Slashdot Mirror


Clay Shirky: RIAA Succeeds Where Cypherpunks Fail

scubacuda writes "Clay Shirky has an interesting take on encryption: 'The RIAA is succeeding where the Cypherpunks failed, convincing users to trade a broad but penetrable privacy for unbreakable anonymity under their personal control. In contrast to the Cypherpunks "eat your peas" approach, touting encryption as a first-order service users should work to embrace, encryption is now becoming a background feature of collaborative workspaces. Because encryption is becoming something that must run in the background, there is now an incentive to make its adoption as easy and transparent to the user as possible. It's too early to say how widely casual encryption use will spread, but it isn't too early to see that the shift is both profound and irreversible.'"

92 of 342 comments (clear)

  1. Here's a link to the article... by tcopeland · · Score: 4, Informative

    ...for some reason it's not listed (at least, I couldn't find it) on the front page of shirky.com yet:

    http://www.shirky.com/writings/riaa_encryption.htm l.

    1. Re:Here's a link to the article... by kj0rn · · Score: 3, Funny

      It's gunna make it real interesting for future historians to figure out how to decrypt and read those old data formats.

  2. Seems obvious. by Violet+Null · · Score: 4, Insightful

    The Cypherpunks never went around suing people (that is, actually costing them money) who weren't using encryption to mask their illegal activities. The RIAA is.

    Real world practicality will always be a much better motivator than abstract idealism.

    1. Re:Seems obvious. by plover · · Score: 5, Interesting
      What will be most interesting is if the crypto "wars" play out through all the theorized stages of attack, counterattack, and man-in-the-middle attacks that the cryptographers have worked out over the past 20 years. We already expect the RIAA won't take kindly to encrypted networks sharing their music, so we should expect to see some countermeasures.

      So what will be their strategy? Will they first attempt to "join" these networks, posing as users looking for Britney's latest, and entrapping systems that serve up the bits? Will they put out bogus trojaned clients on the services? "Dude, download LockTella 1.9, it's l33t!!" only to find that it hoovers up passwords and music lists, and forwards them on to DUDE@RIAA.COM?

      Will cypherpunks come to the rescue, providing signed versions of the clients? Will the users finally understand the need to verify the signatures before running them? It's a big stick -- "run an untrustworthy client, get a lawsuit."

      And finally, will this come full circle, leading to a true "Web of Trust" as originally envisioned by Zimmerman et al with PGP? I can see the further parallels to Prohibition, with entry to speakeasies controlled by passwords like "John said to tell you I'm OK" whispered through a hole in the door.

      This could be a very interesting time to live in.

      --
      John
    2. Re:Seems obvious. by jaxdahl · · Score: 5, Insightful

      Or just boycott the RIAA and be a good guy and support cheap music, not downloading music you don't own. Or learn how to make your own music.

    3. Re:Seems obvious. by Kallahar · · Score: 3, Informative

      The reason that the RIAA is coming down so hard on file sharing is that there are so many people doing it. Years ago before napster came about, there were just as many songs available online. However, they were harder to get. Your average person wouldn't know where to go or how to get them. If RIAA is able to get the piracy back down to that level then they'll back off.

      It only takes one person to break the encryption and put a song up on the net, but if he's likely to get sued/arrested then he'll think twice, and only those "in the know" will know where to go to get the songs.

  3. Re:can someone explain by securitas · · Score: 4, Informative


    what eating peas has to do with encyprtion? I'm totally lost.

    Shirky means that using encryption is good for you and that's the approach that proponents (Cypherpunks) have used, even though using encryption has historically been difficult and an unpleasant experience for the average user. Hence the "eat your peas" reference, similar to parents who try to get children to eat vegetables which they find distasteful (an unpleasant dining experience).

  4. Apple, meet Orange by Squideye · · Score: 3, Insightful

    Before I read the article, I'll just point out that the Cypherpunks' "eat your peas" approach actually gives the users control over how their anonymity and security takes place. Sure it gives you more responsibility -- you have to buy the locks yourself -- but it also gives you control over how it happens. You basically only have to trust the person who made the lock, but you can have the blueprints so that you know it works.

    RIAA-style privacy is basically a Housing Company telling you that they'll take care of everything, and that you don't need to worry because you're probably safe. Note, of course, that the RIAA companies are the types whose security has been foiled by such stunning feats of ingenuity as writing on a CD with a magic marker, or an algorithm written by a 16-year-old that can be implemented using as much space as fits on the side of a pencil.

    What the RIAA gets people to adopt is the style of "no-brainer" security people are used to when they get their lockers broken into at the gym, as opposed to asking us to take some frickin' responsibility for ourselves as the Cypherpunks would urge.

  5. changing laws by toasted_calamari · · Score: 5, Insightful

    from the article:
    to a first approximation, every PC owner under the age of 35 is now a felon.

    This may or may not be an exaggeration, I have no idea, but Shirky makes a good point. When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

    At this time, it seems that the RIAA is winning, and we are moving inexorably towards a world where large corporations control what people do with there computers. However, because there is so little popular respect at the moment for copyright law, it follows that eventually those laws will change.

    Over the next 5-10 years, I predict that many laws will be completely rewritten to better accommodate the changes that the internet has brought upon society. Many of these changes will be for the better, and the end result will almost certainly be a more free and open society. Unfortunately, democracies are slow to act, so there will be years more of legal confusions and abuses of power before things finally straighten out.

    1. Re:changing laws by Jafafa+Hots · · Score: 4, Insightful

      I wish I could be as optimistic as you... but personally I think we'll have a "War on Piracy" to go with our "War on Drugs" rather than more sensible laws.

      --
      This space available.
    2. Re:changing laws by poot_rootbeer · · Score: 4, Interesting

      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      Most people routinely travel 5-10 miles above the speed limit on the highway -- regardless of what the posted limit is. Should we change the limit from 65 to 75 so most of us aren't breaking the law anymore? Should we consider the studies that show traffic fatalities increase when speed limits are raised?

      It's human nature to choose the course of action that benefits one's self the most, but if that action has a net effect of reducing benefits to others (by not compensating them for their work, or by killing them in a car crash), it is right for the state to restrict your ability to follow that course of action.

    3. Re:changing laws by multimed · · Score: 4, Insightful
      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      This is certainly an excellent rule of thumb and our legislators should follow popular opinion to laws or at least in theory, they won't be re-elected. Just keep in mind that this is concept should never be taken as an absolute. The Founding Fathers were concerned with what the potential for what they called "tyranny of the majority," South Africa being the typical example.

      Regarding legislation to change copyright laws to make them more reasonable, it's just not going to happen for two major reasons. First, I really don't think there will ever be enough critical mass of informed, upset people. Probably 90% of the population either doesn't care or just assumes that copyright is a natural phenomena rather than an artificial constraint created as a means to an end--creation of works and the betterment of society. And second, the entertainment industries have too much money and are unified on this issue. Compare this to the do-not-call legislation. That is an example of what it takes for a grass roots movement to defeat an industry lobbyist on a big issue. The entertainment industries have tons more money than the DMA and telemarketing phone calls were in people's faces, constantly annoying them into complaining to their legislator. For the vast majority of the people they don't ever see any impact of unbalanced copyright laws on their lives.

      --
      Vote Quimby.
    4. Re:changing laws by MisterMook · · Score: 4, Interesting

      That's exactly what happened when they raised the speed limit from 55mph though, stopped the ban on alchohol, started examining segregation, and probably a whole bunch more that my soda blurred brain can't think of right now. If a minority chooses to do a thing then it's a cancer, if the whole organism begins to act a certain way and the minority are the people who don't...Is it selfish for a society to not act hypocritically? If all of society begins to act a certain way and the left hand chooses not to, should society sit idly as the left hand stabs the right because it's not acting the same as before? Now the question comes, is filesharing the issue and if it is such a prominent component of something that hasn't been identified properly as the issue, then what is that issue? A huge segment of society obviously is chosing to act this way, is it selfishness or consensus?

    5. Re:changing laws by zeasier · · Score: 2, Informative

      Over the next 5-10 years, I predict that many laws will be completely rewritten to better accommodate the changes that the internet has brought upon society. Many of these changes will be for the better, and the end result will almost certainly be a more free and open society.

      Alternative lisencing scemes have already been created, which are the copyright equivalent to the GPL. These alternative copyright systems will compete with full copyright instead of replaceing it. As more and more artists put their work into liberal lisencing scemes it will become harder for others to do business the old fashoned way. The fact that these alternative lisences exsist ensure the future of full copyright, because now producers and consumers have a choice. For this reason there will always be some content locked out of the public domain. Old fashoned copyright law will not change, but it's perseption and proliferation of use will.

      Take the Microsoft anti-trust case for example. It's no coinsedence that the issue puttered out at the same time Linux was gaining in popularity. It seems that legal alternatives, (the GPL) and public action beat the government to the punch. For the most part, copyright will follow the same path.

    6. Re:changing laws by mjh · · Score: 2, Informative
      When the vast majority of a society is violating a certain law, it is a sign that the law, not the society needs to change.

      I like the way that John Parry Barlow expresses this idea:

      "Neither the best efforts of Judge Patel - nor those of the Porsche-driving executives of the Recording Industry Association of America, nor the sleek legal defenders of existing copyright law - will alter this simple fact: No law can be successfully imposed on a huge population that does not morally support it and possesses easy means for its invisible evasion."

      - Quoted from this wired article.

      --
      Key to financial independence: Spend less than you earn. Save and invest the difference. Do it for a long time.
  6. Re:Cypherpunk is a stupid name by sqlrob · · Score: 5, Insightful

    Encryption is good, as long as the people using it are good. When people use encryption to hurt other people, it becomes a serious liability.

    Well, DUH, it's a tool, nothing more.

    You can say the same about cars, knives, guns and just about anything else.

  7. How about "Fear of RIAA" by JUSTONEMORELATTE · · Score: 4, Informative

    The RIAA isn't setting out to do this, it's happening as a result of peoples' fear of a RIAA lawsuit.

    --

  8. Interesting, but apathy will prevail by Tangurena · · Score: 5, Interesting

    Nice article. Unfortunately, apathy will ultimately reign supreme. People want to turn on their computer to get something. They don't want to be car mechanics in order to be able to drive a car. If the p2p software comes preconfigured to use encryption, then it will get used. If it has to be enabled, then it won't happen very often. It does not really matter if I want to use PGP, if no one else I communicate with is willing or able to install and use it.

    1. Re:Interesting, but apathy will prevail by mitheral · · Score: 2, Informative

      The point of the article is that there are now enough users (even if only a small percentage) that want the encryption. Therefor the developers as including it as the the default. And as you stated users don't change the defaults. Encryption is just there.

  9. Re:Most poorly written slashdot comment...ever. by archen · · Score: 4, Funny

    It was unintelligible unless you read it three or four times.

    Wait for about three days and Slashdot should have a sufficent ammount of dupes to make it much more clear =P

  10. Re:Cypherpunk is a stupid name by swb · · Score: 4, Funny

    You can say the same about cars, knives, guns and just about anything else.

    Especially dihydrogen monoxide.

  11. Digging their own graves... by Noryungi · · Score: 5, Interesting

    Anybody else thinks that, if encrypted file-sharing becomes a reality, the RIAA will simply implode?

    From the article:
    to a first approximation, every PC owner under the age of 35 is now a felon.

    Now remember what the Cypherpunks said a few years ago?

    If crypto is outlawed,
    only outlaws will have encryption


    There you have it: goodbye RIAA. We hardly knew ya. You made us all felons, and by doing so, you opened the floodgate that were going to drown you.

    --
    The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
    1. Re:Digging their own graves... by Feyr · · Score: 2, Informative

      there's multiple problems with anonymous, encrypted peer to peer whitout users oversights.

      1. your IP address is still visible (lesser of all)
      2. WHO are you trusting to view your files? who's to say it's not a RIAA-mandated agency ?

      3. WHO are you trusting to download from?

      4. even if you KNOW who you're talking to, if you don't manually verify, on a secure medium, the key used. how do you know there's no middle-man? the dsniff tool widely show this (sshmitm) by assuming users always click "yes" when prompted about unknown or changed hosts keys, that's sysadmins we're talking about, imagine joe-nowhere now?

    2. Re:Digging their own graves... by lynx_user_abroad · · Score: 2, Interesting
      there's multiple problems with anonymous, encrypted peer to peer whitout users oversights.

      Those are not problems of the encryption, nor even of the system which employs it. The problems you mention result from trusting an untrustable contact.

      It's not an IP address you're trying to conceal, (having an IP is not illegal) it's the activity occuring at that IP address which you're concerned with. Similarly, if you get your content only from and offer your content only to trustable people, then you don't have to worry about them linking your conduct with your identity.

      The hard part is finding trustable contacts. Encryption does not help in this, but it is an effective tool for ensuring that information is only being disclosed to to whom you think you are disclosing it to.

      Any, yes, stoopid people can shoot themselves in the foor even with an encrypted gun. Nothing can prevent that. Onlt the advice "Don't have stupid friends." seems of any help for that.

      --

      The thing about things we don't know is we often don't know we don't know them.

    3. Re:Digging their own graves... by stwrtpj · · Score: 2, Insightful
      Anybody else thinks that, if encrypted file-sharing becomes a reality, the RIAA will simply implode?

      Not before they attempt to lobby Congress to pass laws banning encryption use by the masses.

      --
      Karma: Frotzed (mostly due to the Frobozz Magic Karma Company)
  12. I prefer visible encryption by dnoyeb · · Score: 4, Insightful

    I do not like hiden encryption. I like to know everything is working and not get to confortable. Don't want to be cought ignoring that lock icon on your browser these days.

  13. A bit rambling... by fruey · · Score: 4, Interesting
    What the article is basically saying is that because people are now losing their anonymity in a more obvious way, because they're getting sued... then they are more likely to turn to crypto.

    However it's a rather tenuous link to say that the RIAA succeeded where Cypherpunks failed. Advocates are one thing, but really the rise of P2P applications and the growing Internet user base are what have caused P2P to become a real PITA for the RIAA. Therefore they make high profile legal cases to grab media attention. However, they could not realistically target piracy any more than the police raids on weekend markets in London will stop home-burned DVDs from being sold on a stall.

    So, some people will use encryption just like Del Boy and Rodney (UK reference to Only Fools and Horses) used a suitcase for their wares and ran whenever the Police came close by. But massive public adoption of cryptography will only be because it will be built in for a reason (rather than optional) and because processors are fast enough to encrypt/decrypt on the fly with long keys... and still, it's a prediction. It's not mainstream yet - and the main thing this guy is forgetting is that the RIAA will bait and trap users with or without encryption on the wires.

    --
    Conversion Rate Optimisation French / English consultant
  14. Sad, but the truth. by Bill,+Shooter+of+Bul · · Score: 3, Insightful

    I'll even risk my Karma on it. The Slashdot communioty needs to be able to point out ways for the /. editors to improve. Making sure that there is a link in the blurb to the story mentioned in the blurb is sorta important. Don't ya think? Perhaps mr Coward, was a bit terse in his language, but honestly there are quite a few posts already that ask for the real link. So if it takes a few sarcastic, but on topic, barbs to motivate them, so be it. There is no better motivation than sarcasam. Except perhaps for a well written piece on the need for sarcasam. ;)

    --
    Well.. maybe. Or Maybe not. But Definitely not sort of.
  15. Adversaries help in spite of themselves by redelm · · Score: 5, Insightful
    This is yet another manifestation of how adversarial relations backfire. As Nietzsche said "What doesn't kill you makes you stronger". Unless you can force a total a total paradigm shift (Bush invading Iraq), lesser measures will be counterproductive (Iraq sanctions). Do not start a fight you cannot win.

    The RIAA has blunders at least twice. First it shutdown Napster 'way late (because it wasn't easy), now it is harassing KaZaa users with even less success. The next incarnation will be even tougher. They ought to be putting their energies into a paradigm shift like iPod. Or maybe even running their business competantly, with decent A&R budgets and better terms for musicians and customers since their distribution monopoly has faded.

  16. Re:Cypherpunk is a stupid name by warpSpeed · · Score: 5, Insightful
    Encryption is good, as long as the people using it are good.

    Encryption, like all technology, is amoral.

    Good and evil come from people. This is ultimatly where most legislation fails at stopping evil. You legislate away the technology that evil uses in the hopes of stopping it. However, evil rarely follows laws. So the laws are draconian to compensate for evil not following thems. The end result is that good does not benifit from said technology while evil thumbs thier nose at good.

    Encryption will be used for evil, regardless. If you do not outlaw it then the playing field will be level.

  17. You didn't read the article by Sloppy · · Score: 5, Informative

    The reference to RIAA is not about their use of encryption in the form of DRM. It's about how conflict with the RIAA has resulted in many mainstream non-nerd people using privacy-enhancing tools (and more broadly: gaining a pro-privacy mentality).

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  18. But... by Nijika · · Score: 4, Insightful

    Abstract idealism often tells the future. The Cypherpunks can once again send up a resounding "told ya so!"

    --
    Luck favors the prepared, darling.
    1. Re:But... by mekkab · · Score: 4, Insightful

      Abstract Idealism often predicts nothing. It tells the future, but it tells a future that never happens. What about my flying car? Vacations to the moon and mars? The 5 hour work-week?

      A running joke with a colleague of mine is that if this "engineering thing" doesn't work out, we'll become professional nay-sayers. Predict doom, gloom, and failure, and when something we predict happens (statistically speaking, we have a 50/50 shot)we can say "I told ya so!"

      --
      In the future, I would want to not be isolated from my friends in the Space Station.
  19. Re:Cypherpunk is a stupid name by grub · · Score: 5, Funny


    When people use encryption to hurt other people

    You mean like when I throw my copy of Applied Cryptography at people's heads?

    --
    Trolling is a art,
  20. snake oil by SuperBanana · · Score: 5, Insightful
    but it isn't too early to see that the shift is both profound and irreversible

    Not really. There's been several explosions of various file/disk encryption products. Your handheld device isn't a Somebody(Something?) until it's got at least a dozen "encrypted" personal information storage widgets for it.

    The problem is that encryption is 90% snake oil. Usually it's written by someone who thinks they know encrpytion- and encryption isn't, to coin the phrase, like a hand grenade; close doesn't count. Zimmerman is famous for his saying that "anyone who claims to have unbreakable encryption doesn't"(apologies for paraphrasing).

    Encryption also does little when physical security can't be controlled; Dallas Semi had the right idea with their iButtons, which brought reasonably secure key storage to the masses(if opened, for example, it erased itself) but it's gone pretty much nowhere; you just don't see them in widespread use(unlike, say, a proximity card or magswipe). I suspect even USB keys now vastly outnumber iButton devices.

    All the encryption in the world won't do you any good if you can't store the keys securely...and these days, all it takes is a janitor with a CDROM with linux that 'phones home' and sends back choice tidbits...or an ipod.....or a USB hard drive..or a USB memory key...or a blank CDR, since so many machines come with CD burners now...

    1. Re:snake oil by Proaxiom · · Score: 5, Informative
      The problem is that encryption is 90% snake oil.

      Where does that claim come from? I'm pretty sure it's not true because more than 10% of encryption is PGP (not counting government crypto, anyway), and PGP isn't snake oil.

      It's pretty easy to find snake oil, just read the Doghouse section of Bruce Schneier's monthly Crypto-Gram. But there are also a lot of good companies out there providing a lot of crypto solutions (although admittedly most of them actually license the technology from a small handful of good companies, like RSA and Certicom).

      Encryption also does little when physical security can't be controlled

      But the issue at hand, with regard to the RIAA and anonymity, is about network security. The RIAA finds it much easier to subpoena your ISP than to sneak into your house and steal your USB keys.

      Good and ubiquitous crypto certainly isn't the end-all-and-be-all of security, as you point out, but it would indeed make for 'profound and irreversible' changes in the Internet, in the vulnerability landscape, and in the threat models of pretty much everyone on it.

    2. Re:snake oil by mitheral · · Score: 2, Insightful

      None of that stuff is going to help the RIAA or your ISP who is just sniffing the wire. Yes the alphabet soup guys will be able to get a warrant and break your system but think about the cost involved. Until copyright infringement becomes a asset forfiture crime there is no incentive for the goverment.

  21. Right... by Anonymous Coward · · Score: 2, Insightful

    ...and Hitler actually unified many diverse nations inadvertently by forcing them to work together.

    I guess it makes sense, but I'm not going to be putting the RIAA into my prayers at night because of it.

  22. it's irreversible .... by pezpunk · · Score: 2, Funny

    like my raincoat!

    --
    i could live a little longer in this prison
  23. No no NO no!!!!! by TerryAtWork · · Score: 5, Insightful

    This is not the problem!!!!

    The problem is not people intercepting your mp3s - the problem is sharing an mp3 with a guy working for the RIAA or in my case the CRIA and they get your IP and then they go to your ISP in an attempt to get you booted off the net, exactly as happened to me.

    For instance - on Sourceforge there is a sooperencypted IRC project for safe sharing.

    Useless.

    All the RIAA spies have to do is go on the net, get that software, join the queue for mp3s then rat you out exactly as specified above.

    What we NEED is a way to share files in such a manner as the receiver has no idea what your IP is.

    This is not going to be easy. (And please don't mention Freenet ok?)

    --
    It's Christmas everyday with BitTorrent.
    1. Re:No no NO no!!!!! by poot_rootbeer · · Score: 3, Insightful

      What we NEED is a way to share files in such a manner as the receiver has no idea what your IP is.

      Unless it's email, in which case the sender ought to be fully and accurately identified.

      Am I the only one who sees a problem with reaching simultaneously for More Anonymity AND More Accountability?

    2. Re:No no NO no!!!!! by javatips · · Score: 2, Insightful

      The problem with web of trusts is that they grow very slowly (if people are very carefull about who they trusts). So the amount of stuff availlable to one will be quite small compared to the p2p networks we have now.

      It is also inevitable that at one point, someone untrusted will join the network. Then he can gatter information to build a case against sharers in the web of trusts. You probably have no way of knowing who is the stool and you'll have to scrap your web of trysts and rebuild it from scratch.

      So web of trusts will never work. You'll hve better luck with stuff like freenet that can garantee anonymity.

  24. Re:Cypherpunk is a stupid name by Squideye · · Score: 5, Funny

    dihydrogen monoxide

    We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today...

  25. Re:Cypherpunk is a stupid name by FooAtWFU · · Score: 5, Funny

    We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today... Man, be careful! It can be fatal if inhaled! It causes erosion, and is a primary component in acid rain! It's been found in the tumors of terminal cancer patients! It contributes to global warming! It's one of the world's top industrial chemicals... and it regularly works its way into our water supplies!

    --
    The World Wide Web is dying. Soon, we shall have only the Internet.
  26. Unbreakable anonymity? by Weaselmancer · · Score: 5, Interesting

    I read the article and can find nothing there suggesting how I can trade anything for unbreakable anonymity, or even how unbreakable anonymity could even be implemented.

    Encrypt the packets? Fine. You can still trace their origin.

    Let's say that you do RSA key pairs, and build them into some sort of P2P. When two people connect, they swap public keys and encrypt the stream.

    There is nothing that says that the person who is leeching a file from you isn't Hillary Rosen. Traceroute, and you're still nailed.

    The only way to be truly anonymous in a P2P application would be to have the application auto proxy a neighbor. Here's how that would work.

    User WantMusic jumps on the new P2P net and broadcasts a desire to download "myfavoritesong.mp3", and their RSA public key along with the request. Some other user, MusicBank, has the song. Rather than having the client pull the data directly from MusicBank, have MusicBank push the data to the client. Each outbound packet from MusicBank would at random select someone else on the net and say "Take this packet of data and pass it along to user WantMusic at this IP address."

    If the someone else happened to be Hillary Rosen, all she would get is a packet of unreadable data - she doesn't have the private key. She could know who it was from, and where it was going but have no idea what it was. Might be music, might be the Linux kernel.

    If Hillary jumps on the net and tries to download myfavoritesong.mp3, all she could do is traceroute a bunch of packets to 2nd party proxies. By the definition of the protocol, they don't have the file. They're innocent. She still doesn't know MusicBank has the file.

    The disadvantage to this protocol is that it'd be slow. Each packet would have to hit a proxy. Instead of server->client, it'd be server->proxy->client. You could expect downloads to be at least 1/3 slower.

    If I had the time, I'd write this sucker.

    Weaselmancer

    --
    Weaselmancer
    rediculous.
    1. Re:Unbreakable anonymity? by Weaselmancer · · Score: 3, Interesting

      First off, thanks - seriously. I need people to challenge this so that I can spot problems. Too bad you posted as AC. So here goes.

      1) Client says "who has this file?" Server says "me" and sends client public key. Client knows IP of sender. Client is RIAA. Server nailed.

      In this protocol, only the client would broadcast a public key. Client broadcasts a file request and a public key, and somebody responds. Nobody knows who. The server never directly contacts the client under any circumstances.

      2) Client says "who has this file?" Server says to a random computer "Tell client I have this file." and passes along its public key. Random computer is RIAA. Server nailed.

      Again, server never broadcasts a public key. And even if the message was "Tell client I have this file," at this point server would have the client's public key and could encrypt the intent to broadcast the file.

      Keep it up - keep poking at this. Maybe we can establish a truly anonymous protocol here!

      Weaselmancer

      --
      Weaselmancer
      rediculous.
    2. Re:Unbreakable anonymity? by JASegler · · Score: 2, Interesting

      It's not unfixable. It's just inconvienent.

      Freenet has non-trivial to break privacy for it's users. I won't say unbreakable since that's not really proveable.

      Of course it has problems:
      1) very slow
      2) very unreliable
      3) not easily searchble.

      Because of these issues it's not going to replace Napster/Kazaa/etc for normal users.

      That's always the tradeoff for security anyway. Easy to use or secure? Pick one.

    3. Re:Unbreakable anonymity? by Stray7Xi · · Score: 3, Informative

      The RIAA (or chinese government) can put a lot of nodes on the network to spy on the requests, proxies. RIAA just has to have computer to keep sending out requests for only illegal data. Eventually nodes will forward through the RIAA's proxy to the RIAA's requester.

      As long as an arbitrary (untrusted) node can see who the source and destination is, it won't work.

    4. Re:Unbreakable anonymity? by gnu-generation-one · · Score: 3, Informative

      "Encrypt the packets? Fine. You can still trace their origin."

      Sign the packets. Broadcast them, and anyone who receives them broadcasts them to anyone else who's interested. You don't need to hide the fact you're sending packets if there's no way of knowing whether you originated them or not. You're just a part of the network, routing traffic for anyone who's interested. You're no more liable for filtering it than the Tier-1 routers are.

      You sent that packet? No I didn't I forwarded it. From whom? Don't know, it's automatic.

      Konspire2B

    5. Re:Unbreakable anonymity? by Qzukk · · Score: 2, Interesting

      If I send out a request for "myfavoritesong.mp3" and then other nodes on the network start sending me packets.

      Ah, but as part of the network, you would be receiving and forwarding other peoples' responses too (unless you're abusing the network, in which case you deserve to be tracked down ;) So, just because packets come to you doesn't mean they were part of your request.

      Something like this could be easily turned into a freenet with less secrecy and more privacy by establishing a mesh of nodes, each with the keys of their neighbors, and each with a three-part request table. Node X encrypts Request #12531324 to each of its neighbor nodes sends it and records "I made Request #12531324". Neighbor Node Y decrypts the request, checks to see if it can answer it, then encrypts the request with each of its neighbor nodes, records "I got #12531324 from Node X". This step is repeated until it reaches Node Z, who can respond to the request (for brevity, we'll assume that the next node is Z). It responds with Response #19591531 to Request #12531324. This response isn't the data of the file, just a "this file exists here". Node Y gets the response, looks in the request table, and finds that it got request #12531324 from node X. It makes an entry in the table saying "I got Response #19591531 from Node Z".

      Finally, the user at Node X sits back down after grabbing a drink and sees that responses have started coming back for his search for "Scream*avi". Looking through the list of choices, he finds that scream 2 encode he's been missing to complete his collection. He clicks on Response #19591531, and Node X sends a message to Y saying "Fulfill Response #19591531". Node Y knows this response came from Z, so it forwards it to Z. Z sends data to Y, Y sends data to X. Loops are identified and terminated when a node handling a request finds that it already has handled that request in its table.

      So, now unlike freenet any particular node can determine whats being forwarded through it (since it decrypts every bit of data to pass it on to the next node). However, privacy is maintained: If node MPAA requests scream 3, it receives only data from neighbor-nodes, with only information about those neighbor-nodes. If Node MPAA receives a request from Node X, MPAA does not know whether X itself made the request or if X is forwarding that request from someone else. If Node MPAA responds to a request, it only talks to the Node that gave it the request in the first place.

      In order to compromise this privacy, MPAA would need to either a) read the request table of every node between and including X and Z, or b) BE every node in the network, except for X and Z, so that they know the request could not have come from anywhere other than X and gone to anywhere other than Z.

      Other things to improve usability (possibly at the risk of allowing users to cripple the network): Request and Response nodes could bear a "max_bandwidth" field, which could be lowered by a slow node but never raised, and used by Node X when determining which response to accept. Node Z could wait a random amount of time to formulate the Response (if MPAA requests foo from Z and Z answers immediately, then Z is a likely candidate for being the host of the file).

      Part of the reason for "secrecy" though, where nobody but Z and Y knows *what* is in the data, is that if Node MPAA receives Scream 2 from Node Z, even though Z may or may not be hosting it themselves, the MPAA may get to sue them for helping whoever hosted it give it to whoever requested it.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    6. Re:Unbreakable anonymity? by Myopic · · Score: 2, Insightful

      If you route your (illegal albeit encrypted) content thru third parties, and the third parties know about it, then aren't they guilty ("guilty") of contributory copyright enfringement (the same thing Napster was smacked for)? In your example, Hillary may not be able to pounce on the person originally serving the file (if she couldn't trace that person), but she could pounce on each of the people proxying a piece of the file.

      Simply not having the file on your hard drive doesn't mean that you haven't broken a part of the copyright law.

      This isn't to say that I think the law is reasonable, but to say that you haven't skirted the law with your suggested protocol.

  27. Re:Cypherpunk is a stupid name by Anonymous Coward · · Score: 3, Insightful

    Encryption, like all technology, is amoral.

    Technologies like weaponised anthrax?


    Well, yes. Anthrax in the hands of the "good guys" will be used to do research on how to prevent fatalities in the event that one of the "bad guys" tries to use it.

    Get it?

  28. Sealed lips by daminotaur · · Score: 5, Interesting

    Shirky: "In any system where a user's identity is in the hands of a third party, that third party cannot be trusted." The classic Mafia version of this is: "Two people can keep a secret as long as one of them is dead." Most people don't think that way, and even if they did they are unlikely to trust any technological system that promises absolute anonymity. The cypherpunks' fantasies are no more ready for prime time now than ever. Main problem is that anonymous communication is a chimeral fantasy, and any scheme to even experiment with their implementation is complex and onerous to all but people who like to read Schneier for fun, and play secret agent. Above all, cypherpunks chase anonymity like it's a virtue, when most of the worst aspects of the net are caused by anonymity and unaccountability.

  29. Yahoo and Hot Mail should turn on by default by leoaugust · · Score: 3, Interesting

    I think the fastest way to get encryption turned on by default is to have these major email providers (like Yahoo and Hotmail) to turn on encryption by default. If they did so, then there will be enough momentum for the other providers to do so too, and anyone using encryption would not stand out as a potential trouble-maker ....

    The reason why it is importatnt to have a critical mass of communications in encryption is becuase otherwise the people encrypting sorely stand out. If I decide (which I would love to) start encrypting today, many people would wonder what sort of shady business I have gotten into. Not to mention Ashcroft would be after me, with a claim that I am some Lone-Wolf terrorist ...

    My point is that there should be there has to be enough people encrypting for it to become feasible. If I am one of the people encrypting while others are not then I am the proverbial needle in a haystack. Any magnet can easily pull me out by my jugular ... If I am one of the many other people encrypting then I am just another hay in the hystack ... much harder then to grab me by my b**** ....

    --
    To see a world in a grain of sand, and then to step back and see the beach where the sand lies ...
    1. Re:Yahoo and Hot Mail should turn on by default by PossibleMat · · Score: 2, Insightful
      The proverbial case "the chicken or the egg"
      If you don't start encrypting today, you don't contribute to reach the critical mass. If everybody thinks like that, widespread use of encryption is gonna take a long time to come.
      If I decide (which I would love to) start encrypting today, many people would wonder what sort of shady business I have gotten into
      If Hotmail or Yahoo starts making encryption easy to use, many people would wonder what sort of business they are encouraging/supporting.
      Oh, and Microsoft would probably "enhance" their encryption with other "features", making compatibility with other services impossible anyway. ;-)
      --
      Have you Meta Meta Moderated lately?
  30. Re:Cypherpunk is a stupid name by ReelOddeeo · · Score: 4, Interesting
    You mean like when I throw my copy of Applied Cryptography at people's heads?

    Careful! Applied Crypography is a thick book!

    I am currently reading that book. (Second Edition) I was amazed at the prophetic words on page 97 (or maybe 99)? The book is discussing Key Escrow and Clipper. He says something to the effect of:

    If there were a major terrorist attack on New York what sorts of limits on the police would be thrown aside in the aftermath?
    The copyright on the book says 1996. I'm assuming that even in the Second Edition that these words are prophetic. Sorry I don't have the exact quote, and am not positive on the page number because I don't have the book here with me. But you could find the Key Escrew form the TOC.
    --

    Those who would give up liberty in exchange for security and DRM should switch to Microsoft Palladium!
  31. Encryption is good, but not the complete answer. by Anonymous Coward · · Score: 2, Insightful

    Suppose all file sharing apps had encryption- if an individual can get on the network, then so can the individuals and robots working for the RIAA.

    To defeat the RIAA all that is needed is a challenge that requires a HUMAN response. Right now they use robots- but they can't compete if they have to examine an image and type what it is (takes a real person).

    A better approach than that, but harder and less efficient is something like Freenet-

    but it really needs to use ed2k type links and incorporate a search for keys. And of course be written in C, so I don't have to install a bloated Java environment.

    Perhaps Freenet might die if the RIAA decides to inject massive amounts of crap and download it (making their chunks popular and erasing existing files on the network.

    So, freenet + human required = good, almost unbreakable.

  32. Musicians! "Take back the guitar case!" by e-gold · · Score: 4, Informative

    Well said, but the RIAA is (IMO) way too fat in middle management to ever be able to give musicians the better terms we all instinctively know that they deserve. The answer (and yes, I'm both biased and financially self-interested -- but no, I don't speak for e-gold or anyone else but Jim Ray) is for musicians to "take-back the guitar-case" (the money is where the REAL control lies) and set up their own internet tipjars. It's been possible and easy for a few years, and finally they're going to learn to think in new ways about how to get paid by a planet-wide audience. They have had the technology for a while (since 1996 in some form or other).

    Imagine a 'one-hit wonder' like Normal Greenbaum's "Spirit in the Sky," garnering 7 million or so direct tips for a quarter worth of gold (most tips would probably be more, if you actually liked the song enough to bother tipping the artist, and Norman's old "Spirit in the Sky" tune kinda rocks IMNSHO). I'm talking about more than a million dollars -- AFTER taxes. I have no idea what Norman's made from the song, but I doubt he did that well...
    JMR

    Speaking ONLY for Jim Ray.

    --
    Try e-gold - (contact me). I'm NOT e-
  33. WASTE! by jacobito · · Score: 5, Informative

    That's why I'm hoping that private, encrypted p2p systems like WASTE or Foldershare take off! I don't think either of those systems are quite ready for mass acceptance, but they certainly point in the right direction -- private, encrypted file sharing networks that anybody can use.

  34. Re:Cypherpunk is a stupid name by plover · · Score: 4, Funny
    Am I the only one thinking "Spaceballs" here?

    "Now you see that Evil will always triumph, because Good is dumb."

    --
    John
  35. Re:Cypherpunk is a stupid name by warpSpeed · · Score: 4, Insightful
    Technologies like weaponised anthrax?

    A weapon can be considered technology, and it is still amoral.

    A Weapon and/or technology, can only be put to use by people for thier own purpose, good or evil.

    "Outlaw guns and only outlaws will have guns", etc... Look how well outlawing guns in Washington, DC has worked.

    Weaponised anthrax could be put to good use, such as using it to find an antidote to protect people from it.

  36. He's Right! by teamhasnoi · · Score: 3, Insightful
    I'm going to encrypt everything! Oh wait. How is Mom going to read my emails?

    Saying that using encryption is good doesn't change the fact that regular people see no use for encrypting everything.

    People will send their CC numbers through regular email! How can we get people to use encryption? Transparency, transparency, transparency.

    If I send, "agoij(*UOLHa^&&%alhkAHI3%&%&jdha8tFHD98ht4Fls 8" to Mom she'll delete it. If I send it, and she reads, "Buy me an iPod for Christmas", she'll still delete it, but at least she got the message with no labor on her side.

    Until encryption is enabled by default, and is transparent to the user, clueless users will rule the way you communicate. Sadly, this puts much of the onus on Microsoft, which won't do anything until there is a huge! public backlash - then come out with a easily broken implementation of it. :(

    Encryption use isn't about privacy, it's about necessity. When the great unwashed (wait, that's Linux users ;) - when the masses are FORCED to use it, that's when it will get used.

    Apple could do what MS can't - have an 'Encrypt for OS X users' checkbox on their mail app. Then with some 'return receipt' automagically encrypt messages to other OS X users. (I'm not a programmer, can you tell?).

    To sum up, users want to be safe, secure, and anonymous, but they don't want to do anything to make it happen. 'Eat what you get, and use what you have" is the pervasive attitude.

  37. Re:Cypherpunk is a stupid name by Frank+T.+Lofaro+Jr. · · Score: 2, Funny

    You mean like when I throw my copy of Applied Cryptography at people's heads?

    Or force them to read it! :)

    --
    Just because it CAN be done, doesn't mean it should!
  38. Re:Cypherpunk is a stupid name by mpickut · · Score: 3, Insightful

    Encryption will be used for evil, regardless. If you do not outlaw it then the playing field will be level. Who says we want a level playing field? We're not playing D&D here -- this is real life and there is no great balnce between Good and Evil that has to be preserved. Evil for lack of a better term is always bad and society depends on those doing evil to not be on even ground with the law in order to protect the rights we all hold dear. So yes -- encryption is amoral, but that just means that the forces of good need to be that much better at it. The problem is that evil is almost always better motivated because in our society no good deed goes unpunished. Generic Sig -- compare and save!

    --
    Sigs are for losers.
  39. It is really SAD by argoff · · Score: 2, Insightful

    The Cypherpunks never went around suing people (that is, actually costing them money) who weren't using encryption to mask their illegal activities. The RIAA is.

    Am I the only one here who thinks that it is really sad that we are changing for the better not because of how we grow personally, but rather because we half to - to avoid having our freedoms being taken away? It just seems so wrong - I really feel sorry for those who won't be able to keep up.

  40. Why not? by Kjella · · Score: 3, Insightful
    What we NEED is a way to share files in such a manner as the receiver has no idea what your IP is.

    This is not going to be easy. (And please don't mention Freenet ok?)


    Because it's got kiddie porn? Well, sorry, but you can't pick and choose anonymity. If there are logs the police can use to tell who shared that, the RIAA can subpoena the same logs to that show you shared mp3s. You can't have your cake and eat it too.

    Another thing is that Freenet is dead slow, in a CPU and memory-hungry Java-implementation, and in general not that great. But it's likely to improve...

    The only other alternative I see that is pseudoanonymous is having a set of trusted friends, routing not only requests but also the data over it. That way, no part of the chain knows more than where it's coming from and where it's going
    .... <-> John <-> Bob <-> Bill <-> ...
    Bob simply routed a connection between John and Bill. John doesn't know about Bill, Bill doesn't know about John. Bob doesn't know if the chain starts with John or ends with Bill or anything. Of course, this would also be a lot slower than direct P2P as is the norm today.

    Kjella
    --
    Live today, because you never know what tomorrow brings
  41. E-commerce did it already by iabervon · · Score: 4, Insightful

    The RIAA isn't responsible for making encryption commonly deployed; sending credit card numbers to websites is. The pattern is essentially the same, however. The cryptographers work on stuff, the security people say you really need to use encryption, but people generally don't actually do anything about it until something of value to them is stolen, at which point encryption becomes widely used and transparent. A few years go by, and everybody forgets that what they're using is encryption.

    Now people talk about how they expect encryption to get outlawed. I think Amazon's $19B market cap which depends directly on encryption and eBay's $38B which essentially requires it (not to mention all of the companies which do some of their business online) will prevent this. Then there are VPNs, telecommuting, overseas content outsourcing, and so forth. Encryption is, at this point, something the US economy depends significantly on, and it's not going to get outlawed any time soon.

    1. Re:E-commerce did it already by daminotaur · · Score: 3, Insightful

      But that kind of encryption only protects you aginst eavesdroppers along the line, and is not a system for anonymous communication. Ebay has a record of everything I bought, bid on, paid for, etc. As they should. All bulletproof anonymous systems are not and cannot be made transparent--they require one's grandmother to maintain key rings, certificates, illusory webs-of-trust and all kinds of wonkish things that are ridiculous to deal with if one is doing nothing wrong. And that, of course, is the bottom line and always will be.

  42. Re:Speaking of encrypting files by gte910h · · Score: 2, Insightful

    PGP's freeware version comes with a "Create Self Decrypting Archive" option that does exactly what you want. It wants you to use big passwords, but I think its okay with you using smaller ones as well.

    --Michael

    --
    Want to see every step I took to start my company? http://www.rowdylabs.com/blogs/pitchtothegods
  43. Re:Cypherpunk is a stupid name by Tackhead · · Score: 2, Funny
    > > dihydrogen monoxide
    >
    > We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today...

    You think you're far gone? I'm cutting my DHMO with caffeine!

  44. Re:Speaking of encrypting files by gilgongo · · Score: 2, Informative

    > PGP's freeware version comes with a "Create Self Decrypting Archive"

    Win32 only I believe though. At least, last I tried it didn't ask me what target platform the executable should be compiled to :-)

    --
    "And the meaning of words; when they cease to function; when will it start worrying you?"
  45. Anybody remember prohibition? by I-R-Baboon · · Score: 5, Interesting

    "Those who cannot remember the past are condemned to repeat it." -George Santanya

    This strikes me very much familiar along with the "war" on drugs. A previous post touched on this lightly as well. Be it encryption, invite only LAN MP3 share parties, USENET, or any of the other countless work arounds out there...By brandishing their lawyers they are in fact creating an underground which society has demonstrated they want to exist, and it will. Instead of trying to make use of this phenomenon, they want to bully people and focus their creative energies on how they can sue. Sounds eerily familiar to the ban of alcohol which founded organized crime in the US and gave a beautiful model for drug running today. In an effort to slay a beast, a new monster was created and the beast was welcomed with open arms in the long run and taxed accordingly to make it profitable and put into a mostly controlled environment. Of course it's not possible to put music into a controlled environment, but iTunes was able to make downloading music a business. Guess they should have focussed on hedging that new market instead of helping to create an underground they will never be able to control or profit from. (Go to concerts if you want the artists to get your money, and boycott RIAA backed media)

    --
    -1 Overrated (Too many big words for me to comprehend)
  46. Re:Cypherpunk is a stupid name by ungleichschaltung · · Score: 2, Funny
    >> We've gotta ban that stuff, all the kids are
    >> gonna start using it, and then we'll never get
    >> them to stop. It's addictive... I've had like 5
    >> doses today...
    > You think you're far gone? I'm cutting my DHMO
    with caffeine!

    I find that when I dilute mine with malt whisky, I can manage with very little DHMO. Still, it's hard to cut back.

  47. My Favorites Tools for Anonymity by PureFiction · · Score: 3, Interesting

    are a 802.11b card, a 1W amplifier, and a nice 16dBi vagi antenna:
    http://peertech.org/coder/vagi-amp-laptop.jpg

  48. Re:Cypherpunk is a stupid name by salzbrot · · Score: 3, Funny

    That is why I drink only Smirnoff 100 proof. 50 % less dihydrogen monoxide than tap water!

  49. Re:Cypherpunk is a stupid name by lynx_user_abroad · · Score: 5, Insightful
    Who says we want a level playing field?

    Well, you do (for one), or at least you would if you thought things through.

    Almost no one whom you'd consider to be "Evil" considers themselves to be evil. And they would likely tag some people as "Evil" even if you would disagree with their assessment. And almost no one would agree with you on what is good and what is evil completely. To do that, they'd have to be you.

    Which means that if the world were to function by your own self-centered definition of good and evil, you'd be all alone.

    Nature itself doesn't have a concept of good or evil. Which means regardless of wether we'd each want a level playing field, it's ultimately a level playing field on which we must play.

    Evil for lack of a better term is always bad and society depends on those doing evil to not be on even ground with the law in order to protect the rights we all hold dear.

    Now "society" is just one of the teams on this playing field; a big team, I'd admit, and one you're likely so familiar with as to believe that no others exist, but it's just a team nonetheless. As you point out, your society has created your society's laws and has it's own interest in seeing that people on any other team are placed at a disadvantage. After all, it has to protect those "rights" which your society holds so dearly.

    Is it possible that members of some other society might have their own values, profess their own beliefs, and institute their own laws to protect the rights they hold so dear? Some of these might conflict with the values, beliefs, and laws of your society; does that make them "Evil"?

    Only a troll would believe so.

    Yet even at this point, we're making a judgment call saying that one kind of "society" can be more "good" than another in a way that a "non-society" could never approach. That's a widely held belief, but there's still a lot of time left on the clock. Maybe Douglas Adams was right and some day we'll decide that even the trees were a bad idea, and we should have all stayed in the oceans..."

    If you continue to insist that the playing field be tipped selfishly in your favor, then you must admit that, over time, more and more people will become aligned against you in their own self interest. Each time you exclude someone by calling them (or their team/society) "Evil" you build a greater force which sees you the same way. And the stronger you hold your beliefs, the more motivate they are to hold theirs.

    The problem is that evil is almost always better motivated because in our society no good deed goes unpunished.

    I could not possibly have said it better myself.

    --

    The thing about things we don't know is we often don't know we don't know them.

  50. obvious yes... but legal? by WebCowboy · · Score: 2, Interesting

    RIAA and MPAA, being comprised of entertainment executives and their lawyers which are known to be the lowest form of life on earth, would instinctively ... attempt to "join" these networks, posing as users looking for Britney's latest, and entrapping systems that serve up the bits? Will they put out bogus trojaned clients on the services? "Dude, download LockTella 1.9, it's l33t!!" only to find that it hoovers up passwords and music lists, and forwards them on to DUDE@RIAA.COM ....

    Hopefully, however, the law and the constitution would step in since these tactics are just a tiny bit unethical, immoral and illegal. RIAA agents posing as file sharers and enticing others to load and run trojans that compromise their PCs and privacy in order to look for and obtain incriminating evidence is blatant entrapment and such evidence would/should be inadmissable in a court case.

    It also looks like illegal search and seizure--and an unconstitutional invasion of privacy and misuse of private property. People have been convicted of criminal offences for deploying trojans and viruses and hacking into peoples machines (and rightly so). The rules should be no different for those acting on RIAA or MPAA's behalf regardless of their motives.

    1. Re:obvious yes... but legal? by Minna+Kirai · · Score: 2, Informative
      RIAA agents posing as file sharers and enticing others to load and run trojans that compromise their PCs and privacy in order to look for and obtain incriminating evidence is blatant entrapment and such evidence would/should be inadmissable in a court case.

      I see that you're not a lawyer... nor a citizen concerned enough to learn about his national laws. There used to be widespreah myths about entrapment, but I thought the illegal-drug culture in the US had spread the truth (as a defensive measure).

      Here's a few little facts about entrapment:
      1. It can only be committed by an agent of the government. (The RIAA is not the government)
      2. Even if it's a cop or other gov. agent trying to trap you, there still is no "entrapment" defense if he can show evidence suggesting (not proving) that you had a pre-existing inclination to perform the offense.
        Not entrapment: "Here's $20, give me some cocaine".
        Entrapment: "Here's $20000, kill that guy"

      It also looks like illegal search and seizure--and an unconstitutional invasion of privacy and misuse of private property.

      The Constitution only restricts the actions of governments, not private groups like the RIAA. (And it doesn't guarantee privacy either.)
  51. Re:Cypherpunk is a stupid name by identity0 · · Score: 2, Funny

    We've gotta ban that stuff, all the kids are gonna start using it, and then we'll never get them to stop. It's addictive... I've had like 5 doses today...

    Wow, me too! But I think I've found a safe way of ingesting it - I mix it with hops and yeast, allow it to ferment in a large vat, and drink the resulting liquid! You can hardly even tell it's mostly dihydrogen monoxide! We must amend the constitution to ban straight dihydrogen monoxide, and allow only these 'brewed' concotions!

  52. errrr by Archfeld · · Score: 3, Insightful

    without reading I see one issue, sure encryption IN the background is proceeding, especially that which you have no control over, and while it serves the surface function it leaves the user FURTHER under the control of a 'gatekeeper'.
    The time for user implemented crypto came and went, PGP had potential to put the public good ahead of corporate and government interests.

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
  53. Re:Shirky, Clay Shirky - who the hell is he? by popo · · Score: 2, Informative


    He's another guy who goes "Big Picture" and "Philosophical" because the nuts and bolts of technology, programming, and in this case encryption are (and always will be) beyond him.

    He's a lightweight.

    If you're still confused: See "Esther Dyson"

    --
    ------ The best brain training is now totally free : )
  54. Re:Cypherpunk is a stupid name by wirelessbuzzers · · Score: 2, Funny

    Yeah, it's in most milk these days too... more people drink it that way... tho if you're really worried about it, you can get reduced-DHMO or even DHMO-free milk at most grocery stores, though like organic milk, it's more expensive per ounce than milk with DHMO.

    --
    I hereby place the above post in the public domain.
  55. You can't hide the IP's in a P2P network by shihonage · · Score: 3, Informative

    ...because P2P is about exchange, and people need to know whom to send information to. What you CAN do however, is to make it very difficult to prove that the data in question ORIGINATED FROM YOUR IP. This can be done by massively modifying a standard P2P network, so that each client randomly serves as a relay for sending data or parts of data to another client. It's like tossing a ball around between friends and not letting RIAA catch it. I need piece #32 of Terminator4.avi, and so I send a request. Client #398 responds, saying that it can provide piece #32, while actually it receives it from client #UNKNOWN (ip you're not aware of) and sends it to you. The fact is that client #398 is most likely not a part of downloading of Terminator4.avi at all, and you will not find it on it's hard drive. It just participates in a scheme of global file distribution, serving as a temporary proxy, a shield for the client that actually does have it. There's no way you can accuse client #398 of transferring warez, because it only transferred a small chunk of encrypted data. Even if decrypted, its matching to a certain pattern inside Terminator4.avi can be a pure coincidence. Or it can even be a sum of several blocks inside the file, in which case it will not match any "whole" piece of the file at all. At this point, of course, an RIAA member can set up a computer, join this network, and try to catch the cases where HIS client is used as the relay, in which case his client becomes aware of a certain person's IP address, and that person sends the file chunk to the RIAA computer so that it can transfer it to the recipient. This can be made difficult, by requiring each new member of the network to have sufficient amount of "illegal" files (and not just the same file many times over!) actually shared with others for free, before it becomes fully a part of the network. This would require RIAA computer to have actual "illegal" files on it, and quite a few of them. If they fill it with fakes, they will either be unpopular and never become a part of the network, or, if some people actually acquire the entire file, they'll get a sufficient amount of "blacklisting" from the network to never be allowed to join it. So, RIAA will be forced to use warez in order to find warez sharers. Still, the problem of them acquiring IP's that way remains. Perhaps it can be solved by allowing recursive relays, where a chunk, instead of being proxied by one client, can travel through an indetermined amount of clients, say, up to 10, before it actually reaches its destination. However certain measures will have to be taken to prevent an "empty loop", where clients keep requesting the file from one another, and neither has it...

  56. Actually it's perfectly natural I'm afraid.. by Nijika · · Score: 2, Interesting

    This is evolution of a very basic kind. There are new predators stalking about, so to survive the animals in question need to develop camouflage or some other defense. The ones that do will be able to head to the watering hole without much worry, the ones that don't will either have to find a new watering hole farther away or will get eaten up I'm afraid.

    --
    Luck favors the prepared, darling.
  57. There is a meme for this by way2trivial · · Score: 4, Insightful
    it's known as
    putting the genie back in the bottle.

    it's expression alone indicates the likelyhood of success.

    --
    every day http://en.wikipedia.org/wiki/Special:Random
    1. Re:There is a meme for this by Prior+Restraint · · Score: 3, Interesting

      Just out of curiosity, why wouldn't something along the lines of, "I wish you would go back into the bottle," work? (Not saying the RIAA's task is that simple; just critiquing the meme.)

  58. Isn't that by Mark_MF-WN · · Score: 3, Informative

    Isn't that exactly how Freenet works?

  59. Re:Cypherpunk is a stupid name by mpickut · · Score: 2, Insightful

    Rather than get completly off point let me say this:

    You are completly correct if good and evil are relative terms that represent no real values.

    However, the very fact that you are trying to convince me that your point is more 'good' than mine tells me you don't agree with that fact. Your use of terms with values attached such as troll and selfish defeat your own argument.

    Please understand that I do not mean that believing in good and evil gives one the right to crush what is considered evil by any means available. Nor may we or must we make value statements about every event and cultural norm or mores -- that is just bigotry. One cannot take the missuse of the belief of good and evil, however as an argument agianst thier existance as a real things.

    With that said I do not want a level playing field: I do not want cops to be on a level playing field with criminals (I want criminals locked up and cops paid well) and I do not want to be on a level playing with theives (I will lock my doors).

    My point is simply this: if we are convinced that something is right (good as opposed to evil) the only way that we will fight for our beliefs is to be better at using the tools good and evil have in common. One will never succeed by whining and complaining -- don't get mad, just get better educated.

    Is it still a sig if it just says:Blah, Blah, Blah

    --
    Sigs are for losers.
  60. Re:It seems to me... by 40000 · · Score: 2, Insightful

    A more secure method of distributing files to unknown persons is a DVD tied to the string of a helium balloon. The balloon can be launched discreetly at night from any location without a sound.
    Preferably the wind should carry it towards a suburban area so that it lands in someone's garden, then whoever finds it isn't seen acting suspiciously.

  61. Why Doesn't Shirky Blog?? by gilgongo · · Score: 2, Interesting

    I'm a big fan of Clay, and I'm on his NEC mailing list (I read his article when it came in today), but I think this piece has some unusually (for him) shaky arguments in it.

    What I'd like to see is his site as a blog that we could then discuss his essays on. He wouldn't have to take any notice of what we said, but seeing as he's big into online communities and communication networks, you think he might be into the idea.

    I know, I'll mail him. Where's his public key?

    --
    "And the meaning of words; when they cease to function; when will it start worrying you?"
  62. Worst write-up ever? by Kris_J · · Score: 4, Insightful

    I had to read the /. write-up about three times to workout what it was going on about. Couldn't have just said "RIAA ativities over the last year or so may have finally brought encryption and privacy concerns to the attention of the masses. Interesting article here"? I think that's what it's trying to say.

  63. It's not about your mom by poofyhairguy82 · · Score: 2, Insightful
    Encryption and the privacy that comes from it is not a end in and of itself.

    You are right in your assumption that most people don't care about encryption for day to day email and whatnot. But that is not the issue. The issue is for spreading information that might get you in trouble. If I wrote an email to my mom to get an iPod i would not care if someone intercepted it and saw it. Encryption would never find a use in this instance.

    Now say I want to send my friend some email giving him insider information that we will both (illegally) make money off of. That email I WOULD want encrypted. The best argument against such encryption (that I have seen modded high in this thread) is to say that the best use for hidden information is for actions that are immoral in nature. To that I argue that the internet is formed (or not formed really) from the social codes of the world. Its immoral to you but not someone across the world in a different culture. The Chinese Government would laugh at the RIAA if it asked it to stop music downloads.

    And therein lies the issue. Main stream encryption won't come from Microsoft just like mainsteam P2P didn't. Because its more likely (in a big company like MS's eyes) to be used to steal the new office software that secure a home office. Main stream encryption will spread the same way napster was. Just as geeks then told nongeeks "Hey try this napster thing, you install it and it will let you get free music," encryption will be spread by an added sentence to the geek-nongeek conversation. "Hey try this kazaa (or what ever is the next big P2P app) thing, you install it and it will let you get free music. Also install (insert encryption program here)so that you can get away with it."

    Encryption prevents the powers that be from bring down the hammer for not following order. That has nothing to do with something you mom probably wants to be involved with. Yet for some reason I like it cause I hate the man (even though I do like his stuff).