Slashdot Mirror


Can P2P Filter Copyrighted Content?

scubacuda writes "DRMwatch reports that technologists acting on behalf of porn publisher Titan Media reported to Congress that P2P networks could (if they wanted to) use "fingerprinting" (aka "hashing") to detect copyrighted works and then filter them with the "spyware" installed on all nodes in the network."

373 comments

  1. A DRM Parable by Fnkmaster · · Score: 4, Funny
    First they took away the movies. I didn't complain because I never downloaded them anyway.


    Then they came for the music. And I didn't speak up because I was a leecher and never shared my songs.


    Finally, they came for the porn. Nobody touches our porn. And that's when we got REALLY pissed off.

    1. Re:A DRM Parable by Anonymous Coward · · Score: 0
      goatse.cx domainname has been pulled by the .cx administrator. Slashdot feels that this isn't worth of a news story.

      How can you hae a story about a domain that's no longer there? There needs to be a site to slashdot!

    2. Re:A DRM Parable by lasmith05 · · Score: 0

      I vaguely remember the original quote. It was something like they came for the jews, and I was not one so I stayed silent. (Or something like that) Could anyone tell me what the passage was and who the author was?

      --
      www.samuraidreams.com - My Blog
      www.samuraifiles.com - Get Some Videos Here
    3. Re:A DRM Parable by selfabuse · · Score: 0

      "First they came for the Jews, and I did not speak out -- because I was not a Jew.
      Then they came for the communists, and I did not speak out -- because I was not a communist.
      Then they came for the trade unionists and I did not speak out -- because I was not a trade unionist.
      Then they came for me -- and there was no one left to speak out for me." -Pastor Niemoller

    4. Re:A DRM Parable by Anonymous Coward · · Score: 1
      "Then they came for me -- and there was no one left to speak out for me."

      You should have joined their ranks, jackass!

    5. Re:A DRM Parable by Anonymous Coward · · Score: 0

      First they came for goatse, and I did not speak out -- because I'm not into anal stretching.
      Then they came for the P2P'ers, and I did not speak out -- because I was not a P2P'er.
      Then they came for the pr0n and I did not speak out -- because I was not a masturbator.
      Then they came for linux -- and there was no one left to speak out for me." -Pastor Niemoller

    6. Re:A DRM Parable by danila · · Score: 5, Informative

      This may be offtopic, but anyway. The original words are by Pastor Niemoller (1938)

      First they came for the Jews
      And I did not speak out ?
      Because I was not a Jew.

      Then they came for the communists
      And I did not speak out ?
      Because I was not a communist.

      Then they came for the trade unionists
      And I did not speak out ?
      Because I was not a trade unionist.

      Then they came for me ?
      And there was no-one left
      To speak out for me.

      P.S. It is an important reminder to stand for the rights of others, to stand for the rights of terrorists, murderers, child pornografers, P2P programmers, christian fundamentalists, and for the rights of everyone else. We may disagree with people, but only in a free and tolerant society can we expect to be safe ourselves.

      --
      Future Wiki -- If you don't think about the future, you cannot have one.
    7. Re:A DRM Parable by danila · · Score: 1

      These are not question marks, but dashes - stupid Slashdot doesn't understand Unicode. :(

      --
      Future Wiki -- If you don't think about the future, you cannot have one.
    8. Re:A DRM Parable by tomhudson · · Score: 1

      the wayback machuine's archived copy of goatse.cx, so please adjust your links :-)

    9. Re:A DRM Parable by qwertyatwork · · Score: 1

      I cant remember where I heard this, but it went something like 'its not a principle until you stand up for something you dont believe in'

    10. Re:A DRM Parable by TheOv3rminD · · Score: 0

      irc.newnet.net all you need is here =)

    11. Re:A DRM Parable by bninja_penguin · · Score: 1

      What's pathetic is that you group 'christian fundamentalists' with terrorists, murderers, and pornographers. Sad.

      PATHETIC?!?! How the Hell is it pathetic to group ALL members of the human race together?? I think you've just proved the point of the prior post. If you exclude certain " 'ists" from the rest of humanity, where does it stop? Or do you think it's a Good Idea(TM) to restrict and separate human rights by which " 'ist" group you like?

      --
      For those who describe their systems as 'boxen', do you order multiple 'boxen' of corn flakes also?
    12. Re:A DRM Parable by Alsee · · Score: 2, Funny

      It is an important reminder to stand for the rights of others, to stand for the rights of terrorists, murderers, child pornografers, P2P programmers, christian fundamentalists

      Ok, just don't ask me to stand up for spammers ;)

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    13. Re:A DRM Parable by lasmith05 · · Score: 0

      Thanks for the info!

      --
      www.samuraidreams.com - My Blog
      www.samuraifiles.com - Get Some Videos Here
  2. If you install the spyware, sure by Anonymous Coward · · Score: 0
    I suppose it could work - if people install the spyware.

    Now why would they do that?

    Who are these guys? Underpants gnomes?

    1. Re:If you install the spyware, sure by wo1verin3 · · Score: 1

      This would be great until everyone realized what was happening and just zip'd it up to change the hash.

      Then we'd move to .tar? .rar? .lzh? What else? :P

    2. Re:If you install the spyware, sure by Anonymous Coward · · Score: 0

      Granted a more than just a few P2Ps use hashes to identify files instead of names, so people can find all the P2P nodes that have the desired file reguardless of name.

      The problem is in order to block people downloading these files. You must either
      1) block search request for "banded" hashes
      2) block serving requests of "banded" files
      3) block downloading the requested "banded" files

      All of these require "spyware" on the nodes. And with P2P every client is also a node. That means the spyware needs to be install on every client

      laughing, that will be the day!!!

      Ok, it might happened if the "spyware" became part of windows, but it will never happen linux.

    3. Re:If you install the spyware, sure by Dashing+Leech · · Score: 1
      Ok, it might happened if the "spyware" became part of windows, but it will never happen linux.

      Hey, now there's a good way to get people to switch to Linux. We should all lobby to get this "spyware" as part of windows, then advertise that Linux does not have this P2P limitation. Most P2P users would switch, if they already haven't.

    4. Re:If you install the spyware, sure by sm0yby · · Score: 1

      I suppose that the problem in that case, at least in the US, would be that a GNU/Linux system could be considered to be "a device to circumvent copy control". Otherwise, it's a good idea.

      Now let's see, what do we do about the DMCA?

      --
      Been modded interesting, insightful and funny. Why does real life have to be so different?
    5. Re:If you install the spyware, sure by ajs318 · · Score: 1

      Why run Windows-style P2P on Linux? Just use httpsd!

      --
      Je fume. Tu fumes. Nous fûmes!
  3. They'd Better Not by turgid · · Score: 1

    Slackware is Copyrighted, and P2P, more specifically Bittorrent, is one of its official distribution channels.

    1. Re:They'd Better Not by turgid · · Score: 0, Offtopic
      Ok, but since nobody installs Slackware anymore your point is purely academic.

      LOL

    2. Re:They'd Better Not by Short+Circuit · · Score: 4, Informative

      It's a classic example of public assumption. Everybody assumes that if something is copyrighted, it can't be distributed legally. In truth, it depends on the will of the copyright holder. I don't remember how many times I've heard people say "Linux isn't copyrighted" or "BSD isn't copyrighted." They both are, but the copyright holders choose licenses that don't include the phrase "All rights reserved."

      But trying to clarify that is like telling an internet user that a "cracker" broke into their computer, not a "hacker." (However, I'll note that the copyright legality clarification is probably more important than that of the cracker/hacker.)

    3. Re:They'd Better Not by ajs318 · · Score: 1

      This is an important point. There will have to be some way for legally-redistributable material to be identified as such. It will be possible to misidentify non-freely-distributable material as freely-distributable. Therefore, the scheme is doomed to fail. QED.

      --
      Je fume. Tu fumes. Nous fûmes!
  4. Doomed to fail. by grub · · Score: 5, Insightful

    Did common sense go on holidays?

    Load a fingerprinted file.

    Change one bit.

    It has a new fingerprint.

    The eDonkey/eMule network already identify files by an MD4 hash to ensure you get what you ask for. For instance: if a file has many sources then that means they have the same hash, you can be quite sure that it isn't a bogus loop of a pr0n flick when you really wanted that latest DVD rip.

    If this goes through you'll see a new kazaa-compatible P2P client appear that pops a few random bytes into the ID3 tag of an MP3, the comment section of a JPG or in the headers of a video file. Each one will then have a new hash. Oops.

    Oh, the new KazaaDRM(tm) ignores comments & tags and only looks at the actual data? OK, the new client toggles a bit that won't cause any visual or audio degradation of the file. Oops.

    That all said if 100 people rip an MP3 or DivX file they won't generate the same byte-identical file. This is doomed to fail at the expense of your computer's CPU cycles as it generates these useless hashes.

    --
    Trolling is a art,
    1. Re:Doomed to fail. by Rhubarb+Crumble · · Score: 5, Funny
      That all said if 100 people rip an MP3 or DivX file they won't generate the same byte-identical file. This is doomed to fail at the expense of your computer's CPU cycles as it generates these useless hashes.

      OK, I have a better idea.

      In order to check whether any of the porn files on kazaa (or wherever) are identical to copyrighted porn, all we need is someone who watches all the porn on kazaa and then compares is with their library of copyrighted porn.

      Can I have the job?

    2. Re:Doomed to fail. by grub · · Score: 2, Funny


      Can I have the job?

      You'll need an assistant... :)

      --
      Trolling is a art,
    3. Re:Doomed to fail. by loserbert · · Score: 5, Funny

      Did common sense go on holidays?

      Youre talking about the mass media industry. Common sense retired about 25 years ago.

    4. Re:Doomed to fail. by cjpez · · Score: 1

      Well, yeah, using MD4/MD5 hashing, if you change one bit you've got a brand spankin' new fingerprint. That's the hole point of MD[45]. That doesn't mean that *all* hashing schemes are guaranteed to change half their bits when one bit of the original source is changed.

    5. Re:Doomed to fail. by Dreadlord · · Score: 1

      you two guys fail it, I've already done the first part (watching kazaa pr0n), I only need to do the second part, I qualify :)

      --
      The IT section color scheme sucks.
    6. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      The real question is, where are they going to get a hashed database of every single copyrighted piece of video, music, text, photo, software, etc? And can you imagine the computing power that would be necessary to hash those trillions of terrabytes of data? And how would a P2P development group afford to buy every piece of copyrighted material on earth (that which they can still find being sold, at least) so that they could then generate a hash of it for their database?

    7. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      If the hash (fingerprint) doesn't change when altering a bit, then it's not much of a hashing scheme, is it?

    8. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      You'll need an assistant... :)

      Cool... can I fluff?

    9. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      With a mop and tissues presumably...

    10. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      That's why the people who understand the technology (not the pornographers) are implementing watermarks, not hashes.

      (I hightly suspect that everything from iTunes is watermarked, but that's all speculation based on SDMI proposal.)

    11. Re:Doomed to fail. by turnstyle · · Score: 2, Insightful
      "Did common sense go on holidays?

      Load a fingerprinted file.

      Change one bit.

      It has a new fingerprint."

      Actually, no. Changing one bit should affect a uniqueness hash, but not necessarily so a fingerprint.

      As a simple example, think of the little logo that you sometimes see down in the corner of a video as a fingerprint -- changing one bit of that doesn't remove the fingerprint.

      Again, you'll change the hash but not necessarily the fingerprint...

      --
      Here's what I do: Bitty Browser & Andromeda
    12. Re:Doomed to fail. by finkployd · · Score: 1

      Really? MD4? Anyone tell them that algorithm is fundamentally flawled and should not be used?

      Finkployd

    13. Re:Doomed to fail. by larry+bagina · · Score: 1
      For instance: if a file has many sources then that means they have the same hash, you can be quite sure that it isn't a bogus loop of a pr0n flick when you really wanted that latest DVD rip.

      That's true, but it doesn't do any good if you spend 2 days downloading paris_hilton_sex_video.mpg only to find out some asshole simply renamed shemales_volume_2.mpg.

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    14. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      So what? As long as it dooms P2P to fail they are happy. If everyone starts putting random bits into their mp3s then when you go to get britney_spears_yadda_yadda.mp3 you will find thousands of different copies with no way for your client to figure out that the difference between them (the id3 tag) is unimportant. So if they can get rid of the biggest most heavily traded copies what remains (combined with the slow uploads of most broadband customers) will be hard to get with any reasonable download rate.

    15. Re:Doomed to fail. by grub · · Score: 1


      Good question. When one starts a download (in eMule) the link passed contains the file size (in bytes) as well as the hash and other info. I don't know if it compares the size as well as the hash. Actually that would make sense, the change of a hash collision in 2 files of identical sizes would be fairly rare. Not as rare as using SHA1 or something stronger but hey.. I didn't write it. :)

      --
      Trolling is a art,
    16. Re:Doomed to fail. by Anonymous Coward · · Score: 0


      Or worse; spending 2 days downloading shemales_volume_2.mpg only to fine out some asshole simply renamed paris_hilton_sex_video.mpg! ;)

    17. Re:Doomed to fail. by djbrums · · Score: 1
      By the same token, though, if people search for the song "Foo", they get n different hashes for each potential provider. How do you know which one is the real song "Foo"? Suppose x of the results contain the same hash, so you think that is the real "Foo". Then the copyright people could just say install a filter for that hash. After filtering, you're left with n-x unique hashes, each of which you tell is the real (but with a bit flipped) "Foo".

      In other words, the proposed solution would make the P2P systems much harder to use for copyrighted content. The RIAA could filter based upon common search that returned common hashes. They could then flood the network with bogus files with the wrong hash, making it difficult to find the correct file. Not that I agree with the idea, but it's not completely baseless (just mildly baseless).

    18. Re:Doomed to fail. by ydrol · · Score: 5, Funny
      In order to check whether any of the porn files on kazaa (or wherever) are identical to copyrighted porn, all we need is someone who watches all the porn on kazaa and then compares is with their library of copyrighted porn.

      Can I have the job?

      Yes you are assigned to the scat and watersports division. Enjoy.

    19. Re:Doomed to fail. by pla · · Score: 4, Informative

      OK, the new client toggles a bit that won't cause any visual or audio degradation of the file. Oops.

      You've looked at this too naively... Take around a hundred MD5s of nonoverlapping chunks of the file. If 90% of these match, you have near certainty that the files match except for exactly such tampering as you suggest.

      For some files, you could get away with that. For others, particularly the highly compressed audio and video files that dominate P2P, breaking such a detection algorithm would, over time, introduce intolerable errors in the file (by the third or fourth copy, I'd say), since such changes would need to occur randomly or risk filtering by the detection algorithm V2.

      Not to say we couldn't still get around such attempts to prevent downloading - Until they ban them, simply putting everything in a password-protected zip file (with the password included in a non-passworded file) would suffice for generating effectively random files (to a hash checker, anyway).

      My point? Overall, this will just turn into yet another war of escalating circumventions and countermeasures, benefitting neither the content producers nor consumers.

    20. Re:Doomed to fail. by mrinal · · Score: 2, Informative
      Did common sense go on holidays?

      No, it didn't. There are "hashing techniques" specially made for audio - "audio fingerprinting" so to speak, like Relatable's TRM and Gracenote's MusicID which do a great job of it. They identify the file correctly no matter what the source is - lossless audio CD, or even 128kbps MP3, you get the same fingerprint.

      I've tried TRM personally through MusicBrainz, and ran it on around 1000 of my MP3s, some of them really horrible quality, and it managed to identify 99% of them (TRM fingerprint correlated with actual metadata is stored at MusicBrainz). I was surprised, but yes, it did work. And this technology is rather old too, I'm surprised not too many people know about this.

      And the article specifically mentions this fact: ...The experts' claims center on technology for detecting copyrighted works through "fingerprinting" (sometimes also called "hashing") technology that identifies songs by analyzing the content itself. Such technology, which is provided by several firms including Audible Magic, GraceNote, and MediaGuide...

    21. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      The law will only care about hashes though for what we are talking about. If something is not exact you won't be able to convict.
      Take for example mp3 files. The RIAA has a hash database of "know" illegal mp3 files. You add the word "me" to the comment field of the id3 tag thus altering the hash. Even if its the same filename, bitrate etc it won't be the same hash anymore thus there is no way to prove guilt. I don't buy into you fingerprint theory for the subject we are talking about.

      Criminal guilt which is what were talking about isn't about proving beyond a reasonable doubt, it's about actual hard evidence. If there is any doubt, in this case because the files technically are not the same, then you cannot convict.

    22. Re:Doomed to fail. by CreatureComfort · · Score: 1

      Too Late. Too many people essentially do this for free now.

      Besides, that job would just be sent overseas where labor is cheap anyway.

      --
      "Unheard of means only it's undreamed of yet,
      Impossible means not yet done." ~~ Julia Ecklar
    23. Re:Doomed to fail. by icepick · · Score: 1

      They used the word "hashing" but it's actually more of "what does this actually look/sound like" type fingerprint rather than a hash like SHA1/MD4/MD5.

      MusicBrainz uses a fingerprinting scheme like this to id music files by how they sound.

      --
      You're just jealous because the voices only talk to me.
    24. Re:Doomed to fail. by Simonetta · · Score: 1

      That's the hole point of MD[45]

      So what's the hole point about porn?

    25. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      you don't want to watch all the porn on KaZaA, i can assure you of that.... Do you have any idea how much keyword exclusiond i have set on my kazaa filter to block *MOST* of the sick shit

    26. Re:Doomed to fail. by nahdude812 · · Score: 3, Informative

      Slightly changing the low bit of the amplitude of various sound waves snippets in the file, or low bit on pixels within a video will have negligible effects on the overall quality of the file, but significantly impact on any electronic fingerprinting you can do on the piece. It'd look like a Photoshop file with a low durability watermark on it. Eg, a little bit of noise, but if it's noticable at all, it'd require very hi-fi speakers, or a lot of scrutinous comparison against the original.

      Of course, you could choose to ignore the low bits, and fingerprint the upper bits, but this requires the software that trades files to be able to decode any type of file going over the network. This isn't feasible because it wouldn't be hard for someone to write a strongly encrypted proprietary wrapper on existing codecs which "garbages" the data, and distribute a free package which ungarbages it. Even if it was simple for Kazaa or other services to break this and include it in the software, it would not be legal for them to distribute the decryption with their software. If somehow it became legal, it would be simple for someone else to release a new one next week. And another new one the week after that.

      The point is that this would start a tit-for-tat war. I guarantee any fingerprinting technique someone can think of, someone else can can defeat it with ease, and the concept of wrapping files in another program will put the highest volume copyright traders a few steps ahead of content filtering, ad nauseum.

    27. Re:Doomed to fail. by laird · · Score: 1

      "Did common sense go on holidays?

      Load a fingerprinted file.
      Change one bit.
      It has a new fingerprint."

      Right, and all of the swarmed download technologies go right out the window. And the ability to tell which files have multiple sources. And Bitzi.

      So I'd say that yes, common snse went on holidays. :-)

      This also misses the point of the discussion. The p2p networks' legal defense has been that they have no knowledge or control over what's going on with the network. Someone just demonstrated that a pretty obvious technical approach can, in fact, control what's moving around the p2p networks by blocking the fingerprints of copyrighted material. So the fact that they don't do this isn't because it's impossible, but because they choose not to do so.

      This is important because the p2p networks' defense has been that they're innocent, and that the music company's only recourse is to sue the evil, law-breaking users. If the courts rule that the p2p networks are responsible for not blocking copyrighted materials, the music companies can stop suing individuals...

    28. Re:Doomed to fail. by cjpez · · Score: 1

      Er, um, heh... SSsssshhhhh!

    29. Re:Doomed to fail. by cjpez · · Score: 1
      Well, what I mean is that the hashes don't have to change so dramatically. MD5 says that if you change one byte of the source, then at least half of the bits in the hash will change. I don't see any rule that a hashing function may not, when one byte has been changed in the source file, merely change the value in a corresponding part of the hash (for instance, if a bit is changed 73% of the way through the file, the value 73% of the way through the hash will be changed).

      Someone else replied bringing up the term "watermark" which I'd call just a semi-fuzzy hash value. "Hash" does not necessarily imply MD5. Different hashing functions have different purposes, and just because the one you're used to dealing with on a p2p network, whose purpose is to make sure you get the *exact same* file you wanted to get, doesn't mean that all hashing functions have to work that way.

    30. Re:Doomed to fail. by zang0 · · Score: 1

      "Hashing" for an audio file is such early 90s technology - wake up and read the literature. Pattern matching algorithms are in place in commercially deployed technology (the technology was even slashdotted many years ago here: http://slashdot.org/articles/00/11/12/0450221.shtm l ) that very effectively identify content irrespective of compression type, bit rate/codec/ripper etc. From a business standpoint, so what if the id gets hacked, there are still many people (I would say >90%) willing to put up 15$ a month for unlimited clean content on a p2p where every song they download is linked to all kinds of worthwhile and *accurate* metadata. The real question is whether the labels will ever allow a legit p2p to operate.

    31. Re:Doomed to fail. by Skavookie · · Score: 1

      A fingerprinting scheme can provide a heuristic that can be used to narrow down the search for possibly illegal file sharing. The RIAA looks for files that this heuristic says are likely to be bootlegged and then has someone manually look to see if they are. If you show the jury two videos, from the jury's point of view they may be identical even if a few bits have been flipped in one or the other. It is not neccesary that the files be absolutely identical.

    32. Re:Doomed to fail. by turnstyle · · Score: 1
      "The law will only care about hashes though for what we are talking about. If something is not exact you won't be able to convict. Take for example mp3 files. The RIAA has a hash database of "know" illegal mp3 files. You add the word "me" to the comment field of the id3 tag thus altering the hash. Even if its the same filename, bitrate etc it won't be the same hash anymore thus there is no way to prove guilt. I don't buy into you fingerprint theory for the subject we are talking about.

      Criminal guilt which is what were talking about isn't about proving beyond a reasonable doubt, it's about actual hard evidence. If there is any doubt, in this case because the files technically are not the same, then you cannot convict."

      Respectfully, I think your interpretations of the law, and your presumtions about exactly what information the RIAA has collected (and continues to collect), are not correct.

      You seem to say that a fingerprint could not be used as evidence. You also seem to say that the RIAA has hashes, but no other means of identifying works. Did you know that the RIAA had hashes before that was revealed? Do you know what they might be planning next?

      I also know of services that can identify songs by "listening" to the files -- change bits (such as ID3 tags), downsample, and it still 'knows' the file. Sure, it can't always be right, but such technology will improve.

      --
      Here's what I do: Bitty Browser & Andromeda
    33. Re:Doomed to fail. by Aumaden · · Score: 2, Funny

      Retired? Nah it was outsourced overseas!

    34. Re:Doomed to fail. by QuMa · · Score: 1

      Depends on what you want to use it for. It's easy to generate two pieces of data that hash to the same value, but so far I haven't seen any techniques for generating collisions for a given hash ("inverting the hash").

      MD4 is very fast though, especially on x86 hardware. All in all I'd say the edonkey people made a good, informed decision.

    35. Re:Doomed to fail. by wolrahnaes · · Score: 1

      This is something I have never understood about some P2P users. Why rename a file to something it isn't? I can understand the (RI/MP)AA placing fake files out there, but why do people put another copyrighted work out there under a bad name?

      The worst offender I have seem so far was a file named Mandrake9.2(1of3).iso that turned out to be WinXP Home. What did the ~20 KaZaA users I downloaded this from have to gain from me wasting both bandwidth (mine and theirs) and time to get something I didn't want?

      --
      I used to get high on life, but I developed a tolerance. Now I need something stronger.
    36. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      The viewing base will be in California, but if you want the job you've got to get your ass to Chicago 'cause that's where the line ends!

    37. Re:Doomed to fail. by Kent+Recal · · Score: 1

      Hmmm. Don't forget Darl McBride is going to be looking for a job soon, too...
      Would anyone be more qualified?

    38. Re:Doomed to fail. by BlackHorse · · Score: 1

      Maybe I'm dumb, but why don't you just zip or otherwise compress the file? Wouldn't it then take on a different structure?

    39. Re:Doomed to fail. by cfuse · · Score: 2, Funny
      Yes you are assigned to the scat and watersports division. Enjoy.

      Whilst that stuff isn't my cup of tea, considering just how much of it there is there must be a fairly large audience for it. It's somebody's dream job.

      Now, if we're talking hardcore gay bondage ...

    40. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      Whilst that stuff isn't my cup of tea, considering just how much of it there is there must be a fairly large audience for it. It's somebody's dream job.

      Now, if we're talking hardcore gay bondage ...

      How do I blackmail you with your disclosure at the end of the post? I'm too lazy to think of a scheme. (Anyone else feel free to chime in also).

    41. Re:Doomed to fail. by Anonymous Coward · · Score: 0

      You've looked at this too naively... Take around a hundred MD5s of nonoverlapping chunks of the file. If 90% of these match, you have near certainty that the files match except for exactly such tampering as you suggest.

      Then...just transcode it to a different format, all bits changed, problem solved.

      That said, the way to effectively generate hash values would be to take encoding scheme dependent hashes of only the most significant portions (in MPEG video, the portion of the stream corresponding to the DC components of the frame) thus insuring that no bit flipping can ruin the hash without ruining the video quality. But then, there are ways around that too, so it is pretty much hopeless =)
    42. Re:Doomed to fail. by mrogers · · Score: 1
      I don't see any rule that a hashing function may not, when one byte has been changed in the source file, merely change the value in a corresponding part of the hash (for instance, if a bit is changed 73% of the way through the file, the value 73% of the way through the hash will be changed).

      Sure, for example:

      • If there's an odd number of bits in the message, add a zero to the end.
      • XOR each pair of bits and concatenate the 1-bit results.
      • The message is now half its original size - repeat until the output is the size you need.
      • Flipping any bit in the original message will flip the corresponding bit in the digest, but no others.
      But you can still get a completely new digest by flipping relatively few bits (less than the length of the digest, which must be relatively small if it's going to be distributed to every node in the network).
    43. Re:Doomed to fail. by IdahoEv · · Score: 2, Funny

      Slightly changing the low bit of ...

      How does one slightly change a bit?

      --
      I stole this sig from someone cleverer than me.
    44. Re:Doomed to fail. by cfuse · · Score: 1
      How do I blackmail you with your disclosure at the end of the post?

      It'd be pretty difficult considering the comment was in the public domain. Besides, you talk like there is something wrong with a good flogging.

    45. Re:Doomed to fail. by nahdude812 · · Score: 1

      Sorry slightly changing the amplitude by flipping the low bit. Or changing a few low bits per second throughout the file. However you want to look at it, the point is that you can toggle low bits with out seriously affecting quality, but while having a significant impact on fingerprinting.

    46. Re:Doomed to fail. by nahdude812 · · Score: 1

      This is an example of file wrapping, and one of the big reasons that no fingerprinting technique will ever succeed. Each time the software became wise to a particular wrapping scheme, the users would convert to a new wrapping scheme. It's fairly conceivable though that the software also fingerprints all the variations of files, including zips and whatnot.

    47. Re:Doomed to fail. by Max+Hyre · · Score: 1
      Criminal guilt which is what were talking about isn't about proving beyond a reasonable doubt, it's about actual hard evidence. If there is any doubt, in this case because the files technically are not the same, then you cannot convict.

      Umm, that's wrong. If a criminal conviction required total absence of doubt, there wouldn't be any. It's definitely about hard evidence, but that evidence need not prove that it couldn't have been the defendant's previously-unknown evil twin. In the U.S., at least, a juror is instructed that if the evidence presented is convincing ``beyond a reasonable doubt'' (i.e., anyone saying otherwise would be advancing an unreasonable argument), she must vote to convict. This is for criminal cases, where we're trying to protect ourselves against ideological prosecutors or a grasping government. You don't imprison someone unless you're damn sure you've got the right person. (That's the theory, anyway. It's rapidly eroding under the Bush administration.)

      By way of contrast, in a civil suit (where the only thing at risk is cash, not being sent up the river), the juror is told to vote based on ``the preponderance of the evidence'', which means over fifty percent. If the case is close, but one side makes a slightly better case than the other, vote for the better case.

      --
      I refuse to believe corporations are people until Texas executes one. -- desert rain on http://www.dailykos.com/user/
  5. Great! by Anonymous Coward · · Score: 0

    Now p2p app program downloads will be upwards of 600MB each, just to satisfy every single publisher who wants other people to protect their works for them.

  6. Didn't AudioGalaxy try this? by MarsBar · · Score: 5, Informative

    The courts decided that it wasn't enough to remove works known to be copyrighted: rather they must know that works were not copyrighted.

    1. Re:Didn't AudioGalaxy try this? by R.Caley · · Score: 2, Interesting
      [...]they must know that works were not copyrighted.

      This seems to open a possibility. Note I'm not saying this is a good idea, just that it seems like it might be a more workable system than most proposals:

      Set up a public/private key infrastructure. If the content producers are losing as much as they claim they should be more than willing to pay. Anyone can have a key if they verify who they are to a reasonable level (eg by supplying a credit card number).

      Now, we can have a rule that a client must only distribute a file signed with a recognised key.

      I'd bet there are far fewer people willing to jump through these hoops and nail their credit history to their assertions of what is theirs or pubic domain than there are songs and pornographic images in the world, so this should be a more tractable problem than the finger printing.

      Any client recieving a non-signed file reports the sender to the men with the big sticks with nails in.

      Since there are relatively few people with the skill and interest to create hacked clients, and since such hacked clients should be reported if they are ever seen by a single legitimate client, it shouldn't be impossible for the MwBSwNI to keep the population of evildoers down. Especially if the punishment for distribution of such a client is suitably dramatic and well publicised.

      --
      _O_
      .|<
      The named which can be named is not the true named
    2. Re:Didn't AudioGalaxy try this? by GigsVT · · Score: 1

      But everything created is copyrighted automatically, so they can't distribute anything at all.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
    3. Re:Didn't AudioGalaxy try this? by sm0yby · · Score: 1

      So are we back to "you can do anything with your computer, as long as we say that it is OK"?

      It is interesting to see how many even here make the implicit assumption that "copyrighted" means "non-distributable". Those two are entirely different beasts and need to be treated as such.

      --
      Been modded interesting, insightful and funny. Why does real life have to be so different?
    4. Re:Didn't AudioGalaxy try this? by R.Caley · · Score: 1
      So are we back to "you can do anything with your computer, as long as we say that it is OK"?

      Nothing I described in any way limited what you could do with your computer. That was the whole point. What I described was a system where other people could refuse to listen when you decided to make your computer broadcast things you weren't prepared to claim you had a right to broadcast. The right to speak is not the right to have anyone listen to you.

      It is interesting to see how many even here make the implicit assumption that "copyrighted" means "non-distributable".

      Which, is precisely the opposite of what I was assuming. I was presuming that there was legitimate file sharing. If I were to presume otherwise I could propose a much simpler solution, that all file sharing could be made illegal with no need to do more than prove someone was running a P2P client to get a conviction.

      --
      _O_
      .|<
      The named which can be named is not the true named
    5. Re:Didn't AudioGalaxy try this? by HiThere · · Score: 1

      ...to keep the population of evildoers down...

      Interesting definition of evil you've got. Given the context, it doesn't sound like sarcasm, though that would be the only way that I could understand it.

      A minimum requirement of evil, in my sight, is that the person performing the "evil" should intend that his actions injure in some way someone else. Note the word "intend". That's an important part of the definition. Unintended damage may be wrong, but it isn't evil. Unintended damage may require that the injured be compensated, but that is also a separate matter. Intentionally breaking the law, then, does not meet the minimum test to qualify as evil. And I can't see any other grounds, either.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    6. Re:Didn't AudioGalaxy try this? by sm0yby · · Score: 1
      Nothing I described in any way limited what you could do with your computer.

      Maybe I misread something, but that's not how I read your words. You are talking about putting legal limitations in place so that only properly signed content can get distributed through peer-to-peer networks and then outlaw the distribution (and thereby effectively also the use) of clients that do not include such checks. That would seem to be a limitation on what one can do with their computer to me at least. Maybe I am missing something?

      By the way, peer-to-peer networks do not "broadcast" content. They allow someone who has a piece of digital information to share it with someone who doesn't, but wants it. That's more like having someone ask a question and then you answer it. If you ask a question you have to expect an answer. Pretty simple.

      As for the copyrighted == non-distributable section, that was not directed at you specifically. My apologizes if I did not make that as clear as I should have or intended.

      This is all beside the fact that another good thing about peer-to-peer networking is that content can be untraceable. Once a few people have downloaded and made available for download a file, regardless of its content, it's pretty hard to find out who first distributed it unless the originator or author steps forth. Which in itself helps guarantee free speech.

      (I also put up both OpenOffice 1.1 and the Linux kernel for download from my Gnutella node. Within days several people had downloaded copies of both (not necessarily the same people, obviously). It certainly proved my point, that peer-to-peer networks have perfectly legal uses, and can help take some of the load off the official distribution servers. Before anyone comments that the files may have been altered, that's when the cryptographic hashes come in handy. Downloading a file of a few hundred bytes certainly puts less load on a host's Internet connection than downloading tens of megabytes. Given appropriate checks of public key authenticity by the recipient, the hash files can easily get distributed over the same P2P network as the data they are used to verify.)

      --
      Been modded interesting, insightful and funny. Why does real life have to be so different?
    7. Re:Didn't AudioGalaxy try this? by Anonymous Coward · · Score: 0

      What does this solve? Nobody would ever use this network, so nobody would ever be caught?

      Lets assume for the moment that people are indeed using this hypothetical big brother network of yours. When you do a search with your client, you still have to ask other peers if they have what you're looking for. If they're legit clients, then since the "client must only distribute a file signed with a recognised key", then they won't send you any infringing data, as they aren't capable. So again, what have you gained here? And who in the right mind would make (or USE for that matter) a hacked client for a closely monitored network? People would simply use the big brother network for legal stuff (or, not at all, since they can ge the same content elsewhere without being spyed on), and other networks for illegal stuff..

    8. Re:Didn't AudioGalaxy try this? by Anonymous Coward · · Score: 0

      You are talking about putting legal limitations in place so that only properly signed content can get distributed through peer-to-peer networks and then outlaw the distribution (and thereby effectively also the use) of clients that do not include such checks. That would seem to be a limitation on what one can do with their computer to me at least. Maybe I am missing something?

      I'm going to come use my computer to bash your fucking head in. Since you believe I should not be limited at all in what I can do with my computer, I am sure you won't mind!

    9. Re:Didn't AudioGalaxy try this? by R.Caley · · Score: 1
      You are talking about putting legal limitations in place [...]/i>

      No I did not mention any new legal limitations at all. I was taking about someone providing an infrastructure which would alow people to exchange files safe from the possibility of violation of the legal limitations which already exist, and as a side effect would make the parasites easier to identify.

      content can be untraceable.[...] Which in itself helps guarantee free speech.

      No, maybe the reverse. In a situation where free speech exists, however under threat, people need to stand behind their speech to make sure attempts at supression are public and so resistable. samisdat publishing is a tool for when free speech has been lost. If you start acting as if you have already lost, defeat becomes inevitable.

      If Rosa Parks had put on make-up to pretend to be white before taking her seat she wouldn't have had any effect.

      --
      _O_
      .|<
      The named which can be named is not the true named
    10. Re:Didn't AudioGalaxy try this? by sm0yby · · Score: 1
      In a situation where free speech exists, however under threat, people need to stand behind their speech /.../

      Which they would still be perfectly free to do. But anonymity should be an option. It cannot be that with an infrastructure that only allows distribution of signed documents, and getting such a signing key requires you to prove your identity. (Besides the fact that far from everyone has a credit card. I know several people who for various reasons don't have one, so only having that method of verification obviously wouldn't work. It would be reasonable as one option among others, though.)

      I am not against letting each end user decide on their own whether they would want to see unsigned hits to their searches, and when opting to see them at the same time being warned about the legal consequences of downloading files they do not have the rights to download. But different countries have different laws, and a person may very well have perfectly legitimate reasons to want to distribute something without revealing his identity. That should be respected in a technological system, just as it is respected in copyright law (at least in Sweden, this seems to be regulated in SFS 1960:729 chapter 4, which says [among other things not really relevant to this discussion] that copyright does not require that the author is known by name or even pseudonym).

      As for Rosa Parks, I have no idea who that is so I cannot comment.

      --
      Been modded interesting, insightful and funny. Why does real life have to be so different?
    11. Re:Didn't AudioGalaxy try this? by R.Caley · · Score: 1
      anonymity should be an option.

      True. What I ws saying was that anonymity is not a method of protecting free speech, rather a method of coping when free speech becomes difficult or impossible. To protect a right you need to excercise it and make sure everyone sees you doing so.

      There is nothing to stop you sending me a copy of your document and me signing it to say `the author of this work has given permission for it to be distributed'. Or you could dump it on the network unsignedand rely on there being at least one person out there with a hacked client willing to act as signatory. Or just that those with such hacked clients would distribute your description of the evil Swedish plot to invade Norway by other means.

      All my suggestion would do would be to ensure that for everything on your node, either you have explicitly taken responsibility (by signing, allowing in unsigned content or just putting up an unsigned file) or someone else identifiable has (by signing something you downloaded). That gets legitimate users out from under and argument with the RIAA etc.

      Rosa Parks was a black woman who decided one day to sit at the front of the bus, in defiance of the local segregation rules. This created enough of a stink that it was one of the things which got the civil rights movement in the US south moving.

      --
      _O_
      .|<
      The named which can be named is not the true named
  7. Porn Moguls, File Sharing, Spyware Oh my! by Anonymous Coward · · Score: 0

    Sounds like a fun time to be had by all.

  8. DRM technolgy hacked even before production! by HansF · · Score: 1

    1) Include a random text-file 2) compress the files again 3) ... 4) Profit !

    --
    --> Insert Funny Sig Here
    1. Re:DRM technolgy hacked even before production! by Anonymous Coward · · Score: 0

      everyone is getting worked up about this. theres no need to be. p2p networks are made for pirating, they arent going to implement drm technology. hahaha

    2. Re:DRM technolgy hacked even before production! by Anonymous Coward · · Score: 0
      Wait until the hardware and software gets locked up and regulated.

      Yes. It can and most probably will happen if you believe this article.

    3. Re:DRM technolgy hacked even before production! by larry+bagina · · Score: 1

      no drm tech, but most will gladly install spyware, which is potentially worse.

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

  9. Another anti piracy method by HMA2000 · · Score: 1

    This one shouldn't be too hard to get around at all right? Can't you just append a couple of random bytes at the end of the file and change the hash?

    1. Re:Another anti piracy method by Anonymous Coward · · Score: 0

      Or just zip or rar the file...

    2. Re:Another anti piracy method by LnxAddct · · Score: 1

      Are we forgetting that some people do have a right to download the copyrighted materials? In most cases its special circumstances, but reasons still exist and are valid. For example, I own a cd but my computer doesn't have a CD drive in it (its rare but can happen). I then have the legal ability to download the cd or a song if its the only way to transfer it to my computer. Also, if you break your cd by stepping on it or scratching it or something to that affect then you can legally download it because you are entitled to its use through the purchase of the cd. When you purchase it you essentially sign a contract and are granted use of those materials, that injunction with "Free Use" makes it very legal for many people to download copyrighted materials. IANAL but as far as I know and from what I've heard all of these situations are true and perfectly legal. You don't buy the music, you buy the right to listen to it.
      Regards,
      Steve

  10. Fuzzy Fingerprinting? by diamondsw · · Score: 3, Insightful

    However, anyone who has used a P2P network knows that for any given file people are looking for, there are about a dozen variants with very slight differences (encodings, cropping, someone added a few frames of "encoded by..."). Since we don't have digital purchase of data, there is no "authoritative" version of a file to fingerprint in the first place.

    --
    I don't know what kind of crack I was on, but I suspect it was decaf.
    1. Re:Fuzzy Fingerprinting? by vpscolo · · Score: 1

      The only way to tell if something is a copy is watching/copying it. Prehaps prisoners could be given then job to listen to copies of brittany spears and Cheeky Girls songs

      Rus

    2. Re:Fuzzy Fingerprinting? by moonbender · · Score: 1

      There most certainly are "authoritative" versions in most networks, although I assume it depends on user sophistication to get the ones which are. Typically, the authoritative releases are those inherited from the original warez scene - which makes sense considering you also get high quality assurance alongside. Network specific "release hubs" such as Sharereactor for the eMule and suprnova/IRC for the bittorrent networks further boost concentration on single files.

      And in fact, those two P2P networks - which I'd consider to be the most prominent among people who have left the larvae-like state of using the horribly disfunctional Kazaa - both constantly use hashes and checksums to verify the downloaded material: eDonkey/eMule links contain a hash string in their URL, while the bittorrent ".torrent"-files contain multiple hashes for the various parts of the file, AFAIK.

      It'd be trivial to modify the clients to check the hash of the currently requested file against some sort of centralised database or a set of "forbidden" hashes released alongside or independently from the program. I assume it would also be technically feasible to have some sort of 3rd party software running perhabs in the host OS or even on the ISP server analyse the P2P traffic, generate hashes for the transmitted files and detect whether the hashes match known, well-spread pirated versions. However I think that'd require an enormous amount of infrastructure to do that, if it is in fact doable at all. On a sidenote, even if an ISP detected an "illegal" hash, that hash could still belong to an altogether different file and only match by pure chance. It's not bloody likely, especially not for another meaningful file, but still.

      None of this matters, of course, since even if it were feasible at all, it wouldn't take a lot of work to counteract it by not relying on hashes but rather falsifying them on purpose as others have suggested; not a lot of work at all from a community ("criminal organisation") that has shown it is willing to put in a lot of work to go on sharing files be they copyrighted or not.

      --
      Switch back to Slashdot's D1 system.
    3. Re:Fuzzy Fingerprinting? by Simonetta · · Score: 1

      there are about a dozen variants with very slight differences (encodings, cropping, someone added a few frames of "encoded by...")

      Eventually (within about five years) the entire P2P/Kazaa community will specialize in custom variations of standard fixed titles of global media corporation product.

      This is what will keep people coming to P2P after they get bored with traditional fixed passive media product like Hollywood films and classic-rock audio recordings.

      P2P will eventually become the place where Hollywood tries out its new product. A place where it can get sarcastic and mean-spirited critisism of product-in-turnaround or under-development before committing several hundred million dollars to fixed final film, game, album or combination of all those that will be released in a frozen format worldwide.

    4. Re:Fuzzy Fingerprinting? by Anonymous Coward · · Score: 0

      Isn't there something in the constitution about cruel and inhuman punishment?

    5. Re:Fuzzy Fingerprinting? by Kent+Recal · · Score: 1
      It'd be trivial to modify the clients to check the hash of the currently requested file against some sort of centralised database or a set of "forbidden" hashes released alongside or independently from the program. I assume it would also be technically feasible to have some sort of 3rd party software running perhabs in the host OS or even on the ISP server analyse the P2P traffic, generate hashes for the transmitted files and detect whether the hashes match known, well-spread pirated versions. However I think that'd require an enormous amount of infrastructure to do that, if it is in fact doable at all. On a sidenote, even if an ISP detected an "illegal" hash, that hash could still belong to an altogether different file and only match by pure chance. It's not bloody likely, especially not for another meaningful file, but still.

      I agree this could be technically possible but as you suggested the required infrastructure would be unimaginable large.
      Any implementation limited to the client side can be circumvented via
      • hacked proxies speaking/altering the p2p protocol ..until encryption is added
      • patches to the application itself (the cracker-camp will be at it in hordes) ..until DRM is broadly deployed
      • unauthorized "3rd party implementations" of the p2p protocol or just a different protocol that doesnt come with such restrictions ..hard to defeat unless particular software gets outlawed
      Any measure beyond that would require deployment of sniffer/monitoring-software on a massive scale.
      Would Big Brother tolerate a Big Sister on his playground?
  11. Doubt it. by BassZlat · · Score: 4, Interesting

    It is possible only according to the suits in the government. The p2p traffic accounts for ~2/3rds of the internet traffic nowadays, so unless you have an echelon-type system good luck!

    (and that is not counting all the anonimity-protecting nets such as freenet, MUTE, and the new i2p (don't remember link, sorry).

    --
    Don't go silently into that peaceful night
    1. Re:Doubt it. by Anonymous Coward · · Score: 0
      ..and the new i2p (don't remember link, sorry)

      invisiblenet

    2. Re:Doubt it. by NoMoreNicksLeft · · Score: 1

      I think you mean IIP, it's on sourceforge somewhere. Check out this one.

      Currently, I'm looking for about half a dozen network savvy BSD or linux people outside the USA (who would be free to invite other users or router admins after a probationary period). I also have a few slots open for users (any OS) who would like to build some kind of content (ranging from opening an IRC channel, to websites, or even help writing custom software). Domain names are free, static IPs, no restrictions of any kind.

    3. Re:Doubt it. by NoMoreNicksLeft · · Score: 1

      Just called by my girlfriend... power company changed out our meter 10 minutes ago. She can't bring up the server (not sure what is wrong). Bookmark it, or find a google cache, or wait til 6pm EST.

      Sorry. Now I do feel like an ass

  12. Wait, wait...GOT IT! by GTRacer · · Score: 1
    "hashing" - it's a good Buzzword Bingo!

    P2P, hashing, DRM, fingerprinting and spyware, diagonally from top right! Yay! What do I win?

    GTRacer
    - Oh yeah, more crap on my PC

    --
    Defending IP by destroying access to it? That makes sense, RIAA/MPAA. Go to the corner until you can play nice!
  13. New terminology for porn purveyors by y2imm · · Score: 3, Funny

    "Providing creatively-driven, strategically-sound marketing solutions designed to help your business grow."

    That ain't all they wanna make grow

    1. Re:New terminology for porn purveyors by whittrash · · Score: 1

      A smart company would launch i-porn...

  14. If it was truly peer-to-peer... by vasqzr · · Score: 2, Interesting

    Couldn't it NOT be shut down?

    Just like with Napster, there's a core that they can shutdown and be done with it. Are any of the popular P2P networks truly independent?

    1. Re:If it was truly peer-to-peer... by petabyte · · Score: 4, Insightful

      Peer to Peer networks have to go from Peer to another Peer. For almost everybody this means going across the routers, switches and wires of ISPs, backbones, and other telecommunications providers. Laws can mandate that these companies be held responsible for things going across their wires and forcing them to filter content.

      I do that very same thing here. The internet connection comes in, goes through a firewall and then to snort both of which squeeze off peer to peer connections. This is to reduce bandwidth consumption and to make the boys over in legal happy.

      The software might be independent but the pipes it travels across are not. Lessig's book goes into this in great detail.

    2. Re:If it was truly peer-to-peer... by smcavoy · · Score: 1

      Gnutella is p2p. there is no central server to shutdown in order to shutdown the network.
      It's entirely possible to shutdown a gnutella network of thousands while many tens of thousands operate. well, that's my understanding any how.

    3. Re:If it was truly peer-to-peer... by WeblionX · · Score: 1

      The Gnutella 2 network is more or less independent. As long as a few people let their computers be hubs, (You don't necessarily need hubs, either) the network should be able to stay up. Especially with the alternate source mesh, any popular files could survive even if a large portion was to be shut down. Shareaza and I think Gnucleus and Morpheus support G2.

      --
      (\(\
      (=_=) Bani!
      (")")
    4. Re:If it was truly peer-to-peer... by johnos · · Score: 2, Interesting

      The argument makes sense, except there are legal and business considerations. The "common carrier" protection of traditional information movers like the phone companies will likely prevail eventually for data providers as well. The "safe harbour" clause of the DMCA was an attempt to head that off. However it probably won't work. There are a lot of big corporations that like being common carriers in fact if not in name. The phone companies, the backbone providers, Fedex. None want a serious precident that might make them liable for the content they move. They do want to keep the pipes independent and they have the money and lobbying power to slow down or stop any attempts to make them othewise.

      Your local ISP may be intimidated by court orders or nastly letters from some lawyer. Verizon and SBC aren't. They want no part of the copyright wars because of the expense and potential for customer churn. The boys over in legal don't generate revenue and bandwidth is part of the cost of doing business. As long as one is willing to put up with the bandwidth from P2P, they will all have to put up with it.

      I don't trust big corporations except to do whatever they can to look out for their own interests. As long as their interests and ours coincide we have a measure of safety.

    5. Re:If it was truly peer-to-peer... by Trejkaz · · Score: 1
      --
      Karma: It's all a bunch of tree-huggin' hippy crap!
    6. Re:If it was truly peer-to-peer... by Alsee · · Score: 1

      software might be independent but the pipes it travels across are not

      Sure, but you can't filter squat if the software decides to used even the simplest encryption. All web data should be be routinely encrypted, even if it isn't strong encryption.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  15. I Don't think so. by Viceice · · Score: 1

    As it is Kazza is doing a decent job poisoning the town well with all those mp3 that have a horrible screech in them.

    I think the hash will simply suffer the same fate of being broken up and reassembled in the wrong way, rendering it useless.

    --
    Sometimes I wish I was a plumber, then I'd know how to deal with other people's shit.
  16. won't work by Dreadlord · · Score: 2, Interesting

    filtering files based on hashing values won't work, especially for audio and movie files, you can always modify the file a bit, add a black frame to the beginning of the movie for example, so the hash value changes, and the file passes the filter.

    --
    The IT section color scheme sucks.
  17. napster anyone? by __aaitqo8496 · · Score: 1

    didn't napster try to block certain files by name? what happenedis people renameg George Acosta to something like G0rge Ac0sta. What to stop people from creating the same file with a different hash (by repacking the file or chaning some bits. .mp3 is lossy, so I'm sure a hash could be completely different by changing a few bytes without a noticable difference.

    Comments, questions?

  18. Considering the vast amounts involved... by Svartalf · · Score: 4, Insightful

    The person making the statement that the apps can filter anything doesn't realize the sheer volume of fingerprints, etc. that the app has to keep track of.

    Nice try- better than most, actually... But it still doesn't resolve the real problem which is that most of what the labels are selling is crap and grotesquely overpriced at that. People swapping all of that music is more a response to that than anything else.

    --
    I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
    1. Re:Considering the vast amounts involved... by surprise_audit · · Score: 1

      Well, it could be possible for the client to generate a fingerprint before uploading a file, and bang out a request to a central repository to check it to make sure it wasn't registered. That still runs into the extra/missing frame/byte/overlay problem - the fingerprint wouldn't match if the data were subtly altered.

    2. Re:Considering the vast amounts involved... by Mike+Hawk · · Score: 2, Insightful

      People "swapping" all of that music is a response to it being crap? That is the most illogical thing I have ever heard. Demand is through the roof so it must be crap? High demand would seem to hint otherwise, unless you are in the camp that being popular makes it crap, I guess. Now, I agree being popular doesn't make it quality, but likewise it doesn't make it crap either. I gotta say, if this is the new math, that high demand means something is crap, I'll take my good old math please.

    3. Re:Considering the vast amounts involved... by jlazzaro74 · · Score: 1

      I don't think they actually *believe* that fingerprinting could work, anyone with an ounce of knowledge would have to immediately see the problems with it. This is probably more about making legislators *think* that it could work, thus making it appear that creators of P2P software just aren't trying, so they must be evil, pirating bastards, so perhaps P2P networks should be illegal. If P2P networks are illegal, the porn peddlers have less to worry about. Free porn has taken a huge chunk out of their wallet, this is just a play to get it back.

    4. Re:Considering the vast amounts involved... by R.Caley · · Score: 1
      most of what the labels are selling is crap and grotesquely overpriced at that. People swapping all of that music is more a response to that than anything else.

      If the stuff is crap why are people swapping it? Clearly the labels are doing a good job at creating what lots of people want. And if it is over priced, it would be being undercut - the technologies which make swapping easy also make legitimate distribution easy.

      IIRC, there was a 7% increase in album sales in the UK last year. Maybe the RIAA are just not doing it right...

      --
      _O_
      .|<
      The named which can be named is not the true named
    5. Re:Considering the vast amounts involved... by Anonymous Coward · · Score: 1, Informative
      The person making the statement that the apps can filter anything doesn't realize the sheer volume of fingerprints, etc. that the app has to keep track of.


      There's volume not just in the number of songs that need fingerprints, but also the number of fingerprints per song. That's a number probably nearly as large as the range of hashes... You can edit the file in your favorite audio editor, rehash, and it's a different fingerprint entirely. Bend a wave form just slightly, and your ears can't tell the difference. But as far as the fingerprinting software is concerned, it's not the same file at all. If you also consider the use of different encoding/ripping algorithms and software, the number grows even higher since each program would have slightly different output and entirely different fingerprints...

    6. Re:Considering the vast amounts involved... by PReDiToR · · Score: 1

      Not necessarily true.

      I don't like half the crap I download, I merely download it to see what it is, then leave i there for others to download, should they desire.

      The majority of the music on my hard drive that I actually listen to is from times gone by. the recent stuff is all cover versions of that anyhow.

      --

      Do not meddle in the affairs of geeks for they are subtle and quick to anger
    7. Re:Considering the vast amounts involved... by iiioxx · · Score: 1

      But it still doesn't resolve the real problem which is that most of what the labels are selling is crap and grotesquely overpriced at that. People swapping all of that music is more a response to that than anything else.

      I think the idea that "most of it is crap" is kind of an oversimplification. Really, the issue is one of *value*.

      I think iTunes Music Store illustrates this point nicely. What are they at? 30 million songs purchased so far? Why, when you could get the material for free on P2P? Because people who purchased songs from iTMS felt that a legitimate, high (subjective) quality copy of a song they liked sold through an easy-to-use, easy-to-find interface with no waiting presented a value at the price of $0.99.

      The problem with the music industry's current model isn't that everything is necessarily crap. It's simply that a growing number of consumers don't see a value in going to the store to buy a physical disc that often contains one good song and 14 filler tracks, at the sale price of $18.99. And no amount of cracking down on P2P is going to change that fundamental value equation.

      If the record industry wanted to kill illegal file-swapping instantly, they could do it simply by offering up their entire catalog for online distribution at the price of $0.05 per track, with little or no DRM. Boom. Illegal file-sharing gone. Why bother with bad rips, mislabeled files, and long queues when you can pay a nickel and get a good copy of the right song with no waiting? The problem is, this doesn't hold with the industry's set pricing model of $1/song and the massive profit margin that comes with it. It's an industry blinded to reality by greed.

    8. Re:Considering the vast amounts involved... by HiThere · · Score: 1

      If I understand properly, he's talking about requiring his closed source program to run the clients of the P2P network. So the filtering would be distributed.

      But he assumes that spyware is a legitimate piece of software. He may even outright say it (well, I didn't read the article, so that may have been an editor's summary).

      Personally, the summary sounds like he's lying to congress for commercial gain. But I guess that these day's that's accepted as a smart business practice. (And I'm not interested enough to check it out, because I don't feel I could affect the result. And, of course, because I don't use a P2P network.)

      Still, if you are interested, you might investigate whether he was lying under oath, and if he was you might bring it to your congressional representative's attention.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    9. Re:Considering the vast amounts involved... by Skavookie · · Score: 1

      Economically, "demand" typically refers to a demand curve, which is quantity demanded as a function of price. As price goes down, the quantity demanded goes up. As price goes up, the quantity demanded goes down. The fact that the quantity demanded at a low price (i.e. from filesharing) is high does not imply that the quantity demanded at a higher price is also high. Even a very low quality product can have a high quantity demanded if it is at a low enough price.

    10. Re:Considering the vast amounts involved... by laird · · Score: 1

      This depends on what the fingerprinting technology is. Audible Magic's technology, for example, can supposedly generate fingerprints for audio files that are independent of specific encoding. I don't know whether they'd end up with a single fingerprint for all versions of a track, or a couple, but in either case the number of fingerprints would be much smaller than the number of hash values.

      Also, the system doesn't need to block every single copyrighted song to be effective, because not all songs are equally popular. There are perhaps 1m copyrighted tracks,

      There are perhaps 1m copyrighted tracks. That's probably still too many to block. Luckily, tracks are not all equally popular, so if you block the most popular tracks, that would be disproportionately effective. Perhaps the Rolling Stone 500 Greatest Albums of All Time could be a start. That's only, say, 10,000 tracks.

      How hard could it be to transmit 10,000 numeric fingerprints, and block sharing of any files that match them? P2P networks are great at transmitting data, so it'd be easy to update the list. :-)

    11. Re:Considering the vast amounts involved... by laird · · Score: 1

      "If the record industry wanted to kill illegal file-swapping instantly, they could do it simply by offering up their entire catalog for online distribution at the price of $0.05 per track, with little or no DRM. Boom. Illegal file-sharing gone."

      While I agree that this would eliminate illegal file swapping, it's also a huge roll of the dice, betting that in return for charging 5 cents a track, people would buy 20x as much music. And if they're wrong, the music business dies.

    12. Re:Considering the vast amounts involved... by Mike+Hawk · · Score: 1

      100% agreed, but none of that was covered or even implied by the grandparent. The grandparent only said absolutely that because everyone is downloading it, it must be crap. This I do not agree with, nor find insightful. The moderation is the real tragedy.

    13. Re:Considering the vast amounts involved... by wolrahnaes · · Score: 1

      And if they're wrong, the music business dies.

      Do you really believe that the music industry is running on such thin profit margins that the 99 cents charged by iTunes is a cheap as they can go? I wouldn't demand $0.05, but $0.50 is very reasonable for a high quality file (320kbps MP3, FLAC, etc.)

      The music industry can cut prices far more than they have. A download costs them next to nothing when compared to producing and distributing physical media.

      --
      I used to get high on life, but I developed a tolerance. Now I need something stronger.
    14. Re:Considering the vast amounts involved... by ajs318 · · Score: 1

      It would be possible in theory to design an algorithm so that the fingerprint would not be affected by "inaudible" changes. Still, there are always ways around things; you could make very audible changes that would certainly fingerprint differently, by XORing the whole file with a repeated byte string {but obviously not the same length as the checksum} and distributing that string separately.

      --
      Je fume. Tu fumes. Nous fûmes!
    15. Re:Considering the vast amounts involved... by Kent+Recal · · Score: 1

      And if they're wrong, the music business dies.

      The music business will never die. It just changes in the process of evolution.
      New technology changes our lives every day, why should it leave the music/media industry alone?

    16. Re:Considering the vast amounts involved... by laird · · Score: 1

      "The music industry can cut prices far more than they have. A download costs them next to nothing when compared to producing and distributing physical media."

      If an album sells for $14, and costs $3 to physically produce (packaging, etc.), that means that a purely digital album could sell for $11 and still pay the same amount to the store, distributor, label and artists. That puts you at very roughly $1 a track.

      If you view the digital sales as an incremental business on top of CD sales, you could sell music digitally for albums nothing. But if digital sales _replace_ CD sales, that changes the equation. If an album can sell 100K CD's for $14, that generates $1.4M in sales (split between stores, shipping, label, artist, etc.). If you sell 100K copies of the hit single for 5 cents, that's $5K (i.e. you don't bother spending the $100K to record the album). If you sell 100K albums for 75 cents (15 tracks at 5 cents), that's $75K. Would anyone here spend $100K to produce a product, then risk a $1.4M deal to have a shot at a $75K deal?

      To make the same money as the 100K CD sales with 5 cent tracks, you'd have to sell 20M tracks. That is, that one album would have to sell nearly as many tracks as the iTunes Store's entire catalog has sold since it launched. Seems unlikely this year...

      Now, if you argue for 50 cent tracks, that's not as bad a deal. You'd only need to generate 2.8M track sales. That's far more than anything's sold so far online, but doesn't seem completely impossible as the world grows increasingly digital.

      If I had to guess, prices will stick at around $1 a track for a while, at least until the volumes ramp up.

    17. Re:Considering the vast amounts involved... by wolrahnaes · · Score: 1

      and still pay the same amount to the store, distributor, label and artists.

      In this scenario, the label or artist runs the store and distributor. This cuts out two or three middlemen who would otherwise want a cut. This brings the costs down further.

      Here's a hypothetical example:

      Let's say that a major artist records and produces the content for one CD at a cost of $1 million (not unusual nowadays). It will be distributed in three formats: 160kbps MP3, FLAC, and regular CDs. As the recording is likely already in digital form for tome work in Pro Tools, let's say the cost of encoding to the three formats is $0.

      From here, the online formats are placed on a server operated by the label at basically no cost, with a connection costing $4 per gigsbyte. This means that the MP3 albums cost around $.40 in bandwidth, with the FLAC albums costing slightly more than $1.

      Compare this to the physical CDs, where the packaging and media costs roughly $2, and there are shipping costs between the manufacturer and the distributor, and also between the distributor and the store. The manufacturer, distributor, and store are also marking up the product to make a profit. This means that the cost of the CD by the time it reaches your hands is in the $10-$15 range.

      If the label is making $1 for every CD sold, they need to sell one million copies to turn a profit.

      With the digital distribution, if they charged $3 for a reasonable quality MP3 version (around $1.50 profit), and $5 for a FLAC version ($2.50 profit), they could be just as profitable with less sales than the $10+ CDs

      Obviously I didn't get all the costs involved, as I am not a music industry insider, but the point remains: Digital distribution costs less to the content provider. The only notable cost involved in digital content distribution is bandwidth, and this is still not much.

      The media companies like the current system with physical media, so they do not want to let online distribution succeed.

      --
      I used to get high on life, but I developed a tolerance. Now I need something stronger.
    18. Re:Considering the vast amounts involved... by laird · · Score: 1

      Eliminating the physical costs, you're right, doesn't save much. Eliminating the retailer could save margin, but then fans would have to go to every artist or label's site to buy music -- the retailers provide a service by aggregating the music and presenting it in an organized manner, covering the cost of actually selling the music (running ads for the store, paying credit card processing fees, staffing customer support, etc.). So if you eliminate the margin that they charge, that means that the labels or artists need to do all of the work that retailers do, which (given that the online retailers aren't particularly profitable yet) would cost about as much as the margin that they're charging.

    19. Re:Considering the vast amounts involved... by Mal-2 · · Score: 1
      Most new music is crap. Old music (already crap-filtered by time) and the small proportion of non-crap new music remain popular. There is nothing illogical about this.

      I don't listen to commercial radio, so any time I go sniffing around a p2p network, it's generally either old or on someone else's behalf. If it's new and interesting, then generally someone I know will tell me about it and helpfully provide me with a link or a simple "it's on my ftp" message.

      This is not to defend my position, but I can honestly say my p2p downloading has NO effect on my purchases of new music. That is because I don't MAKE any, and I didn't even before I could download. CDs borrowed from other people are a different story entirely, they account for about 2/3 of what I've collected. Admittedly most of THAT is crap too, but quite frequently I have never even gotten around to listening to it. I just grabbed it when it passed by, in case I never saw it again.

      For the record, the last thing I downloaded was Lou Reed - Metal Machine Music. I'm glad I did, because now I don't have to go through the effort of trying to return it!

      Mal-2
      now with extra chunky goodness

      --
      How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
  19. too easy to defeat by jeffy124 · · Score: 4, Insightful

    just change a random bit or two somewhere in the general data section (ie - where the actual video or audio is stored) and the hash gets defeated easily. (yes - an oversimplification, but it'll do)

    --
    The One Rule Of Chess You'll Ever Need: Don't play someone who carries a kit in their bookbag.
    1. Re:too easy to defeat by Lehk228 · · Score: 1

      make many random changes to the LSB's (Least significant Bits) so the hash will be completely different even when looking at small segments of the file (to prevent a system where filesize determines what 5KB segment gets hashed)

      --
      Snowden and Manning are heroes.
    2. Re:too easy to defeat by SnowWolf2003 · · Score: 1

      This is something I haven't seen answered. So everyone changes their file randomly just a little bit to defeat the hash.
      Now how do you download the same file from multiple sources - one of the great applications of P2P, when everyone has a slightly different version of that file?

    3. Re:too easy to defeat by Anonymous Coward · · Score: 0
      just change a random bit or two somewhere in the general data section (ie - where the actual video or audio is stored) and the hash gets defeated easily. (yes - an oversimplification, but it'll do)

      That is not an oversimplification. It really is that easy. On average, if you change one bit anywhere in the file, half of the bits in the message digest will change.

      However, if you don't want your random changes to effect the content, you could just wrap the file in some randomly generated headers instead.

      Of course, the best solution is to encrypt the file, making it completely unrecognizable--even to the most advanced AI.

  20. Yeah, they could try.... by autopr0n · · Score: 4, Insightful

    Well, he's wrong. If they used hashing, then people would only have to change a few bytes of the files to get around the filter. In audio and video, this could be done without any notice at all. And it would require people to have a huge hash database on their computer. Tens of Megabytes at least, if not hundreds. It would make performance really slow.

    So, watermarking? Well, so far all watermarks that have been tried have been broken, and it would be much easier to figure out how the watermark worked if you had a binary file sitting on your computer that checked it. Just disassemble to find out how it's checked (and once one person does, this everyone will be able to). Plus, you could always just zip+password any file anyway, to prevent watermark checking.

    Of course, that doesn't mean they wouldn't try to include this stuff, but why would anyone ever download something so restrictive in the first place?

    --
    autopr0n is like, down and stuff.
    1. Re:Yeah, they could try.... by uucp2 · · Score: 1
      And it would require people to have a huge hash database on their computer. Tens of Megabytes at least, if not hundreds. It would make performance really slow.
      Yeah, and just think about the poor fella at Sharman who has to generate the hashes. You would need to download ALL of the copyrighted porn. Now that's some database!
    2. Re:Yeah, they could try.... by bfree · · Score: 1

      I was pretty much thinking like you until I started thinking about it. Let me outline the scenario as I see it.

      1. New porn film is released, studio converts it to the most commonly shared formats with the most commonly used encoders and gets those fingerprints blocked.
      2. Someone rips the film so that they get a different fingerprint.
      3. The studio monitors the network for their files and when they find one they get it's fingerprint blocked also.
      4. Someone alters the rip or creates a new rip with another new fingerprint.
      5. Repeat 3&4 ad infinitum
      The end result is that no rip ever reaches many people, and for a file to continue to be available people have to keep making new versions of the file. When you go searching for a file you are unlikely to discover a file with many sources. The greatest strength (imho) of Kazaa at present will be destroyed for illegal files, the fact that you can see how many people are sharing an identical file, providing redundancy which ensures you are actually likely to be able to download a complete file as opposed to being being left with half a file and no way to finish it.

      I have no problem with people trying to provide a meaningful way of preventing piracy on filesharing networks as long as it does not interfere with my right to share a Linux iso or my home movies. As long as a fingerprinting system was good enough to not squash non-matching content (i.e. the possible fingerprint space is large enough that truly different content is extremely unlikely to match) then this system is fair, just a lot of work for the network (system time checking fingerprints) and the studios (people time finding matching content) if they actually want it to work to a menaingful level.

      --

      Never underestimate the dark side of the Source

    3. Re:Yeah, they could try.... by NoMoreNicksLeft · · Score: 1

      A file is a stream of bytes, right? What if I write a small proxy application, that chops the file into 120 (or even a random number) of identically sized pieces. Rearranges them, along with a header that says (120 pieces, order:119,5,3,27....). When the next person wants to download from me, it breaks it into 164 pieces, wraps it in a header with containing the order.

      This could be done on the fly.

      Even hashing file fragments won't work, as most of the pieces will overlap the fragment hashing boundaries. It's simple, quick, and impossible to stop.

    4. Re:Yeah, they could try.... by bfree · · Score: 1

      You system fails. The reason is that the service decides how many people have a file based on the fact that their fingerprints match. So if you search for a film title, you will probably find that there are numerous versions of that film available, but only one or two of them are commonly held, the rest just have 1 or 2 copies out there. If you deny the system being able to recognise that NNN people actually all have the same file available, then each person will end up having to download the entire version of any file you want from one person alone, and if they disconnect, delete the file or block you then you will have to destroy what you have and start again! Of course you could say that they could assemble the packets you have, get the header from someone else and then figure out which of their packets they need, but to do that the first thing they need to know is who else has the indetical file available for download, otherwise you may as well just randomly try to complete it from anyone who says they have your film, and you wouldn't want to care about what you are getting playing back sanely.

      The only way to avoid something like this is to have a decentralised network of peers which can't be injected with any sort of filtering mechanism, perhaps a hybrid of Freenet and bittorrent?

      --

      Never underestimate the dark side of the Source

    5. Re:Yeah, they could try.... by Anonymous Coward · · Score: 0

      You could try making the hast from that part of content that is definitely going to be visible. (such as the image with a very low resolution taking into account only the brightest and darkest areas taking a single bit of information from each pixel..)
      This isn't really watermarking as it doesn't add any extra information but I think it can be relatively robust when done well enough..

    6. Re:Yeah, they could try.... by NoMoreNicksLeft · · Score: 1

      Could still offer hashes of the thing, pre-mangled. Use public key crypto for the hash exchange. If their file title sounds good, open a private secure channel, and check with the hash. I dunno.

      If you're interested in these things, I'd enjoy hearing from you privately.

    7. Re:Yeah, they could try.... by bfree · · Score: 1

      If a user can tell from searching for a file that the file one user has is the same as the file another user has, then the system can block those files based on the common attributes. If a user cannot tell from searching for a file that more then one user actually has the same file then the system collapses down to being a direct peer-to-peer system with no redundancy or nicety left at all! The question (as raised repeatedly throughout all the comments) is whether or not the network itself would co-operate in such a way and whether or not anyone is willing to invest the large amount of resources required to actually make such a system really work, system time on comparing and storing hashes, system/people time in finding potentially illegal copies and verifying that they are in fact illegal. I would suspect that if anyone invested in doing this they would simply find that the network they had changed would simply die, and a new network would spring from the ashes yet again which would not honour the restrictions.

      As I suggested in my last post, if you want to have a file sharing system which cannot be prevented from distributing copyrighted materials, then you need to use a decentralised resilient network (as I understand freenet is). As I also said though, while I am interested in this at a technical level, as long as I am not prevented from doing things which are clearly legal (like sharing a debian iso or my home movies of me singing in the shower) I really don't care if the **AA manages to squash sharing of files for which there is no permission to share. The key as far as I am concerned is that the system defaults to assuming that all material is legal, and to prevent sharing of a file it must be proved that it is illegal to share it. Now do I belive the **AA and their buddies in the US government will ensure that my freedom to let people hear just how terrible my singing voice is is protected? Probably not. Do I believe they will be able to enforce this worldwide? Again probably not, so as I am not an American I am a little less concerned then perhaps I might be. That being said, I don't trust the current Irish government to protect my rights as an individual so I am aprehensive.

      The bottom line for me is that as long as a commercial entity is attempting to make money by creating a file sharing network with no regard for the legality of what is happening on it's network then the ground is very shaky. When the system is no more and no less than the sum of what it's users contribute, that's different. Think of it this way, telling me I cannot visit my friends house because I may deliver drugs is an insane invasion of privacy/curtailment of basic freedom, but closing down a courier company which is proven to be little more than a front for drug deliveries is an entirely different story, even if they simply just set up their business in such a way that it suits drug dealers without explicitly attempting to traffic and profit from drugs! Fun arguments could be had for a long time about whether or not the "war on drugs" approach is correct to transfer to copyrighted materials (let alone whether it is appropriate or appropriately applied for drugs) but as things stand I see it as consistent to prevent a company from profiting from facilitating illegal acts. If you want a more generally acceptable example of where a company can do something seemingly legal which can/should be prevented, a tour operator which arranges anonimysed (is there a real word hiding behind my lack of spelling) holidays to Thailand where they will arrange for you to meet local children in secrecy without record! There is a point at which every company must take some responsibility for its actions and not simply say that they are simply providing a service and that it is their users fault if they do something illegal.

      The other bottom line is that the old adage of the internet routing around censorship still applies, and probably always will. The battle will run for a long time t

      --

      Never underestimate the dark side of the Source

    8. Re:Yeah, they could try.... by NoMoreNicksLeft · · Score: 1

      New link.

      My network would choke and die on mp3 sharing, let alone the bigger files people trade. More of a free speech thing, I suppose.

      The metanet you found, is ran by Isomer on undernet. Some of the same ideas (semi-private, vpn), but not built for anonymity. I've shared some ideas with him in the past.

      PS I wouldn't wait until the goverment decides you can't share your own crappy singing... by then, maybe it would be a little late.

  21. It'll never work by radionotme · · Score: 5, Insightful

    For every man hour of time that's put into 'protecting' their work, there's a thousand man-hour's worth of effort that will freely be contributed from the "public" to try and break it. All encryption like this can and will be broken over time, the only way to beat it seems to be for the companies to try and repeatedly adapt and stay one step ahead. Unfortunately that's very expensive and can't be maintained for long. Regardless of your stance on the argument of p2p, this is the way it looks like continuing for the near future.

    1. Re:It'll never work by yoha · · Score: 1, Interesting

      This is wrong. There is something even more valuable than music and movies that is exchanged digitally every day, and that is money. If there were no way to protect it, then the banking system would have crumbled already. There are obvious differences between copyrighted material and money, but for practical purposes, they are both just bits of data exchanged between machines. If protection can be done for money, then it will be done for all other valuable data. Copyright protection will happen within 5 years. Current content which has been produced on CD's will be grandfathered into piracy, but new content will not.

    2. Re:It'll never work by ichimunki · · Score: 3, Insightful

      1) Money exchanges are done in secret by parties who both have an interesting in protecting the transaction.

      2) When money goes from A to B, B has a greater interest in protecting the financial data after the transaction than A does.

      3) Creative works exchanges are rarely done in secret. Especially not on P2P networks. Or on web sites. Even most providers of content take no measures to secure the transfer of said content (i.e. ever heard of an adult site using only HTTPS from the login page on in?)

      4) When creatives works go from A to B, B almost never has any interesting in protecting that data after the transaction.

      Not that your conclusion isn't possible or likely, just that it relies on assumptions which are hard to agree with (because financial transactions are fundamentally different than selling creative works).

      --
      I do not have a signature
    3. Re:It'll never work by Kent+Recal · · Score: 1

      I think your digital content/money comparison is a bit far off. Money is a currency, a token with no actual "content". Protecting the financial system against fake money and other fraud is a completely different ballgame than protecting volumes of content - e.g. long bitstreams of audio/video - against duplication.

      As long as audio and video are consumed in an analog fashion (through eyes & ears) there will be a way to (in the last instance) chain up an output device to a recording device.

      If the DRM-guys realize their threats and enable a spy chip in everybody's box we're ofcourse looking at a different situation. But if that happens we have bigger problems than pirate copies of the latest hollywood frobnitz...

    4. Re:It'll never work by M.+Baranczak · · Score: 1

      So what's next? Will people start sharing their money on p2p? I say it's about damn time.

    5. Re:It'll never work by ultranova · · Score: 1

      Ever heard of counterfeiting ?-)

      Or, if you meant online banks, you do realize you're not actually up/downloading money - you're downloading status raports from the bank's database, and uploading commands. In other words, you're not copying anything, you're transferring the ownership of money. On the other hand, with p2p, you're making and giving people copies of data, while keeping a copy yourself.

      Anyway, these two can't be compared; they are completely unrelated processes.

      --

      Forget magic. Any technology distinguishable from divine power is insufficiently advanced.

    6. Re:It'll never work by A55M0NKEY · · Score: 2, Insightful

      Hes, you could calculate the SHA256 hash and know that a file was *probably* the same as a known copyrighted one, but the P2P service would have to maintain a database of hashes of all copyrighted files and take queries from each node that check on each file in their shared folder. This is alot of bandwidth when you consider all the nodes. There would have to be a way of adding new hashes to the database of unshareables too that was fair. For instance you wouldn't want to have the Church of Scientology submit the hashes of all the anit-scientology rantfiles they want censored claiming copyright violation.

      --

      Eat at Joe's.

  22. Yeah by savagedome · · Score: 1

    P2P networks could (if they wanted to) use "fingerprinting"

    That would give fingerprinting a whole new meaning :D

  23. Are you kidding me? by bigberk · · Score: 0, Redundant

    Put aside the fact that all DRM can easily be bypassed anyway. But filtering 'copyrighted' content based on a hash? Give me a break. I'll padd my AVI withone byte and throw your hash completely off. This is like editing MP3's ID tags -- it changes the hash, makes it impossible to automatically identify a file.

  24. Another ridiculous measure by cavemanf16 · · Score: 5, Interesting

    Wow, so now all the Divx rippers will have to chop a few frames off of each divx they rip so each hash is different. Companies should really stop worrying about what their customers do with the materials they have purchased and figure out a way to actually encourage them to purchase said materials in the first place. And no, I'm not just talking about pr0n, but CD's and DVD's in general. If it's a quality movie or CD I'll buy it because I know I'll want to watch it over and over and add to my 'collection.' I've spent more on Peter Jackson's works in the past two years than I have on any other media combined. (at least that I own... not counting all the Blockbuster rentals)

    I mean seriously, how much money is Blockbuster making right now renting movies (some of which get ripped by the Divx kiddies 'cause they have way too much time on their hands) while the music industry bemoans their inability to sell records like they did in the late 90's?

    1. Re:Another ridiculous measure by RoLi · · Score: 1
      Wow, so now all the Divx rippers will have to chop a few frames off of each divx they rip so each hash is different.

      Well since every ripper uses a different bitrate, different cropping, different codec and other differences, (almost) each rip is different in the first place.

      The pure amount of "forbidden" hashes that have to be stored would be prohibitive and it also is impossible to automate the process (somebody has to watch each file and tell the program which are illegal and which are legal. There is absolutely no way a computer can figure out wether some file is copyrighted or not) so it's not even remotely realistic.

    2. Re:Another ridiculous measure by finkployd · · Score: 0

      A few frames? Hell, one byte should be enough to enact a drastic (at least half) change to the result message digest in any well written hash algorithm.

      Finkployd

  25. Yay. by elmegil · · Score: 2, Interesting

    Glad to hear Congress is listening to and believing sleazeballs from the porn industry blowing sunshine up their collective legislative butts. It's a shame we can't make congresscritters refer to an unbiased (hahahahahaha) technical agency who can tell them when these kinds of things are full of it.

    --
    7 November 2006: The day Americans realized corruption and incompetence weren't addressing 11 September 2001
  26. This *is* possible... by Anonymous Coward · · Score: 5, Informative

    ... at least in the music genre.

    I used to work for a small company called Relatable (http://relatable.com/), which was working with Napster back in the day to identify the music being traded over the network.

    Relatable's technology recognizes music by the acoustic properties of the audio itself regardless of how it was recorded, encoded, etc.

    Obviously there are still ways around this, but it is a fairly solid solution.

    It is important to recognize that "fingerprinting" does not equal "hashing". We all know that hashing will *not* work. But there are other techniques, at least for audio, that can work.

    Josh

    1. Re:This *is* possible... by Anonymous Coward · · Score: 0

      Simply fliping each bit in the data stream would put an end to that technique.

    2. Re:This *is* possible... by pvt_medic · · Score: 1

      well granted the software could scan the music files for know markers, but the thing is it would take lots o resources to do that, and we already saw what happened when Adobe tried this.

      --
      30% Troll, 50% Underrated, 10% Interesting
      Score:5, Troll
    3. Re:This *is* possible... by Anonymous Coward · · Score: 0

      IIRC this didn't work for napster. The slightest variation in the file and it didn't match the 'profile' (for want of a better word).

      It didn't work then, it wont work now.

    4. Re:This *is* possible... by 0123456 · · Score: 2, Interesting

      First, of course, your algorithm has to recognize that it's music. That leads to numerous obvious ways of avoiding such filters, in order of sophistication:

      1) Rename the file from .mp3 to .txt, etc.
      2) Put the file in an archive of some kind (.zip, etc)
      3) Encrypt the file.

      So the more sophisticated your scanner might be (e.g. checking file type is trivial, extracting files from an archive is easy, breaking encryption is hard), the more sophisticated the workaround becomes. Eventually the only way to break the filter-avoiding measures will be to have a human sitting there manually checking all the files they can find on the network.

    5. Re:This *is* possible... by Stray7Xi · · Score: 1

      They claim to be able to do 5000 checks per second... but I'm sure that doesn't include the time to transfer the files to be compared. I doubt they'll want it put on every client also, because that leads to too much scrutiny. Once someone figures out what its measuring, I doubt it'll hold up.

      The problem with it sounds likes its doing whole tracks. What if you cut off 5 seconds of the track? or adjust the timescale by factor of 2 (which can be undone on other side)

      I could care less about music, but I still find this all interesting.

    6. Re:This *is* possible... by kryptkpr · · Score: 2, Interesting

      I don't buy this.

      Napster only ran the search servers. Files were still transferred peer2peer. So how could this technology "recognizes music by the acoustic properties of the audio itself regardless of how it was recorded, encoded" when the actual music is never seen by the servers, only the filenames? (Which was exactly how napster actually filtered.. by filename, the only information they actually had on the file, other then size).

      --
      DJ kRYPT's Free MP3s!
    7. Re:This *is* possible... by Wesley+Felter · · Score: 1

      At one point Napster planned to add fingerprinting to the peer software itself. But this gets back to "never trust the client".

    8. Re:This *is* possible... by Anonymous Coward · · Score: 0

      You think that you can tell what kind of data is in a file by looking at the extension? You, little girl, are one 1337 |-|4x0r d00dette! There is n0 such thing as Lunix, which deffinately does not have a command called file to wrok out what kind of a fiel it is b reading the header.

    9. Re:This *is* possible... by 0123456 · · Score: 1

      Uh, yes, 1337 H4x0r d00d, that's why I said 'checking file type is trivial'. Maybe I should have written it in 133t, so that 1337 h4x0rs like yourself would understand.

    10. Re:This *is* possible... by Anonymous Coward · · Score: 0

      But it doesn't really sound like the original afterwards does it? This means that the listener either has to decrypt the data or to have a bit more underground appetite for music.

  27. Checking by Beer_Smurf · · Score: 2, Insightful

    Realistically, how much storage space are we talking about for fingerprints for all know copyrighted works and how much processing power to check against them for every file you up and or download?

  28. P2P by savagedome · · Score: 2, Funny

    So, P2P no longer means Porn 2 People. Sigh

  29. Hmm.. by ParadoxicalPostulate · · Score: 4, Informative

    Yes, I agree with you for the most part - that was the first thought that came to my mind as well.

    However, for the average Kazaa user, it just might work. Most of them seem to think that if you uninstall kazaa your music is gone...or that you can't play the Kazaa music outside of the Kazaa client.

    Keeping this in mind, then, we can give a little bit of credit to these guys in that they may succeed in fooling the idiots who use Kazaa.

    Of course, people like that usually aren't the ones to come up with "original" content anyway.

    Its actually amusing to think of the cat and mouse game this could develop into :)

    1. Re:Hmm.. by grub · · Score: 1


      Its actually amusing to think of the cat and mouse game this could develop into

      What.. you mean like copy protection? That's worked well. ;)

      --
      Trolling is a art,
    2. Re:Hmm.. by TwistedGreen · · Score: 4, Insightful

      "could develop into"? The cat and mouse have been going back and forth for years!

      Kazaa is just the current filesharing stepping stone. If you look back you'll see a great deal more stones sunk behind you. And if you look ahead there are a great deal more being built.

      Nothing can stop these new stones from bubbling to the surface. They cam destroy old stones, but We will build new ones. And the 'idiots' will just follow the path, as always.

  30. Easily Defeated by akpoff · · Score: 3, Insightful
    This sounds all well and good but there are so many ways to defeat this: encoding using different formats or different bit rates, segmenting files, flipping random bits, truncating silent sections from the front and back of the track, adding "throw-away" garbage to the end of the track and I'm sure numerous others.

    It's also predicated on the idea that the hashes exist. Taking the first example of encoding at different bit rates and using different formats. Who's responsible for providing a reasonably exhaustive and authoritative list of the hashes? If Sharman et al. implement these schemes do they get bullet-proof immunity from criminal and civil liabilities?

    Also, who says users will continue to use these "spyware" enabled P2P products once it becomes widely known that blocking has been enabled?

    There are just too many excpetions to this idea to be really workable.

    1. Re:Easily Defeated by whittrash · · Score: 1

      What P2P user is going to participate in such a scheme! I see at least 2 options.

      1. People would migrate to new unencumbered software or change the ways they use data. Everyone knows someone who already has 100 gigs of music so they can simply swap hard drives at this point. People may also go underground and do more stealthy transfers, secret bitorrent cabals.

      2.The music industry gets its act together and stops putting out such crap and giving decent service making all swapping unnecessary.

      The end game of this is to make an industry out of stealthy transfers of data which cannot be controlled. At least everything is in the open now, but that could change if people develop technology to stay secret, helping to create a criminal underground. This is already a problem with child pornography.

  31. Just flip/add/subtract a bit by jonasmit · · Score: 1

    Hashes are designed to prevent collisions. No two files will reproduce the same hash. Change a single bit and the filter no longer works. A better "fingerpring" technology would look for similarity not exactness. Hashing can help but not by hashing the entire file.

  32. I guess someone forgot to tell them by Anonymous Coward · · Score: 1, Interesting


    P2P technology is worldwide, what is illegal in one place might be perfectly legal elsewhere, good luck trying to enforce it

    of course the USA can have their own crippled P2P, the rest of us in the other 191 countries and 95% of the worlds population shall just carry on

    you have to laugh at the stupidity of americans sometimes

    1. Re:I guess someone forgot to tell them by WeblionX · · Score: 1

      Hey now, stop including South America, Canada, and Mexico in your assumption of stupid people. :|

      While I admit a lot of people from the USA are stupid, there are a lot of stupid people in the other countries. That is the unfortunate way it works.

      --
      (\(\
      (=_=) Bani!
      (")")
  33. Typical slashdot anti-DRM article.. by mumblestheclown · · Score: 1
    • find some DRM piece. check.
    • make sure DRM is associated with porn. but not the good side of it, but rather with those evil sleazeball pornographers. check.
    • make sure that DRM is associated with spyware. check.
    • and then, in the comments section...
      • insist that P2P, as it is currently implemented, has multiple legitimate uses that are realistically not better handled by other means (like web pages)
      • insist that government should keep their hands out of technology but at the same time complaining that the RIAA has no right to do (enforcement/investigative/blocking action) that's what the police are for.
      • in soviet russia ...
    • and then..
      • go back to downloading pr0n, isoZ, and wareZ, and mp3z using k-lite.
  34. Two "Duh" Fallacies by Speare · · Score: 5, Insightful

    There are two fallacies with the proposal:

    • Never trust the client.
      Spyware on the nodes? Even if you could somehow ensure that all compatible clients comply with the spying requirements, how long will those clients be left unmolested? Any P2P "server" is really just a client of many other "servers."
    • Math cannot define a human concept
      This depends on a mathematical hash performed on a given rendering of a copyrighted sample. Resample and the hash is broken. Hell, even a second-rate email spammer knows how to avoid hash detection: just tweak an unused ID3 field.
    --
    [ .sig file not found ]
  35. This... by xankar · · Score: 3, Insightful

    ..will be roughly as effective as shutting down napster.

    That is to say, not effective at all.

    --
    ~To choose doubt as a philosophy of life is akin to choosing immobility as a means of transportation. -Yann Martel
    1. Re:This... by R.Caley · · Score: 2, Insightful
      ..will be roughly as effective as shutting down napster.

      Shutting down napster was very effective. It was effctive in turning in a hard to control problem into an uncontrolable one...

      --
      _O_
      .|<
      The named which can be named is not the true named
  36. Can you just not give ideas? by Anonymous Coward · · Score: 0

    Some stupid fuck might just take it seriously.

  37. oops by spiritraveller · · Score: 1
    What's that I hear??? Is that the sound of 500 Congressmen rushing home to learn more about P2P?

    This whole time they thought it was just for trading Metallica MP3s.

    1. Re:oops by Anonymous Coward · · Score: 0


      500 congressmen 200 of whom are multi-millionaires

      lets hope they have shares in media companies and maybe we will see that figure reduced

  38. This is the future of P2P by tuxlove · · Score: 1

    It's the future and will happen. However, I doubt "hashing" will be a big part of it. Digital fingerprinting will involve one of the many emerging audio and video recognition technologies, to avoid issues that come with applying a filter to a media file (or even changing a single byte). True recognition will be required, and will become a part of P2P life.

    Whether this is used for good or evil depends upon who prevails in the courts and the moral disposition of the P2P developer. But media file recognition will eventually be an inseparable part of the P2P landscape.

    I can think of at least *one* good use right off: wouldn't it be nice to look for a particular song and be able to find it without having to try various spelling variations, including pig latin?

    1. Re:This is the future of P2P by Inda · · Score: 1

      Pig latin?

      Dude, people haven't done that since Napster started filtering.

      Searching for music is easier than you make out. If it ain't spelt correctly then it ain't worth getting.

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
    2. Re:This is the future of P2P by tuxlove · · Score: 1

      I used pig latin simply to illustrate that spelling, grammar and punctuation variations can be negated by file recognition. And if you think the digital files out there are all *that* clean, textwise, you're dreaming. Sure, some of the files are well-tagged, but there are many that are not.

      In any case this technology does work and will become pervasive in the near future. There are many uses beyond my single example, no matter how lame it is.

  39. Copyrighted Porn? by sameerdesai · · Score: 1

    ARgh!!! What would they think up of next??? Can't even let a guy wank in peace....

  40. Re:Victims of porn by Anonymous Coward · · Score: 0

    stuff it, troll

  41. Hmm by Anonymous Coward · · Score: 0
    People are saying we should just change one bit. Sure, that would change the hash (probably) but wouldn't it be a hella lot easier to just tar or zip at 0 compression? Encapsulating the file in some container format would change the hash easily, leaving the original file intact.

    I don't think those progs are going to de-tar files on the fly over the net... way too much work. Maybe at the client side... But then again, why would they de-tar/de-zip every file?

    1. Re:Hmm by spitzak · · Score: 1

      This seems to be the first intelligent post here.

      The idea as quoted is stupid. Steganography can accomplish exactly the same result and is probably a lot more reliable. This seems to be a proposal to technically-clueless legislators, something that sounds to them like it would work.

      Also, blocking content is stupid. If you do this, you have provided the person trying to violate your copyright with an easy test to see if they have modified the data enough to evade the test. Instead, the test should not be in any software on any users computer. You instead monitor the p2p with software which will identify copyrighted content, and use any tricks you can to identify the sender and receiver, and after collecting enough information on proven copyright violations, you hit them with a lawsuit.

      I am also amazed at how many clueless people here who think they mean some MD5 sum and "flip one bit to outwit it". They mean a fingerprint of a large area of the image at low frequency, extensively filtered just like compression algorithims do. It will sort of work for identical images. But inserting offset frames, concatenating two pictures, or adding black sections (or ads!) into the middle of movies would probably defeat it. It definately will if they are so stupid as to try to enforce filtering at the client end.

    2. Re:Hmm by da_reboot · · Score: 1

      I assume this is more than a worthless md5 sum: certainly in terms of the images that this guy is talking about it should be possible to steganographically hide a watermark in the image. If the p2p bots checked for this there might be a chance his scheme could work: some watermark techniques are apparently quite robust to re-encoding of the image, etc. Where all this falls down is that it'll be 5 seconds before some w4r3Z d00d releases a p2p client that just lies about having checked for the watermark It's simpler than that : A watermarked file has to come from a 'legitimate' source. If *I* put movies or songs up for sharing they won't be watermarked. Even if the original MPG2 or WAV was watermark, the MP3 or MPG4 file *I* generate won't be watermarked.

    3. Re:Hmm by PReDiToR · · Score: 1

      100% on the money.

      --

      Do not meddle in the affairs of geeks for they are subtle and quick to anger
    4. Re:Hmm by Anonymous Coward · · Score: 0

      But inserting offset frames, concatenating two pictures, or adding black sections (or ads!) into the middle of movies would probably defeat it.

      If it's well designed, it's implemented in three dimensions making it relatively resistant to that sort of stuff as well. Ads will probably still break it though (and should do so too - after all the content is noticeably different right?)

  42. Let's say you install the spyware... by YinYang69 · · Score: 3, Interesting
    If they use md5sum hashing, which the RIAA has already admitted to, all I have to do is change the comment entry in the ID3 tag of an Mp3 and I have a brand-new hash that they'll not be able to identify. That is unless they download it, test it for copyright (listening to it), and then add that hash to their md5sum DB.

    But I can change my ID3 tags all day. Can they match me (hypothetically, of course ;)) md5sum to ID3? I highly doubt it.

    1. Re:Let's say you install the spyware... by Anonymous Coward · · Score: 0

      And if their hashing algorithm strips headers and any other useless information from the file first?

  43. User hostile software... by hanssprudel · · Score: 4, Insightful

    This would end up working about as well Kazaa's user rating (or whatever it was called) thing. It had been out for how many days before people started showing up with their points maxed out? And it is worth noting that the second and third most common file sharing tools, dc++ and emule are both open source, so that anybody who feels like removing the controls can do so, and recompile.

    Peer to peer networks that control what people communicate are possible. As are ones that control who talks to whoom, that people really allow the uploads they purport to, etc etc. As is any software that acts against, rather than for, the person that is running it. We just need to get Palladium in place first. What are you waiting for Microsoft!!!

    1. Re:User hostile software... by savagedome · · Score: 2, Funny

      so that anybody who feels like removing the controls can do so, and recompile.
      Dude, seriously, if that is your definition of anybody, then... you've been reading slashdot too much :D
      People have been fighting over microsoft using IE as default online shopping link browser and you are talking recompiling to remove controls?

    2. Re:User hostile software... by hanssprudel · · Score: 2, Funny

      Break once, run anywhere.

    3. Re:User hostile software... by Stray7Xi · · Score: 1

      I don't think TC will hit home users for a long time for a simple reason. You can't upgrade individual components in Trusted Computers, and it requires you to get a new Monitor/Mouse/Keyboard (that support secure I/O, ie encryption) and possibly replace a significant amount of network infrastructure (Firewalls/NATS).. That means a large expense for most endusers. I'd believe the sky is falling before I'll believe The TCPA will stop P2P..

      BTW Palladium was renamed to NGSCB (I believe it's Next Gen Secure Computing Base)

    4. Re:User hostile software... by Hobbex · · Score: 1

      BTW Palladium was renamed to NGSCB (I believe it's Next Gen Secure Computing Base)

      I can just see the marketing department making that call: "Nah, Palladium is too complicated and difficult to sell, lets call it NGSCBHFWCCSNG instead!"

      More then any other action, the renaming betrays how underhanded and nasty MS attempt to launch this on consumers is. You give a product a nice sounding, easy to remember name, because you want to increase brand recognition. Why would you go from a good name to a ridiculously unpronouncable acronym?

      How about because you realize that the most likely thing people are going to hear about it is that it is bad, and you want as little brand recognition as possible so that you can use your monopoly to force it on people...

    5. Re:User hostile software... by Alsee · · Score: 1

      I don't think TC will hit home users for a long time

      Do not underestimate the threat, I think they want to start pushing Trusted machines within a year or two.

      it requires you to get a new Monitor/Mouse/Keyboard

      They intend to put Trusted Computers on the store shelves as a simple package deal. You buy a Trusted PC and it comes with all of the required Trusted hardware.

      You can't upgrade individual components in Trusted Computers

      Once you have a Trusted machine there's no reason you can't toss out your old Trusted parts and stick in new Trusted parts.

      possibly replace a significant amount of network infrastructure (Firewalls/NATS)

      The eventually want to replace everything with Trusted hardware, but you can attach a Trusted machine to any ordinary firewall and NAT etc right now. Stuff gets encrypted/decrypted on the Trusted machine and the data can pass over an ordinary unTrusted internet connection just fine.

      NGSCB

      Microsoft likes to pronounce that as ingscub, but I think nagscab is much more appropriate.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  44. question by sewagemaster · · Score: 1

    >>...porn publisher Titan Media reported to Congress that...

    were the porn people part of the MPAA or is it just the mainstream hollywood movies?

  45. renaming files? by Anonymous Coward · · Score: 0

    maybe just rename the *.avi file to sumething
    like *.titan.porn.video to get around the
    water/mark hash detector ...

    if (ah! IF!) the spyware watermark/hash detector
    is programmed to search in *.avi *.mp3 etc. files
    only that is ...

    you can host *.mp3 on free tripod website as
    long as you rename the file to sumething like
    *.mpthree.

  46. This won't work by Omnifarious · · Score: 2, Interesting

    There are systems by which the network cannot possibly detect whether material travelling over it is under copyright or not. Freenet is an example. Everything that goes over the network is encrypted. Nodes may not necessarily have decryption keys. There is then no way for a node to recognize a particular work.

    1. Re:This won't work by Kent+Recal · · Score: 1

      Yes, freenet and friends exist and are under active developement.
      And there are more promising concepts waiting to be explored.
      Seems like the *IAA can only lose if they intend to enter an arms race with academia.

    2. Re:This won't work by Omnifarious · · Score: 1

      And, my own project, CAKE. though mine is only peripherally related actually. :-) I just like mentioning it when discussion gets near problems it will help to solve (or at least make a lot better).

  47. Porn Will flow by slashblog · · Score: 0

    Until someone can combine face recognition and hashing algorithm on the client side.

    --


    ---
    Error 404: WMD Not Found
  48. Filter? Of course by surprise_audit · · Score: 1
    I'd be very surprised if the various P2P clients couldn't filter out files listed on some master list. The problem is, though, what do you filter on? Some mystical hash of the contents? Changing one byte would change the hash without seriously damaging the content...

    More to the point - a ripped file probably wouldn't match the officially distributed checksum anyway, and if you use some kind of "more or less matches" algorithm in the file deletion robot/spyware, someone will eventually lose something vital.

  49. Exactly. by FrankoBoy · · Score: 1

    I've always wondered why copyrights conglomerates like the RIAA and the MPAA put millions into attacking the most popular network ( once Napster, now Kazaa ) ; people will just switch to other networks if they can't go to Kazaa. Gnutella ? OpenFT ? BitTorrent ? Name it.

    Information wants to be free, suckas. Get it into your head.

    1. Re:Exactly. by nolife · · Score: 1

      That's probably why 90% of alt.binaries. is still around and not the source of RIAA/MPAA/BSA invasion. They don't want to clue in the newbies that it is there and kicking. It seems to me, usenet would be an easy target for them. I plan on milking out usenet until it dies.

      --
      Bad boys rape our young girls but Violet gives willingly.
  50. I don't know about you guys..... by zippity8 · · Score: 1

    But I think that this is a GREAT idea!

    I mean...Everyone knows that there's a billion ways that each file on P2P networks will have a different hash (different encoding, a ID text file, or even just ending the file 1 second early). Regardless, this hash will differ, and they won't be able to filter out what's out there.

    But -- what about the garbage taht the RIAA is putting on kazaa? I haven't tested this theory - but do teh RIAA files all have the same hash? Would it, theoretically, be possible to block the tainted files using this same idea? It would just mean that someone would haev to keep a database of RIAA mp3 hashes.

  51. time will tell by bbowers · · Score: 1, Interesting

    So how long before the come up with a solution that actually works? If they do there will be ways around it of couse... our file sharing went down at school once for a few days and all you had to do was walk down the halls in the dorms and yell asking if anyone had such and such software/movies/music/porn, someone would stick their head out the door and you'd go burn it or run a cable down the hall

    --
    Even a stopped clock gives the right time twice a day.
  52. News for Nerds, Stuff that Matters by Thud457 · · Score: 0, Offtopic
    Slashdot once again scooped by metafilter:

    " Complaint to nic.cx results in goatse.cx being suspended. Obligatory online petition is started. Screams and sobbing are heard on a regular basis on Slashdot. Links are SFW, but any investigation further may not be. This is truly a dark time for the internet. "

    This deserves it's own story under YRO. Whether the slashdot editurs like it or not, goatse.cx is (was?) a high-profile website on many online forums. The fact that they ran afoul of their TOS, and whether those TOS were changed specifically to shutdown goatse.cx should be of interest to many in the slashdot community.

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

    1. Re:News for Nerds, Stuff that Matters by TheOnlyCoolTim · · Score: 1

      The editors are in denial. They ain't gonna post that story.

      Tim

      --
      Omnia vestra castrorum habetur nobis.
    2. Re:News for Nerds, Stuff that Matters by Anonymous Coward · · Score: 1, Funny
      The editors are in denial. They ain't gonna post that story.

      Yeah. I've heard that that happens sometimes when you lose someone very dear and close to you.

      My thoughts are with the editors.

    3. Re:News for Nerds, Stuff that Matters by Rhubarb+Crumble · · Score: 4, Funny
      This deserves it's own story under YRO.

      Your Rectum Online?

    4. Re:News for Nerds, Stuff that Matters by tomhudson · · Score: 1

      Thying to stop P2P is as hopeless as trying to stop the goatse.cx site. Sure, they got the main one, but now there are so many others, and they don't even show up as links to goatse.cx. Or maybe they'll use this for content filtering...

    5. Re:News for Nerds, Stuff that Matters by Anonymous Coward · · Score: 0

      At least we still have Tub Girl

    6. Re:News for Nerds, Stuff that Matters by phazei · · Score: 1

      Sorry, whomever holds .cx removed goatse from it last week... I can't find the link to the article though.

  53. Hmm by adrianbaugh · · Score: 3, Insightful

    I assume this is more than a worthless md5 sum: certainly in terms of the images that this guy is talking about it should be possible to steganographically hide a watermark in the image. If the p2p bots checked for this there might be a chance his scheme could work: some watermark techniques are apparently quite robust to re-encoding of the image, etc. Where all this falls down is that it'll be 5 seconds before some w4r3Z d00d releases a p2p client that just lies about having checked for the watermark and allows distribution regardless. That's the thing about the p2p model: there is no central server where the running code can be verified - to implement any kind of workable security model you have to assume that everyone on the network is going to be trying to defeat it and design it so that it's core to the whole application - unless the security validates, and other machines can prove to themselves that it validates on your machine, no transfer should work. I suspect something along those lines is possible albeit very difficult, but the fact that that kind of application isn't what p2p users want would still render the entire thing useless. Nobody would use such an app.

    --
    "'I pass the test,' she said. 'I will diminish, and go into the West, and remain Galadriel.'"
    - JRR Tolkien.
  54. one byte by vlad_petric · · Score: 1
    Change it (e.g. add 1), and the whole checksum is completely different.

    Sure, you might lose a couple of frames (at worst), but who cares ?

    --

    The Raven

    1. Re:one byte by Anonymous Coward · · Score: 0

      > a couple of frames.

      Sometimes the only decent thing in an entire movie fits in a couple of frames.

      Basic Instinct springs to mind...

    2. Re:one byte by WebMasterJoe · · Score: 1
      Change it (e.g. add 1), and the whole checksum is completely different.

      Sure, you might lose a couple of frames (at worst), but who cares ?
      This sounds like the start of a great idea, but I'd say we should add more than one byte - 1024 bytes should be effective enough, and if my math is correct, we'd have 1.1e2466 different possible checksums for that file. It will be tough to filter out a file that has that many permutations, each one being invisible to the human eye.
      --
      I really hate signatures, but go to my website.
  55. Will AD-Aware become a circumvention device? by Ilex · · Score: 4, Interesting

    detect copyrighted works and then filter them with the "spyware" installed

    So under the DMCA AD-Aware and all other spyware removal tools will be illegal as they could be used to circumvent DRM.

    Sounds like a ploy by the pr0n industry to install more crapware on our pc's.

    Come to think of it *nix will be illegal too as their spyware will only run under wind0ze.

    1. Re:Will AD-Aware become a circumvention device? by sm0yby · · Score: 1

      So everyone will be required to have a working Wine installation? Maybe I had better get to work on mine, I have been trying for some time and still haven't managed to get a fairly basic VB application to work...

      --
      Been modded interesting, insightful and funny. Why does real life have to be so different?
  56. usefulness by Anonymous Coward · · Score: 0
    Sure you can hash a file, but once something is changed, it won't match the official hash. Say I rip a song at an odd bit rate, that would definitely change the hash, and would easily get around this stupid DRM bullshit. It's just great when idiot business guys with absolutely no clue try to make a statement about technology. The best solution so far is still iTunes and iPod.

    business men are just a bunch of useless greedy asswipes, who really can't do shit. Instead they indenture programmers to make something they can sell and steal. The whole non-compete BS should be banned as retarded and illegal.

  57. Problem. by Raven42rac · · Score: 1

    The only problem with hashing is that it is not unique. You and I could rip the same song, on the same platform, with the same settings, and get the same hash.

    --
    I hate sigs.
  58. Maybe a good idea! (for them) by Sklivvz · · Score: 1

    Think about it, these people sell mostly digital content, as opposed to cds or dvds. So what do they do? First they separate two issue: one is the swapping of their original content (the original .avi). This can be obtained as such:
    - Make a master list of hashes
    - Before downloading or sharing, a p2p app has to check against this list (send the hash, get back response).
    All p2p apps should be required by law (in their view) to include this check code. At this point, p2p distribution of 1:1 copies of their works is effectively crippled.
    Secondly I'm sure modification of original art is not permitted by copyright law, so they can go after whoever does it and/or add new hashes to the list.
    It does not solve the problem, but it sure makes it a better case for them in court and it does not bother the legitimate end user with DRM and authchecks.

  59. Well... by cableshaft · · Score: 1

    Goatse.cx lives on, kinda, under the new Goat.cx, albeit with a disclaimer immediately above the image.

    --
    Creator of the popular web game Proximity
  60. Spyware by purduephotog · · Score: 4, Informative

    This might sound a bit familiar for anyone that's had to repair a spyware infected computer.
    Personally, I've done 4 in 2 days. And I can tell you I'm so sick of it it's not even funny.
    One was so screwed up the HOSTS file was infected with encrypted javascript. Took me 3 hours just to knock that bastard down to the point I could get explorer open in under 10 minutes.
    Special thanks to everyone that fights it by writing those removers... god they are a lifesaver.

    1. Re:Spyware by asquared256 · · Score: 1

      Isn't the HOSTS file just a list of hostnames/IP addresses? Wouldn't any javascript in that file be worthless since it wouldn't be interpreted as Javascript? If anything in there can possibly be interpreted as javascript, there are some serious bugs in Windows, or in Internet Explorer.

    2. Re:Spyware by burns210 · · Score: 1

      any particular apps you used to clean the system out? I am never sure which to use, or where to start sometimes... I have heard adaware adds it's own spyware, and other such rumors... So i am a little sceptical of all the clean-your-system programs i see on the net.

    3. Re:Spyware by swillden · · Score: 1

      One was so screwed up the HOSTS file was infected with encrypted javascript.

      Did you have to dephase the photonic couplers first? By how many parsecs?

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    4. Re:Spyware by Ossur · · Score: 1

      Adaware seems to not be maintained anymore.

      Personally, i use spybot.

    5. Re:Spyware by Scutter · · Score: 1

      Adaware seems to not be maintained anymore

      How do you figure? Ad-Aware 6 came out at the end of January 2003 and has had at least three point releases since then. The most recent signature update I have from them is 1/10/2004. Maybe you're not looking in the right place.

      --

      "Tell me doctor, with all of your defenses, are there any provisions for an attack by killer bees?"
    6. Re:Spyware by purduephotog · · Score: 1

      This is a list of the files I've downloaded that worked for me.

      hijackthis.zip
      spybotsd12.exe
      trjsetup.exe

      If you search for those names that should help.

  61. They'll put spyware in my computer... by Walkiry · · Score: 3, Funny

    when they pry the delete key out of my cold, dead finger.

    Not that I watch porn of course. Not me, nope, not one bit. None.

    --
    ---- Take the Space Quiz!
    1. Re:They'll put spyware in my computer... by Lord_Dweomer · · Score: 1
      " when they pry the delete key out of my cold, dead finger. Not that I watch porn of course. Not me, nope, not one bit. None."

      I think you mispelled warm and sticky.

      --
      Buy Steampunk Clothing Online!
  62. Dumb idea by 77Punker · · Score: 2, Informative

    Totally different files can end up with the same hashes. There goes the whole system.

    1. Re:Dumb idea by foniksonik · · Score: 1

      Actually as far as I know using an MD5 hash (128 bit) for every file in the known digital universe would give you something like 10 to -9 chance of a collision.

      Using a 256 bit hash would get you 10 to -17 chance of collision.

      e to -m(m-1)/2n where m items are drawn from a pool of n.

      from this presentation:

      http://www.cs.umd.edu/~hollings/talks/ssr97/ssr9 7. pdf

      "Using Content Derived Names for Configuration Management"

      --
      A fool throws a stone into a well and a thousand sages can not remove it.
  63. Re:Victims of porn by Vinnie_333 · · Score: 4, Funny

    I didn't have time to read your entire post, but from what I could tell, it had something to do with porn. Right on brother! I love porn, too!

    --

    "We shall party like the Greeks of old! You know the ones I mean." - HedonismBot
  64. 191 countries are laughing at you by Anonymous Coward · · Score: 0


    yeah you keep making your laws, that will stop it !

    i dont think your millionaires congress club has a grip on reality never mind relating to the common man

  65. Congress protects pornograghy industry by howlatthemoon · · Score: 1

    If you could get this headline published, it really would kill the effort. A few people calling in to talkshows with congress people asking them why they were considering measures to protect the producers of pornography would have them running away like frightened children. I could see this really causing trouble for Fox News, How could they not report on the sleaziness of a porn story with out hurting their ultra-right wing congress buddies. Bill OReilley's might explode from the internal conflict, MUST REPORT SLEASY STORY -- CAN'T HURT REPUBLICANS -- AHHHHH! Oh, how am I kidding he'd just blame it on liberals.

  66. Re:Victims of porn by Anonymous Coward · · Score: 5, Funny

    Guys like this make me jealous! If I look at porn, it's just me and a picture--big deal--it's forgotten in a moment.
    But Xsters--wow. It's me, a picture, satan and and a crowd of slathering demons, and god hisself, heavenly nostrils flared in anger, while a chorus fiery-sword-wielding seraphs chorus 'for shame, for shame.'
    I just don't get that kind of mileage out of it.

  67. How stupid are they? by Anonymous Coward · · Score: 0

    Is there really a person in this planet stupid enough to _STILL_ believe there's something you can do to prevent copying?

    Un-freaking believable. It doesn't matter if you have some hidden watermarks or whatever, all I need to do is to crypt the package with my RSA key. There's no way in hell anyone - not to mention any computer program could know what's inside!

    1. Re:How stupid are they? by Patrik_AKA_RedX · · Score: 2, Funny

      1 make copy protection scheme
      2 sell to many suck^H^H^H^H costumers.
      3 have it cracked
      4 goto 1

    2. Re:How stupid are they? by sm0yby · · Score: 1

      delete 4
      4 lobby "politicians":rem"will outlaw line 3"
      5 if int(rnd(1))=1 then goto 4
      6 goto 1

      --
      Been modded interesting, insightful and funny. Why does real life have to be so different?
  68. nuclear sub crashed in the mediterranean? by Anonymous Coward · · Score: 0

    That was a most interesting story, but who the hell is Mr. Brownfield?

    1. Re:nuclear sub crashed in the mediterranean? by Anonymous Coward · · Score: 0

      He's an asshole junior officer who deserves to get fucked in the ass repetedly by a shotgun.

      Also, he was on the bridge when the grounding happened.

    2. Re:nuclear sub crashed in the mediterranean? by Anonymous Coward · · Score: 0
      You wouldn't be some of his commanding officers, now would you?

      I'd be pissed too if I had my career wrecked by an incompetent subordinate.

  69. Would that be the spyware... by luckytroll · · Score: 1

    ... That I religiously remove, subvert, and hunt for with a passion and paranoia that makes the germ-fearing people from those cleaning-product commercials seem like dogfood munching toddlers?

    I wonder if future antiviral systems will begin to be modelled more on the mammalian immune system, which seems to work reasonably well, considering the constant barrage of invaders we deal with daily.

  70. Altnet Patent by Sanity · · Score: 1

    Ah, using hashes to identify files, isn't that patented by that great P2P innovator, Altnet?

  71. MOD PARENT UP!! INSIGHTFUL!! by Anonymous Coward · · Score: 0

    Mod up!

  72. And what if it _is_ possible in one scenario ? by rcastro0 · · Score: 4, Insightful

    IANAL, but taking off the tech hat, and trying to think from a legal standpoint...What would it mean if they can prove to the judge that there is a P2P scenario in which nearly foolproof copyrighted file identification exists ?

    Would that then ruin the argument that "P2P should not be shut down because there are plenty of legitimate uses" by countering with "there is an equally efficient P2P architecture that brings all the same functionality to legitimate uses without hurting copyright law" ?

    By doing that, wouldn't they change the issue of whether or not to allow P2P into one of which P2P can be allowed ? (or what is required of a legal P2P ?).

    Just wondering...

    --
    Quem a paca cara compra, paca cara pagará.
  73. Re:Victims of porn by Patrik_AKA_RedX · · Score: 1

    After reading this I'm really feel the urge to get some porn, drink beer, do drugs, have sex with some one elses wife and, well, all those other fun things the bible lovers say you can't.

    And why not? Since I'm not a believer I'm going to be sent to hell anyway, so I'm going to have as much fun as I can here.

  74. Could work by benking · · Score: 1

    Could work as an after the fact tool. If the rules of the P2P network in question where such that copyrighted material, if identified, could be prevented from being listed, or Downloaded. I stress that the network would have to set up in that way and inforrced by the Network Protocal it self. And not by some spyware/virus that would search and destroy personal files.

    FastTrack might be able to enforce such a policy because they have much more control over there network, and more importantly there clients but not Gnutella.

    This could never work as a tool to keep content OFF P2P networks.

  75. Brint it on! by Anonymous Coward · · Score: 0

    I say bring it on. Every small thing that tries to stop the p2p networks will only make them stronger.
    Anyone that does not realize this must've been hidden under a rock for a long time.

    I'm not happy until the p2p networks are completely anonymous, fully encrypted and has just about everything a person could be looking for.

    The coming generations will see this as the default behaviour and will probably not stockpile mainstream digital stuff like some people are now.

    RIAA and their lackeys will push all their latest releases on to p2p networks, not whole albums, but a couple of songs. Mark my words.

  76. Hashes aren't unique by nuggz · · Score: 1

    A hash doesn't identify a unique work, an unlimited number of files could share the same hash value.

    I can't imagine the amount of fun when people start harrassing companies by generating files with the same hashes.

    1. Re:Hashes aren't unique by warrax_666 · · Score: 2, Informative
      by generating files with the same hashes.

      Bzzt! Thanks for playing. By definition a secure hash is one where it is computationally intractable to generate data which hashes to a particular (chosen) value.
      --
      HAND.
    2. Re:Hashes aren't unique by nuggz · · Score: 1

      Yawn
      First do you think they will use a secure hash?

      Second I am referring to any collision, not that of a particular file.

      With a sufficiently large data set, getting one hash match becomes likely.
      The amount of copywritten material is a VERY large data set. I am sure somewhere somehow a few of those hashes will match those of my own few thousand files.

    3. Re:Hashes aren't unique by AnotherBlackHat · · Score: 1

      First do you think they will use a secure hash?

      Yes I do. Infact, I think they will use SHA1.


      Second I am referring to any collision, not that of a particular file.


      Yes, that's known as the birthday attack, and it means that instead of needing to produce 1,461,501,637,330,902,918,203,684,832,716,283,019, 655,932,542,976 files to get a collision, you only need to produce
      1,208,925,819,614,629,174,706,176

      Ok, that's smaller than the number of molecules in a can of soda, but it's still a lot more than you're going to hack out over the weekend.

      -- this is not a .sig
    4. Re:Hashes aren't unique by Retric · · Score: 1

      You realy don't get it say your hash is 1024 bits. thus it has 2^1024 posible combinations. But your blocking 50,000,000 files. (with 50 GB hash table) well there is a 1 in 2^1024 chance that your first 2 files have the same hash but with 3 files it's (1 - ( 1 / ( 2 ^ 1024) ) )* (1 - ( 1 / ( 2 ^ 1024 ) ) ) with 4 files it's (1 - ( 1 / ( 2 ^ 1024) ) )* (1 - ( 1 / ( 2 ^ 1024 ) ) ) * (1 - ( 3 / ( 2 ^ 1024) ) ) ... aka multiplicative sum of : 1 - ( N / ( 2 ^ 1024 ) ) with N form 1 to 50,000,000 which is not 0. and it's even worse when you think of compareing the next set of 50,000,000 files to hash database (math is simpler though) (1 - (50,000,000 / ( 2 ^ 1025 ) ^ 50,000,000 ok ok yea that's a vary small number but it's still not 0. While I will leave you to the math on that one in a 32 bit scheam you have a 4.55% of having 2 or more identical hases when storing 20,000 files or a 9% chance any of 20,000 random files uploaded have the same hash as the 20,000 hases your compareing them 2. with 50,000,000 files in a database and 50,000,000 new files to upload you end up with only a one in 2.5 * ( 10 ^ 15) / (2 ^ 128) or 1 in 10^24 chance of a problem. which IMO would work just fine. But your still talking about takeing a hash of the whole file and compareing it to a database of 6.4 gigs of hashes. Which as you might guess would be vary quick... umm yea.

    5. Re:Hashes aren't unique by Retric · · Score: 1

      Sorry on second thought I think you do get it. Your just never said useing a fairly large hash would get rid of the problems for a reasonably sized table. And useing a sorted list of hases it would not be computationaly expencive to check though a sorted hash table. keep a list of hash 4k hash files and the start and end value to that file and your down to basicly the time it takes to move the HDD read head to a sector and read a value before you can upload the file. So ok yea you could do it but it would still not work becose you can't force people to use an identical hash for any given sorce file of the type where lossy compression is acseptable.

  77. so true by muyuubyou · · Score: 1

    Do you know what does the fingerprint from a straight ISO file and the one from the same file zipped, gzipped or split for more convenient pirating? or with a frame inserted at the beginnig reading "brought to you by yetAnotherScriptKiddo"?

    Yep you're right. Nothing.

    Will this people get a clue some day?

  78. Technically... by thdexter · · Score: 1

    The best way to look for copyrighted information, and check whether it's being shared, is to see if it's available. If it is then it's copyrighted. Everything ever created is copyrighted, we're looking for things that are copyrighted without the copyright holder's permission.

    --
    I'm on a road shaped like a figure eight; I'm going nowhere but I'm guaranteed to be late.
  79. It would never work by SealTit · · Score: 1

    Anyone familiar with downloading albums from p2p networks knows that it is just as easy to download the rar or zip archive of a new release as it is to get the individual mp3s. Can they tell that the rar contains copyrighted material by checking the hash? NO! They can't. Even if they attemped to create a library of illegal rars to block, just change the filename and insert a txt file into the archive to circumvent the DRM.

    Oh, nevermind, that would be breaking the DMCA, I guess they got us there.

  80. A better idea by phorm · · Score: 1

    How about they create a "service" that indexes the names of a pr0n item's creator, as well the names of the prominent "actors/actresses."

    When I find something I like, I could find more items with the same "actress" and perhaps make a purchase. Hell, I already know some places that put their logo on small clips for distribution... I'm guess the reason that pr0n isn't so bashed by industry as movies/music is that they probably do noticed they are pulling in some profit from it (site subscriptions, etc).

  81. Do you really mean what you wrote? by lurker412 · · Score: 4, Insightful
    The recent decision in a Washington DC federal court in the RIAA vs. SBC case said that ISPs are not responsible for copyright infringement if they are merely conduits, meaning that they do not host the stuff that is going across their wires.

    Your company is free to establish whatever policies it chooses on your internal network. But I think it is very dangerous to suggest that we create laws that require the providers of public networks to filter content. Have you really considered the implications for free speech and privacy? Who controls the list of banned materials? Who controls the controllers?

    1. Re:Do you really mean what you wrote? by petabyte · · Score: 1

      If you read what I wrote you'd notice that I didn't advocate ISP liablity for that which passes through their wires. I merely meant to point out it is possible that it is possible such requirements could come in the future.

      Personally, thats a little bit too much big brother for me but then again most of what the government has done lately is. It wouldn't suprise me.

  82. it will never ever work... by Anonymous Coward · · Score: 0

    "fingerprinting" (aka "hashing") to detect copyrighted works and then filter them with the "spyware" installed on all nodes in the network."

    Ok, open movie, insert 1 second of black frames, save movie. Hash changes and now it matches beauty and the beast, or someone's home movie which is legal to share.

    Try again sammy.

    l8,
    AC

  83. And the false assumption is... by OmniGeek · · Score: 2, Insightful

    "...all nodes on the network."
    Haven't we seen a plethora of P2P protocols developed precisely because someone we don't trust controls the older protocol? The reality check on this clearly bounces. Even if Microsoft, er, someone did manage to grab a monopoly on the US network's P2P population, which is VERY unlikely, the REST of the world would definitely not play along with those American imperialists. Scheme fails, game over.

    --

    "My strength is as the strength of ten men, for I am wired to the eyeballs on espresso."
  84. Re:Victims of porn by Anonymous Coward · · Score: 0

    The enemy (Satan) picks his moments very carefully. I joined the US Army right from high school.

    Hey if Satan is the enemy you somewhat picked the wrong Army to enlist to... Or did you mean Salvation Army?

    Seriously though, you're just one of those screamers I never pay attention to. (Or maybe this is a "clever" astroturf by a church for more members and income, dunno about that.) Your rant gives some interesting grep results and that's about all there is to it.

    Just leave peoples' religions alone. (Says a Christian who understands what "nobody else's business", "privacy" and "real respect for fellow human beings" mean... You don't.)

  85. So... by NanoGator · · Score: 1

    ... will their 'copyright filter' detect that I have a VHS copy of a movie and simply want a digital copy to watch on my laptop during a business trip?

    --
    "Derp de derp."
    1. Re:So... by glenstar · · Score: 1
      I am pretty sure that fair use does not extend to others. Look at the mp3.com case for starters.

      Being in the digital music distribution business, I just recently was told by counsel that we need to be able to prove 2 things if we are ever audited by the RIAA and/or the copyright holder: 1) that my firm has to be able to prove that *we* have appropriate permission to distribute the work in all ways we offer, and, 2) that the *customer* has the rights to access the files (we are talking about something roughly synonymous with the original mp3.com). Since the only content the user is allowed to keep in their storage are files they have purchased from us, we can fairly easily control it. Mp3.com got in trouble because they made no attempt to verify that the person storing the song on their servers had the legal rights to do so... in fact, the court suggested that mp3.com have users mail them the original CD as proof... ha ha ha.

  86. MusicBrainz by Aliencow · · Score: 1

    MusicBrainz works surprisingly well to identify music files. I don't know how it works exactly, but it surely isn't just a simple hash, because files I ripped myself were identified by MusicBrainz. Of course they could try something like that for movies...until everyone switches to a different network 2 days later.

  87. BringBackThePorn.com by jmlyle · · Score: 3, Funny

    If they took all the porn off the internet, there would only be one website left, and that would be bringbacktheporn.com.

    -"Scrubs"

    --
    I have misplaced my pants.
  88. Filter Away! by Xesdeeni · · Score: 2, Insightful

    What a bunch of morons. Sure, maybe with enough computing power you can detect a copyrighted work...maybe. But so what? Who's going to download P2P software, or use a network with this type of filtering in place? Only people who wouldn't have stolen stuff in the first place.

    Besides, P2P users will just scramble the content in some ridiculously simple way that will invalidate the filters and they'll have to go back to square one. Ig-pay atin-lay anyone?

    Xesdeeni

    1. Re:Filter Away! by glenstar · · Score: 1
      Who's going to download P2P software, or use a network with this type of filtering in place? Only people who wouldn't have stolen stuff in the first place.

      That sound you just heard was the point whooshing passed your head.

      The point is to scare the copyright thieves into *not* providing content. The average joe user has already been scared by the lawsuits, so the RIAA/MPAA/others need to now go after the people who are illegally distributing the content.

  89. Re:Victims of porn by jmlyle · · Score: 1

    >> I WANTED A RADICAL MOVEMENT OF CHRIST

    I am offended by your scatological references, you insensitive clod!

    --
    I have misplaced my pants.
  90. Re:Victims of porn by TechBCEternity · · Score: 4, Insightful

    I don't think he's trolling here, the human mind has a failing in that it likes to form habits. You can see that with non physically addicting things like chronic or in this case p0rn. Sure you might live a healthy life with it.

    but if you're addicted you'd probably be better off without. It's such a marketting gimic to disregard the posibilities of addiction. Then there's the fact that he posts anonymously, how hard is it to sign up.

    ** back on topic ** There's no way the porn industry could do anything about "copyrighted" material being distributed cause all it takes is a slight change in the archive to change the hash and blow the system away. The only way it would work is if the porn industry started setting up tons of high traffic nodes distributing all sorts of stuff just to block some porn on some searchs, but they'd just get blocked anyways.

  91. packing? by muffen · · Score: 1

    I've seen tons of post suggesting that a few bytes changed in the file will get around the hashing.

    First of all, I don't think this is necessarly true. They never say how they will hash the file... for all we know the hash could be based on every 100th byte in the file.

    Secondly, how many KaZzA users know how to change bytes in a file using a hexeditor? How many KaZzA users know what a hexeditor is?

    I think that packing is the best way of getting around hashing. Zip, Rar, Ace etc etc ... just use a packer and the hash is useless...

  92. Another "Duh" Fallacy by lamona · · Score: 1

    It's hard to believe that the folks at Kazaa (and DRMWatch) don't understand this, but essentially EVERYTHING on the net is copyrighted, at least according to U.S. law. Since 1976, copyright is automatically accorded to any work that is fixed. What that means is if you've written it down, recorded it, or typed it into a file, it is covered by copyright, whether you intend for that to be the case or not. And it stays copyrighted until 70 years after your death, whether you want it to or not, and only then does it enter the public domain.

    What I assume that Kazaa means is that they will try to detect files that represent songs owned by recording companies and others who assert that they do not want their songs traded. Indies can just sit back and let your copyrighted files be traded by fans without fussing. But it's not a question of copyright, it's an assertion of ownership and a desire to enforce copyrights. And changing one frame or a few bits doesn't affect copyright, even though it could make automated detection difficult.

    --
    I just read /. for the amusing .sigs
  93. Two things.. by ProtonMotiveForce · · Score: 1

    First, this is possible and these people have (duh) thought of people slightly changing the hash.

    You could go one of several ways. One (as another poster pointed out) is to look at the accoustic properties. Treat the file as analog music, and do some fancy analysis such that even if you change the bits it'll be recognizable (barring complete mangling, but who wants mangled music?). You could also generate multiple hashes and store them on a server and use challenge/response to validate hashes sampled at random points in the file. There are other solutions that will work "well enough". They don't need 100% accuracy.

    Next, why are people so adverse to DRM and copyright ownership? If you don't like the music or the prices vote with your wallet. "I only steal because it's crappy anyway and I don't want to pay" is not a valid defense for illegally copying other people's copyrighted property.

  94. Can P2P Filter Copyrighted Content? by The+Gline · · Score: 0

    Um --

    no?

    --
    Honorary Member of Jackie Chan's Kung Fu Process Servers
  95. Proper Grammar Takes A Holiday by Snork+Asaurus · · Score: 1
    Los Gatos-based Audible Magic Corp. has created a copyright filtering system that is currently used by CD pressing plants and a small college town in Finland which chief executive Vince Ikezoye said can distinguish between different versions of the same song.

    It takes a small college town in Finland to distinguish between different versions of the same song? What is their method? Perhaps they all go down to the local pub, form two teams, write out the bit patterns long hand, shout back and forth and consume many beers:

    Team A: "Beet 1,204,933 - Uena!"

    Team B: "Yah!"

    Team A: "Beet 1,204,934 - Uena!"

    Team B: "Yah!"

    Team A: "Beet 1,204,935 - Zaero!"

    Team B: "Yah!"

    Team A: "Beet 1,204,936 - Zaero!"

    Team B: "Neigh!"

    Team A: "Beet 1,204,936 - Zaero!"

    Team B: "Neigh!"

    Team A" "Uuuurrrpp!"

    --
    Sigs are bad for your health.
  96. censorship as damage by TheSHAD0W · · Score: 2, Insightful

    "The internet treats censorship as damage, and routes around it."

    Lots of MP3s were shared via FTP in the past, until the RIAA began a campaign to root out and shut down pirate MP3 servers. Then people jumped to Napster, but were eventually frustrated first by the forced filtering of some searches and then the service's discontinuation. Now supernode-based P2P networks like Kazaa are being used, and the central company can't be sued Napster-style because they never see any search data. When they are forced to change their code to allow searches and data to be filtered, users will jump to another service designed to avoid the law.

    I've said it before and I'll say it again. Short of locking down every computer in the world, there is no way of preventing the digital trading of copies of information. Entities like the RIAA, MPAA and MPA know this. They may try having everything locked down via Palladium or something similar, but knowing they may not succeed, they are trying to fight a holding action, to keep the cash flowing in as long as is possible.

    The music and movie industries didn't exist a hundred years ago; I sincerely doubt they'll exist a hundred years from now, no matter how hard they try.

  97. Re:Victims of porn by Anonymous Coward · · Score: 1, Funny

    You are all of you deceived. Jesus, as "it" was known IS the root of all evil. You gave yourself to evil.

    Satan and Lucifer? (not the same being, you should know) They were in the right place at the wrong time. They're benevolent. They are still around, and the time will come; they will be seen. And the army of Yahweh

    The so-called anti-christ will be the true messiah, and he will be backed by Lucifer and Satan, and the rest of the seraphim.

    You and your kin have fallen to the ploy of evil. This dosen't mean that you will burn in hell; nay such a place does not exist, except in thine own mind.

  98. Freedom by Anonymous Coward · · Score: 0

    They can take our freedom, but they can never take away our porn!

  99. Re:undercut by Skavookie · · Score: 1

    Someone selling an overpriced good will be undercut only if there are other providers of the good. Yes, other people can make music, but they can't compete with the RIAA labels for two reasons. One is that the RIAA labels are really selling characters rather than the music itself. The value of most pop music is in who makes it, not what it is. Of course, this is an absurd situation, but since when has any of this not been absurd? Second, the RIAA seems to be quite effective at stiffling any sort of competition. Other people can make music, but can they make studio quality recordings? Can they distribute that music effectively? Can they sell it or get people to buy merchandise or go to concerts? They can sometimes do so to some extent, but not very effectively. Certainly not effectively enough to compete with the RIAA.

  100. My thoughts.. by Pinky · · Score: 1

    The thing is, in order for clients to filter their songs you need to have the co-operation of that client. If you have an open network protocol then any client can get around that problem by writing their own client. Open p2p networks can never trust their clients. It's really quite annoying actually. With kaazaaaaa, from what I remember, they have safeguards in place to stop just any old client from connecting to their networks. I believe their network protocols are encrypted and undocumented for a start.

    As for filtering songs by hash value, no this obviously won't work. Change one bit and you have a different song. However, if it's possible to create a filter that can tell a piece of spam from a legit email then it should be possible to tell that two songs are the same even if there is multiple bits different. I'm not sure of the kind of crazy computation overhead involved, though. Calculating an MD5 hash ishard enough ;-) ... Not to mention the fact you'd probably need a central server to authenticate the keys which would introduce a central point of failure in an otherwise distributed system..

  101. Helllooooo creeping fascism. by vkg · · Score: 1

    This is actually really, really, really dangerous, and here's why.

    In theory:

    The base case, System One, will use fingerprinting like TunePrint to check for copyright infringement. If it matches the database, pull it off the stream.

    PROBLEM: suppose somebody released an important piece of free speech which government wanted to stifle... add it the the copyright database, it vanishes.

    PROBLEM: suppose I encrypt my illegal music? Now it doesn't match the tuneprint database any more. Quickly the system becomes useless.

    So now SYSTEM 2 is announced: in system two, tuneprint is used in the other mode - only things which are in the database as legitimate to copy are permitted. I.e. you can't record something and move it on othe network without registering the work first. And you need a frickin' license to publish.

    Oh, and encrypted work can't be moved around, so you have no privacy.

    PROBLEM: this would suit those Patriot Act Loving Bastards a little too well.

    the civil liberties and free speech implications of these kinds of on-the-wire filtering schemes are horrendous. kill them before they take hold

    1. Re:Helllooooo creeping fascism. by Little+Brother · · Score: 1
      I agree. However, the best way to make sure these draconian measures are never put in place, is to make sure there is no push for them in the first place. The most effective way to do this would be for everyone to cease illegal distribution of copyrighted materials.

      Ask yourself sometimes, does downloading your MP3 for free justify giving ammunition to the constitution-destroying Big Brother wannabes that write our laws.

      NO! I don't think they should abridge our rights because of illegal uses of those rights. But I realize they probably will, or at least try to, and frankly, I think the pay-per-download systems are fairly priced. If I want to listen on my Linux Box, I burn the songs to CD-audio (I might or might not later rip the CD to mp3). If everyone does this with copyrighted material (or at least the big names the record companies actualy care about) there will be no "ligitimate" reason to censor P2P and it will be easier to fight their attempts to do so.

      Just a little food for thought,

      --

      Little Brother, watching the watchers

  102. meatspace problem by cgenman · · Score: 1

    Don't forget the volume of people required to generated that volume of fingerprints. If you have a program running around deciding which files to ban by hash, then you just have a name-based filter. If you pay someone to run around downloading songs and deciding that they are illegal and not, for example, a promotional MP3 released legally, then you have a huge volume of songs missed. If you have a warehouse full of people banning songs, then you are spending far more money than Kazaa earns.

    I'm surprised that nobody has suggested a network of legal content... Things that someone is willing to vouch for. That's a more appropriate use of hashing, and would have very fast, centralized searches.

    1. Re:meatspace problem by wolrahnaes · · Score: 1

      I'm surprised that nobody has suggested a network of legal content

      I believe this is what iRate does.

      --
      I used to get high on life, but I developed a tolerance. Now I need something stronger.
  103. Re:Victims of porn by Anonymous Coward · · Score: 0

    Maybe your problem is that you were hiding this and lying about it, not that you looked at pornography.

    God has a lot to say on acting on covetous desires, and a lot on lying and being faithful. However, if I recall correctly it's not God or Jesus that gets all riled up about things, but Paul. Read through the Old testament and the Gospels and see how much the subject comes up.It doesn't really. Now read Paul - that man had issues of his own that were not reflected anywhere else in the Bible. However, the very early Church decided to make it part of canon, and here we are today.

    If you think you have an addiction that's interfering with your life, then yes, you probably should stop (and that goes for anything, be it video games, the internet, drinking, etc). However, don't be a Christian sheep. If all you believe is what they tell you and you haven't explored your faith and beliefs for yourself, then you don't have faith in God, you have faith in the Church, and that is a very different thing.

    (Sorry about the AC post, but this browser isn't set up for my /. account)

  104. There's an Easier Way by StormyMonday · · Score: 2, Interesting

    Just have the pR0n suppliers encode a serial number in each copy of each video they sell. Then, if a copy got illegally distributed on the Net, they'd know who to go after.

    A big job? Yes. But so is the "fingerprint database".

    And this way, they'd be responsible for their own content, instead of requiring Big Daddy Government do it all for them.

    Since they claim to be losing billions of dollars to "piracy", it should certainly be worth their while to charge a few bucks more for each video in order to increase their sales by (according to some numbers I've seen) an order of magnitude.

    --
    Welcome to the Turing Tarpit, where everything is possible but nothing interesting is easy.
  105. Lower retail prices... there's a thought. by IBIC · · Score: 2, Informative

    OK.. I'm not a big porn collector, but I have seen the prices for these DVD's. At sometimes $60-70 a copy, it's no wonder there's file sharing. Just as in the case of music CD's, why not lower the cost of the retail product? I'm sure I'd feel less guilty of purchasing some of these titles if I wasn't spending so much ;-)

  106. Copyrighted porn by Anonymous Coward · · Score: 0

    im sorry but the idea that they can secure the rights to smut is down right comical, not to mention the fact if any network gets bogged down by drm you can CERTINALY expect another one to take its place.

  107. Copyrighted Works by Anonymous Coward · · Score: 0

    By the latest law, isn't everything ever recorded copyrighted? Therefor, wouldn't this algorithm be { return true; }

    I can't remember if there are any films that have expired copyrights. Close to the same is true for all music.

  108. Easy defeated, yes, but then what? by jetmarc · · Score: 1

    Most posts here indicate that it's easily defeated, because changing just one insignificant bit (eg for music files, an MP3-tag) results in a different hash value - thus defeating a blacklist of hashes. Of course they are right that this would work. But on the other hand, it would seriously harm the usefulness of P2P networks. If everybody would produce his "own" version of an MP3 song, that's different from all the other versions (by one MP3-tag frame), the software could not match them anymore.

    As a result, a possible downloader would be presented thousands of DIFFERENT files with IDENTICAL naming. He would have to decide which one to download. He may then become victim of RIAA flooding and by chance download a "bad" file. Eg when 100x more bad versions are offered than good versions, he would have to download 100 times until he hits a good version. This doesn't have solution, because the solution would be to publish hash-lists of known-good-versions (like SHAREREACTOR) which could then be automatically merged into the blacklist of forbidden hashes by a RIAA robot script.

    Another consequence is that the software couldn't do multi-source downloading anymore, because it can't know which files are identical (except for the MP3 tag). The downloader would have to rely on the SINGLE source to give him the FULL file. This might be feasable for MP3 (though already considerably degrade service quality), but is totally impossible for 700MB ISOs. This problem isn't solvable either, because the only solutions would be to either exclude the MP3 tags from the hash calculation (so that different files share the same hash), thus reverting to todays situation (where a hash blacklist would work). Or, one would have to split the file into various small chunks and modify only the first (so that all other chunks are common between all versions) and thus reduce the problem of single-source to just the first chunk. This however would keep all but the first chunk vulnerable to the blacklist approach and consequently is not a working solution either.

    In short, P2P would not work anymore if the "defense" against blacklists would be any different from "ignore blacklist and download anyway".

    (at least in current P2P structures)

    Marc

  109. Laws can mandate... by Kjella · · Score: 1

    Peer to Peer networks have to go from Peer to another Peer. For almost everybody this means going across the routers, switches and wires of ISPs, backbones, and other telecommunications providers. Laws can mandate that these companies be held responsible for things going across their wires and forcing them to filter content.

    Yeah, unless they happen to be encrypted. So then I can only run Approved Services(TM). Where I can of course not run any Unapproved Service(TM) over standard connections, such as a P2P program working over HTTP, FTP, DCC or NNTP. So basicly, you have to ensure that only Proper Requests(TM) get through. Which probably means only Approved Content Sites(TM), not your buddy's HTTP server. Either you end up with a AOL-like "mini-Internet", or it will be fuller of holes than a swiss cheese.

    You might as well demand that the phone company makes Al-Quaida unable to speak in code over the phone. When they ask "How the F*** are we supposed to do that?!?", well... I hope you have a good answer.

    I do that very same thing here. The internet connection comes in, goes through a firewall and then to snort both of which squeeze off peer to peer connections. This is to reduce bandwidth consumption and to make the boys over in legal happy.

    Working for a company, you can do pretty much whatever the hell you want, purely on the suspicion of P2P activity. But what do you do as an ISP when your customers start suing you for killing off their connections? You'll need hard evidence, not "it was on port X" or "we couldn't identify the traffic type".

    Ask the chinese how their "great firewall of China" is doing. They know it's leaking all over the place, and that's in a country where you'd think they have more control than in the US. What works for your company simply doesn't work on a mass scale.

    Kjella

    --
    Live today, because you never know what tomorrow brings
  110. THe Obvious Question by Sloppy · · Score: 2, Insightful
    P2P networks could (if they wanted to) use "fingerprinting" (aka "hashing") to detect copyrighted works and then filter them with the "spyware" installed on all nodes in the network."
    Regardless of whether this is feasible or not, there's a much more basic question to ask first. Are users asking for this feature? If they aren't, then the very idea is ridiculous and doomed to fail in any marketplace.
    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  111. I've got a great idea by K-Man · · Score: 1


    Instead of hashing, they could take each movie or picture, pass it through a discrete cosine transform, quantize it, and produce a list of major signal components which characterize the image.

    But who would ever do that - it would take a whole group of motion picture experts to get it to work.

    --
    ---- "If we have to go on with these damned quantum jumps, then I'm sorry that I ever got involved" - Erwin Schrodinger
  112. "copyrighted" isn't really the point by nudicle · · Score: 2, Informative
    Something is copyrighted, basically, as soon as it's fixed in a tangible medium. So, when Madonna screeches into a mic "what the fuck do you think you're doing?" and saves it as a dummy mp3 song, that's just as copyrighted as Like a Virgin. And yes, even RAM counts for 'tangible medium.'

    This is actually about copyrighted content that authors wish to control .. not "copyright" simply as such. That's why the Creative Commons Project is so important.

  113. Ummmm, no. by Mars+Ultor · · Score: 1
    From the article:
    Titan Media, which asked Sharman last month to block 1,400 of its movies, said Sharman can closely monitor activity on the network through "spyware" installed on users' computers and could block users from downloading copyrighted files.
    Oh that seems completely ethical - advocate the use of spyware to track what people are searching for and downloading and then use that against them. Exactly what fans does one hope to attract to your cause when you wish to employ the use of covert and often malicious software programs that many people don't even realize they have (it's called a click-thru license for a reason).

    This seems like a very upstanding thing to propose - from a smut-peddler.
    --
    "Nokia is not a country, it's the capital of Finland!" -Moderated "Informative". Yeesh.
  114. Content recognition by sm0yby · · Score: 1

    I'm curious: wouldn't that kind of content recognition kind of require that you already have a copy of what you are looking for, or at the very least somehow know its "content profile" (if I may call it that)?

    Seems somewhat counterintuitive to me at least.

    Sure, it might work for finding the same file on multiple hosts. But even that is doubtful (at least I would rather know when I am downloading different parts of a file from different hosts, that I am downloading parts of the same file), and an ordinary hashing algorithm like SHA1 would definitely work better for such a purpose.

    --
    Been modded interesting, insightful and funny. Why does real life have to be so different?
    1. Re:Content recognition by tuxlove · · Score: 1

      I'm curious: wouldn't that kind of content recognition kind of require that you already have a copy of what you are looking for

      No. You search for, say, "Paperback Writer" by "The Beatles" by typing that into a search form. You click "go" and it searches for you. Anyone with files on their computer with a digital fingerprint matching that song shows up on your results, even if it's spelled "Beeetlas pay-per-BaCk ritter" or even "momma dogface in the banana patch". Sure, it might work for finding the same file on multiple hosts. But even that is doubtful (at least I would rather know when I am downloading different parts of a file from different hosts, that I am downloading parts of the same file), and an ordinary hashing algorithm like SHA1 would definitely work better for such a purpose.

      Of course, each file would have to be hashed to allow for concurrent download to ensure the file parts are identical. That goes without saying. But a hash is not good for identification in such a case as this, only verification of exact sameness.

    2. Re:Content recognition by ajs318 · · Score: 1

      Actually this is the most pointful idea I have heard so far. You can only download something if you know the hash for it. You obtain the hash from a pay site. You can now download the material, and other people can download it from you if they have the hash. The hash download is traceable, so if you give it away then you can be nabbed.

      Nope, changed my mind. It just sounds more like a warped way of using public key encryption. And there has to be a way around it, because there always is. There are open-source -- and inherently unregulated -- ways of sharing files, so even if they shut down all the grey-market sharing networks tomorrow, there would be a black-market network within the week. And if it was https based, everyone's existing web browser would be the client.

      --
      Je fume. Tu fumes. Nous fûmes!
  115. The telcos would love that. by SlashDread · · Score: 1

    Imagine... all of us back to home dialin BBS's :-)

    "/Dread"

  116. Wont work by nurb432 · · Score: 1

    A simple harmless change in the files would change the hash, and let the 'new' file get thru the filters.

    It would just be a big game, much as the 'mis-spelling' of tracks was in the last days of Napster.

    --
    ---- Booth was a patriot ----
  117. Which is totally nuts. by Ungrounded+Lightning · · Score: 2, Insightful

    You've looked at this too naively... Take around a hundred MD5s of nonoverlapping chunks of the file. If 90% of these match, you have near certainty that the files match except for exactly such tampering as you suggest.

    So the "content" industry would want operators of P2P software to store 100 MD5 hashes of EVERY PIECE OF COPYRIGHTED WORK IN DIGITAL FORM, and compare EVERY SET OF THEM against EVERY FILE TRANSFERRED.

    That is just wacko.

    For starters you'd requre every peer machine to have a copy of all those hashes and/or every indexing service to actually transfer the indexed files to compare them. How big would that be? How much bandwidth would it take to update it, or to do an extraupload of everything that gets indexed (possibly by many indexers)? WHO PAYS FOR THE BANDWIDTH AND STORAGE? Note that the BENEFIT goes entirely to the copyright holder, not the P2P user.

    The onus of detecting copyright violation and proving their case is, and properly should be, on the copyright holders, who are the recipients of the benefit.

    Yes, it's hard. Which means that the copyright holders only catch a few of the violators. But it's ALWAYS been that way. That's why the copyright law provides draconian penalties for the ones they DO catch - to balance the equation and deter violators.

    (And THAT'S why you see hundred grand fines laid on little old ladies whose underage grandkids used their computer to download some MP3s.)

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    1. Re:Which is totally nuts. by gnu-generation-one · · Score: 1

      "So the "content" industry would want operators of P2P software to store 100 MD5 hashes of EVERY PIECE OF COPYRIGHTED WORK IN DIGITAL FORM"

      You forget: the content industry don't define "copyrighted work" like we do. In their dictionary, it means "copyrighted by them work"

    2. Re:Which is totally nuts. by Ungrounded+Lightning · · Score: 1

      "So the "content" industry would want operators of P2P software to store 100 MD5 hashes of EVERY PIECE OF COPYRIGHTED WORK IN DIGITAL FORM"

      You forget: the content industry don't define "copyrighted work" like we do. In their dictionary, it means "copyrighted by them work"


      Even cutting it down to just the members of the evil empire: How many copyrighted works does Time-Warner publish EVERY DAY? Then add in the rest of 'em...

      It's STILL enough to swamp any attempt to do what was proposed.

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  118. And it's doubly nuts because it won't work. by Ungrounded+Lightning · · Score: 2, Interesting

    Of course it's doubly nuts because your proposal is trivial to beat. Add an extra random-sized bit of silence / blackscreen at the start and end. That changes the file size and shifts the hashed regions, causing all the hashes to come out different.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  119. Re:Victims of porn by Anonymous Coward · · Score: 0

    Paul?

    He never even knew Jesus. The 11 other apostles didn't even like him; they thought he was wack and corrupt.

    Paul is nothing but a lying flaming powermonger of an asshole. What a fuckup.

  120. Umm isn't that the problem... by Kjella · · Score: 1

    ...with P2P networks already, that they're full of different encodings (good and poor), corrupted files and other shit leading to different hashes?

    If, presuming they actually publicly distribute this database, or make it a queryable server, I imagine it'll be used against them.

    Ohh 20 different versions of this song - but we queried the database, this one is "registered". Well, that must be the proper song then, let's download that. And then they'll have to start poisoning the database to counter that, filtering out their own (and other's) bogus files.

    This has got to be the most dense proposal I ever heard. I don't think they realize how massive the task is, and even if they were to succeed it would only be used against them. So let them try.

    Kjella

    --
    Live today, because you never know what tomorrow brings
  121. Math cannot define a human concept by Anonymous Coward · · Score: 0

    How about... a square?

  122. And by shiznitmatt · · Score: 1

    I suppose the fact that it's embedded in your finger will make the job that much more difficult.

  123. Yes. by gerardrj · · Score: 1

    It's simple. If it exists in any sort of recorded form (writing, magnetic, phonopgraph, punch card, etc) it's copyrighted. That's the way U.S. copyright law works. You don't have to register a copyright for the work to be protected.
    So... if a file exists on a P2P network, it is copyrighted. Whether the item is there with the permission of the copyright holder is another matter all together.

    --
    Article X: The powers not delegated... by the Constitution...are reserved...to the people
  124. ummmmmm by metalhed77 · · Score: 1

    That makes no sense because you can't track the numbers very far. Even if the stores that sell the tapes track customers (I imagine that porn shop customers would be miffed if you asked them for their address) the goods can still be resold. I doubt that everyone selling old porn DVDs on ebay keeps customer records. Any infrastructure that enabled this would be massively expensive and inpracticable.

    --
    Photos.
    1. Re:ummmmmm by StormyMonday · · Score: 1

      Simplest thing in the world. When you find one of your videos on the Net, sue the arse off of the last known receiver of that serial number. This gives everybody in the supply chain an incentive to keep track of things.

      Remember, your customers are your enemies.

      Also, when President Buchannon raises the minimum age definition for kiddie pR0n to 65, the Gov't will be able to haul in all the new criminals ...

      --
      Welcome to the Turing Tarpit, where everything is possible but nothing interesting is easy.
  125. wrong titan media by tmf90069 · · Score: 1

    You're linking to the wrong Titan Media. http://www.titanmediaconsultants.com/ is not a porn publisher. http://www.titanmedia.com is the one in the Washington Post article.

  126. They could... by raytracer · · Score: 1

    Of course they could do that.

    There is only two minor problems.

    1. First, fingerprinting is at best a nuisance, a nuisance which will simple be circumvented by the community that desires file trading without such restrictions.
    2. No maker of P2P networks wants this file trading to stop.

    While I am against violating other owners copyrights, it seems odd to claim that other companies are in some way responsible for enforcing them for you.

  127. Re:Victims of porn by Fnkmaster · · Score: 1

    He is trolling, he copied the text of that post from the URL he posted. It's not his actual personal confession of porn addiction. :)

  128. Three problems by Anonymous Coward · · Score: 0

    I have three problems with this idea.

    1.) Change a bit in file and the hash comes out completely differant.

    2.) If people can remove spyware from programs like Kazaa and add new features what makes them thing there "spyware" is going hold up any better.

    3.) People can easily start using open source clients.

  129. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  130. Re:Victims of porn by Anonymous Coward · · Score: 0

    > The only way it would work is if the porn industry started setting up tons of high traffic nodes distributing all sorts of stuff just to block some porn on some searchs, but they'd just get blocked anyways.

    Well, then people would start developing new websites that contain links only to the "real" content.

    On the Internet, people eventually get what they want. That just seems to be a law of nature. It's a worthwhile academic exercise to think up ways of violating this law of nature, but your efforts will ultimately fail.

  131. Re:Victims of porn by Anonymous Coward · · Score: 0

    Yer only PROBLEM, dude, is you're acting like the normal male that evolution made you into, but your religion tells you it's "wrong" and so you try to repress your sexuality. (Unsuccessfully.)

  132. Why Should they have to... by goadya · · Score: 0

    Why should they have to do it... Using their logic, shouldn't the manufacturer of a gun that kills someone be accountable? How about printing press equipment manufacturers, are they liable if someone uses their equipment to print out illegal pr0n? :)

    --
    First they ignore you Then they laugh at you Then they fight you Then you win -Mohandas Gandhi
  133. Overnet, Kazaa, Napster, Bittorrent by PerpetualMotion · · Score: 1

    If you strike me down, I shall become more powerfull than you can possibly imagine!

  134. we can only hope by ahdeoz · · Score: 0

    I hope this succeeds, because I can't wait until it's adapted to be used for spam blocking. Of course, by copyrighted, they don't mean copyrighted, they mean a small number of works whose copyright is owned by an exclusive cabal of powerful media companies; and of course, it wouldn't work anyway.

  135. motive by bitspotter · · Score: 1

    Ah, the inexorable corruption of the profit motive...

    Anytime you have a power-distributive technology fall into the hands of a group whose first priority is profit, the tendency for the technology to distribute power always loses.

    Napster was sued out of existence (Brand name notwithstanding), and rightfully so, not so much because it contributed to copyright infringement, but because it sought to profit from that infringment.

    Red Hat has decided that it's priorities require that it profit before it supports the small Linux user, so using Red Hat Linux has become that much less of an option for most people.

    Sharman Networks has it's network, and has shown for some time its disregard for its users in preference to its profit motive. If the business can profit from cutting user's throats, it will do it.

    Now, I'm not going to engage the issue of whether profit motives are justified, or whether these individual examples were motivated by survival or profit motive.

    It seems only non-profit groups, whose priorites lie with their actual stated goal (making and maintaining quality software - SPI/Debian, Mandrake, etc.) can actually be trusted.

    The profit motive, by definition, is to concentrate power in the form of money (and the process of doing that benefits from other kinds of power). This has consequences for any technology which has the potential to distribute power of any kind. The two tendencies inevitably conflict.

  136. What a load of crap! by Black+Art · · Score: 1

    If I rip a CD on my computer with one bit rate and encoder and then rip the same CD with a different encoder or bit rate, the hashes will be different. If I change the tag in an MP3 file, the hash will change.

    They can generate hashes for things they have seen, but those can be easily changed. (I expect to see random id3 tags and/or file names similar to what spammers use to evade Baysian filters.)

    Obviously some company has come up with a "solution" and is trying to sell that "solution" with the claim that it will solve the "problem".

    "Something must be done. This is something, therefore we must do it."

    --
    "Trademarks are the heraldry of the new feudalism."
  137. Gosh by dtfinch · · Score: 1

    All you need is a program to append a couple random bytes to each file you download through p2p. They'll still play except maybe in rare cases that I haven't heard of. A downside is that you'll lose the download splitting aspect of p2p.

    Making small changes to break the hash checking can be defeated though. You only need a few pieces of a media file to identify it with certainty. And you can create a signature in a way that is offset neutral. Suppose for every unique x bytes whereby the hash matches a specific constant for the rightmost n bits (determined by file size), you recorded the following y bytes. Those strings of y bytes form the signature. Signatures can be matched with only a few strings in common between them.

    But then, people could always re-encode or encrypt their files.

  138. Trivial / hypothetical by Anonymous Coward · · Score: 1, Interesting

    > Can P2P Filter Copyrighted Content?

    Well, the Internet is based on TCP/IP, which is a P2P network architecture.

    So if the Internet can filter content, then by definition, so can P2P. It is trivially obvious that the technology can support this.

    > P2P networks could (if they wanted to) use "fingerprinting" ...

    Well, people could (if they wanted to) respect the copyrights of rich media conglomerates.

    You can ask all the hypothetical questions you want. But is there anyone who seriously believes that people want their P2P networks to be crippled with DRM?

    This topic seems pointless to me. Is there any substance here for those of us who choose to focus on the feasible?

  139. Re:Victims of porn by TechBCEternity · · Score: 1

    ya I just meant that those porn high traffic restricted nodes would just be left off the server lists cause ppl would catch on.

    this'll be an intresting year with microsoft loading on tons of DRM and linux maturing as a mainstream desktop. It's funny how the two go hand in hand.

  140. Aren't all works copyrighted by default? by freeweed · · Score: 1

    they must know that works were not copyrighted

    This one always sticks in my craw. My understanding of current copyright law says that basically every original composition of anything (music, pictures, stories, whatever) is copyrighted the second it is created. If I write some silly nonsense rhyme on a cocktail napkin tonight, it's copyrighted. If I draw a circle on my arm with a BIC pen, it's copyrighted. Until such time as I explicitly state "this work is in the public domain", or the copyright expires (haha), it remains copyrighted. And me putting my file up on Kazaa for sharing doesn't automatically revoke my copyrights, either, no more so than putting up a work online. Copyright notices, the little R or C in a circle - all of that serves only as a reminder. Stuff is still copyrighted regardless.

    Am I wrong, or are we using the definition of copyright that only includes works owned by mass content producers?

    --
    Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
    1. Re:Aren't all works copyrighted by default? by Anonymous Coward · · Score: 0

      The R is a registered trademark symbol, not a copyright symbol, you insensitive clod.

  141. WinMX 4? by phazei · · Score: 1

    Maybe that's why WinMX is taking so damn long to come out... their implementation of DRM... //didn't RTFA

  142. 'technologists' by Dogun · · Score: 1

    You know, every time I've ever seen someone who described themself as a technologist describe a hypothetical system, I've been disappointed.

    What the hell is a technologist *supposed* to be, anyhow, and why are so many of them imbeciles?

  143. Very easy to crack by TechniMyoko · · Score: 0

    When your file is blocked, simply change one bit of the file. The hash while change, thus defeating their so called security

  144. CopySense by Audible Magic by Anonymous Coward · · Score: 0

    CopySense by Audible Magic. I make these things. They listen to network traffic, identify audio file types, decode them to audio, and compare them with a database of audio fingerprints.

    http://www.audiblemagic.com/copysense_appliance.ht ml

    They don't use hashes -- they use fingerprints, which allow for much fuzzier matches. You might also note that they don't check encoded files, they check the audio stream. And though it reduces the capacity, it is possible to scan zipped files.

    It can't scan a fully-loaded 1000 Mbit connection, but what is your actual Internet connection speed? 2 Mbits? 10 Mbits? Do you really think that it's unreasonable to scan this much data in real time?

    Then again, it runs a FreeBSD, so linux users will probably claim that it doesn't exist.

    1. Re:CopySense by Audible Magic by Mr.+Arbusto · · Score: 1

      This is total BS! You'd need a fleet of machines slowing down the connection to cache and hash these files. Finger printing isn't a realiable method and can be over come with High and Low (Out of the audio band) distortion.

      Hashing and checksuming the file and matching 80% of it might actually be effecting....

      Probably runs on BSD because BSD is so damn promiscuous.

      Coward

    2. Re:CopySense by Audible Magic by Anonymous Coward · · Score: 0

      Or it could be overcome, if common audio encoders paid any attention to out-of-band data. Most MP3 encoders, for example, intentionally eliminate out-of-band data to reduce file size.

  145. This is a job for Darknet!. by Max+Hyre · · Score: 1

    This fascinating paper (also available in easy-to-read MS Word format) postulates that any real attempt at suppression will lead to a samizdat-like interlinking of P2P nets, each comprising a small group of people who trust each other. That ``web of trust'' will still get the info through.

    They'll have to try harder than that.

    --
    I refuse to believe corporations are people until Texas executes one. -- desert rain on http://www.dailykos.com/user/
  146. Re:undercut by R.Caley · · Score: 1
    The value of most pop music is in who makes it, not what it is.

    In which case they have one of the few examples of a quite legitimate monopoly (I have a monopoly on being me), and they are not overpricing their product, they are pricing it at a fair market price. (directly controled by the demand, ie what an 8 year old can persuade their parents to pay fo r the latest whoeveritis single).

    You might not think it is worth what it says on the ticket, but then you aren't buying it so it doesn't matter to you what it says on the ticket.

    Other people can make music, but can they make studio quality recordings? Can they distribute that music effectively? Can they sell it or get people to buy merchandise or go to concerts?

    Studio quality recordings can be made if you have the money. They is no monopoly on studio equipment, especially these days when technology has gotten (relatively) cheap. Distribution is surely what we are talking about, distribution is easy, so much so that any old 8 year old can distribute stuff they rip off so widely that the RIAA are worried. Merchendising is an alternative to selling music, not part of it.

    But yes, labels provide important services to artists in the form of promotion, access to equipment, subsidising live performances etc. This is why artists sign with labels, and in turn is why stiffing the labels by illegal distribution is not an attack on the men in suits (who will be payed anyway), but on the artists.

    Labels act as venture capital companies, management consultancies and marketing arms for artists.

    The less profitable it becomes to sell the third Foobar album and associated tat to the fan base they have used used the label's money to build up, the less the label will be able to justifiably risk on the next act who turns up at their door. In turn that means they will concentrate more on churning out more of the same from an ever less interesting Foobar and manufacturing bad Foobar clones.

    (There must be a band called Foobar out there, so appologies, I wasn't talking about you:-)).

    --
    _O_
    .|<
    The named which can be named is not the true named
  147. Re:Victims of porn by Mal-2 · · Score: 1

    More than that, all you have to do is encrypt the file (as a zip or a tar or a rar or whatever) and put the key in the filename. If your file is spotted and blocked, you just re-encrypt with a new key. The encryption doesn't have to be great, you're not really trying to stop anyone from reading the file. It's just quick and dirty obfuscation to get it past the hash filters.

    Of course if the filters can pick the password out and decrypt the file before checking it, then some sort of obfuscation for the password will also be necessary, but that's not hard to do, and it'll slow down automated filters a lot more than it'll slow down wan^H^H^Hconsumers.

    Mal-2

    --
    How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
  148. Copyright by celimage · · Score: 1

    Suddenly its only the RIAA and MPAA that have copyrights. This is NOT the law! Whenever you play notate or film something you have the copyright to it. If you require more protection you send $25 to the U.S. Copyright office and fill out the form and send the stuff in,then it is a registered copyright. My music is copyrighted, I own the copyrights and I dont mind if people share my music as long as they dont try to claim that they created it and try in some way to market it. I want people to hear my music, the RIAA does not speak for me, nor many others. If you enjoy my music you can take it at http://celestial-image.com

  149. No he means I2P by Anonymous Coward · · Score: 0