help in spite of themselves by Anonymous Coward · · Score: 0

      ...still waiting on that total paradigm shift in Iraq...lemme know when it finishes shifting...

  25. You didn't read the article by Sloppy · · Score: 5, Informative

    The reference to RIAA is not about their use of encryption in the form of DRM. It's about how conflict with the RIAA has resulted in many mainstream non-nerd people using privacy-enhancing tools (and more broadly: gaining a pro-privacy mentality).

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    1. Re:You didn't read the article by TPFH · · Score: 1

      The reference to RIAA is not about their use of encryption in the form of DRM.

      When I read the /. headline, I thought it was saying that the RIAA has come out with a combination cryptography and spyware. That is to say, the RIAA was promoting cryptography that like the government and clipper, they would be able to override.

      In this context....

      Note, of course, that the RIAA companies are the types whose security has been foiled by such stunning feats of ingenuity as writing on a CD with a magic marker

      Would mean that people adopting such software would neither have privacy, but that the spyware portion could probably be broken too.

      Then I bothered to read the actual article (What a concept.) and discovered that what the article is really about is that because of RIAA lawsuits, the majority of the internet community has become concerned about real privacy. So the RIAA isn't providing software but motivation for privacy.

      Goes to show it pays to actually RTFA.

      But now that the Federal Appeals Court has ruled that the RIAA cannot compel ISPs to name their customers, this might be a moot point.

      Interesting article nonetheless.

      --
      This signature used to contain a cute kitty virus with ansii art. Please set the slashdot editors on fire. Thank you
    2. Re:You didn't read the article by TPFH · · Score: 1

      And only after posting this do I notice the subject line. Doh!

      Maybe it is the Gilbert and Sullivan I'm listening to right now messing with my head. Time to change the music.

      --
      This signature used to contain a cute kitty virus with ansii art. Please set the slashdot editors on fire. Thank you
  26. But... by Nijika · · Score: 4, Insightful

    Abstract idealism often tells the future. The Cypherpunks can once again send up a resounding "told ya so!"

    --
    Luck favors the prepared, darling.
    1. Re:But... by mekkab · · Score: 4, Insightful

      Abstract Idealism often predicts nothing. It tells the future, but it tells a future that never happens. What about my flying car? Vacations to the moon and mars? The 5 hour work-week?

      A running joke with a colleague of mine is that if this "engineering thing" doesn't work out, we'll become professional nay-sayers. Predict doom, gloom, and failure, and when something we predict happens (statistically speaking, we have a 50/50 shot)we can say "I told ya so!"

      --
      In the future, I would want to not be isolated from my friends in the Space Station.
    2. Re:But... by GoofyBoy · · Score: 1

      >Abstract idealism often tells the future.

      Abstract idealism is too general to accurately predict anything.

      --
      The surprise isn't how often we make bad choices; the surprise is how seldom they defeat us.
    3. Re:But... by mjh · · Score: 1
      What about my flying car? Vacations to the moon and mars? The 5 hour work-week?

      You're just impatient. It's still coming. :)

      --
      Key to financial independence: Spend less than you earn. Save and invest the difference. Do it for a long time.
    4. Re:But... by Blue+Eagle+26 · · Score: 0

      What about the Mollor Sky Car and that guy who went up with the russians for 20 mil?

    5. Re:But... by Zork+the+Almighty · · Score: 1
      --

      In Soviet America the banks rob you!
  27. snake oil by SuperBanana · · Score: 5, Insightful
    but it isn't too early to see that the shift is both profound and irreversible

    Not really. There's been several explosions of various file/disk encryption products. Your handheld device isn't a Somebody(Something?) until it's got at least a dozen "encrypted" personal information storage widgets for it.

    The problem is that encryption is 90% snake oil. Usually it's written by someone who thinks they know encrpytion- and encryption isn't, to coin the phrase, like a hand grenade; close doesn't count. Zimmerman is famous for his saying that "anyone who claims to have unbreakable encryption doesn't"(apologies for paraphrasing).

    Encryption also does little when physical security can't be controlled; Dallas Semi had the right idea with their iButtons, which brought reasonably secure key storage to the masses(if opened, for example, it erased itself) but it's gone pretty much nowhere; you just don't see them in widespread use(unlike, say, a proximity card or magswipe). I suspect even USB keys now vastly outnumber iButton devices.

    All the encryption in the world won't do you any good if you can't store the keys securely...and these days, all it takes is a janitor with a CDROM with linux that 'phones home' and sends back choice tidbits...or an ipod.....or a USB hard drive..or a USB memory key...or a blank CDR, since so many machines come with CD burners now...

    1. Re:snake oil by Proaxiom · · Score: 5, Informative
      The problem is that encryption is 90% snake oil.

      Where does that claim come from? I'm pretty sure it's not true because more than 10% of encryption is PGP (not counting government crypto, anyway), and PGP isn't snake oil.

      It's pretty easy to find snake oil, just read the Doghouse section of Bruce Schneier's monthly Crypto-Gram. But there are also a lot of good companies out there providing a lot of crypto solutions (although admittedly most of them actually license the technology from a small handful of good companies, like RSA and Certicom).

      Encryption also does little when physical security can't be controlled

      But the issue at hand, with regard to the RIAA and anonymity, is about network security. The RIAA finds it much easier to subpoena your ISP than to sneak into your house and steal your USB keys.

      Good and ubiquitous crypto certainly isn't the end-all-and-be-all of security, as you point out, but it would indeed make for 'profound and irreversible' changes in the Internet, in the vulnerability landscape, and in the threat models of pretty much everyone on it.

    2. Re:snake oil by mitheral · · Score: 2, Insightful

      None of that stuff is going to help the RIAA or your ISP who is just sniffing the wire. Yes the alphabet soup guys will be able to get a warrant and break your system but think about the cost involved. Until copyright infringement becomes a asset forfiture crime there is no incentive for the goverment.

    3. Re:snake oil by e-gold · · Score: 1

      This site has the ancient "Snake Oil FAQ" maintained by the esteemed C. Matthew Curtin. Despite its age, I still find it useful for PHB-types, etc.
      JMR

      --
      Try e-gold - (contact me). I'm NOT e-
    4. Re:snake oil by Frizzle+Fry · · Score: 0, Flamebait
      and encryption isn't, to coin the phrase, like a hand grenade;

      Believe me, you didn't just coin the phrase "like a hand grenade" to refer to something for which close is good enough, although I'm impressed that you have the audacity to pretend that you did. Or have you really just never heard that phrase before? I want to give you the benefit of the doubt and assume that that's the case, but find it hard to believe.
      --
      I'd rather be lucky than good.
    5. Re:snake oil by Eraser_ · · Score: 1

      To comment on the iButtons, we recently purchased at the High School I work at a box of these buttons, not for controlling access to computers, but for the disabled kids to open their ADA approved lockers. These kids can't spin a combination but they can push an iButton into the socket, and the locker pops open.

      I was always wondering if that product would take off, I dont see it as having taken off (the main population of students dont have them yet, and our doors still have traditional keys), but we are getting somewhere with them. These are the cheap buttons though, not the Java enabled ones. Remember though, USB started as an un-useable jack on the back of computers until Win98 came out. Now it's an overused jack on the back of peoples computers. (Yeah my Win95 CD said USB support included, never worked) Now firewire is coming to the masses on PC's, however it's crappy implementations of it. My 20$ texas instruments OHCI PCI adapter works much better than anything on a ??sound card?? or intel motherboard.

    6. Re:snake oil by Evangelion · · Score: 1


      The idiom "to coin a phrase" is also used in an alternative sense, "to bring out a hackneyed saying yet again".

    7. Re:snake oil by rifter · · Score: 1

      and encryption isn't, to coin the phrase, like a hand grenade; close doesn't count.

      Erm, in order to coin a phrase, you have to make it up yourself. Instead you are paraphrasing. The rest of your post is quite correct and insightful :).

    8. Re:snake oil by rifter · · Score: 0, Offtopic

      The idiom "to coin a phrase" is also used in an alternative sense, "to bring out a hackneyed saying yet again".

      No it is not. Or was never the last I checked. Do you have a source?

  28. Right... by Anonymous Coward · · Score: 2, Insightful

    ...and Hitler actually unified many diverse nations inadvertently by forcing them to work together.

    I guess it makes sense, but I'm not going to be putting the RIAA into my prayers at night because of it.

  29. Jesus saves... by Anonymous Coward · · Score: 0

    ...he passes to moses who shoots...and SCORES!

  30. Re:Jesus Saves by rco3 · · Score: 0, Offtopic

    Haploid.

    --

    Ce n'est pas un vrai mouvement de robot!
  31. Re:The USA sucks by Anonymous Coward · · Score: 0

    I heard Warsaw sucks. I also heard Prague is wonderful unless you happen to be Russian. So why would I want to live in Switzerland or the French Riviera?

    In case you still don't get it, the USA is a very big place. Some parts of the country are very nice, don't have massive crime or massive unemployment, and are good places to live. Other parts of the country are ugly, polluted, and may be extremely dangerous to live in just based on your ethnicity. It's not all one place, and can't be characterized in one meme, any more than you can sum up all of Europe that way.

  32. it's irreversible .... by pezpunk · · Score: 2, Funny

    like my raincoat!

    --
    i could live a little longer in this prison
  33. No no NO no!!!!! by TerryAtWork · · Score: 5, Insightful

    This is not the problem!!!!

    The problem is not people intercepting your mp3s - the problem is sharing an mp3 with a guy working for the RIAA or in my case the CRIA and they get your IP and then they go to your ISP in an attempt to get you booted off the net, exactly as happened to me.

    For instance - on Sourceforge there is a sooperencypted IRC project for safe sharing.

    Useless.

    All the RIAA spies have to do is go on the net, get that software, join the queue for mp3s then rat you out exactly as specified above.

    What we NEED is a way to share files in such a manner as the receiver has no idea what your IP is.

    This is not going to be easy. (And please don't mention Freenet ok?)

    --
    It's Christmas everyday with BitTorrent.
    1. Re:No no NO no!!!!! by zoltar74 · · Score: 1

      My idea is to create a p2p network based on PGP webs of trusts. I haven't gotten around to starting the SourceForge project for it yet, and there are issues yet to be resolved (SSL is based on X.509 certificates, not PGP keys), but I believe this could be the Next Big Thing.

      --
      Corporation: An ingenious device for obtaining individual profit without individual responsibility.
    2. Re:No no NO no!!!!! by poot_rootbeer · · Score: 3, Insightful

      What we NEED is a way to share files in such a manner as the receiver has no idea what your IP is.

      Unless it's email, in which case the sender ought to be fully and accurately identified.

      Am I the only one who sees a problem with reaching simultaneously for More Anonymity AND More Accountability?

    3. Re:No no NO no!!!!! by aardwolf204 · · Score: 1

      You mean like Win NY, as mentioned by slashdot here.

      Now if only it was in english.

      --
      Im dreaming ofa big bndwdth, That can resist the /.crowd.May ur days b merry & bright & may al
    4. Re:No no NO no!!!!! by steveit_is · · Score: 1

      UDP packets with a spoofed source is the way to go. The only problem is flow control. I think that anonymous proxies, and P2P proxying, can allow for certain anonymity for the flow control packets, and the data can be sent via spoofed UDP packets (then the transfer itself can be reasonably fast, you may have to retry a few extra times for the packets that get dropped, but its faster than proxying the entire connection). The sender will know the receivers IP, but then No one has to know the senders IP, and the sender is the one getting screwed by the RIAA these days anyhow.

    5. Re:No no NO no!!!!! by tr0p · · Score: 1
      How about an alternative where you download the media simultaneously from over a dozen random people who are sharing that media. Then there is no single person to blame for uploading the content because each person only contributed a tiny portion of the media.

      In effect, you would have to sue SO MANY PEOPLE in a scheme like this. I'm sure this is technically feasible because bit-torrent is a similar scheme.

      --

      My only regret... is that I have... bonitis..

    6. Re:No no NO no!!!!! by Anonymous Coward · · Score: 0

      > Am I the only one who sees a problem with reaching simultaneously for More Anonymity AND More Accountability?

      The difference is that email is initiated by the sender. The receiver has some interest in knowing who the sender is. For downloaded files, the receiver is the one initiating the request. Different protocols for different reasons...

    7. Re:No no NO no!!!!! by javatips · · Score: 2, Insightful

      The problem with web of trusts is that they grow very slowly (if people are very carefull about who they trusts). So the amount of stuff availlable to one will be quite small compared to the p2p networks we have now.

      It is also inevitable that at one point, someone untrusted will join the network. Then he can gatter information to build a case against sharers in the web of trusts. You probably have no way of knowing who is the stool and you'll have to scrap your web of trysts and rebuild it from scratch.

      So web of trusts will never work. You'll hve better luck with stuff like freenet that can garantee anonymity.

    8. Re:No no NO no!!!!! by Cajun+Hell · · Score: 1
      SSL is based on X.509 certificates, not PGP keys
      You might find GNU TLS to be interesting.
      --
      "Believe me!" -- Donald Trump
    9. Re:No no NO no!!!!! by bitspotter · · Score: 1

      Exactly.

      Encryption is used to hide communications from everyone except those you choose. File sharing is used EXPOSE communications to everyone except those you choose (ie, the RIAA).

      The new generation of encrypted private networks (ala WASTE) sacrifice connectivity for anonymity. The killer app of p2p wasn't file sharing, it was search - the ability for anybody (friend or foe) to find what you had.

      You cannot implement a blacklist and whitelist policy at the same time - you have to pick one. unfortunately, while whitelisting will help keep you lawyer-safe, it kills the massive network effect that made p2p file sharing the phenomena that it was (is?).

    10. Re:No no NO no!!!!! by soft_guy · · Score: 1

      You ought to be able to have both, just not at the same time and not for the same purposes.

      --
      Avoid Missing Ball for High Score
    11. Re:No no NO no!!!!! by Anonymous Coward · · Score: 0

      Yes, you are. The property you are looking for is called psuedonymity.

      As for the spam problem, well. Some forms of communication must be more carefully designed, to survive contact with strong anonymity. Email is one of them.

      For example, a strong anonymous email system would have to, to survive, be completely split from the normal internet (so that it cannot be used to send spam to the internet), and very strongly discourage bulk mailing, potentially by using something like a hashcash "stamp" for each mail sent. It must incorporate public-key encryption as well, and possibly the storage model should be different.

      It needs more thinking about, and this is one of the harder parts of . Implementing anonymous networks. Also the end result is slightly different - for example mailing lists of any kind are now right out, deal with it But then mailing lists are a bit of an ugly hack that something like usenet would do better. But then usenet also gets spam, which means more hashcash, and moderated groups (groups moderated by a small group of nyms?)... and so on.

      It's not an easy set of problems, but you're underestimating the value of solving them.

  34. Re:The USA sucks by Anonymous Coward · · Score: 0

    you obviousally havent been here...

    USA women are hard to get to suck...

    it's that stuck up attitude we got from the french...

  35. Gotta love the irony by Anonymous Coward · · Score: 1, Insightful

    While the RIAA is trying to make people believe P2P means "piracy 2 pornography" and if you let kids use a computer they'll be targeted by a pedophile (sp?), it's their own actions that will cause the development of secure P2P applications that will actually let pedophiles trade pix/vids safely.

    I wish the major news media could be made aware of this irony... but the money says otherwise.

  36. Unbreakable anonymity? by Weaselmancer · · Score: 5, Interesting

    I read the article and can find nothing there suggesting how I can trade anything for unbreakable anonymity, or even how unbreakable anonymity could even be implemented.

    Encrypt the packets? Fine. You can still trace their origin.

    Let's say that you do RSA key pairs, and build them into some sort of P2P. When two people connect, they swap public keys and encrypt the stream.

    There is nothing that says that the person who is leeching a file from you isn't Hillary Rosen. Traceroute, and you're still nailed.

    The only way to be truly anonymous in a P2P application would be to have the application auto proxy a neighbor. Here's how that would work.

    User WantMusic jumps on the new P2P net and broadcasts a desire to download "myfavoritesong.mp3", and their RSA public key along with the request. Some other user, MusicBank, has the song. Rather than having the client pull the data directly from MusicBank, have MusicBank push the data to the client. Each outbound packet from MusicBank would at random select someone else on the net and say "Take this packet of data and pass it along to user WantMusic at this IP address."

    If the someone else happened to be Hillary Rosen, all she would get is a packet of unreadable data - she doesn't have the private key. She could know who it was from, and where it was going but have no idea what it was. Might be music, might be the Linux kernel.

    If Hillary jumps on the net and tries to download myfavoritesong.mp3, all she could do is traceroute a bunch of packets to 2nd party proxies. By the definition of the protocol, they don't have the file. They're innocent. She still doesn't know MusicBank has the file.

    The disadvantage to this protocol is that it'd be slow. Each packet would have to hit a proxy. Instead of server->client, it'd be server->proxy->client. You could expect downloads to be at least 1/3 slower.

    If I had the time, I'd write this sucker.

    Weaselmancer

    --
    Weaselmancer
    rediculous.
    1. Re:Unbreakable anonymity? by PossibleMat · · Score: 1

      One problem I see is that now the RIAA would have a more easily impressionable person to send the subpoena to.
      I like the basic idea, though.

      --
      Have you Meta Meta Moderated lately?
    2. Re:Unbreakable anonymity? by gorilla · · Score: 1

      To improve the speed you could have the server which contains the file send a some number of packets directly, and the rest via proxy. If you get packets hitting your system, you can't tell if they went direct or went via a proxy. Then you could have say 1/4 send direct at full speed, and 3/4 via a proxy.

    3. Re:Unbreakable anonymity? by Anonymous Coward · · Score: 0

      This algorithm doesn't work. Depending on how it's done, there's one of two problems:

      1) Client says "who has this file?" Server says "me" and sends client public key. Client knows IP of sender. Client is RIAA. Server nailed.

      2) Client says "who has this file?" Server says to a random computer "Tell client I have this file." and passes along its public key. Random computer is RIAA. Server nailed.

      The problem is that the server has to tell SOMEONE it has the file. That someone can always be the RIAA. This is provably completely unfixable.

    4. Re:Unbreakable anonymity? by Weaselmancer · · Score: 1

      Not a bad idea, but a statistical attack would bust that protocol.

      Traceroute all the packets, and if you find that 25% come from one source, then they have the file. And you're busted.

      Weaselmancer

      --
      Weaselmancer
      rediculous.
    5. Re:Unbreakable anonymity? by Weaselmancer · · Score: 3, Interesting

      First off, thanks - seriously. I need people to challenge this so that I can spot problems. Too bad you posted as AC. So here goes.

      1) Client says "who has this file?" Server says "me" and sends client public key. Client knows IP of sender. Client is RIAA. Server nailed.

      In this protocol, only the client would broadcast a public key. Client broadcasts a file request and a public key, and somebody responds. Nobody knows who. The server never directly contacts the client under any circumstances.

      2) Client says "who has this file?" Server says to a random computer "Tell client I have this file." and passes along its public key. Random computer is RIAA. Server nailed.

      Again, server never broadcasts a public key. And even if the message was "Tell client I have this file," at this point server would have the client's public key and could encrypt the intent to broadcast the file.

      Keep it up - keep poking at this. Maybe we can establish a truly anonymous protocol here!

      Weaselmancer

      --
      Weaselmancer
      rediculous.
    6. Re:Unbreakable anonymity? by Anonymous Coward · · Score: 0
      If the someone else happened to be Hillary Rosen, all she would get is a packet of unreadable data - she doesn't have the private key. She could know who it was from, and where it was going but have no idea what it was. Might be music, might be the Linux kernel.


      Wouldn't the attacker know what you are getting because they saw your (unencrypted) request? If I send out a request for "myfavoritesong.mp3" and then other nodes on the network start sending me packets. Some of those packets are going to be "myfavoritesong.mp3" (all of them if that is the only request I have out).

      All this would do is make them go after people asking for files rather than people sharing the files.
    7. Re:Unbreakable anonymity? by JASegler · · Score: 2, Interesting

      It's not unfixable. It's just inconvienent.

      Freenet has non-trivial to break privacy for it's users. I won't say unbreakable since that's not really proveable.

      Of course it has problems:
      1) very slow
      2) very unreliable
      3) not easily searchble.

      Because of these issues it's not going to replace Napster/Kazaa/etc for normal users.

      That's always the tradeoff for security anyway. Easy to use or secure? Pick one.

    8. Re:Unbreakable anonymity? by Weaselmancer · · Score: 1

      That's a really good point. Hadn't thought of that.

      All this would do is make them go after people asking for files rather than people sharing the files.

      Well, so far it's the people sharing the files that the *AA have been after. The true-and-correct name for piracy is "copyright violation", so it's the sharers who stand to get in trouble. IANAL, so I'd like to know if I'm mistaken.

      Maybe this part of the protocol doesn't need to be fixed. It might be ok (or at least safe, anyways) to ask for a file, especially since there's no guarantee you'll get it.

      Weaselmancer

      --
      Weaselmancer
      rediculous.
    9. Re:Unbreakable anonymity? by Stray7Xi · · Score: 3, Informative

      The RIAA (or chinese government) can put a lot of nodes on the network to spy on the requests, proxies. RIAA just has to have computer to keep sending out requests for only illegal data. Eventually nodes will forward through the RIAA's proxy to the RIAA's requester.

      As long as an arbitrary (untrusted) node can see who the source and destination is, it won't work.

    10. Re:Unbreakable anonymity? by Anonymous Coward · · Score: 1, Interesting

      Well, this relates to the current batch of lawsuits as well. The RIAA isn't claiming that they can show that anybody ever actually downloaded one of your shared files. They are claiming someone COULD have.

      I think that is why they are so quick to offer settlements to people. If somebody did want to go to court with the RIAA, it probably would be difficult to prove that a copyright violation ever occurred. Of course, you would spend 10x as much to defend yourself as to simply settle.

      Same thing applies here, the RIAA sees you requesting copyrighted music files, they file suit because they believe an infringement occurred. They offer to settle for a couple grand. Now, you could fight the law suit, but you are going to spend way more than a couple grand to do it.

    11. Re:Unbreakable anonymity? by Danse · · Score: 1

      Same thing applies here, the RIAA sees you requesting copyrighted music files, they file suit because they believe an infringement occurred. They offer to settle for a couple grand. Now, you could fight the law suit, but you are going to spend way more than a couple grand to do it.

      I don't think requesting copyrighted files is illegal in the US. It's a little more of a gray area than uploading is, and it certainly isn't illegal in Canada. Only "distributing" copyrighted material is illegal, not receiving it, so you only get in trouble if you're caught uploading files.

      --
      It's not enough to bash in heads, you've got to bash in minds. - Captain Hammer
    12. Re:Unbreakable anonymity? by steveit_is · · Score: 1

      This isn't the way to do it. UDP packets with a spoofed source is. The only problem is flow control. I think that anonymous proxies, and P2P proxying, can allow for certain anonymity for the flow control packets, and the data can be sent via spoofed UDP packets (then the transfer itself can be reasonably fast, you may have to retry a few extra times for the packets that get dropped, but its faster than proxying the entire connection). The sender will know the receivers IP, but the No-one has to know the senders IP, and the sender is the one getting screwed by the RIAA these days anyhow.

    13. Re:Unbreakable anonymity? by gnu-generation-one · · Score: 3, Informative

      "Encrypt the packets? Fine. You can still trace their origin."

      Sign the packets. Broadcast them, and anyone who receives them broadcasts them to anyone else who's interested. You don't need to hide the fact you're sending packets if there's no way of knowing whether you originated them or not. You're just a part of the network, routing traffic for anyone who's interested. You're no more liable for filtering it than the Tier-1 routers are.

      You sent that packet? No I didn't I forwarded it. From whom? Don't know, it's automatic.

      Konspire2B

    14. Re:Unbreakable anonymity? by AdamG · · Score: 1

      This sounds an awful lot like Six/Four, though I don't know what the status of that project is.

    15. Re:Unbreakable anonymity? by Danse · · Score: 1

      In this protocol, only the client would broadcast a public key. Client broadcasts a file request and a public key, and somebody responds. Nobody knows who. The server never directly contacts the client under any circumstances.

      The problem here is that it doesn't really matter where the transfer is originating from. The RIAA only needs to sue whoever they actually receive the file from, which in the case of this hypothetical protocol would be just some random computer acting as an intermediary. Here's the scenario:

      1) Client (who we'll assume is RIAA) says "who has this file?" and provides a public key to encrypt responses.

      2) A server somewhere receives the request and sends back the message "I have the file" encrypted with the client's public key.

      3) The message is passed back through one or more intermediaries to the client.

      Ok, here's the problems:

      1) The client knows the address of the last computer in the chain that passed the message back to it. How does it tell the server to start sending? Pass a message back up the chain? That would be bad, because if the message can work it's way back up the chain, then so could the RIAA if they get a court order.

      2) Even if the server just started sending packets after receiving the request, someone is still stuck being the last computer in the chain that passes the packets to the RIAA client. They get sued, and if they have any info on their puter about who they got the packets from, the RIAA can start suing all the way back up the chain.



      --
      It's not enough to bash in heads, you've got to bash in minds. - Captain Hammer
    16. Re:Unbreakable anonymity? by freeweed · · Score: 1

      This would be an absolute nightmare on networks if implemented, but what about adding UDP into the mix? Spoof the source address and use md5 to checksum your packets, relaying encrypted requests back to the server/proxy if any got dropped.

      It's probably not foolproof, because I'm way out of my league here, but I've always wondered why no one suggests UDP. Wanna hide the uploaders' IP from the RIAA when they get on your network? I can't think of an easier way, unless they manage to compromise the entire system.

      --
      Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
    17. Re:Unbreakable anonymity? by steveit_is · · Score: 1

      All that routing and broadcasting is expensive though. Slow. Thats why freenet sux. (That and the whole java thing.)

    18. Re:Unbreakable anonymity? by Qzukk · · Score: 2, Interesting

      If I send out a request for "myfavoritesong.mp3" and then other nodes on the network start sending me packets.

      Ah, but as part of the network, you would be receiving and forwarding other peoples' responses too (unless you're abusing the network, in which case you deserve to be tracked down ;) So, just because packets come to you doesn't mean they were part of your request.

      Something like this could be easily turned into a freenet with less secrecy and more privacy by establishing a mesh of nodes, each with the keys of their neighbors, and each with a three-part request table. Node X encrypts Request #12531324 to each of its neighbor nodes sends it and records "I made Request #12531324". Neighbor Node Y decrypts the request, checks to see if it can answer it, then encrypts the request with each of its neighbor nodes, records "I got #12531324 from Node X". This step is repeated until it reaches Node Z, who can respond to the request (for brevity, we'll assume that the next node is Z). It responds with Response #19591531 to Request #12531324. This response isn't the data of the file, just a "this file exists here". Node Y gets the response, looks in the request table, and finds that it got request #12531324 from node X. It makes an entry in the table saying "I got Response #19591531 from Node Z".

      Finally, the user at Node X sits back down after grabbing a drink and sees that responses have started coming back for his search for "Scream*avi". Looking through the list of choices, he finds that scream 2 encode he's been missing to complete his collection. He clicks on Response #19591531, and Node X sends a message to Y saying "Fulfill Response #19591531". Node Y knows this response came from Z, so it forwards it to Z. Z sends data to Y, Y sends data to X. Loops are identified and terminated when a node handling a request finds that it already has handled that request in its table.

      So, now unlike freenet any particular node can determine whats being forwarded through it (since it decrypts every bit of data to pass it on to the next node). However, privacy is maintained: If node MPAA requests scream 3, it receives only data from neighbor-nodes, with only information about those neighbor-nodes. If Node MPAA receives a request from Node X, MPAA does not know whether X itself made the request or if X is forwarding that request from someone else. If Node MPAA responds to a request, it only talks to the Node that gave it the request in the first place.

      In order to compromise this privacy, MPAA would need to either a) read the request table of every node between and including X and Z, or b) BE every node in the network, except for X and Z, so that they know the request could not have come from anywhere other than X and gone to anywhere other than Z.

      Other things to improve usability (possibly at the risk of allowing users to cripple the network): Request and Response nodes could bear a "max_bandwidth" field, which could be lowered by a slow node but never raised, and used by Node X when determining which response to accept. Node Z could wait a random amount of time to formulate the Response (if MPAA requests foo from Z and Z answers immediately, then Z is a likely candidate for being the host of the file).

      Part of the reason for "secrecy" though, where nobody but Z and Y knows *what* is in the data, is that if Node MPAA receives Scream 2 from Node Z, even though Z may or may not be hosting it themselves, the MPAA may get to sue them for helping whoever hosted it give it to whoever requested it.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    19. Re:Unbreakable anonymity? by Anonymous Coward · · Score: 0

      User WantMusic jumps on the new P2P net and broadcasts a desire to download "myfavoritesong.mp3", and their RSA public key along with the request. Some other user, MusicBank, has the song. Rather than having the client pull the data directly from MusicBank, have MusicBank push the data to the client. Each outbound packet from MusicBank would at random select someone else on the net and say "Take this packet of data and pass it along to user WantMusic at this IP address."


      You need some way to negotiate which potential server handles the push though, don't you? If I request some popular song, I don't really want 1000 servers to start sending me a copy of it. I just want 1 copy.

      At some point, some server needs to signal they will fill the request, and then they are in trouble.
    20. Re:Unbreakable anonymity? by Myopic · · Score: 2, Insightful

      If you route your (illegal albeit encrypted) content thru third parties, and the third parties know about it, then aren't they guilty ("guilty") of contributory copyright enfringement (the same thing Napster was smacked for)? In your example, Hillary may not be able to pounce on the person originally serving the file (if she couldn't trace that person), but she could pounce on each of the people proxying a piece of the file.

      Simply not having the file on your hard drive doesn't mean that you haven't broken a part of the copyright law.

      This isn't to say that I think the law is reasonable, but to say that you haven't skirted the law with your suggested protocol.

    21. Re:Unbreakable anonymity? by gnu-generation-one · · Score: 1

      "All that routing and broadcasting is expensive though. Slow. Thats why freenet sux. (That and the whole java thing.)"

      BitTorrent does the same routing and broadcasting, and seems to manage okay under load.

      Plus I was referring to Konspire which is written in C++. In fact, the website has a whole page dedicated to why Java isn't suitable for this kind of work. Not that it affects the speed of your network connections what language the program is in.

    22. Re:Unbreakable anonymity? by steveit_is · · Score: 1

      Yeah, I just dont think that the level of 'pointless' routing and broadcasting that would be necessary to create a truly anonymous network infrastructure would be very efficient. It would by its very nature have to be. In order to hide the source of a request it would (at least occaisionally enough for plausible deniabilty purposes) have to be routed through several hops before being allowed to reach its destination. This would add overhead. Konspire is not 'anonymous' is it? I thought that konspire was just a new way of distributing and finding files, I didn't know they had a whole new protocol? Anyhow, the reason I mentioned freenet was too drive home the point of what happens to speed when you route, and reroute the traffic like mad to preserve 'anonymity', although you are really just getting plausible deniabilty, not anonimyity in the true sense of the word with freenet.

    23. Re:Unbreakable anonymity? by javatips · · Score: 1

      Search for freenet could be easily implemented using a current p2p network. Just publish the freenet key for some content on a p2p network and there you go... There is no way for the RIAA to link someone who host the searchable key to the actual content (unless you have it on your harddrive, but then the RIAA would have to get a warrant to get into your home which would require a criminal investigation).

      So you use the search capabilities of existing p2p network to publish reference on an anonymous p2p network.

    24. Re:Unbreakable anonymity? by cheshire_cqx · · Score: 1

      Your problem is, how do you communicate between the client and the server(s)? How do you determine who is going to send the file?

      If Ana, Bert, and Chuck all have myfavtune.mp3, do they all just start spraying packets? You're going to need a way to talk back and forth.

      Sue Mi, for example, requests myfavtune.mp3. She sends out her key and her IP. RIAA-Cop gets the request and sends back an OKIHAVEIT reponse, encrypted with Sue's public key, and RIAA-Cop's public key and IP. Sue sends back, encrypted, OKSENDTHEFILE. Same in reverse. Also, would you do away with browsing a node's file list? How would you work file swaps, then? What could reduce leeching?

      Now, you can disperse the packets all you want and encrypt them all you want, but you still need unique information to route the packets unless you use a broadcast method that will not scale past a couple of transactions at a time.

      You're protected from eavesdropping by an intermediate node, but not a compromised node actually sending or receiving the files in the P2P network.

      RIAA-Cop then files a subpoena to your ISP requesting your particulars using the IP address, and you're no better off than you are now.

      Think of the issue like a CDMA cell phone with good encryption. You need to have the phone ID itself to the tower in order to receive calls made to it, even though it would be hard to eavesdrop on the link, if you have access to the phone on the other end you're done for in terms of anonymity.

      The only way around this would be server-client based. Every super node is a mediating server/router. Sue Mi sends a request to the server for file X, the server looks who has file X, and then mediates the exchange with no identifying information exchanged between Sue Mi and the sender. If the server keeps no logs, could be tough to trace after the fact who got what from whom.

      But, the server is the weak point. If RIAA-Cop hacks a version of the software to hoover every request/send conversation with IP's and content, eveyone connecting trough that node is pretty well screwed.

      Thoughts?

    25. Re:Unbreakable anonymity? by Asher · · Score: 1

      Take a look at "onion" routing protocols and a product/network called "freedom" from ZKS (Zero Knowledge Systems) . Although, as I recall the freedom network was not a commercial success. I think parts of the infrastructure were released as open source before it was discontinued. Their current offerings seem to be built on parts of the original "freedom" system.

    26. Re:Unbreakable anonymity? by Alsee · · Score: 1

      I'm not sure if someone else made this clear, but the RIAA can set up X nodes and send requests for "target" files. Sooner or later you will pick one of those X nodes as the relay. The moment you do the RIAA has both the original request key and the source IP.

      If you bounce each packet off of a different relay you are severly multiplying the risk because you only have to hit them once. You're better off picking a single path to reduce the risk.

      You can preety much thwart that attack by chaining relays but it's costly. The RIAA would have to own every relay you selected to break anonymity. If you do multiple relays then it's critical that the SENDER chose the entire relay path so one RIAA relay can't select another RIAA relay. The path itself needs to be encrypted so each relay can only see where it got the data and where to send it. You need re-encrypt the data each hop.

      All very costly to bandwidth, CPU cycles, response time, and reliability.

      About the best way to securely break the trail is to deposit the encrypted data on a random node in advance and occationally suffle it around. Of course that brings in other sorts of issues, particularly the need for people to provide space hosting encrypted files they have no intrest in.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    27. Re:Unbreakable anonymity? by nich37ways · · Score: 1

      One possible but wasteful way as someone earlier mentioned invloves the use of udp to ensure that the sending client remains anonymous.

      Through the use of a site such as sharereactor you upload a link for the file. This covers the priamry problem of not been able to find files on the network so that the server can't become a *AA honeypot as it has no need to ever know what files each user has available.

      All the clients connect to a main server so that they can share files. When a user wants to download a file they send to the server a list of packets they want (similar to the way edonkey/emule works so the file can be downloaded in a random order), their public key and the file they want.

      The server then sends this information on to the other machines connected to the server, possibly sending out a different requested packet to each machine.

      The other clients in the network decide if they are available to send and if so encrypt the data and send it via udp so they cannot be traced. Now repeat and you have the entire file.

      This could have some problems, and im not entirely sure what they all are, I just know they exist..

      So any suggested improvements/fundamental flaws?

      --
      37 - what does it stand for really...
    28. Re:Unbreakable anonymity? by Alsee · · Score: 1

      I see a problem. The RIAA makes a direct request to you. You immediately respond with the file. If the response time is below some threshold then they pretty much have you nailed as the source.

      I guess if you have the file you could select a random delay factor before responding (no need to delay if you have no match). There would be a rare chance you pick the minimum delay and they could nail you, or statistically say it's probably you if the random delay is close enough to the minimum.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  37. Re:The USA sucks by Anonymous Coward · · Score: 0


    If you don't want to, then don't.
    We arn't asking people to move here you know...

  38. That's Freenet by mcbunny29 · · Score: 0



    That's exactly what FreeNet does. It hides the sender and the reciever by rooting data through random other peers.

    The major problem is that it's slow.

  39. Re:The USA sucks by Anonymous Coward · · Score: 0

    because we're too lazy to leave, and most people are too stupid to realized they've been brainwashed by the media/religion.

    So much for a secular democracy. I'd say at this point we've shat upon the constitution and formed a protestant oligarchy.

    VOTE FOR DEAN YOU RETARDS.

  40. long term by netwiz · · Score: 1

    I fear the the gov't may very well outlaw encryption for the masses outright. I mean, what with terrorists and all, it wouldn't be terribly difficult for them to shove that down our throats.

    1. Re:long term by Jerf · · Score: 1

      I honestly think that if they thought they could get away with it, they would have by now. Britain did, after all.

      The urgency generated by 9/11 has faded, even though it left a fingerprint on our society that will remain for decades. Witness the increasing Congressional friction over the Patriot act, which expect will only get worse over the next couple of years, barring major terrorists attacks. I don't think Ashcroft has the clout to pass this, not to mention the economic impacts of doing that. (I know I'd stop using the Internet to buy things and recommend to everybody I know that they do as well, rather then my current opinion which is that it's largely safer then physical purchasing at the moment.)

  41. Sealed lips by daminotaur · · Score: 5, Interesting

    Shirky: "In any system where a user's identity is in the hands of a third party, that third party cannot be trusted." The classic Mafia version of this is: "Two people can keep a secret as long as one of them is dead." Most people don't think that way, and even if they did they are unlikely to trust any technological system that promises absolute anonymity. The cypherpunks' fantasies are no more ready for prime time now than ever. Main problem is that anonymous communication is a chimeral fantasy, and any scheme to even experiment with their implementation is complex and onerous to all but people who like to read Schneier for fun, and play secret agent. Above all, cypherpunks chase anonymity like it's a virtue, when most of the worst aspects of the net are caused by anonymity and unaccountability.

  42. Yahoo and Hot Mail should turn on by default by leoaugust · · Score: 3, Interesting

    I think the fastest way to get encryption turned on by default is to have these major email providers (like Yahoo and Hotmail) to turn on encryption by default. If they did so, then there will be enough momentum for the other providers to do so too, and anyone using encryption would not stand out as a potential trouble-maker ....

    The reason why it is importatnt to have a critical mass of communications in encryption is becuase otherwise the people encrypting sorely stand out. If I decide (which I would love to) start encrypting today, many people would wonder what sort of shady business I have gotten into. Not to mention Ashcroft would be after me, with a claim that I am some Lone-Wolf terrorist ...

    My point is that there should be there has to be enough people encrypting for it to become feasible. If I am one of the people encrypting while others are not then I am the proverbial needle in a haystack. Any magnet can easily pull me out by my jugular ... If I am one of the many other people encrypting then I am just another hay in the hystack ... much harder then to grab me by my b**** ....

    --
    To see a world in a grain of sand, and then to step back and see the beach where the sand lies ...
    1. Re:Yahoo and Hot Mail should turn on by default by PossibleMat · · Score: 2, Insightful
      The proverbial case "the chicken or the egg"
      If you don't start encrypting today, you don't contribute to reach the critical mass. If everybody thinks like that, widespread use of encryption is gonna take a long time to come.
      If I decide (which I would love to) start encrypting today, many people would wonder what sort of shady business I have gotten into
      If Hotmail or Yahoo starts making encryption easy to use, many people would wonder what sort of business they are encouraging/supporting.
      Oh, and Microsoft would probably "enhance" their encryption with other "features", making compatibility with other services impossible anyway. ;-)
      --
      Have you Meta Meta Moderated lately?
    2. Re:Yahoo and Hot Mail should turn on by default by Anonymous Coward · · Score: 0

      The encryption yahoo choose is not even end to end. Its provided by a company that made alot of noises in the key escro area. Yuck.

    3. Re:Yahoo and Hot Mail should turn on by default by Cajun+Hell · · Score: 1
      If Hotmail or Yahoo starts making encryption easy to use, many people would wonder what sort of business they are encouraging/supporting.
      I don't think so. You can always cite "hackers" as your boogeyman.
      --
      "Believe me!" -- Donald Trump
    4. Re:Yahoo and Hot Mail should turn on by default by Reziac · · Score: 1

      Question: if email providers and ISPs begin turning on encryption by default -- who "owns" the keys? Who stores them?

      The basic idea seems okay (and I agree, being the only encryptor on your block is like standing on the rooftop yelling "I'M UP TO SOMETHING!" -- but if everyone does it, it's just white noise), but seriously, how do you think the public/private key issues should be handled?

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    5. Re:Yahoo and Hot Mail should turn on by default by leoaugust · · Score: 1

      Good Question. You are right that it would be hard to do it in one go, and the goal might have to be achieved in stages. I can think of at least two stages ...

      The first thing as you said is to create white noise so that the stigma of encrypting disappears. Yahoo currently uses a single password to give access to your email, calendar, notes, geocities space etc. This single password is almost like a superpassword. The same super-password can be used to access your private encryption key that yahoo could store on its own servers.

      Then the second step would be to allow sophisticated users to remove the private key from the yahoo servers and keep it wherever they want. Then the super-password would access all of the Yahoo services except the private key.

      I know that the first step is not a strong a security system, but it is a begining. That way you can create the white noise, and you can allow it by default. Then, the second step would make the whole system more secure.

      --
      To see a world in a grain of sand, and then to step back and see the beach where the sand lies ...
    6. Re:Yahoo and Hot Mail should turn on by default by Reziac · · Score: 1

      That seems reasonable.... let the server keep the key if you don't know what to do with it, and keep it yourself if you do. Drawback in either case being "what if it gets lost?" (thru hardware mishap or whatever)

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    7. Re:Yahoo and Hot Mail should turn on by default by leoaugust · · Score: 1
      Well, it is a good point, and all I can do is make a stab at the solution ...
      • If you leave the key with Yahoo, then I am sure they have enough backups and redundancy that the chances of it getting lost are miniscule.
      • If you take the key away from Yahoo and don't have backups and redundancy, then you aren't sophisticated to begin with. And if you aren't sophisticated, what are you doing with the key anyway ?
      • If you aren't sophisticated and can't handle your key but still need encryption, then you need to find a system other than public/private keys to handle encrytion ....
      --
      To see a world in a grain of sand, and then to step back and see the beach where the sand lies ...
    8. Re:Yahoo and Hot Mail should turn on by default by Reziac · · Score: 1

      Good points all. I suppose one could do what I'm inclined toward in such a situation -- leave a copy of the key with Yahoo, and do my own damned backups!

      --
      ~REZ~ #43301. Who'd fake being me anyway?
  43. Encryption is good, but not the complete answer. by Anonymous Coward · · Score: 2, Insightful

    Suppose all file sharing apps had encryption- if an individual can get on the network, then so can the individuals and robots working for the RIAA.

    To defeat the RIAA all that is needed is a challenge that requires a HUMAN response. Right now they use robots- but they can't compete if they have to examine an image and type what it is (takes a real person).

    A better approach than that, but harder and less efficient is something like Freenet-

    but it really needs to use ed2k type links and incorporate a search for keys. And of course be written in C, so I don't have to install a bloated Java environment.

    Perhaps Freenet might die if the RIAA decides to inject massive amounts of crap and download it (making their chunks popular and erasing existing files on the network.

    So, freenet + human required = good, almost unbreakable.

  44. Musicians! "Take back the guitar case!" by e-gold · · Score: 4, Informative

    Well said, but the RIAA is (IMO) way too fat in middle management to ever be able to give musicians the better terms we all instinctively know that they deserve. The answer (and yes, I'm both biased and financially self-interested -- but no, I don't speak for e-gold or anyone else but Jim Ray) is for musicians to "take-back the guitar-case" (the money is where the REAL control lies) and set up their own internet tipjars. It's been possible and easy for a few years, and finally they're going to learn to think in new ways about how to get paid by a planet-wide audience. They have had the technology for a while (since 1996 in some form or other).

    Imagine a 'one-hit wonder' like Normal Greenbaum's "Spirit in the Sky," garnering 7 million or so direct tips for a quarter worth of gold (most tips would probably be more, if you actually liked the song enough to bother tipping the artist, and Norman's old "Spirit in the Sky" tune kinda rocks IMNSHO). I'm talking about more than a million dollars -- AFTER taxes. I have no idea what Norman's made from the song, but I doubt he did that well...
    JMR

    Speaking ONLY for Jim Ray.

    --
    Try e-gold - (contact me). I'm NOT e-
    1. Re:Musicians! "Take back the guitar case!" by One+Louder · · Score: 1

      Just curious - in your scheme, how do the songwriters get compensated? The tip jar serms to make sense for the performer, but how do the Diane Warrens of the world get their fair share?

    2. Re:Musicians! "Take back the guitar case!" by mOdQuArK! · · Score: 1

      The performer can pay the songwriter what they think the song was worth, or the songwriter would pay the performer what they thought it was worth to perform the song that they wrote.

      Or they could collaborate, each expecting a certain % of the resultant revenue. Or, if they need funds, they could either find a sponsor or get a loan to finance the initial performance. Etc, etc.

      In other words, _all_ of the typical ways that two people can do business with each other - there's nothing special about this kind of business transaction just because it's the entertainment biz.

    3. Re:Musicians! "Take back the guitar case!" by e-gold · · Score: 1

      Good question.

      They'd have to trust the musicians to share, just as the musicians might want to trust the public to tip/pay. OTOH, I tend to tip wait-staff I'll never see again while travelling, and I think others do too.

      The songwriters' advantage is that they'd have the good lawyers who were left (not EVERYONE in the RIAA would be unemployed in my scheme/dream, and presumably the musicians' union vs the songwriters' union would somehow sort things out, I guess) and they'd also have musicians with an incentive to be supplied in the future with more good songs.

      I'm not promising utopia (it's certain there will be problems with everyone's scheme, e-gold is just a cheaper-middleman, but it's still there like credit cards/paypal/bitpass/etc.). I'm merely saying that taking control of the money-stream will -- if musicians actually DO IT -- be their real way to take control. It's all in the money-stream. Everything else is just-pretend, as Courtney Love outlined in her famous Salon-rant (too-lazy to dig-up the link, go google if you haven't see it).

      Unfortunately, despite the fact that e-gold was between every line of Courtney's rant and despite the fact that I immediately-contacted her (well, her "webmistress") Courtney Love had unfortunately reverted to binge-mode, and I've had trouble (no budget) getting other musicians interested (music is a pretty conservative business).

      Hopefully, that'll all change. Hopefully musicians will compare e-gold's fees (recently revised) to PayPal's (also changed recently) and Bitpass and all the others. We're already the leaders in micropayments, but we're sorely-lacking in hype (my fault). Also, being the leader in micropayments (see http://stats.e-gold.com if you doubt me) isn't as sexy -- or as lucrative -- as people tend to think. When payments get too small, they're too much of a PITA even with a very-efficient system. Various contenders have already found this out by going-bust.
      JMR

      again speaking only for Jim Ray.

      --
      Try e-gold - (contact me). I'm NOT e-
    4. Re:Musicians! "Take back the guitar case!" by Myopic · · Score: 1

      you don't think Norman made a million dollars from that song? like you, i have no numbers to back up my assumption, but i figure he made more than a mil.

      that's a great example, by the way, of a truly rockin' one-hit-wonder. love that song.

    5. Re:Musicians! "Take back the guitar case!" by e-gold · · Score: 1

      (I have no idea what he made, but...) musicians' stories (not just Courtney Love's pre-binge rant, either!) seem to indicate he wouldn't make very much. There's no way to tell, but chances-are a one-hit wonder like Norman's song was written under terms when the musician is legally at his absolutely-most-vulnerable (they are, by definition, a 0-hit wonder who can't afford a lawyer at that point) so I have to assume Norman got as-screwed-as-possible by whichever record-company in the quintopoly* got the song.

      I'd love to know how much Norman Greenbaum made on Spirit in the Sky, but I'd also love to give him a tip of e-gold just for writing such a cool song. I've benefitted from the song for sure, but I never got the record, I've only heard it on the radio -- but it's one of those songs you just want to ruin your car's crappy speakers playing...

      So if anyone knows Norman, please have him contact jray at e dash gold dotcom. Or if any other musicians or slashdotters want to play with a bit of the stuff -- I have a paltry promotional account for this kinda thing.
      JMR

      * Actually, if Sony eats Bertelsmann's music division, I guess the RIAA will become a quadropoly. They're workin'-it down to monopoly every way they can, though, if we give them time...

      REALLY speaking only for Jim Ray & nobody-else this time! :)

      --
      Try e-gold - (contact me). I'm NOT e-
  45. Tradeoffs by nurb432 · · Score: 1

    The ablity to be anonymous and the speed of the network is directly related..

    Cant have both, unless someone runs a central 'randomizer' service.. but then you have a single point of failure and insecurity.

    --
    ---- Booth was a patriot ----
    1. Re:Tradeoffs by Anonymous Coward · · Score: 0
      ------ What part of "the right of the people to keep and bear arms, shall not be infringed" do you not understand ----

      And what part of "A well-regulated militia being necessary to the security of a free state" do you not understand? Have you joined the Guard?

    2. Re:Tradeoffs by Anonymous Coward · · Score: 0

      The Guard is, in essence, a standing army because it is financed and run by the government. A militia is an entirely private, volunteer, ad hoc organization. The guard is far closer to the Redcoats than anything our founding fathers dreamed up. OT, but whatever, that really rubbed me the wrong way.

  46. Perhaps the reason was... by Anonymous Coward · · Score: 0

    he didn't want to be slashdotted yet? :-)

  47. WASTE! by jacobito · · Score: 5, Informative

    That's why I'm hoping that private, encrypted p2p systems like WASTE or Foldershare take off! I don't think either of those systems are quite ready for mass acceptance, but they certainly point in the right direction -- private, encrypted file sharing networks that anybody can use.

    1. Re:WASTE! by Anonymous Coward · · Score: 0
      WASTE:

      WASTE is a software product and protocol that enables secure distributed communication for small (on the order of 10-50 nodes) trusted groups of users.

      WASTE is designed to enable small companies and small teams within larger companies to easily communicate and collaborate in a secure and efficient fashion, independent of physical network topology.

    2. Re:WASTE! by anethema · · Score: 1

      If the riaa really wanted to decrypt it they probably could I think.

      Distributing keys over an insecure medium is often done using the diffie-hellman method. This method is venerable to the 'man in the middle' attack. Something that's fairly involved and maybe too much work to just catch one user, but it defiantly can be done.

      This is all common knowledge so if you look up diffie hellman and man in the middle attack you will find info on it. Anyone on any of the intermediate hops can do it. In fact, any public/private key system is generally vulnerable

      Just saying, encrypted doesn't automatically mean safe. If you can't speak over a trusted medium and compare hashes of your public keys, then it's not all that hard to decrypt your stuff without you even knowing.

      If you wear that comfy tin foil had, you can use Simp(ignore the tacky flash intro, it's a good program) to transparently encrypt your msn conversations. They even have a Linux version that works with any client supporting a SOCKS proxy. This doesn't solve the problems, but at least you can verify your hash with your friends. Once you have authenticated and verified the hash, you are completely invulnerable, unless the AES-128 algorithm is compromised. Have fun.

      --


      It's easier to fight for one's principles than to live up to them.
  48. He's Right! by teamhasnoi · · Score: 3, Insightful
    I'm going to encrypt everything! Oh wait. How is Mom going to read my emails?

    Saying that using encryption is good doesn't change the fact that regular people see no use for encrypting everything.

    People will send their CC numbers through regular email! How can we get people to use encryption? Transparency, transparency, transparency.

    If I send, "agoij(*UOLHa^&&%alhkAHI3%&%&jdha8tFHD98ht4Fls 8" to Mom she'll delete it. If I send it, and she reads, "Buy me an iPod for Christmas", she'll still delete it, but at least she got the message with no labor on her side.

    Until encryption is enabled by default, and is transparent to the user, clueless users will rule the way you communicate. Sadly, this puts much of the onus on Microsoft, which won't do anything until there is a huge! public backlash - then come out with a easily broken implementation of it. :(

    Encryption use isn't about privacy, it's about necessity. When the great unwashed (wait, that's Linux users ;) - when the masses are FORCED to use it, that's when it will get used.

    Apple could do what MS can't - have an 'Encrypt for OS X users' checkbox on their mail app. Then with some 'return receipt' automagically encrypt messages to other OS X users. (I'm not a programmer, can you tell?).

    To sum up, users want to be safe, secure, and anonymous, but they don't want to do anything to make it happen. 'Eat what you get, and use what you have" is the pervasive attitude.

  49. Hmm... maybe that's their evil plan by Greyfox · · Score: 1
    Since we all know that only terrorists use encryption, maybe the RIAA is a front for a terrorist organization whose true goal from the very beginning was to encourage more widespread use of encryption. If everyone's using encryption, Law Enforcement won't be able to use the old trick of monitoring people using encryption because they obviously have something to hide! Ha! I'm on to you, you terrorist bastards!

    (Checks to-do list for today, hmm, semi-plausably accuse a *AA organization of being terrorists... check...)

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  50. It is really SAD by argoff · · Score: 2, Insightful

    The Cypherpunks never went around suing people (that is, actually costing them money) who weren't using encryption to mask their illegal activities. The RIAA is.

    Am I the only one here who thinks that it is really sad that we are changing for the better not because of how we grow personally, but rather because we half to - to avoid having our freedoms being taken away? It just seems so wrong - I really feel sorry for those who won't be able to keep up.

  51. Speaking of encrypting files by HangingChad · · Score: 1
    Is there a product that allows you encrypt a file...any file...so all the receiver needs is a key, like a password, to recover the original file? One that doesn't require the user to have a specific client utility?

    My first thought was adding a password to a zip file, but that would require WinZip or similar file utility. Adding a password to the directory is easy enough but then your web host would have access to the originals. And, yes, I'm thinking about files I could leave on a web server as opposed to Email.

    That would be really handy to have, especially if it was OS independent. Would make encrypting files a lot easier. It doesn't have to be bullet-proof, just stout enough to make decrypting it withouth the key a major pain in the behind.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
    1. Re:Speaking of encrypting files by gte910h · · Score: 2, Insightful

      PGP's freeware version comes with a "Create Self Decrypting Archive" option that does exactly what you want. It wants you to use big passwords, but I think its okay with you using smaller ones as well.

      --Michael

      --
      Want to see every step I took to start my company? http://www.rowdylabs.com/blogs/pitchtothegods
    2. Re:Speaking of encrypting files by gilgongo · · Score: 2, Informative

      > PGP's freeware version comes with a "Create Self Decrypting Archive"

      Win32 only I believe though. At least, last I tried it didn't ask me what target platform the executable should be compiled to :-)

      --
      "And the meaning of words; when they cease to function; when will it start worrying you?"
    3. Re:Speaking of encrypting files by gte910h · · Score: 1

      I bet it would run with WINE :) Then again, I've not really tried to encrypt files on unix beyond in transit method such as ssh.

      --
      Want to see every step I took to start my company? http://www.rowdylabs.com/blogs/pitchtothegods
    4. Re:Speaking of encrypting files by Anonymous Coward · · Score: 0

      There are programs to do this, but you don't want
      to run them. This would be another great way to
      trojan people's systems.

    5. Re:Speaking of encrypting files by gilgongo · · Score: 1

      > I've not really tried to encrypt files on unix > beyond in transit method such as ssh.

      You haven't lived! The thrill of using GNUPG knows no bounds.

      --
      "And the meaning of words; when they cease to function; when will it start worrying you?"
  52. Water.... by herrvinny · · Score: 0

    It's been some time since my last Chem class, but that's water, right? Two Hydrogen molecules bound to one oxygen molecule, making the classic H(2)O?

  53. Why not? by Kjella · · Score: 3, Insightful
    What we NEED is a way to share files in such a manner as the receiver has no idea what your IP is.

    This is not going to be easy. (And please don't mention Freenet ok?)


    Because it's got kiddie porn? Well, sorry, but you can't pick and choose anonymity. If there are logs the police can use to tell who shared that, the RIAA can subpoena the same logs to that show you shared mp3s. You can't have your cake and eat it too.

    Another thing is that Freenet is dead slow, in a CPU and memory-hungry Java-implementation, and in general not that great. But it's likely to improve...

    The only other alternative I see that is pseudoanonymous is having a set of trusted friends, routing not only requests but also the data over it. That way, no part of the chain knows more than where it's coming from and where it's going
    .... <-> John <-> Bob <-> Bill <-> ...
    Bob simply routed a connection between John and Bill. John doesn't know about Bill, Bill doesn't know about John. Bob doesn't know if the chain starts with John or ends with Bill or anything. Of course, this would also be a lot slower than direct P2P as is the norm today.

    Kjella
    --
    Live today, because you never know what tomorrow brings
    1. Re:Why not? by Danse · · Score: 1

      The only other alternative I see that is pseudoanonymous is having a set of trusted friends, routing not only requests but also the data over it. That way, no part of the chain knows more than where it's coming from and where it's going

      I don't think that's an acceptable solution either. The RIAA only needs to sue the person they got the file from, which would be the last person in the chain.

      --
      It's not enough to bash in heads, you've got to bash in minds. - Captain Hammer
    2. Re:Why not? by Daniel_Staal · · Score: 1
      I don't think that's an acceptable solution either. The RIAA only needs to sue the person they got the file from, which would be the last person in the chain.

      Which is why Freenet splits everything into multiple chunks and stores/routes them separately: If you can define the 'last person in the chain', they can still prove they have no idea what is in the file bit they sent you.

      --
      'Sensible' is a curse word.
    3. Re:Why not? by Suidae · · Score: 1

      What scares me about Freenet (which I run, but don't use much because its so damned slow) is that if it were highly secure, fast and searchable, and it replaced the file sharing apps we have now, I expect that TPTB would start attacking our legal right to run such an application on the grounds that unrestricted and anonymous information exchange is too dangerous to allow to exist in such an accessable form.

      IMHO it is natural for society and economy to change as technology advances, but people who have found ways to make lots of money in a particular way generally don't want things to change that make that method ineffective, and will do what is necessary to protect themselves without regard to the long-term health of society.

    4. Re:Why not? by Kjella · · Score: 1

      I don't think that's an acceptable solution either. The RIAA only needs to sue the person they got the file from, which would be the last person in the chain.

      Depends on where you live I guess. In most sane places, it should count as a simply routing a copy, not creating a copy, and thus not infringing on copyright. Not any more than each IP hop isn't responsible for whatever passes through (even if it's NAT'd so the original sender is masked).

      Kjella

      --
      Live today, because you never know what tomorrow brings
    5. Re:Why not? by Danse · · Score: 1

      Well, unless you have common carrier status (like an ISP), then you can probably be held accountable for the files you pass on. If you choose to participate in some sort of P2P network and are caught uploading copyrighted material, whether you knew what you were uploading or not, you can be sued, and you'll probably even lose.

      --
      It's not enough to bash in heads, you've got to bash in minds. - Captain Hammer
    6. Re:Why not? by Danse · · Score: 1

      If you can define the 'last person in the chain', they can still prove they have no idea what is in the file bit they sent you.

      If you intentionally install a program that transfers files through your computer to others, then I doubt ignorance would be an acceptable defense if you're caught uploading copyrighted material. At least not in the US.

      --
      It's not enough to bash in heads, you've got to bash in minds. - Captain Hammer
    7. Re:Why not? by Alsee · · Score: 1

      >And please don't mention Freenet ok?
      Because it's got kiddie porn? Well, sorry, but you can't pick and choose anonymity.


      No, I bet his objection to freenet was exactly the same as all the reasons you listed, chuckle.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  54. E-commerce did it already by iabervon · · Score: 4, Insightful

    The RIAA isn't responsible for making encryption commonly deployed; sending credit card numbers to websites is. The pattern is essentially the same, however. The cryptographers work on stuff, the security people say you really need to use encryption, but people generally don't actually do anything about it until something of value to them is stolen, at which point encryption becomes widely used and transparent. A few years go by, and everybody forgets that what they're using is encryption.

    Now people talk about how they expect encryption to get outlawed. I think Amazon's $19B market cap which depends directly on encryption and eBay's $38B which essentially requires it (not to mention all of the companies which do some of their business online) will prevent this. Then there are VPNs, telecommuting, overseas content outsourcing, and so forth. Encryption is, at this point, something the US economy depends significantly on, and it's not going to get outlawed any time soon.

    1. Re:E-commerce did it already by daminotaur · · Score: 3, Insightful

      But that kind of encryption only protects you aginst eavesdroppers along the line, and is not a system for anonymous communication. Ebay has a record of everything I bought, bid on, paid for, etc. As they should. All bulletproof anonymous systems are not and cannot be made transparent--they require one's grandmother to maintain key rings, certificates, illusory webs-of-trust and all kinds of wonkish things that are ridiculous to deal with if one is doing nothing wrong. And that, of course, is the bottom line and always will be.

    2. Re:E-commerce did it already by iabervon · · Score: 1

      Actually, what you've described is actually PKI, which is what you need for e-commerce but not for anonymity. It's probably easier to make anonymous file sharing work than it is to verify that a server you've never connected to is the server you expect it to be.

  55. How to Win a War by theonetruekeebler · · Score: 0, Offtopic
    1. Declare victory.
    Ta da! You've won a war! What? Didn't know there was a war going on? We like, didn't want to scare you? So we fought it? In secret? And we won? So now you should do thing our way? And pay us? Money we don't deserve?

    (P.S. Step 3 ???, Step 4 profit.)

    --
    This is not my sandwich.
    1. Re:How to Win a War by Anonymous Coward · · Score: 0

      Mr Moderator, I think the "war" in this case is the RIAA's war to protect the privacy and security of people everywhere, and the bad guys in question are those evil cypherpunks. Isn't that exactly who we want protecting our privacy? The RIAA?

  56. Are cops constitutional? by Anonymous Coward · · Score: 0

    You might find this article interesting.

  57. Anybody remember prohibition? by I-R-Baboon · · Score: 5, Interesting

    "Those who cannot remember the past are condemned to repeat it." -George Santanya

    This strikes me very much familiar along with the "war" on drugs. A previous post touched on this lightly as well. Be it encryption, invite only LAN MP3 share parties, USENET, or any of the other countless work arounds out there...By brandishing their lawyers they are in fact creating an underground which society has demonstrated they want to exist, and it will. Instead of trying to make use of this phenomenon, they want to bully people and focus their creative energies on how they can sue. Sounds eerily familiar to the ban of alcohol which founded organized crime in the US and gave a beautiful model for drug running today. In an effort to slay a beast, a new monster was created and the beast was welcomed with open arms in the long run and taxed accordingly to make it profitable and put into a mostly controlled environment. Of course it's not possible to put music into a controlled environment, but iTunes was able to make downloading music a business. Guess they should have focussed on hedging that new market instead of helping to create an underground they will never be able to control or profit from. (Go to concerts if you want the artists to get your money, and boycott RIAA backed media)

    --
    -1 Overrated (Too many big words for me to comprehend)
  58. Somewhat different perspective... by gillbates · · Score: 1

    Encryption is now considered a weapon by the State Department.

    I wonder how long it will be before the State Department and the content cartel go head to head over the issue: the content cartel arguing that they need unbreakable encryption to protect their content, and the State Department arguing that they need to limit encryption strength to catch "terrorists". The results will be interesting.

    --
    The society for a thought-free internet welcomes you.
  59. My Favorites Tools for Anonymity by PureFiction · · Score: 3, Interesting

    are a 802.11b card, a 1W amplifier, and a nice 16dBi vagi antenna:
    http://peertech.org/coder/vagi-amp-laptop.jpg

  60. Re:The USA sucks by PitaBred · · Score: 0, Offtopic

    And voting for Dean means you haven't been brainwashed by media? Isn't he the guy who claims to have the approval of the guy who claimed to have invented the Internet? Take a cue from Douglas Adams. The person least interested in having the power is more than likely the person most capable of handling it.

  61. obvious yes... but legal? by WebCowboy · · Score: 2, Interesting

    RIAA and MPAA, being comprised of entertainment executives and their lawyers which are known to be the lowest form of life on earth, would instinctively ... attempt to "join" these networks, posing as users looking for Britney's latest, and entrapping systems that serve up the bits? Will they put out bogus trojaned clients on the services? "Dude, download LockTella 1.9, it's l33t!!" only to find that it hoovers up passwords and music lists, and forwards them on to DUDE@RIAA.COM ....

    Hopefully, however, the law and the constitution would step in since these tactics are just a tiny bit unethical, immoral and illegal. RIAA agents posing as file sharers and enticing others to load and run trojans that compromise their PCs and privacy in order to look for and obtain incriminating evidence is blatant entrapment and such evidence would/should be inadmissable in a court case.

    It also looks like illegal search and seizure--and an unconstitutional invasion of privacy and misuse of private property. People have been convicted of criminal offences for deploying trojans and viruses and hacking into peoples machines (and rightly so). The rules should be no different for those acting on RIAA or MPAA's behalf regardless of their motives.

    1. Re:obvious yes... but legal? by Jaysyn · · Score: 1

      A company can't entrap you. That only works for the executive branch of government.

      Jaysyn

      --
      There is a war going on for your mind.
    2. Re:obvious yes... but legal? by Minna+Kirai · · Score: 2, Informative
      RIAA agents posing as file sharers and enticing others to load and run trojans that compromise their PCs and privacy in order to look for and obtain incriminating evidence is blatant entrapment and such evidence would/should be inadmissable in a court case.

      I see that you're not a lawyer... nor a citizen concerned enough to learn about his national laws. There used to be widespreah myths about entrapment, but I thought the illegal-drug culture in the US had spread the truth (as a defensive measure).

      Here's a few little facts about entrapment:
      1. It can only be committed by an agent of the government. (The RIAA is not the government)
      2. Even if it's a cop or other gov. agent trying to trap you, there still is no "entrapment" defense if he can show evidence suggesting (not proving) that you had a pre-existing inclination to perform the offense.
        Not entrapment: "Here's $20, give me some cocaine".
        Entrapment: "Here's $20000, kill that guy"

      It also looks like illegal search and seizure--and an unconstitutional invasion of privacy and misuse of private property.

      The Constitution only restricts the actions of governments, not private groups like the RIAA. (And it doesn't guarantee privacy either.)
    3. Re:obvious yes... but legal? by Artifakt · · Score: 1

      In a case like your not entrapment example, the "evidence suggesting" is probably the dealer's being able to quickly lay his hands on some crack. If he can get it, he must have been keeping connections with other dealers, at the least. That's like the question of probable cause. We don't require the police to have certain cause for many actions, only probable.
      The real question is not whether the RIAA needs to be restrained from entrapment, it's whether testimony from RIAA agents posing as file sharers or spreading trojans is tainted testimony, in the same way as testimony from known criminals offered in exchange for reduction of sentence. If it is, the DA prosecuting the case didn't have probable cause, or evidence suggesting an inclination. If the DA took the word of someone who admitted to spreading a malicious program in explaining how they got the evidence, the issue becomes selective prosecution, as well.
      There's also the definition of agent of the government. A policeman is an agent, but so is a unpaid minor who volunteers to attempt to purchase boose as part of a sting operation. Just when are RIAA employees acting on behalf of their employer, and when are they acting as agents of the government? If I were a federal law enforcement agency director, I'd be very careful in accepting the RIAA's "help" because it would be my bureau that would be a risk for any entrapment proceedings resulting if these untrained non-agents overstep the limits.

      --
      Who is John Cabal?
    4. Re:obvious yes... but legal? by rifter · · Score: 1

      The Constitution only restricts the actions of governments, not private groups like the RIAA. (And it doesn't guarantee privacy either.)

      So how do you interpret the fourth amendment?

      The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

      It sounds like a right to privacy to me. In fact it is a right to security as well. And it is the duty of the government to protect this right, among the others. This notion of corporations getting carte blanche is complete bunk, and would not be supported by our founding fathers who fought against one of the earliest multinational corporations in their revolution.

      The government has a duty to protect the civil rights of its citizens against the depredations of other citizens, citizens of other countries, and indeed corporations. You do realize that there is precedent for this in the form of individuals and businesses being prosecuted for violating civil rights?

      The Constitution does not restrict the government. It instead outlines what the government is allowed to do and enumerates some rights which all humans are deemed to have from birth. The government does not grant rights; it can only act to constrain itself and others from violating them.

    5. Re:obvious yes... but legal? by Minna+Kirai · · Score: 1

      in the same way as testimony from known criminals offered in exchange for reduction of sentence.

      But that testimony is accepted in court very frequently. It's illegal, but DAs get away with it all the time. While defending counsel can sometimes get the jury to doubt compensated evidence, judges rarely seem to throw it out. And they certainly never have the DAs arrested!

      (Which they could do, since offering something of value in exchange for sworn testimony is blatantly illegal. But it's a law that's never been enforced against the government)

      Just when are RIAA employees acting on behalf of their employer, and when are they acting as agents of the government?

      The definition of "agent" is very clear. If the person was selected by an agent of the government, then he too is an agent (when following directions from the first agent). The minor in your example is, a private investigator hired by someone who belives himself to be a crime victim is not.

      it would be my bureau that would be a risk for any entrapment proceedings resulting if these untrained non-agents overstep the limits.

      No... because they're non-agents, there can be no entrapment. (And there is no such thing as an "entrapment proceeding", in US law. It simply rejects some evidence from the trial). The worst that could happen is, if the feds repeatedly accepted evidence from the same guy, that a later defendant could argue that the guy has become a de-facto agent, because of his long-term relationship with the gov.

      That still doesn't change anything, because a detective who can just run Kazaa and log who is sending him copyrighted files doesn't need to do anything resembling entrapment or privacy-infringing searches to collect his evidence.

      PS. If an RIAA-sponsored detective installs a trojan onto your computer, that's illegal by the usual anti-hacking laws. But if he downloads from a Kazaa node you're willingly running, he's perfectly safe.

    6. Re:obvious yes... but legal? by Minna+Kirai · · Score: 1

      It sounds like a right to privacy to me.

      No it doesn't. Privacy would be broader than that. If Amazon.com and Walmart write down everything you buy from them and publish it in a book, they've violated your privacy, but haven't searched your person, house, or papers.

      It instead outlines what the government is allowed to do and enumerates some rights which all humans are deemed to have from birth. The government does not grant rights; it can only act to constrain itself and others from violating them.

      Sounds like "restrict" to me. constrain == restrict

    7. Re:obvious yes... but legal? by rifter · · Score: 1

      "It sounds like a right to privacy to me."

      No it doesn't. Privacy would be broader than that. If Amazon.com and Walmart write down everything you buy from them and publish it in a book, they've violated your privacy, but haven't searched your person, house, or papers.

      Actually they have. They shared your "papers" (records) publicly in fact.

      "It instead outlines what the government is allowed to do and enumerates some rights which all humans are deemed to have from birth. The government does not grant rights; it can only act to constrain itself and others from violating them."

      Sounds like "restrict" to me. constrain == restrict

      Yes, constraint is a restriction. But what I am getting at is the fact that the Constitution, rather than simply telling the government what it cannot do, tells the government exactly what it can do. It's a matter of perspective. The constitution does not grant you any rights you did not already have. Instead it serves as a reminder of those rights to the government and a guidline for restraint. Getting things the other way round leads to trouble, because then you get stuck with the idea that governments grant rights to people, which is horrbly wrong.

      Governments are meant to serve people and protect their rights. Governments are given rights and powers by the people, not the other way round.

      Perhaps I am not writing this as clearly as I'd like, but that is essentially what I am getting at.

    8. Re:obvious yes... but legal? by Reteo+Varala · · Score: 1

      >> It also looks like illegal search and seizure--and an unconstitutional invasion of privacy and misuse of private property.

      >The Constitution only restricts the actions of governments, not private groups like the RIAA. (And it doesn't guarantee privacy either.)

      Unconstitutional Search and Seizure, Illegal trespassing, same difference. Someone's in someone else's private property without permission. Any questions?

    9. Re:obvious yes... but legal? by Minna+Kirai · · Score: 1

      Actually they have. They shared your "papers" (records) publicly in fact.

      No. They weren't your papers they shared, but theirs. Or do you think a store has no right to remember what it's sold?

      But what I am getting at is the fact that the Constitution, rather than simply telling the government what it cannot do, tells the government exactly what it can do.

      By that argument, there was no need for any Bill of Rights. Since the Bill of Rights was apparently needed, that argument is wrong.

      stuck with the idea that governments grant rights to people, which is horrbly wrong.

      Most people agree with that statement for rhetorical reasons, although it is factually incorrect. Did Virginia residents have in 1770 have the right to be secure in their effects, or to vote for their head of state? No, they did not. Only when the government granted those rights did they start to exist. 50 years later, did women living there have the right to vote? Again, they did not, until the government explicitly created it.

      Governments are given rights and powers by the people, not the other way round.

      Hello, and welcome to the amazing world of "democracy", where "the people" are "the government".

      (In the modern US, "the government" is often used to refer to the Executive Branch as a separate entity. But that's a neologism)

    10. Re:obvious yes... but legal? by Minna+Kirai · · Score: 1

      Someone's in someone else's private property without permission. Any questions?

      Yes! Where does the RIAA find a spy small enought to get inside of someone's computer?

      Ok, a more serious question: How does downloading a file from the P2P client someone is willingly running trespass on someone's property?

      One more: If a person genuinely believes someone else is committing a felony against his property, is he allowed to do otherwise illegal acts (like waving a gun around) in defense?

      (Don't bother to answer those, we already all know)

    11. Re:obvious yes... but legal? by rifter · · Score: 1

      "But what I am getting at is the fact that the Constitution, rather than simply telling the government what it cannot do, tells the government exactly what it can do."

      By that argument, there was no need for any Bill of Rights. Since the Bill of Rights was apparently needed, that argument is wrong.

      Actually both arguments were made. Some of the founding fathers worried that by enumerating rights we would de facto restrict what rights a citizen had, and lead people to believe as you and many others do now. You are proving them right. Shay's rebellion lead to the Bill of Rights. The proponents of the Bill of Rights said that unless certain rights were explicitly acknowleged they would be ignored by the government. They were proven right as well.

      If you actually read the Declaration of Independance, the Constitution, and the various writings both of the founding fathers and of the philosophers who influenced them, you would get a better idea of where they were coming from. Even within the Bill of Rights and the Declaration of Independence explicit language states that they do not enumerate all of the rights held by the people. The reason the Bill of Rights was needed was not that governments grant rights, but that governments must be reminded of them.

      "stuck with the idea that governments grant rights to people, which is horrbly wrong."

      Most people agree with that statement for rhetorical reasons, although it is factually incorrect. Did Virginia residents have in 1770 have the right to be secure in their effects, or to vote for their head of state? No, they did not. Only when the government granted those rights did they start to exist. 50 years later, did women living there have the right to vote? Again, they did not, until the government explicitly created it.

      Actually you are factually incorrect. At birth a human being is endowed by their Creator (whatever that may be to you) with infinite inalienable rights. We choose to submit to the laws of society because it is necessary to have common rules in order for multiple humans to live together in the same space. To enforce those rules we choose governments, and give them certain powers to change rules and enforce them. You have it completely backwards, and so do the elitists who tend to take over any government whatever the form.

      Women always had the right to vote, and to choose their government. Men however tended to prevent them from exercising such rights. Within the context of North American democracy, the movement to women's suffrage predates the United States, as did the movement to abolish slavery. The revolution was supposed to end slavery and give women back their rights; it is a matter of history that this did not happen. However this does not change the fact that as human beings with free will, women can choose their fate. It is the oppression of other humans which makes this difficult, not some natural state.

      Actually these ideas are not new. For instance, in Appian's Civil War there is an account of Octavian attempting to tax a group of widows. The Roman Republic was an extremely patriarical society such that women and children were property and were not accorded any rights. However, in the widows' speech to Octavian they acknowlege the fact they have chosen their lot, and say that they have no representation and therefore are not taxed, and whereas they have given up some rights to self-determination they are cared for by men. Granted, this speech smacks of patriarichal values and therefore may not be factual within its context, but even if Appian made it up the idea that people choose their government and give it power over them even in such an extreme case as the Imperial period of Rome is not new.

      "Governments are given rights and powers by the people, not the other way round."

      Hello, and welcome to the amazing world of "democracy", where "the people" are "the government

    12. Re:obvious yes... but legal? by Reteo+Varala · · Score: 1

      > Ok, a more serious question: How does downloading a file from the P2P client someone is willingly running trespass on someone's property?

      Hacked clients to report the contents of a computer's hard drive? Genuine P2P clients only offer what the actual person permits... hence permission.

      > One more: If a person genuinely believes someone else is committing a felony against his property, is he allowed to do otherwise illegal acts (like waving a gun around) in defense?

      Self-defence for survival's sake (life/death, not property) is an argument a defendant can use. However, police or otherwise, evidence gotten illegally cannot be admitted in court, and therefore, is useless.

  62. 500 Internal Server Error by Anonymous Coward · · Score: 0
    500 Internal Server Error

    An internal server error occurred. Please try again later.



    Slashdot slashdotted. Damn...
  63. That bastard founded Israel by Anonymous Coward · · Score: 0

    Unadvertedly of course, but if he had not tried to exterminate them or start a useless war, there would be no Israel, there had never been a cold war and many things more.

    One thing is negative, though: the nazis didn't burn Bill Gates parents or grandparents.

  64. errrr by Archfeld · · Score: 3, Insightful

    without reading I see one issue, sure encryption IN the background is proceeding, especially that which you have no control over, and while it serves the surface function it leaves the user FURTHER under the control of a 'gatekeeper'.
    The time for user implemented crypto came and went, PGP had potential to put the public good ahead of corporate and government interests.

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
  65. ...same old Al Gore Internet canard by NSash · · Score: 0, Offtopic

    And voting for Dean means you haven't been brainwashed by media? Isn't he the guy who claims to have the approval of the guy who claimed to have invented the Internet?

    Speaking of being brainwashed by the media, AL GORE NEVER SAID THAT. Sheesh, you'd think that with all the times this has been debunked, you people would eventually get it through your heads.

    1. Re:...same old Al Gore Internet canard by Anonymous Coward · · Score: 0

      No, he said "I took the initiative in creating the internet."

      The fact is, Bill gates has much more to do with turning the internet into what it is today than anyone else (other than the peoples who founded Mosaic or otherwise invented the WWW.)

      None of those bills Gore voted for affected these things. only producing an OS that home users used that allowed for easier access to the WWW started the ball rolling. Only the advances in hardware that made such software "usable" enabled consumers to purchase computers capable of using the internet transformed the internet between 1987 and 1996. Gore's laws had little to do with any of it.

  66. What do you take for a haddock? by Phronesis · · Score: 1
    I can see the further parallels to Prohibition, with entry to speakeasies controlled by passwords like "John said to tell you I'm OK" whispered through a hole in the door.

    Swordfish

  67. Why is parent moded up? by brakett · · Score: 1
    Tcopeland cant find a link on the frontpage, so he posts the link here. Onest mistake, nice thought :)

    What gets me is that it gets modded up as informative. Do people lose their brain when they get moderator acces?

    1. Re:Why is parent moded up? by brakett · · Score: 1

      Ops I had not read the whole thread... my fault. I'll go away now.

  68. statistically speaking? by sleepingsquirrel · · Score: 1
    Predict doom, gloom, and failure, and when something we predict happens (statistically speaking, we have a 50/50 shot)we can say "I told ya so!"
    50/50 chance? I predict the sun will burn out tomorrow.
    1. Re:statistically speaking? by mekkab · · Score: 1

      indeed, you will either be right or wrong. We'll see (or we won't see) tommorrow.

      Personally, I think you're right. I've been predicting that the sun will burn out tommorrow for years.

      --
      In the future, I would want to not be isolated from my friends in the Space Station.
  69. You can't hide the IP's in a P2P network by shihonage · · Score: 3, Informative

    ...because P2P is about exchange, and people need to know whom to send information to. What you CAN do however, is to make it very difficult to prove that the data in question ORIGINATED FROM YOUR IP. This can be done by massively modifying a standard P2P network, so that each client randomly serves as a relay for sending data or parts of data to another client. It's like tossing a ball around between friends and not letting RIAA catch it. I need piece #32 of Terminator4.avi, and so I send a request. Client #398 responds, saying that it can provide piece #32, while actually it receives it from client #UNKNOWN (ip you're not aware of) and sends it to you. The fact is that client #398 is most likely not a part of downloading of Terminator4.avi at all, and you will not find it on it's hard drive. It just participates in a scheme of global file distribution, serving as a temporary proxy, a shield for the client that actually does have it. There's no way you can accuse client #398 of transferring warez, because it only transferred a small chunk of encrypted data. Even if decrypted, its matching to a certain pattern inside Terminator4.avi can be a pure coincidence. Or it can even be a sum of several blocks inside the file, in which case it will not match any "whole" piece of the file at all. At this point, of course, an RIAA member can set up a computer, join this network, and try to catch the cases where HIS client is used as the relay, in which case his client becomes aware of a certain person's IP address, and that person sends the file chunk to the RIAA computer so that it can transfer it to the recipient. This can be made difficult, by requiring each new member of the network to have sufficient amount of "illegal" files (and not just the same file many times over!) actually shared with others for free, before it becomes fully a part of the network. This would require RIAA computer to have actual "illegal" files on it, and quite a few of them. If they fill it with fakes, they will either be unpopular and never become a part of the network, or, if some people actually acquire the entire file, they'll get a sufficient amount of "blacklisting" from the network to never be allowed to join it. So, RIAA will be forced to use warez in order to find warez sharers. Still, the problem of them acquiring IP's that way remains. Perhaps it can be solved by allowing recursive relays, where a chunk, instead of being proxied by one client, can travel through an indetermined amount of clients, say, up to 10, before it actually reaches its destination. However certain measures will have to be taken to prevent an "empty loop", where clients keep requesting the file from one another, and neither has it...

  70. It seems to me... by artemis67 · · Score: 1

    that if products like WASTE are widely adopted, then the RIAA wins. It's not a revolution, but a step backwards.

    There has always been the illegal distribution of music between "trusted groups of users"... ever burn a compilation CD for a friend? What the RIAA is fighting is the free and widespread distribution of music between unknown parties.

    The problem is, once the group becomes open, it then becomes easy to infiltrate and monitor.

    1. Re:It seems to me... by 40000 · · Score: 2, Insightful

      A more secure method of distributing files to unknown persons is a DVD tied to the string of a helium balloon. The balloon can be launched discreetly at night from any location without a sound.
      Preferably the wind should carry it towards a suburban area so that it lands in someone's garden, then whoever finds it isn't seen acting suspiciously.

  71. Actually it's perfectly natural I'm afraid.. by Nijika · · Score: 2, Interesting

    This is evolution of a very basic kind. There are new predators stalking about, so to survive the animals in question need to develop camouflage or some other defense. The ones that do will be able to head to the watering hole without much worry, the ones that don't will either have to find a new watering hole farther away or will get eaten up I'm afraid.

    --
    Luck favors the prepared, darling.
  72. why anonymity IS a virtue! by Anonymous Coward · · Score: 0
  73. There is a meme for this by way2trivial · · Score: 4, Insightful
    it's known as
    putting the genie back in the bottle.

    it's expression alone indicates the likelyhood of success.

    --
    every day http://en.wikipedia.org/wiki/Special:Random
    1. Re:There is a meme for this by Prior+Restraint · · Score: 3, Interesting

      Just out of curiosity, why wouldn't something along the lines of, "I wish you would go back into the bottle," work? (Not saying the RIAA's task is that simple; just critiquing the meme.)

    2. Re:There is a meme for this by rifter · · Score: 1

      Just out of curiosity, why wouldn't something along the lines of, "I wish you would go back into the bottle," work? (Not saying the RIAA's task is that simple; just critiquing the meme.)

      Because the genie is by definition not granting the RIAA's wishes. For the record, she seems to be listening to me pretty well, though :).

    3. Re:There is a meme for this by jshazen · · Score: 1

      its expression alone indicates the likelihood of success.
      Yeah, 'cause we see so many genies running around outside their bottles.
  74. Isn't that by Mark_MF-WN · · Score: 3, Informative

    Isn't that exactly how Freenet works?

  75. Re:The USA sucks by soft_guy · · Score: 1

    I live in the USA and I agree with you. It is a lousy place and you wouldn't want to live here.

    I wish I could leave.

    --
    Avoid Missing Ball for High Score
  76. Dude by Anonymous Coward · · Score: 0

    Abstract Idealism often predicts nothing. It tells the future, but it tells a future that never happens. What about my flying car? Vacations to the moon and mars? The 5 hour work-week?

    There's nothing abstract about a flying car. It's imaginary, but it's not abstract. Ditto the short work week et. al.

    The message of the cypherpunks, on the other hand, was indeed abstract. "Use encryption or else... bad stuff will happen! Some, uh, bad people, they could, uh, take advantage of you... in ways we can only begin to imagine!" That's within spitting distance of Abstracicus Maximus, if you ask me.

  77. Re:The USA sucks by Anonymous Coward · · Score: 0
    move north


    our economy is looking forward to the next wave of educated individuals once the "mess-o-potamia" results in the draft down there - we did pretty good out of the bungle in the jungle that way, last time around

  78. But... by Trejkaz · · Score: 1

    As well as apathy, there is ignorance. If a user doesn't know they're even using encryption (which most users of DRM probably don't), then their key can be stolen without them even knowing it was stolen. Say hello to identity theft!

    --
    Karma: It's all a bunch of tree-huggin' hippy crap!
  79. Tech Analysts by BitwizeGHC · · Score: 1

    A running joke with a colleague of mine is that if this "engineering thing" doesn't work out, we'll become professional nay-sayers. Predict doom, gloom, and failure, and when something we predict happens (statistically speaking, we have a 50/50 shot)we can say "I told ya so!"


    Isn't that how lots of tech analysts make their money? Rob Enderle comes out and says something like, "Linux will continue to grow in niche markets, but will never displace Microsoft in the enterprise." Then five years later we're still struggling for Linux on the desktop and Rob goes, "Told ya so! If you want my further advice for your organization, my rates are as follows..."
    --
    N4st0r, trixx0r h0bb1tz0rz! Th3y st0l3 0ur pr3c10uzz!
  80. Why Doesn't Shirky Blog?? by gilgongo · · Score: 2, Interesting

    I'm a big fan of Clay, and I'm on his NEC mailing list (I read his article when it came in today), but I think this piece has some unusually (for him) shaky arguments in it.

    What I'd like to see is his site as a blog that we could then discuss his essays on. He wouldn't have to take any notice of what we said, but seeing as he's big into online communities and communication networks, you think he might be into the idea.

    I know, I'll mail him. Where's his public key?

    --
    "And the meaning of words; when they cease to function; when will it start worrying you?"
  81. Worst write-up ever? by Kris_J · · Score: 4, Insightful

    I had to read the /. write-up about three times to workout what it was going on about. Couldn't have just said "RIAA ativities over the last year or so may have finally brought encryption and privacy concerns to the attention of the masses. Interesting article here"? I think that's what it's trying to say.

  82. Re:The USA sucks by Anonymous Coward · · Score: 0

    Where do you live that unemployment is lower?

    The "massive crime rate" in the US is grotesquely overstated.

  83. How about this one? by Anonymous Coward · · Score: 0

    Getting the toothpaste back into the tube.

    1. Re:How about this one? by Anonymous Coward · · Score: 0
      When you open a can of worms the only way to get the warms back in the can is to get a bigger can.

  84. Anyone who calls themselves a "cypherpunk"... by No+Such+Agency · · Score: 1

    ... probably isn't a cypherpunk.

    --
    Freedom: "I won't!"
  85. Its a conspiracy by Anonymous Coward · · Score: 1, Insightful

    RIAA isn't protecting the artists. They are protecting the profit making engines of corporate America, such as Sony and MGM. Artists usually owe money to the record company after a record deal. The artists make their money touring. Its a conspiracy if you ask me.

    Check out http://www.negativland.com/albini.html to give you an idea of who is actually benefiting from RIAA.

    All I know is that since RIAA issued a subpoena to a 12 year old girl for having 2 illeagal MP3s, I will never again pay for music, EVER!! /for my two cents

  86. It's not about your mom by poofyhairguy82 · · Score: 2, Insightful
    Encryption and the privacy that comes from it is not a end in and of itself.

    You are right in your assumption that most people don't care about encryption for day to day email and whatnot. But that is not the issue. The issue is for spreading information that might get you in trouble. If I wrote an email to my mom to get an iPod i would not care if someone intercepted it and saw it. Encryption would never find a use in this instance.

    Now say I want to send my friend some email giving him insider information that we will both (illegally) make money off of. That email I WOULD want encrypted. The best argument against such encryption (that I have seen modded high in this thread) is to say that the best use for hidden information is for actions that are immoral in nature. To that I argue that the internet is formed (or not formed really) from the social codes of the world. Its immoral to you but not someone across the world in a different culture. The Chinese Government would laugh at the RIAA if it asked it to stop music downloads.

    And therein lies the issue. Main stream encryption won't come from Microsoft just like mainsteam P2P didn't. Because its more likely (in a big company like MS's eyes) to be used to steal the new office software that secure a home office. Main stream encryption will spread the same way napster was. Just as geeks then told nongeeks "Hey try this napster thing, you install it and it will let you get free music," encryption will be spread by an added sentence to the geek-nongeek conversation. "Hey try this kazaa (or what ever is the next big P2P app) thing, you install it and it will let you get free music. Also install (insert encryption program here)so that you can get away with it."

    Encryption prevents the powers that be from bring down the hammer for not following order. That has nothing to do with something you mom probably wants to be involved with. Yet for some reason I like it cause I hate the man (even though I do like his stuff).

    1. Re:It's not about your mom by Reziac · · Score: 1

      Tangent to what you point out, unless *everyone* is using encryption, the odd individual using it is effectively waving a redflag proclaiming "I'M UP TO SOMETHING!!"

      Which is fine if there's no legal prohibition against using encryption, but what about situations like the British law that makes it a jail-without-trial offence to withhold a key, even one you don't HAVE??

      --
      ~REZ~ #43301. Who'd fake being me anyway?
  87. Freenet defense by Anonymous Coward · · Score: 0

    "If you intentionally install a program that transfers files through your computer to others, then I doubt ignorance would be an acceptable defense if you're caught uploading copyrighted material. At least not in the US."

    Not at all. First of all, one can use a program even when ppl use that for illegal purposes, as long as there is considerable other uses (such as free speech, which Freenet was created for). The court has already ruled about that.

    Secondly, since a Freenet node can not make out if and what it requests on behalf of itself or of others, it has the same defence that ISPs have: they are not responsible for the content they have or pass through, unless they have been told where/what the offending item is and if they are in the possibility to remove it. With a freenetnode/network, neither can be done, so in principle they have that extra protection.

    Furthermore, it's impossible to see if you are uploading copyrighted material, since it is encrypted. and it's not possible to see if you upload it yourself, since it can as well be somebody else. And even better; since the data caches itself randomnly when asked for, the fact that the RIAA would retrieve a song of someone and could prove it was on his node/HD, could actually mean THEY placed it there, meaning you have the defence of entrapment.

    All by all, you have very good legal defences.

    now, if only the speed was a bit better...

  88. Flying cars and vacation on Mars by Uncle+Barnard's+Star · · Score: 1
    Don't lump together flying cars and trips to Mars. Vacations on Mars may yet become a reality. Maybe it's an idea a couple of hundred of years ahead of its time, but there's nothing in human nature or economics that prohibits the long distance, long duration voyage. Think of a trip to Mars as the interplanetary equivalent of a luxury cruise around the world. All we need is a cheap and reliable means of Earth to Earth orbit transport and within a decade or two we'll have Survivor Mars.

    "Flying cars" on the other hand is a brain-damaged idea from the start. Except as off-road vehicles, the private motorized transporter was a brain-damaged idea from the start. Imagine the chaos of your usual rush-hour traffic jam. And multiply that by N levels of virtual roadways.

    Morever, on a high-G world, flying is a terribly energy inefficient means of transport. Ever wonder why nature didn't invent flying elephants?

    If you're caught in a jam, you can at least turn off the engine of your car to save fuel. If you turn off the motor of your flying car, you fall. Well, maybe a private airship wouldn't be a bad idea.

    The next advancement in personal transport won't be a flying car or a flying Segway but teleportation. Fax me up, Scotty.

    1. Re:Flying cars and vacation on Mars by smallfeet · · Score: 1
      I would just like a car that flyes over the pot holes. Does it count as flying if you are only inches off the ground?

  89. Digital signature by Lithus · · Score: 1

    For email, why don't we just use digital signatures. This way, you can veriy the sender. The signature need not be attached to an ip address, which means you preserve your anonymity.

  90. Royalties are where its at by Anonymous Coward · · Score: 0

    Songwriters make money off of royalties.

    Songwriters of popular songs make insane amounts of money off of royalties.

    Somebody one asked Kris Kristoffeson (or whatever) how he felt about having written "Help me Make it Through the Night." He said he felt like about $100,000 per year. (Still -- this was only a couple of years ago.)

    My step kids are breakers. They were in a couple of commercials this year. I think they made about a $250,000 this year. (Off of royalties.)

    There are a whole bunch of people who live in really lavish houses around here in Los Angeles. They have so many new high end cars and beautiful homes. I no longer wonder where they get their money from. (Hint: they get it from royalties.)

    These people will kill to keep the royalty system running. It is the source of their bless'ed lives.

  91. Traffic fatalities by bobkoure · · Score: 1
    Most people routinely travel 5-10 miles above the speed limit on the highway -- regardless of what the posted limit is. Should we change the limit from 65 to 75 so most of us aren't breaking the law anymore? Should we consider the studies that show traffic fatalities increase when speed limits are raised?

    But they don't increase - at least not in a statistically significant way across multiple regions and time periods.
    Having 55 MPH limits were actually more dangerous as it was the difference in velocity between vehicles that could contribute to an accident. Remember that limited access highways were designed for 70 -5 MPH.
    Of course, once an accident happens, higher speeds mean greater severity (more energy to dissipate) - but again, these roads were designed to not have hard things you could decelerate suddenly against.

    I'm some few years out of date with this - got actual studies, please post URLs and I'm prepared to be persuaded I'm wrong. If you're just making a point about "tragedy of the commons" - please stick to cows and grass.
  92. "All technologies are amoral" is a naive argument by Anonymous Coward · · Score: 0

    It's fine to say "all technology is amoral" in the sense that morality is a human ability which cannot be ascribed to some mere mechanism or technique. But it's really weak to argue based on this semantic technicality for the dissemination of a technology (like biological or chemical weapons) that can have no net benefit to the world.

    If the only "good" that you can point to in a technology is that it might be studied to find ways to prevent the evil it is capable of then on the balance that technology cannot possibly do more good than evil.

    A world in which weaponized anthrax exists is in no way better than a world in which weaponized anthrax does not exist.

    Back on topic, the analogous arguments with cryptography and anthrax are:

    1. The Evil:

    Anthrax enables bad people to do horible things (namely mass murder).

    Cryptography enables bad people to plan horible things in secrecy.

    2. The Good in preventing The Evil

    Anthrax can be studied to develop an antidote, offsetting evil uses of anthrax (but only if we're lucky, have the antidote on hand, etc.)

    Cryptography can be studied to find exploitable flaws, preventing evil meaning people from succesfuly planning horrible acts in secrecy (but only if we're lucky, can tap their communication channels and respond in a timely manner, etc.)

    3. The Good in itself

    Anthrax has no inate benefits.

    Cryptography enables privacy. Go ask a cypherpunk, libertarian, or Canadian federal government official (we have a privacy commision, it's flawed, but a start) why privacy is a Good Thing.

    So, while in a technical semantic sense all technology is amoral much like dirt is amoral, there is a practical scale of potential-for-good on which e.g. anthrax ranks much lower than encryption.

  93. Re:we gnaw by Anonymous Coward · · Score: 0

    on M$FT the dvd-rom is plug and play. i sit and press play on DVD. it does not work. i install another driver. it does not work. i install Windows Update. it does not work. i install yet another driver. it does not work. I sit and gnaw my fists, and cry. then my friend comes and cheers me up. we must fight! we will win! we sit and hack. and hack, and nibble, and hacks. it does not work. i debug. it does not work. i delete the old source. and start again. i recompile. it does not work. i ask friends and they hack too. they debug. it does not work. we turn to guru. he gives 3 lines of code and says "you know the rest". we code. it works.