Slashdot Mirror


Safeguards For RIAA Hard Drive Inspection

NewYorkCountryLawyer writes "In SONY v. Arellanes, an RIAA case in Sherman, Texas, the Court entered a protective order (PDF) that spells out the following procedure for the RIAA's examination of the defendant's hard drive: (1) RIAA imaging specialist makes mirror image of hard drive; (2) mutually acceptable computer forensics expert makes make two verified bit images, and creates an MD5 or equivalent hash code; (3) one mirror image is held in escrow by the expert, the other given to defendant's lawyer for a 'privilege review'; (4) defendant's lawyer provides plaintiffs' lawyer with a 'privilege log' (list of privileged files); (5) after privilege questions are resolved, the escrowed image — with privileged files deleted — will be turned over to RIAA lawyers, to be held for 'lawyers' eyes only.' The order differs from the earlier order (PDF) entered in the case, in that it (a) permits the RIAA's own imaging person to make the initial mirror image and (b) spells out the details of the method for safeguarding privilege and privacy."

276 comments

  1. Initial image by agreed experts, not RIAA by nibblybits · · Score: 2, Informative

    it (a) permits the RIAA's own imaging person to make the initial mirror image IANAL, but having RTFA, I'd say that statement's a bit misleading. It actually states that an expert agreed upon by both parties will make two copies, make an MD5 hash of the copies, then the defendant has the opportunity to justify that some files are private and nothing to do with the case, and once that's settled:

    Plaintiffs shall have access to the Escrowed Image of the hard drive, minus the files as to which privilege has been asserted Seems pretty reasonable to me. Wouldn't make a lot of sense if they gave them access to the drive minus these files, if they had already initially had access to the whole thing.
    1. Re:Initial image by agreed experts, not RIAA by jasen666 · · Score: 2, Interesting

      No, it said the earlier order specified that an RIAA's person was to make the image. The new order says agreed upon expert.

      And I agree, it does actually sound pretty reasonable.
      Regardless, anyone who gets a subpoena from the RIAA should be smart enough to swap out hard drives and install a new OS before the case even gets that far anyway. Assuming they have something to hide. Seems pointless really.

    2. Re:Initial image by agreed experts, not RIAA by Kjella · · Score: 4, Informative

      I would strongly recommend against that, if you make the tiniest of mistakes such as timestamps which lets them show that you reinstalled your OS or swapped out your disk for a fake system after being subpoenaed, you could find yourself at the wrong end of some nasty criminal charges for destruction of evidence, obstruction of justice and so on. If you think psying a few thousand dollars is bad, you should see what a felony conviction does for your life...

      --
      Live today, because you never know what tomorrow brings
    3. Re:Initial image by agreed experts, not RIAA by Bob9113 · · Score: 3, Informative

      No, it said the earlier order specified that an RIAA's person was to make the image. The new order says agreed upon expert.

      Verbatim, from the new court order:
      1. Kimberly Arellanes ("Defendant") shall make her computer hard drive available for imaging by Plaintiffs on or before March 21, 2007 [emphasis mine]

      Clearly the court order says that Sony gets to do the initial imaging.

      Step 2 is, "an expert in computer forensics selected by the parties shall make two (2) verified bit-images". That's the second set of images. The initial image is done by Sony.

    4. Re:Initial image by agreed experts, not RIAA by Bob9113 · · Score: 2, Informative

      Correction - I'm wrong. Parts 1 and 2 of the document are actually contradictory. Part 1 alone makes it sound like Sony makes an image. Part 2 alone makes it sound like the expert makes two images. Reading both parts together makes it sound like the document is flawed.

    5. Re:Initial image by agreed experts, not RIAA by daeg · · Score: 2, Interesting

      Simple solution is to simply use something like TrueCrypt. Don't let applications save logs or recent file histories and use portable apps on USB thumb drives where applicable (even TrueCrypt can run in this mode).

      Besides being more private, it's also damned cool and lets you bring your programs, files, and everything with you no matter what computer you're on.

    6. Re:Initial image by agreed experts, not RIAA by statusbar · · Score: 2, Funny

      So if I had music that I wrote and copyrighted on my own computer hard disk, they then are allowed to copy my music during this process without paying me compensation?

      --jeffk++

      --
      ipv6 is my vpn
    7. Re:Initial image by agreed experts, not RIAA by jakosc · · Score: 3, Insightful

      I think 1 and 2 are consistent, it's just the numbering in the document isn't the order of events.

      How I read it, it's basically:

      1) Plaintiff, don't worry, you'll get access to the drive by March 21
      2-3) Defendent, don't worry, here's how we'll do it---first, you get to delete your private files

      IANAL, but that's how I read it. The summary's a bit confusing, and seems to suggest that #1 in the document has to occur before #2, which really doesn't make sense, as the GP points out.

    8. Re:Initial image by agreed experts, not RIAA by Mistlefoot · · Score: 5, Funny

      Priveleged file list

      1) *.mp3
      2) *.avi
      3) *.mpg

    9. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      So if I had music that I wrote and copyrighted on my own computer hard disk, they then are allowed to copy my music during this process without paying me compensation?

      No, you completely misunderstand. The whole point is that you are allowed to first claim the portions of the disk that are not relevant to the matter at hand.

    10. Re:Initial image by agreed experts, not RIAA by nmb3000 · · Score: 3, Interesting

      Simple solution is to simply use something like TrueCrypt.

      TrueCrypt is pretty neat, but that brings up a question. If you encrypt your entire hard drive, what happens when your computer is taken as evidence? Can you be required to divulge the decryption key? IANAL, but I assume that you can be held in contempt of court (or something) by refusing to offer it up, leading to criminal charges, fines, and/or jail time. In any case, I doubt you can just give the RIAA the bird and say "Nah nah, can't touch this" because your stuff is encrypted.

      Does anyone know the details about this? I doubt encryption helps you when it comes to legal matters, unless maybe you can plead the Fifth. After all, by giving up the decryption key you may be incriminating yourself :)

      Anyone know?

      --
      "What do you despise? By this are you truly known." --Princess Irulan, Manual of Muad'Dib
      /)
    11. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0
    12. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      Correction - I'm wrong. Parts 1 and 2 of the document are actually contradictory.

      No they arn't, you just don't understand what you are reading.

    13. Re:Initial image by agreed experts, not RIAA by Architect_sasyr · · Score: 2, Informative

      IANAL and this is not legal advice, merely a recount of a story

      A friend of mine got pulled in by the big guns out here in Australia a little while ago. It was kept very quiet (for which he was grateful) because they stormed into his house to find him sitting at his table drinking a coffee, all his PC's turned off. His TrueCrypted hardisks were useless as he "forgot" the complex key in all the excitement of having his door kicked in by a task force. Probably not legal but can they prove it?

      Of course pleading the 5th would just make you look guilty as hell ;)

      --
      Me failed English...
      FreeBSD over Linux. If my comments seem odd, this may explain...
    14. Re:Initial image by agreed experts, not RIAA by bblboy54 · · Score: 1

      "...if you make the tiniest of mistakes such as timestamps..."

      Yes, it has been confirmed that time stamp errors can cost you 12 days in jail.

    15. Re:Initial image by agreed experts, not RIAA by Squalish · · Score: 1

      "I claim that I pirate no music. In order to let you investigate my hard drive: The music I pirated is not in this folder, this folder, or this folder"

      --
      People in Soviet Russia, however, appear to be afflicted with amusing juxtapositions of the aforementioned situation
    16. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      How does the RIAA know what files are illegal?? If I rip CD's that I own and have itunes encode them into .mp3 not protected .aac or .wma files, how do they know which is which? Am I missing something here?

    17. Re:Initial image by agreed experts, not RIAA by The+Master+Control+P · · Score: 4, Interesting

      Suppose one were to have a CRON entry that does touch /* -R every night at 3AM? For extra goodness, have it write out 4 random times and then the new time to prevent data recovery of original times. Running every day for a week, it'd be impossible to get the originals. It's impossible to prove anything, including when the script was added, as dates are overwritten constantly. Goodbye timestampiness!

      Or if you're real paranoid, just get a laptop body + huge HDD + wireless and bury it in your wall and store your shit on that. Just manually mount the (encrypted) remote volume and supress NFS logging and there's zero evidence that you ever had any files.

      Just remember to encrypt everything anyway. And use ext2fs to avoid a journal leaving any "suprises" behind.

      And what about disk-copy utilities that duplicate a disk, timestamps and all, except you leave out certain important things (like ~/music/) from the copy? Actually, best to have some classical or nerdcore music, lest the absence of anything prove suspicious.

      I guess what I'm saying is, there are many, many ways to foil the MAFIAA. You just have to implement them beforehand, and calmly cover every angle. Trying to do something *after* getting subpoenaed is a bad idea, because then you're hurrying. And as you say, one tiny mistake is all it takes, and people tend to make mistakes when they hurry.

    18. Re:Initial image by agreed experts, not RIAA by mikiN · · Score: 3, Funny

      Pleading the Fifth:

      Judge: "How do you plead?"
      Defendant: "Ta-da-da-daaaaaa, ta-da-da-daaaaaa..."

      (sorry, couldn't resist...)

      --
      The Hacker's Guide To The Kernel: Don't panic()!
    19. Re:Initial image by agreed experts, not RIAA by Wavicle · · Score: 2, Informative

      Can you be required to divulge the decryption key? IANAL, but I assume that you can be held in contempt of court (or something) by refusing to offer it up, leading to criminal charges, fines, and/or jail time. In any case, I doubt you can just give the RIAA the bird and say "Nah nah, can't touch this" because your stuff is encrypted.

      IANAL either (so take this with a grain of appropriately sized salt)...

      You can refuse to give out your key, but since this is a civil proceeding, the 5th amendment does not apply. If you refuse to give out your key, the judge may hold you in contempt, or may just give the RIAA a default judgment.

      Do the smart thing:

      TrueCrypt has an option to store the "real" information in the apparently "unused" portion of your truecrypt volume (called 'hidden volume'). There is no way to tell if this unused portion is a hidden volume or unused space. Store the stuff that would get you in trouble there.

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    20. Re:Initial image by agreed experts, not RIAA by MichaelSmith · · Score: 2

      I guess what I'm saying is, there are many, many ways to foil the MAFIAA

      Yeah, but its the lusers they go after, just like with child porn.

    21. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      A) you forgot that there are several timestamps. You should update them all.

      B) your script is obvious deliberate destruction of evidence. Since this is a civil case, the RIAA probably gets to make up it's own story about what you were trying to hide.

      in other words, you lose.

    22. Re:Initial image by agreed experts, not RIAA by dougmc · · Score: 1

      you should see what a felony conviction does for your life... I doubt any of these would be felonies, only misdemeanors.


      Not that it couldn't get you in trouble, mind you, but it's probably not as much trouble as a felony could cause.

      I guess if you were the sort of person that expected to be sued by the RIAA for this sort of thing, you'd keep your mp3s and P2P working directory on an encrypted drive, one that looks like unused space on the drive so you can't prove there is an encrypted drive, though I doubt that would be very convincing. And in a civil case, you don't have the right to remain silent (!), and they could tell you to give up the key and a refusal could get you a contempt of court charge ... it gets nasty, fast.

    23. Re:Initial image by agreed experts, not RIAA by drix · · Score: 1

      A lot can happen in the several months between the alleged date of infringement and they day the subpoena arrives. Old hard drives crash and get tossed, spares get pulled from a box you've had sitting in your closet all those years ... and everyone here knows it's trivial to back-date the system clock in the BIOS, at which point looking to timestamps on a fresh install is pointless.

      --

      I think there is a world market for maybe five personal web logs.
    24. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 1, Insightful

      just set your computer's date to some random date in 1992 and tell the RIAA, "I never figured out how to set it properly"

    25. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      Most of the people I know who have received Cease and Desist notices have received them months after the alleged infringement occurred. So let's assume that it takes at least a month or two before the RIAA sics its lawyers on you in most cases. What if you have a legitimate hard disk crash, or if you decide to reformat your system in between the time the alleged infringement occurred and when the lawyers started sending out letters. Are you to tell me that I could get in trouble if I happen to reformat my system before I know that I'm being sued?

    26. Re:Initial image by agreed experts, not RIAA by jbo5112 · · Score: 1

      In my case there could be a class action suit against Sony. I've got 11GB of all legal mp3's on my hard disk, from a wide variety of publishers (although about half is Sony or BMG), which I access from work via a nfs share. Theoretically I could get caught since it travels across the internet, but I would sue the pants off of them for traffic sniffing and harassment, even if it means hiring Johnnie Cochrin.

      I couldn't find a clause in the DMCA giving law enforcement an exemption from copyright infringement (not that I can stand to look at it for more than a minute), so I think you have a case. Since they are going after people for making illegal copies of music, I say they should know better than to burst into someone's home, steal their hardware and make a copy of the data because they thought there might be some copyrighted music (intent to make illegal copies). It definitely deserves the full $250,000 and 5 years in jail (IIRC per incident), plus any loss of revenue by the copyright holder, up to $100,000 per copyright.

      I only have 2 questions:
      1) Would this be any more than a slap on the wrist?
      2) How do you jail a corporation for 5 years?

    27. Re:Initial image by agreed experts, not RIAA by paganizer · · Score: 1

      Yeah, that is sort of similar to my situation.
      I have code on my system that I think could be classified as trade secret sort of stuff, plus lots of private data such as genealogy info (birthdays, the dirty laundry on some relatives, etc), my tax data, the tax data for the people I assist with their taxes, copyrighted works of art, and code for a patent pending network security process that I just want to keep buried.
      I also have work records for consulting jobs with banks & a couple of government groups.
      I'm not letting ANYONE have access to my drive, I don't care who they are. If the (maf)IIA managed to get their hands on it, I would be doing my damndest to get them & whoever they conned into helping them thrown under a Federal Lockup.

      --
      Why, yes, I AM a Pagan Libertarian.
    28. Re:Initial image by agreed experts, not RIAA by nospam007 · · Score: 2, Interesting

      TrueCrypt is pretty neat, but that brings up a question. If you encrypt your entire hard drive, what happens when your computer is taken as evidence? Can you be required to divulge the decryption key?
      ----
      from the trucrypt website:

      Plausible Deniability

      In case an adversary forces you to reveal your password, TrueCrypt provides and supports two kinds of plausible deniability:

            1. Hidden volumes (for more information, see the section Hidden Volume).

            2. It is impossible to identify a TrueCrypt volume. Until decrypted, a TrueCrypt volume appears to consist of nothing more than random data (it does not contain any kind of "signature"). Therefore, it is impossible to prove that a file, a partition or a device is a TrueCrypt volume or that it has been encrypted.

      TrueCrypt containers (file-hosted volumes) can have any file extension you like (for example, .raw, .iso, .bin, .img, .dat, .rnd, .tc) or they can have no file extension at all. TrueCrypt ignores file extensions. If you need plausible deniability, make sure your TrueCrypt volumes do not have the .tc file extension (this file extension is 'officially' associated with TrueCrypt).

      When formatting a hard disk partition as a TrueCrypt volume, the partition table (including the partition type) is never modified (no TrueCrypt "signature" or "ID" is written to the partition table).

      Whenever TrueCrypt accesses a file-hosted volume (e.g., when dismounting, attempting to mount, changing or attempting to change the password, creating a hidden volume within it, etc.) or a keyfile, it preserves the timestamp of the container/keyfile (i.e., date and time that the container/keyfile was last accessed* or last modified), unless this behaviour is disabled in the preferences.

    29. Re:Initial image by agreed experts, not RIAA by tmc · · Score: 1

      Actually this process is the standard process for claiming privilege over data for any reason permited by the courts or rules of evidence (professional privilege - ie legal/medical and similar, and in some cases reasons of national security or contractual obligation) under processes for discovery in civil cases in Australia.

    30. Re:Initial image by agreed experts, not RIAA by s7uar7 · · Score: 1

      How would they know if you swapped your disk? Just buy a cheap 40GB disk, install the OS and a couple of programs, then stick it in a cupboard 'just in case'.

    31. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 2, Interesting

      or you can just pay for the music you listen to. Simpler isn't it.

    32. Re:Initial image by agreed experts, not RIAA by RedlumF · · Score: 1

      Umm, you do know that computers can't really tell the time though.

      You set the time in BIOS (say 6 years ago), reinstall your OS. You can have nicely-aged timestamps :-)

      /Alex

    33. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 1, Interesting

      That's pretty easy... sanitize your home dirs when you get the subpoena, set your PC's BIOS date about 6 months back, *then* mil-std wipe your drive, re-install your OS. Copy your (sanitized) homedir back, then reboot, set the BIOS a few weeks ahead, edit a few files... visit a few websites.. repeat a few times and you have a plausible 6-month history for your squeaky-clean PC. Easy to do all this the same evening you get the lawyer's letter.

      Timestamps are totally unreliable if you have a few hours of time on your hands to create a false trail. I'm amazed the courts consider *any* PC-derived evidence as admissable. It just shows the ignorance of the legal system in general. Until or unless we have TPM imposed upon us, no computer-related evidence is really trustworthy.

      Thank goodness. :-p

    34. Re:Initial image by agreed experts, not RIAA by KDR_11k · · Score: 1

      Wouldn't want them to find any weapons of mass destruction on your harddrive, right?

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
    35. Re:Initial image by agreed experts, not RIAA by vidarh · · Score: 1

      For starters, if the timestamps of all of your files (or just "the wrong files") are from after the case started. Realistically faking this is HARD. For starters, you need everything to be consistent - they will subpoena your ISP's records, so if there are no traces of you being online, it will be extremely suspicious. If you do fake traces (browser history, browser cache etc.) it needs to make sense. For instance, if they find browser cache items on your disk and the pages are new but have old timestamps....

    36. Re:Initial image by agreed experts, not RIAA by vidarh · · Score: 1
      Old hard drives crash and get tossed

      And if you toss your "crashed" hard drive once a case is underway, you can expect the judge to treat it as destruction of evidence. Treating law enforcement and the judiciary as if they're stupid is never a good legal strategy.

    37. Re:Initial image by agreed experts, not RIAA by jonbryce · · Score: 1

      Priveleged file list is basically *.doc and outlook.pst - ie the correspendence to/from your lawyer.

    38. Re:Initial image by agreed experts, not RIAA by cammoblammo · · Score: 1

      Not to mention that pleading the Fifth in Australia makes you look as stupid as hell.

      I do know someone who tried this. The judge adjourned the hearing immediately and refused to continue until she got a lawyer.

      --

      Cogito, ergo sig.

    39. Re:Initial image by agreed experts, not RIAA by SCHecklerX · · Score: 1

      well, at least on FAT type filesystems, I've found that ctime is quite difficult to fsck with. I've tried. My car stereo, when reading a usb-connected drive (and apparently every car head unit out there, I've done some research), INSISTS on ordering things by creation time. Not modification time. Not file name. Creation time. So, the only real thing you can do to change the creation time is to re-create the file. Touch no workee, sorry. Neither does rename or move. You have to actually re-create the file.

    40. Re:Initial image by agreed experts, not RIAA by maxume · · Score: 5, Interesting

      TrueCrypt inside of TrueCrypt.

      The inner volume can be hidden, and the creators believe that it is robust enough that it can not be identified if you don't know it is there.

      http://www.truecrypt.org/

      --
      Nerd rage is the funniest rage.
    41. Re:Initial image by agreed experts, not RIAA by maxume · · Score: 1

      I think for starters you would have to have two disks, with some sort of watch dog mirroring the activity of the first disk to the second disk, and then run your media gathering software in a virtual machine, with the watch dog set up to ignore just that activity(which probably isn't even possible), so then you can just pull the dirty disk and the clean disk has all of your normal activity on it.

      --
      Nerd rage is the funniest rage.
    42. Re:Initial image by agreed experts, not RIAA by Skapare · · Score: 5, Insightful

      A subpoena is supposed to not cause undue harm or burden. Since due process has not actually taken place (e.g. argue against it in court), the harm and burden is supposed to be limited. Preventing someone from using their computer is, IMHO, an undue harm and burden. This is the principle our laws came from (not that the laws actually implement it very well).

      In the "old days" (when such principles were established), evidence was generally written on paper. An order to preserve evidence would mean not destroying those papers. That would not have been an undue burden in most cases. Someone doing more stuff with papers is generally going to be buying more paper, or at the very least doing more writing in the remaining blank spaces of paper.

      The computer of today does not fit an analogy of paper. Perhaps the CDROM backups might. Using a computer typically does involve deleting old data and using the space for new data.

      But there is an even more extreme situation here. Microsoft Windows is so vulnerable to exploits that several things can end up destroying evidence, or exacerbating the burden. Infectious programs may cause damage or filesystem corruption. Spamware and spyware may be so pervasive that the only option is to wipe the disk and re-install the OS. It has happened to several of my friends and family (in many cases I've been the one to diagnose the problem and carry out the cure which first involved booting Linux to run "dd" to be damned sure the drive was wiped clean, before booting the Windows install disk to start all over). I actually recommend to people that they re-install Windows every 3 months if there are no visible signs of infection (or immediately if there are).

      Is it really the intent of the court to tell someone they must not clean out the infections in their computer, and must let the spamware keep popping up various ad windows, and must let their computer keep emailing spam to others on the internet? Will the court also extend that order to the ISP to prevent the user's account from being shut off due to all the spam coming through?

      Courts do need to learn a whole lot more about technology. And they sure aren't going to get it in an ex-parte hearing, especially with RIAA lawyers.

      IMHO, when a court has issued a subpoena that does cause harm and burden by preventing someone from using their computer, at least for more than a day or two, that court has overstepped its authority. Note that this is an opinion, not a description of how lawyers and judges have currently structured things (which is really wrong because of their lack of knowledge about technology). Fixing it, though, is going to be a tough issue for the future.

      But do keep in mind that lost evidence can be very easily the result not of the user, but of things beyond the user's control, at least if they keep using their computer. Tell me what you would think if a subpoena ordered you to shut your computer off, and not run it or use it at all, for 30 days, until they can get a bit image of the drive made (whether you did anything suspect or not)?

      --
      now we need to go OSS in diesel cars
    43. Re:Initial image by agreed experts, not RIAA by maxume · · Score: 1

      You're allowed to copy their music too. You just aren't allowed to distribute it.

      --
      Nerd rage is the funniest rage.
    44. Re:Initial image by agreed experts, not RIAA by lucifuge31337 · · Score: 1

      "My hard drive thingey crashed and I had the computer store fix it. They said something about spyware or robots or something, your honor."

      --
      Do not fold, spindle or mutilate.
    45. Re:Initial image by agreed experts, not RIAA by statusbar · · Score: 1

      But they are not allowed to have a single copy my compositions without paying me!

      And what if the files that my own compositions are in had DRM on them? Would they have to violate the DMCA in order to listen to them?

      --jeffk++

      --
      ipv6 is my vpn
    46. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      I can't believe this was modded as "flamebait", considering most of the unintelligent scenarios that are being discussed. Pay for what you DL'd and you don't have to worry about a lawsuit....

    47. Re:Initial image by agreed experts, not RIAA by Tanktalus · · Score: 2, Funny

      Works even better if you can get that clock in the bottom-right to blink "12:00"... the judge will just say "yeah, my VCR does that, too" and dismiss the case.

    48. Re:Initial image by agreed experts, not RIAA by neoform · · Score: 1

      *cough*

      "it's an unformatted hard drive."

      --
      MABASPLOOM!
    49. Re:Initial image by agreed experts, not RIAA by jZnat · · Score: 1

      So, have a hard drive ready. Or, do as I do and keep your media on a separate hard drive because that one you store your OS on isn't nearly big enough to hold all the por^W Linux distros you have.

      --
      'Yes, firefox is indeed greater than women. Can women block pops up for you? No. Can Firefox show you naked women? Yes.'
    50. Re:Initial image by agreed experts, not RIAA by fourchannel · · Score: 1

      Just because you think that you should pay money to listen to music, does not make complete harddrive encryption unintelligent. I believe that the people here who know what they are doing when encrypting their harddrive are probably a lot smarter than you think. Furthermore, given the ability to encrypt your harddrive, leave no evidence of anything, and pay nothing seems to be a more intelligible choice than throwing money at an obviously corrupt organization. -- That is, however, just my opinion.

      --
      ---FourChannel---
    51. Re:Initial image by agreed experts, not RIAA by jamar0303 · · Score: 1

      Paying for it doesn't mean you're out of the woods- I live in China. Quite a bit of my music collection I can't bring back even though I paid for it. Yes, some of it is because it's a commercially pirated disc, but others are because they say "not for distribution outside of Mainland China"- those are perfectly legit, licensed discs. I paid for them, I want to take them with me- why can't I (apart from the pirated ones- but I actually have had trouble with the licensed CDs because it says that on the jewel cases)?

      --
      OSx86 FTW
    52. Re:Initial image by agreed experts, not RIAA by jamar0303 · · Score: 1

      Oooh, yes. Using the "but I had a virus/adware and my computer became a spam-sending zombie" line would probably get you out of having to have that old hard drive be left exactly as it was- unless the RIAA would like to pay damages to those that were affected by the infected computer.

      --
      OSx86 FTW
    53. Re:Initial image by agreed experts, not RIAA by jamar0303 · · Score: 1

      Geez- someone actually tried to bring an element from the AMERICAN constitution in AUSTRALIA? I must be new here.

      --
      OSx86 FTW
    54. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 1, Interesting

      Yeah, but they'll still think you're trying to hide something.

      If you really want to hide something, do this:

      1. Go to a store and buy a large external hard drive. Pay with cash.
      2. Use loop-aes, TrueCrypt, or whatever you use on the drive.
      3. Install VMWare, Qemu, VirtualBox, KVM, Xen, or whatever you use.
      4. Create a virtual machine for doing your filesharing in. Store it on the external drive.
      5. Store all downloaded content on the external drive.

      This way, if the RIAA wants your computer's hard drive they won't get anything. They don't have to know the external exists. They won't see the filesharing apps installed. They won't see 60gb TrueCrypt volumes with 10 office documents in it (since the rest is in the hidden part...). Just make sure that the true path of the VM isn't listed in your virtualization software's history. And create a few vms of various operating systems so it looks like you use it for things.

    55. Re:Initial image by agreed experts, not RIAA by Buran · · Score: 1

      Uh ... if it happened before you knew you were being sued, what exactly is the crime here? Not being psychic? I'd like to see them prosecute THAT. There's lots of cases where, say, a car holds vital evidence and the owner of the car, not knowing that, has the car cleaned up. You can't exactly hold someone who didn't know about it responsible for a crime as it's not a crime to clean your car when you didn't know why you shouldn't clean it.

      (I hope that makes sense).

      Or were you really trying to argue that it's legally actionable to not be able to foretell the future?

    56. Re:Initial image by agreed experts, not RIAA by General+Wesc · · Score: 2, Insightful

      Pay for what you DL'd and you don't have to worry about a lawsuit....

      Nice to know you've been paying attention. After all, the RIAA never, ever causes trouble for those who are actually innocent, right?

    57. Re:Initial image by agreed experts, not RIAA by rsborg · · Score: 1

      That's pretty easy... sanitize your home dirs when you get the subpoena, set your PC's BIOS date about 6 months back, *then* mil-std wipe your drive, re-install your OS. Copy your (sanitized) homedir back, then reboot, set the BIOS a few weeks ahead, edit a few files... visit a few websites.. repeat a few times and you have a plausible 6-month history for your squeaky-clean PC.
      I know this won't dissuade the more daring, but there's a flaw right there (bolded above). When you visit any external system, you need to make sure the timestamps of the metadata in those files is in-sync (within reason) with your "current datetime"... meaning if you're faking visiting websites from 1998, and the content of those sites you're downloading is from 2007, you better show em your Flux Capacitor, or prepare to get caught for tampering with evidence.

      All that said, this whole "fishing expedition" that the RIAA can force on you, AND the fact that shared mp3's are even illegal are quite disturbing to me. Let's pray that in 5-10 years, the music industry wakes up and finds a business model that doesn't require them to play the jack-booted thugs in 1984.

      --
      Make sure everyone's vote counts: Verified Voting
    58. Re:Initial image by agreed experts, not RIAA by Bri3D · · Score: 1

      Just use a truecrypted embedded crypto partition and don't keep a shell history or automount it anywhere.
      It's not discernible from random data, so you can deny it even exists with no fear of retribution.

      And, of course, crypt the entire rest of your drive with a normal crypt partition and drag your feet on giving over any keys.

    59. Re:Initial image by agreed experts, not RIAA by jasen666 · · Score: 1

      You would change the date in your BIOS before attempting any such nonsense, to a date several months earlier before installing the OS on the new drive.
      No scripts needed to alter timestamps.
      Then change the date, a day or week at a time, and reboot, do a little websurfing, etc, to build up a few files with timestamps in between install date and the current date.

    60. Re:Initial image by agreed experts, not RIAA by Sancho · · Score: 1

      It's an absurd argument. Everything is copywritten the moment that it is placed in a tangible form. Yet there is plenty of precedent for getting copies of documents which may be relevant to a court case. You can try to fight the hundreds of years of case law. Good luck with that.

    61. Re:Initial image by agreed experts, not RIAA by Sancho · · Score: 1

      Yeah. Sure is strange that you haven't used your computer /at/all/ in a way that would modify timestamps in the past 6 years.
      Or that those service packs that weren't even out 6 years ago still bear that timestamp.

    62. Re:Initial image by agreed experts, not RIAA by JasonTik · · Score: 1

      Watch out for temporary files.

      Mount any folders that sensitive temp files would be on as special ram backed partitions, or on disk, encrypted with a one-time, never-leaves-ram key.

    63. Re:Initial image by agreed experts, not RIAA by statusbar · · Score: 1

      But I'm not talking about just copywritten music, I'm talking about encrypted, DRM-encumbered compositions of my own which they are not allowed to listen to without violating the DMCA via breaking the encryption or by extracting the key from me.

      Is the RIAA allowed to ignore the DMCA when THEY copy something?

      --jeffk++

      --
      ipv6 is my vpn
    64. Re:Initial image by agreed experts, not RIAA by Sancho · · Score: 1

      In the context of a court case, I would imagine so. At the same time, you'd have to prove that they listened to it, and that would be difficult.

    65. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      "Not for distribution outside mainland China" should not make you unable to take them with you. It should make you be unable to take a CASE of the same title out, because then your obvious intent would be to distribute. Distribution does not mean transportation. It means transmitting. A consumer's personal purchases should not be affected by that license statement.

    66. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 1, Insightful

      Pull the AG defense.

      "I don't recall"

      If it's good enough for Congress, it's gotta be good enough for a judge.

    67. Re:Initial image by agreed experts, not RIAA by iamacat · · Score: 1

      The chances of anyone obtaining credible evidence that you erased the files AFTER getting subpoena are miniscule though. If you make regular full backups, you can just restore a month old image after a few secure erase patterns and make it look like the computer hasn't been turned off for a while. If you keep "confidential" files on a separate disposable drive, you could always have misplaced it a day before getting subpoena. In murder cases, there may be multi-million dollar techniques to analyze dust layers on computer fans to see when they are turned on. But would anyone have access to such resources, which are only owned by the government, on a suspicion of a few mp3s?

    68. Re:Initial image by agreed experts, not RIAA by WWWWolf · · Score: 1

      Suppose one were to have a CRON entry that does touch /* -R every night at 3AM?

      Bah. Install the hypothetic +reallyeff'dupkernelfromcompletelunatic kernel patch, and enable the CONFIG_MTIMES_HUH_WHAT_MTIMES ("muck up the utime() system call to always write 0 to the modtime field").

      You know, it doesn't pay to be just paranoid. Slight paranoia is healthy for you in many cases. If you want to be properly insane, you also have to be dangerous to people around you, or at very least, your kernel's file access features. =)

    69. Re:Initial image by agreed experts, not RIAA by ray-auch · · Score: 1

      Regardless, anyone who gets a subpoena from the RIAA should be smart enough to ...remember that intentionally destroying evidence is a _criminal_ offence (most places), and people get jailed for it.

      You might also vaguely remember a large accounting firm called Andersen, now dead and gone, and that what killed them was not being involved in fraud at Enron (which they were never prosecuted for IIRC) but destroying the evidence.

    70. Re:Initial image by agreed experts, not RIAA by FrankieBaby1986 · · Score: 1

      I think you missed something. Setting the BIOS clock back is just for the initial system re-install. Then you fix the clock, restore your home directory (incl the past X months browsing history minus infringy-things) and your set. Old install, with browsing history and various aged-files, etc. Clean System.

      --
      ERROR: SIG NOT FOUND (A)bort, (R)etry, (F)ail?:
    71. Re:Initial image by agreed experts, not RIAA by cammoblammo · · Score: 1

      Unfortunately there are a lot of people here who think they're lawyers because they see a lot of legal drama on TV. Unfortunately it's all American, and even then I'm pretty sure the legal stuff going on doesn't pass legal muster anyway. As for me, I learnt the law by reading /.

      --

      Cogito, ergo sig.

    72. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      1) Get subpoena'd.
      2) Reset system clock to a few days before the subpeona was issued.
      3) Take out incriminating hard drive, pummel into small pieces, and take to dump yourself.
      4) Put in spare drive (that was purchased long ago and you keep for emergencies, right?).
      5) Install O/S on the backdated system, with network disabled so nothing with timestamps can be auto-downloaded.
      6) Shutdown system, use bios to set clock back to current time.

      "Yeah, a virus got my computer, and I reinstalled before I got your subpoena, then I didn't use the computer for a few days. Sorry."

      Personally, I either pay for my music, or do without if I think the price is too high...

    73. Re:Initial image by agreed experts, not RIAA by arminw · · Score: 1

      .....Simple solution is to simply use something like TrueCrypt...........

      An even simpler solution for a person doing anything that may be subject to a court proceeding is to boot the computer from an external hard drive. Big drives, enough to store all the music/movies etc. are cheap enough these days. The "innocent" everyday work is done with the computer booted from its internal disk. For "questionable" activity, the external drive gets booted and the internal disk unmounted. When done with "nefarious" activity, this external disk is placed into a safe hidden spot. When the "authorities" come to take the computer, there will be nothing incriminating found thereon. If computing activity is important, another computer can be purchased or a friend's system can be used, which will boot the secret external disk. With this simple system no trace of bad evidence will be found by even the most clever computer experts unless they also find that external drive. No gyrations with BIOS, encryption or re-installs are needed.

      --
      All theory is gray
    74. Re:Initial image by agreed experts, not RIAA by jamar0303 · · Score: 1

      OK, thanks. I did have some trouble with that before and was stopped on the basis of "how do I know it's for you and it's not going to go on eBay or something?" Glad to know I was in the right there.

      --
      OSx86 FTW
    75. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      "If you think psying a few thousand dollars is bad, you should see what a felony conviction does for your life..."

      Yeah, someone who downloads mp3s won't be able to get a decent job - yet we hand them to illegal immigrants with unknown histories by the millions...ok that was just to put your scary statement into perspective.

      Most felonies only end up being a few thousand dollars - unless it was some kind strong armed or armed or violence etc. or restitution. Eventually you can vote and even get it removed - but yeah it blows big time.

      I don't understand how the RIAA can demand such huge figures in damages but the defendant only be charged with a misdemeanor. Plea down the charges I guess...the problem is most people subpoenaed have never even had a ticket for jaywalking and scare easy. People who don't scare easy usually end up with the charges dropped or reduced big time it seems.

    76. Re:Initial image by agreed experts, not RIAA by cbreaker · · Score: 1

      AH HAH! Perfect! Just use Outlook to store all your 100GB of MP3's! =)

      --
      - It's not the Macs I hate. It's Digg users. -
    77. Re:Initial image by agreed experts, not RIAA by cbreaker · · Score: 1

      It's quite possible to lose encryption keys, too. What are they going to do, lock you up for 50 years because you lost a CD?

      If it's encrypted, they wouldn't be able to make a believable case for knowing what's there, so there probably wouldn't be any legal action taken against you if you refuse the key. The only argument they could use would be "Well, we can't find anything incriminating anywhere else."

      --
      - It's not the Macs I hate. It's Digg users. -
    78. Re:Initial image by agreed experts, not RIAA by cbreaker · · Score: 1

      "And I see here you work as a Network Administrator for the state..."

      They can pull up your employment title. You can't exactly plead ignorance if your job is to know this stuff. However, it does make it easier for us to bullshit a reason as to why that disks' data is all new.

      --
      - It's not the Macs I hate. It's Digg users. -
    79. Re:Initial image by agreed experts, not RIAA by cyclomedia · · Score: 1

      Seems like a lot of effot to go to: stashing files inside a hidden volume at the end of an other volume which is encrypted and disguised as a corrput but massive jpg accessible only by a piece of software on a secret usb dongle you hide taped to the underside of your toilet cistern lid...

      when you could just, you know, EITHER PAY FOR THE MUSIC / MOVIE IN THE FIRST PLACE OR NOT LISTEN TO / WATCH SAID MUSIC MOVIE AT ALL.

      It's not like there's an 11th commandment saying "Thou shalt have the right to see the latest holywood superhero blockbuster for free" is there?

      (it was nice to have good karma for a while there...)

      --
      If you don't risk failure you don't risk success.
    80. Re:Initial image by agreed experts, not RIAA by CogDissident · · Score: 1

      Well, considering the vast, VAST majority of people have pirated music, at this point they can basically target any home address they want. Ocasionally they'll target someone who doesn't own a computer, but really, what are the odds of that? http://www.designnine.com/news/node/643

    81. Re:Initial image by agreed experts, not RIAA by bint · · Score: 1

      I have a dying battery on my mainboard so the system time gets screwed up if I power of the computer for too long. Is that close enough? Then I have slightly used battery to sell anyone worried about the ??AA :)

    82. Re:Initial image by agreed experts, not RIAA by FunkyELF · · Score: 1

      I guess that would be okay for certain operating systems that have incremental releases.

      It is probably harder to do for systems like Gentoo where you always get an up to date system at install.

      If you set the bios back to 2006 and did an install of Gentoo, even if you did it from a 2005 CD, you'd still wind up with files created in 2007 on your system with dates of 2006.

    83. Re:Initial image by agreed experts, not RIAA by Anonymous Coward · · Score: 0

      Why would it be hard? Why would you save your browser cache? I delete them all upon browser logout.

      A re-install of Windows sets all Timestamps to Microsoft's original modification date. The creation timestamp is the one that will be set to the date of install. Just set your system time before you install the OS, then set the correct time when you're done. Don't bother patching, you'll have an easy excuse that you may have been attacked. You can even leave it unpatched so that you are attacked, and you'll have evidence of "hackers" on your system.

      Timestamps can be changed. In fact, you can run some quick scripts to set timestamps across your entire hard disk. There are three timestamps on every file, and each of them can be changed, although changing the access time is more difficult to keep consistant. Access time changes every time you access the file, listing it in the directory will change it. Access time is only useful if they've grabbed the disk before you can do anything to it. They'll need to make the disk read-only.

      Also, it's a good idea to run a frequent disk wipe on unused space. I don't have much unused disk space, so I don't bother to do it as frequently, since it's overwritten frequently enough. I'm in need of a new hard disk.

      It's not really that hard to fake time stamps if you know how. For them to track all your time stamps. They'd need to go through each and every file and do a statistical analaysis to see if your time stamp patterns match other time stamp patterns on the internet. If you always clear your cache and wipe your unused disk space, they have nothing to match up.

    84. Re:Initial image by agreed experts, not RIAA by vuffi_raa · · Score: 1

      what if I am a musician and I have mp3 rips of my own music? mp3 is priviliged... it is personal data

    85. Re:Initial image by agreed experts, not RIAA by Alter_Fritz · · Score: 1

      and you could sue the RIAA expert for making an illegal "perfect digital copy" of your music too! :-P

    86. Re:Initial image by agreed experts, not RIAA by Bri3D · · Score: 1

      Sadly, this sort of thing holds often because the prosecution can spin it into a million ways you're trying to obstruct justice. Courts somehow manage to claim that you're not upholding your right not to self-incriminate but that you must know the keys and that by refusing to give them up you're resisting the execution of a warrant.

      See Ohm's piece on the "Fourth Amendment Right to Delete" for more information on the search+seizure aspect of legal data forensics.

  2. Tell them to piss off by Anonymous Coward · · Score: 0

    Besides that I avoid knowingly listening to and downloading anything that RIAA can claim rights too. I'd tell them to go fuck themselves. But then again I shouldn't have anything to worry about. Still the invasiveness of it all would piss me off. Give them a drive that is filled with random data and claim it's encrypted and you forgot the key. But that might insinuate you're trying to hide something, so I'd just tell them to go fuck off and try to extort protection money from some other shmuck...

    and it seems to be in vogue/season/fashionable to go on a shooting sprees lately... any one wanna make a bet if the RIAA reps will become targets soon? Not that I would encourage such behaviour, but I'd have a hard time coming up with reasons to feel sad if such a thing were to occur...

    1. Re:Tell them to piss off by Wonko+the+Sane · · Score: 2, Insightful

      but I'd have a hard time coming up with reasons to feel sad if such a thing were to occur...
      How about the predictable knee-jerk reactions and new attacks on freedom that these events always cause?
    2. Re:Tell them to piss off by Anonymous Coward · · Score: 0

      How about the predictable knee-jerk reactions and new attacks on freedom that these events always cause?

      Yeah that's true, but I also think it's true that people who are using events like this to usurp more power and wealth will have no shortage of events to use as excuses for the necessity of such things, even if they have to stage and manufacture these events themselves.

      Naturaly of course the people don't want war. Why should some poor slob on a farm want to risk his life in a war when the best he can get out of it is to come back to his farm in one piece? Naturally the common people don't want war neither in Russia, nor in England, nor for that matter in Germany. That is understood. But, after all, it is the leaders of the country who determine the policy and it is always a simple matter to drag the people along, whether it is a democracy, or a fascist dictatorship, or a parliament, or a communist dictatorship. Voice or no voice, the people can always be brought to the bidding of the leaders. That is easy. All you have to do is tell them they are being attacked, and denounce the peacemakers for lack of patriotism and exposing the country to danger. It works the same in any country. -- Hermann Goering at the Nuremberg Trials ...and of course don't forget the Reichstag fire which Hitler was able to blame on the communists and justify his seizure of power. Or top secret US plans like Operation Northwood such as staging false terror attacks on the US population as justification to make war on the patsy country they choose to blame/involve some how... and okay this is drifting off topic, but it all goes hand-in-hand Nazi's, bullies, monopolies, and mafia thugs. A lot of BS and lies...

  3. Some things I wonder about are.... by NewYorkCountryLawyer · · Score: 4, Insightful

    1. Who pays for the neutral expert?

    2. Who makes the deletion of the privileged files?

    3. How are the privileged files going to be deleted?

    --
    Ray Beckerman +5 Insightful
    1. Re:Some things I wonder about are.... by zappepcs · · Score: 5, Insightful

      I have a similar question, possibly related. I have no less than 12 systems at home. On the very remote chance that I should even be accused by the RIAA, how would they know what system to look at, or which drive (I have quite a few) to look at for evidence. Who pays for that? Do they come in and simply confiscate everything? I might have hacked the DVR and moved my music there. I might be an upgrade junky and have upgraded every system that I own on a regular basis, including wiping the drives clean of any previous data. How do they figure they can tell the difference between my habits and someone trying to hide data?

      Are my computing habits putting me at risk if they should ask about my online activities? Should I be afraid? Should I be hiding stuff now?

      I don't download music or movies, but how do I prove that without having to go through such huge measures as going to court? The existence of MP3 files on my hard drive does not mean I've been downloading. If I buy a used system that has music files on it, am I guilty?

      My belief is that they don't have a right to look at it at all without hard evidence that I've been downloading illegally. The police are the only ones given the ability to search with probable cause only. Discovery for court purposes is one thing, do they search each defendant's home top to bottom to find any hidden hard drives? Do they 'interview' neighbors and friends to see if there is a missing hard drive they are just 'holding'?

      To me, this whole hard drive evidence thing is illegal in itself. What if a virus infected my machine as was being used to pass illegally downloaded files? What happens if the defendant's lawyer declares all data on the disk to be private, other than the OS files?

    2. Re:Some things I wonder about are.... by cdrudge · · Score: 1

      My belief is that they don't have a right to look at it at all without hard evidence that I've been downloading illegally. The police are the only ones given the ability to search with probable cause only. Discovery for court purposes is one thing, do they search each defendant's home top to bottom to find any hidden hard drives? Do they 'interview' neighbors and friends to see if there is a missing hard drive they are just 'holding'?
      Remember that if you are involved in a case directly with the RIAA, you are dealing with a civil matter. There is no automatic presumption of innocence per se. All the RIAA has to do is convince the judge that there might be evidence on the hard drive in order to have the drive enter the case. For copyright infringement of material online, it's not a hard thing to prove.
    3. Re:Some things I wonder about are.... by neoform · · Score: 1

      Why not just save yourself the trouble?

      http://www.truecrypt.com/

      --
      MABASPLOOM!
    4. Re:Some things I wonder about are.... by Workaphobia · · Score: 1

      I was wondering that too - what is proper technical procedure for removing files from an image? Is it enough to simply zero out the bits allocated for that file? What if it's cached or backed up somewhere else on the drive?

      From the hypothetical point of view of a technologically knowledgeable guilty party, I would look for some way to store the copyrighted files steganographically in something that can reasonably be considered private, and request that it be deleted from the image. Then again, if I'm using steganography, I probably wouldn't need those files deleted anyway.

      --
      Evidently, the key to understanding recursion is to begin by understanding recursion. The rest is easy.
    5. Re:Some things I wonder about are.... by DamnStupidElf · · Score: 1

      1. They better both pay equal amounts, or the neutrality is somewhat in question. The court should get to appoint an expert from a list of candidates submitted by both parties, to make it a little more impartial.

      2. With MD5 hashes of everything and a redundant, untouched copy of the disk, it shouldn't matter to the plaintiffs who deletes the files. Hopefully, the respondent can get another computer expert to help out with their lawyer present and go through a list of files, including caches and swap files, that should be deleted as privileged data. Since this is an RIAA copyright case, every file except the ones in the P2P directories should be privileged, although I don't know how that argument would stand up in court. I assume that the plaintiffs could challenge the extent of deleted privileged data, but they should need a good reason to be looking at anything but the P2P software, it's directories and logs, the registry (assuming it's Windows), and reasonable parts of the OS logs (limited to the dates in question, or thereabouts).

      3. Do they have the option of making a third copy of the disk, omitting the sectors that the privileged files resided on? That's far more secure and prevents the plaintiffs from attempting expensive data recovery on the drive with "deleted" files. What the ruling really should have specified was a list of MD5 hashes of each filesystem block, and then a hash of the entire list. That would ensure that when files were being deleted, only the blocks they were on would no longer match the hash, and the rest of the files could be verified as being from the original drive. Maybe they did do that, I don't know the details.

    6. Re:Some things I wonder about are.... by Anonymous Coward · · Score: 0

      Contrary to the opinion posted here already, my understanding of Texas pre-trial procedure as it relates to this question goes something like this:
      1. Costs go to Plaintiff - defendants are entitled to costs relating to the production of evidence, and where the court has ordered an expert to be retained, plaintiffs (seeking the evidence) are obliged to pay for costs to satisfy the courts order regarding the method of that production (retention by agreed upon expert, associate escrow costs, imaging costs etc.) This is part of why the plaintiff is required to make the image copies, not the defendant. The court has agreed the drive to contain discoverable evidence, and such duplication costs (even if it were production of documents) is borne by the plaintiffs. The notable aspect is that the court has determined as a matter of law that the drive is not itself discoverable, but contains discoverable evidence, no doubt a file to file cabinet analogy is applicable here. Retreival and excisement of non-discoverable information is the issue.

      2. Good procedural question - but the defendant will most likely provide a list of files it asserts are privileged. This assertion is default, and must be challenged (plaintiff cannot look at a file, decide it is pertinent, and then move based on that to make it discoverable/admissible). There is an ethical requirement that discoverable information be freely turned over, and it is backed by sanctions on both plaintiff and counsel.

      3. Privilege does not in this case seem to mean that the files are necessarily deleted, but marked as privileged. think of when privileged information is accidentaly transmitted to opposing counsels office... a problematic situation, ethics demands return of the documents, which do not become discoverable just because they were found, this gets into a more problematic issue relating to the drafting of discovery requests, in short - sanctions are a primary deterrent (as far as the courts power goes) to preventing counsel from inappropriately limiting evidence provided based on an arbitrary construction of the terms of a discovery request.

      hope this is useful to some extent...

    7. Re:Some things I wonder about are.... by trewornan · · Score: 4, Interesting

      do they search each defendant's home top to bottom to find any hidden hard drives?

      I'd been thinking about this and had more or less decided it would be a good idea to by a wireless hard dive (like this: http://www.whatlaptop.co.uk/YRtBdcdoWel2Yg.html). I might even really go wild and rip some of the plasterboard off a partition wall and wire it straight in to a ring main. Replace the plasterboard and repaint and you'd virtually have to pull the building apart to find it (unless you used RF direction finding) - and that's if you knew it was there. I can't imagine your average cop/lawyer realising.

      But would it be a fire hazard?

    8. Re:Some things I wonder about are.... by zappepcs · · Score: 1

      Just thinking about what you said, I'm going to keep dozens of hard drives in a box, and *IF* the **aa should ever wonder about what I've been doing, I'm going to hand them boxes of hard drives. None of them with anything useful on them. That is beautiful. Make it very expensive for them to even look and see what is available to look at. Fsck, I've got old full height 4GB SCSI drives for them to fumble with ... :) I bet I've got some old 300MB drives to deal with too.

    9. Re:Some things I wonder about are.... by springbox · · Score: 1

      Why are you worried if you don't download commercial music? MP3s aren't illegal.

    10. Re:Some things I wonder about are.... by zappepcs · · Score: 1

      That is simple to answer. I do not log every attempted login to my AP, nor do I trust the ISP (any ISP) to not fsck up and name me as the person attached to an IP address. From what I can tell, the evidence that brings the RIAA letter is capricious in nature, and completely not guaranteed to be accurate. There is no chain of custody for much of what they base their evidence of illegal copyright infringement on. If my AP gets hacked I will still be named. If my PC is hacked and a virus is downloading files and passing them off to some place in South America, I still get blamed.

      It could be as simple as when I bought my own cable modem, returned the rented one, and that modem remains identified as mine even after being rented to another customer. Because of the lack of chain of custody information, and serious doubts as to the veracity of any custody chain, I would have to prove that it wasn't me or go to court and have my personal life violated at the whims of a business entity with no legal powers. This is, in short, an abuse of the court system, my rights, and the constitution. At least that is my opinion.

      This whole 'war on downloaders' amounts to the same as saying the bank was robbed by a man in a blue Ford F150, so it must be this guy that was seen at the bank and ownes a blue Ford F150. Without real personally identifying information this is no better than a witch hunt, and in many ways much worse. What if a neighbor sends an anonymous letter to the RIAA stating that I've been selling CDs from downloaded MP3s to people? Of course it's not true, but I'm forced to go through the same life-interrupting process. The **AA simply needs to be slapped down VERY hard.

    11. Re:Some things I wonder about are.... by Sancho · · Score: 1

      Because it's a pain in the ass, and the RIAA has been wrong before? Because even if you don't have anything to hide, there's something creepy about a stranger reading your mail? Because there's a thing called 'privacy' which we used to hold dear, but which is slowly being eroded by the corporate government?

    12. Re:Some things I wonder about are.... by Alkivar · · Score: 1

      put it in a central air ducting then... the metal duct would help to prevent a fire from spreading should the drive burst into flame at some point.

    13. Re:Some things I wonder about are.... by arminw · · Score: 1

      ......I'd been thinking about this and had more or less decided it would be a good idea to by a wireless hard dive......

      Somebody might be sniffing and recording your wireless transmissions. A much safer way is to boot from a small external drive and store all the stuff you might get in trouble for on that. If you cannot find a safe place to hide a little hard drive you have a severe problem. If by chance they do confiscate you computer(s) they will not find any evidence against you. The main computer will only contain all your favorite games and innocent web material.

      --
      All theory is gray
    14. Re:Some things I wonder about are.... by ivan256 · · Score: 1

      You just made me really worried about something...

      I have boxes and boxes of hard drives. The accumulate from the resale of surplus machines, upgrades, repairs, etc... I don't know where half of them came from and I don't know what's on probably 75% of them. If the RIAA ever showed up at my house, who knows what they'd find on those drives. I hat to throw working hardware away, but I think it may be time for a mass hard drive disposal...

    15. Re:Some things I wonder about are.... by zappepcs · · Score: 1

      You got it, I'm firing up some old hardware now to beat the files off all my old hard drives, just in case. Not as easy as it sounds, but for me, if it won't work anymore, its hammer time (literally), then off to the dump.

    16. Re:Some things I wonder about are.... by Anonymous Coward · · Score: 0

      You do realize they [the RIAA] demand money out of people for just having a computer. You don't even need to have an internet connection. You do not even need to use the computer. They simply say "we have evidence that you stole from us and if you don't pay us by $10,000.00, we sue you for all you own". You say, but I don't have internet. They say you used you neighbor's or your relatives'. You say you don't know how to operate the computer. They say your lying or your kid did it therefore your responsible. I've made some slight exaggeration here, but you get the point.

      Many people pay out of fear of being crushed by these mega-companies. Some fight back, but fighting back is expensive both in time and money. And even when people "win" proving that the claim itself was baseless, the RIAA tries to leave the people to pay the legal fees that were required to defend themselves, even though, again, most of them couldn't afford to do that.

      Seriously, why be worried if you don't download? Because that doesn't matter to them. They go after people anyway. In fact, they've never won a legal case that I've ever heard of, but that doesn't matter. The name of the game is to get you to pay them before it EVER gets to a court. And it usually works! Be afraid! And stand against them!

      --Dave Romig, Jr.

    17. Re:Some things I wonder about are.... by gnud · · Score: 1

      Fsck, I've got old full height 4GB SCSI drives for them to fumble with ... :) I bet I've got some old 300MB drives to deal with too.
      Fill them with random data. If you're subpoenaed, say it's a truecrypt volume, and give them a password. When they say it doesnt work, respond with "Oh no! my files!"
    18. Re:Some things I wonder about are.... by zappepcs · · Score: 1

      Better yet, fill them with random data, then truecrypt the drive. Give them the actual password, then blame them for fscking up my files. I wonder if they would even report that the data was unreadable?

  4. Digital Forensics - a tough issue by mulhollandj · · Score: 5, Interesting

    Digital forensics is a very tough issue as laws are somewhat immature and judicial precedence over what is acceptable and what isn't, isn't set yet. What is considered in plain sight on a hard drive? These questions haven't been fully answered yet and it is going to take at least one high profile case before it is done. And always remember to use a write blocker when examining somebody else's hard drive. Even booting into Windows will change the timestamps on a lot of files which might allow the theory of the evidence being planted.

    1. Re:Digital Forensics - a tough issue by Tuoqui · · Score: 1

      Any system admin/forensics expert knows you dont boot a drive up in windows. You mount it in Linux with no-write flags and stuff so your system doesnt contaminate the drive's contents accidentally.

      --
      09F911029D74E35BD84156C5635688C0
      +2 Troll is Slashdot's way of saying groupthink is confused
    2. Re:Digital Forensics - a tough issue by Beryllium+Sphere(tm) · · Score: 2, Informative

      Preferably with a live CD that always mounts things read-only. Helix from e-fense.com is a well known one.

      Be aware that some file systems have counts of how often they've been mounted that increment even when you mount read-only, which is all it takes to make a hash change. Hardware write blockers are not strictly necessary but are handy. Make sure the one you use has been through real testing, preferably your own.

  5. Re:Piracy just hurts the little guy. by NewYorkCountryLawyer · · Score: 2, Insightful

    Sounds like an RIAA troll to me. Yeah, like the RIAA is trying to help small business.

    --
    Ray Beckerman +5 Insightful
  6. Re:Piracy just hurts the little guy. by Travelsonic · · Score: 1

    Copy&Paste trolls suck... expecially when spewing the EXACT SAME thing in each topic about similar issues.

    --
    If you believe in privacy, and believe you have "nothing to hide" at the same time, you're a goddammed idiot
  7. Re:Piracy just hurts the little guy. by jasen666 · · Score: 1

    Yay, anonymous propaganda trolls.
    Too bad I have no mod points.

  8. Re:Piracy just hurts the little guy. by Anonymous Coward · · Score: 1, Funny

    >> "I'd need to aim for a different demographic, the family market."
    >> "I don't sell sick stuff like Marilyn Manson or cop-killer rap, and I'm proud to have one of the most extensive Christian rock sections that I know of."

    Damn those lieing stealing Christians!! I'll bet the mormons are twice as bad. I mean, they believe in Jesus twice, once in the Old World and once in the New World!

    I'll bet those "Marilyn Manson" or "cop-killer rap" listening kids probably aren't smart enought to even use a computer. So maybe you should think about changing your "demographic" again if you want to make money? ;-)

  9. I love this line... by spiritraveller · · Score: 0

    I wanted to tell them the truth - it's because they wear old clothes and have cheap haircuts.

    This is great stuff.

    Is it an RIAA troll or is it someone parodying an RIAA troll?

    Only the RIAA knows.

    1. Re:I love this line... by NewYorkCountryLawyer · · Score: 3, Interesting
      Let's take a poll.

      My vote: it's the troll. It's too stupid to do a parody of anything.

      --
      Ray Beckerman +5 Insightful
    2. Re:I love this line... by spiritraveller · · Score: 1

      One man's troll is another man's parody.

      I do think it's likely that it's someone working for the RIAA.

      It's a testament to their cluelessness that they would hire someone to write such a ridiculous shill-piece.

  10. Re:Piracy just hurts the little guy. by jimmydevice · · Score: 1

    Last time on slashdot, "iTunes is a monopoly". This troll got a (Score:4, Funny).

  11. Re:Piracy just hurts the little guy. by Mostly+a+lurker · · Score: 0, Offtopic

    To take your post seriously (though I think it is a troll) you seem to imply that the nice "family" demographic you cater to are predominantly pirates, who thus have no use for your store except when purchasing a cool disk that is not yet online. There are other possibilities. Perhaps some of your erstwhile customers find merit in being able to cheaply purchase the specific tracks they like online rather than purchase expensive albums full of dross, in which they have no interest, aggregated with the one or two tracks they actually want.

  12. Where's Mr. Tuttle when we need him? by StefanJ · · Score: 4, Insightful

    It's like reading a procedures document from the Ministry of Information Retrieval.

    You just KNOW that the creepy bureaucratic gnomes who write up this stuff are going to have a hand in designing the "revised Internet" that's made the news lately.

    Your computer has been used to violate article IV of the The Working Artists' Protection Act. Please unlock your front door, sit on the ground, place your hands behind your head and wait quietly. Attempts to flee, contact the press, or hire legal counsel is a violation of the P.A.T.R.I.O.T. III Act and may result in detention in an Overseas Protective Facility.

  13. Re:Piracy just hurts the little guy. by NewYorkCountryLawyer · · Score: 1

    That's only if other RIAA trolls get mod points.

    --
    Ray Beckerman +5 Insightful
  14. Wait a sec. Who makes the list? by Anonymous Coward · · Score: 0

    Still somewhat of a win for the RIAA. If defendants during discovery had to produce a list of documents that "we don't want plaintiffs to see" and produce everything else, that'd be a prohibitively expensive task for the defendants and still presents a huge pressure to settle.

    "Hey ol' buddy ol' pal ol' chum. We didn't find the songs we were looking for. But we DID find some neat info about you in your cache..."

  15. Re:Piracy just hurts the little guy. by NewYorkCountryLawyer · · Score: 2, Interesting
    It's definitely a troll. It keeps reappearing, in the same words, in different places. There is nothing these guys won't stoop to.

    And notice that it's an off-topic troll, to boot.

    --
    Ray Beckerman +5 Insightful
  16. Re:Piracy just hurts the little guy. by Anonymous Coward · · Score: 0

    There is one thing you could do to solve your problem. Go find a cliff or a bridge somewhere, then take your entire fucktarded family. Have all of them jump off to their deaths, and after that jump to yours. Problem Solved.

  17. But "Metallica.mp3" is my financial records! by ZombieRoboNinja · · Score: 3, Funny

    Think they'd buy it?

    1. Re:But "Metallica.mp3" is my financial records! by techno-vampire · · Score: 1

      Well, if it were me, I'd just rename that file to something appropriate for financial records before letting them get their filthy little paws on it.

      --
      Good, inexpensive web hosting
    2. Re:But "Metallica.mp3" is my financial records! by Anonymous Coward · · Score: 0

      Maybe you should rename all your mp3s to .xls

    3. Re:But "Metallica.mp3" is my financial records! by houghi · · Score: 1

      Reminds me that I must record my slamming with a metal stick on a metal plate. I will record 2. I will only put the first one online, because I like it more. One I call A, the other B. As I also have wood (a and b) I will call it metallicA.mp3

      The next part is to wayt for the RIAA to sue me and then counter-sue the hell out of them.

      --
      Don't fight for your country, if your country does not fight for you.
  18. Why a broken hash? by Anonymous Coward · · Score: 1, Insightful

    Isn't MD5 "broken"? Why choose such a hashing method when SHA-224, 256, 384 or 512 are all available and safe from collision attacks?

    1. Re:Why a broken hash? by ZachPruckowski · · Score: 2, Interesting

      In this instance, that doesn't really matter. People don't deliberately keep large piles of pointless bits or stuff with a bunch of useless bits at the end on their hard drives. It'd be blatantly obvious what is a collision-attack file and what isn't. If it's an MP3 with a large bunch of bits tagged somewhere to make the MD5 match, then it's a plant.

    2. Re:Why a broken hash? by daveb · · Score: 1

      Why choose such a hashing method when SHA-224, 256, 384 or 512 are all available and safe from collision attacks?

      IAMAL nor a forensic investigator - but I believe that any investigator worth their salt wouldn't care and might even agree with your suggestion.

      However MD5 is perfectly fine for checksum to verify file integrity. Remember - they are not talking about using MD5 to encrypt the data - they are using it to make a "finger print" of the image so that there can be no claim of tampering with the evidence. As such - it MIGHT be possible to have a collision, but the use of a collision is pretty limited. The chance is pretty remote of setting me up by replacing my pictures of my cat LuLu with metalica-album.mp3, and having the file checksums be the same.

    3. Re:Why a broken hash? by Anonymous Coward · · Score: 0

      I recall an article about a guy who got out of his running a red light ticket because the MD5 hash of the camera could not be verified.

    4. Re:Why a broken hash? by plasmoidia · · Score: 1

      People don't deliberately keep large piles of pointless bits or stuff with a bunch of useless bits at the end on their hard drives. They don't? If it is an image of the entire hard drive (or even just one partition), I would expect there to be random bits in the unused sections. I guess it depends on what the "image" is. Is it a pure binary image or just a copy of all the files on the disk?
    5. Re:Why a broken hash? by Anonymous Coward · · Score: 0

      Actually the current sad situation is that none of the mainstream hashes are really trustworthy. Some of them haven't been broken publicly, but eventually they will be. They just aren't different enough from already broken stuff.
      Maybe when we get an "AES of hashes" competition going things will improve.

    6. Re:Why a broken hash? by Anonymous Coward · · Score: 0

      MD5 and SHA shouldn't be used for anything right now. SHA-1 is stronger against some related attacks, but it's not collision-resistant anymore. RIPEMD is a goner. Those hashes are, and should be, dead and gone.

      WHIRLPOOL's slightly differently-structured and a lot bigger. We'll see.

      TIGER192's unusual, and the same attack basically isn't relevant to it as it stands. A different attack on reduced-round TIGER has worked, but can't be extended to the full hash.

      No-one's presented anything on SHA-256/384/512 because although the attack might work, the work factor could still be too high, but it's not looking good in the long term - tunnels might exist.

      For some reason, no-one's managed to apply it to RIPEMD160. I'm not sure why.

      NIST have already announced a competition, but recommend the SHA-2 family for now.

      I might add the NSA knew about these attacks for years - this was exactly what the extra rotate that differentiates SHA-1 from the original SHA was designed to protect against, and MD5 and SHA are much weaker against it than SHA-1. It came as a surprise that the original Wang attack was extended so easily.

  19. How do you find an expert? by grahamsz · · Score: 1

    I know lots of people who could take an image of a disk and come up with an MD5, but I can maybe think of one person who i know that is sufficiently recognized that he could be considered a computer forensics export.

    I'm sure if I suggest someone as a neutral expert, the RIAA will discredit them and likely leave one of their guys as the only choice.

    There may well be a market here though. I'm available for a small fee and largely neutral :)

  20. Re:Piracy just hurts the little guy. by Anonymous Coward · · Score: 1, Interesting

    It's definitely a troll. It keeps reappearing, in the same words, in different places. There is nothing these guys won't stoop to. And notice that it's an off-topic troll, to boot.

    It's very clearly an instance of sustained irony.

  21. Re:Piracy just hurts the little guy. by AC5398 · · Score: 1

    Definitely troll. The exact same post has been posted and reposted for years.

    There is a recent article on the Toronto Sun website - it reminded me of the Slashdot as soon as I read it. Sam the Record Man still exists on Yonge Street, despite the implication in the article that it doesn't.

  22. Re:Piracy just hurts the little guy. by Lost+Engineer · · Score: 0, Offtopic
    Nice little bit of fiction there AC.

    I decided that to grow the business I'd need to aim for a different demographic, the family market. My store specialised in family music - stuff that the whole family could listen to.

    "That's it. What's your name? You're blacklisted. Now take yourself and your little bitch friend out of my store - and don't come back." Perhaps your problem is that when said families actually come into the store you insult them with words that you'd never hear in a Christian rock album.
  23. Re:Piracy just hurts the little guy. by Anonymous Coward · · Score: 0

    God, this is beautiful stuff. Keep on posting you crazy diamond.

  24. Re:Piracy just hurts the little guy. by AC5398 · · Score: 2, Informative
  25. Re:Piracy just hurts the little guy. by billcopc · · Score: 1

    How many times will the Anonymous Cocksuckers repost this fake "confession" VERBATIM ? Every single RIAA article on /. gets at least one copy of this made-up filth.

    "I grabbed the little shit by his shirt." ... and child services shut you down for abusing a minor.

    "Why do the other kids laugh at us?" ... because your dad's a cheap excuse for a man

    "Yeah, dude, that's really lete [sic]" ... how can you sic-quote a spoken conversation ?

    "I'm proud to have one of the most extensive Christian rock sections that I know of." ... the only people who'd pirate Christian rock would be Christian believers, how's that for hypocrisy ?

    It's sad enough that someone feels the need to publish such bullshit. It's even worse when supposedly wise and literate community members regurgitate the same hogwash week after week. Maybe slashdot should have some kind of high-IQ Captcha... something to weed out the highly-opinionated lowly-educated myspace/facebook weenies. We've always had trolls, but at least the old trolls were funny, like me :)

    --
    -Billco, Fnarg.com
  26. Some Wining by pipingguy · · Score: 0, Offtopic

    To me, this just illustrates the absurdity of the whole thing.

    http://en.wikipedia.org/wiki/Who_Moved_My_Cheese

    Change Happens
    They Keep Moving The Cheese
    Anticipate Change
    Get Ready For The Cheese To Move
    Monitor Change
    Smell The Cheese Often So You Know When It Is Getting Old
    Adapt To Change Quickly
    The Quicker You Let Go Of Old Cheese, The Sooner You Can Enjoy New Cheese
    Change
    Move With The Cheese
    Enjoy Change!
    Savor The Adventure And Enjoy The Taste Of New Cheese!
    Be Ready To Change Quickly And Enjoy It Again & Again
    They Keep Moving The Cheese.


    1. Re:Some Wining by skeeterbug · · Score: 1

      "...more crime is committed in the cities, where more people tend to be black..." - pudge
      you must live in a city, then, based upon your crime against reason, detailed above. you can do one of three things: 1. cite your empirical evidence that excludes everything but skin pigment as the (primary) cause for increased rates of crime. 2. admit that there are a myriad of social factors that have worked against the black community to cause the marginally higher crime rate compared to other races (hmmmm, what could that be? dagnabbit, there has to be something going on here, right?). 3. admit you are about 6 beers short of a 6 pack. you know, your elevator doesn't get off the ground floor. before posting inciting words, get educated first. no, inciting isn't a derivative of insightful.
    2. Re:Some Wining by TapeCutter · · Score: 1

      The first I heard of "who moved my cheese" was when I had my sorry arse dragged into a confrence room by big blue to watch the video. I find it more than a little sad that the book is still on the best sellers list.

      --
      And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
    3. Re:Some Wining by pipingguy · · Score: 1

      Sorry for the brain trigger. I'm hopelessly behind the times. Based on the "hiking-up-the-pants" test I find myself doing lately unconsciously (I'm actually considering suspenders, that's how bad it's gotten) I've come to the realization that I'm already an old fart. Also no longer to coherent statement...stuff, like.

      I used to be with it, but then they changed what "it" was. Now, what I'm with isn't it, and what's "it" seems weird and scary to me.

      Grampa Simpson's writers were good with that one as...um, hey, get off my lawn!

    4. Re:Some Wining by TapeCutter · · Score: 1

      "I've come to the realization that I'm already an old fart."

      Me too, but I have been told that suspenders are no longer as fashionable as they were in the "clockwork orange" days.

      --
      And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
  27. Anybody who finds any of this... by iminplaya · · Score: 1

    Anybody who finds any of this in any way, shape, or form to be even remotely acceptable is truly mad. Neither the RIAA or anybody else has any right at all to search the victim's hard drive. Make no mistake, the "defendant" here is a victim of what any normal, reasonable person would call a criminal act. And this time I believe the perpetrators should be locked up. Unfortunatley, that might mean cutting loose some dangerous pot smokers, and we can't have that, can we?

    --
    What?
  28. oops wrong Re:Why a broken hash? by daveb · · Score: 5, Informative
    After babbling mindlessly I thought I'd do a quick check.

    I'm wrong - in fact I get the feeling that it's now important that MD5 is NOT used. NIST (an authority when it comes to forensic investigations) do *not* recommend the use of MD5 checksums. The grandparent was perfectly correct. A decent summary (sorry PDF) is here

    1. Re:oops wrong Re:Why a broken hash? by Beryllium+Sphere(tm) · · Score: 1

      There are two kinds of collision to worry about, the kind where you control both files, and the kind where you try to match the hash of a file created outside your control.

      MD5 is known to be vulnerable to the first of those. Now that it's begun falling apart, it's imprudent to expect it to resist the second sort for the foreseeable future, but last I heard it wasn't known to be vulnerable to those.

      The algorithm to create two colliding files doesn't lend itself to creating meaningful files.

      So it still meets the needs of forensics, though I'd use SHA-1 to save time explaining to non-technical people the difference between a first preimage and a second preimage attack.

    2. Re:oops wrong Re:Why a broken hash? by Anonymous Coward · · Score: 0

      But SHA-1 is weak in the exact same way. So you'd have achieved nothing by doing that.

  29. Re:Piracy just hurts the little guy. by guruevi · · Score: 2, Insightful

    Well, this comment has been posted since 2005 on Slashdot. Exactly the same in 2 other /. news posts:

    http://www.google.com/search?q=%22As+a+record+stor e+owner,+my+business+faces+ruin.+CD+sales+have+dro pped+through+the+floor.+People+aren't+buying+half+ as+many+CDs+as+they+did+just+a+year+ago.%22&hl=en& client=safari&rls=en&filter=0

    Well, you cold have at least updated your 12 year old record store and 'last year'.

    Next to you being an RIAA shill, if you DO have a store, you deserve to be out of business. Or bring some Dimmu Borgir into your 'christian' store.

    --
    Custom electronics and digital signage for your business: www.evcircuits.com
  30. Use TrueCrypt! by mwilliamson · · Score: 5, Informative

    Assuming you really do have something to hide, using an encrypted volume embedded within another encrypted volume could be very useful. TrueCrypt supports nested encrypted file systems and since TrueCrypt uses no headers to demarcate its volumes, it is not possible to determine if an additional volume is embedded within a TrueCrypt volume. In effect, it provides plausible deniability of the existence of a 2nd embedded volume if you're forced by court order to decrypt the main volume. (stick some Creative Commons licensed mp3 files in the main volume though, just to throw the RIAA the middle finger a little more.)

    Better yet, support non-RIAA artists at sites like Magnitune. The quality of music I've found there is proof positive that the RIAA no longer has a legitimate purpose in the music industry.

    My tips for installing TrueCrypt on Fedora Core 6.

    1. Re:Use TrueCrypt! by Anonymous Coward · · Score: 0
      The problem with that is so much information is stored all over Windows. Even if your mp3 folder is encrypted you'll have references to filenames in the registry (OpenSaveMru), filesharing programs settings, the swap, playlists... I'd imagine trying to claim that shared songs didn't come from your computer would be difficult. While they might not be able to get at the actual files it would be easy to infer that the songs in question are stored on your computer. So long plausible deniability.

      Too bad you can't encrypt your entire OS with Truecrypt.

    2. Re:Use TrueCrypt! by Grym · · Score: 1

      Yeah that 16GB Truecrypt volume with only 5 MBs of word documents in it don't look the slightest bit suspicious.

      -Grym

    3. Re:Use TrueCrypt! by Tumbleweed · · Score: 1

      Yeah that 16GB Truecrypt volume with only 5 MBs of word documents in it don't look the slightest bit suspicious.

      Hey, encryption uses a lot of overhead. :)

    4. Re:Use TrueCrypt! by andcal · · Score: 1

      TrueCrypt seems cool, but it doesn't work on NTFS, does it? I don't want to go back to FAT32.

      --
      --something witty
    5. Re:Use TrueCrypt! by Johnno74 · · Score: 2, Informative

      Yes it works 100% with NTFS. It doesn't care in the slightest what filesystem the drive hosting the volume is using, or what the filesystem inside the encrypted volume is.

    6. Re:Use TrueCrypt! by ColaMan · · Score: 1

      It doesn't look *that* suspicious. It just looks like you haven't filled it yet. To maintain plausibility, the outer truecrypt layer will happily hose the hidden volume without warning if you fill the outer layer up.

      You can just say, "yeah, I had a play around with TrueCrypt when I was feeling a little paranoid one day, but I never really use it."

      --

      You are in a twisty maze of processor lines, all alike.
      There is a lot of hype here.
    7. Re:Use TrueCrypt! by fastest+fascist · · Score: 1

      A truecrypt container, even a first-level one so to speak, is indistinguishable from random data - hence when mounting you can't have the truecrypt app look for truecrypt containers but must specify the right one yourself - you can't identify one without mounting it. So having a container in a container shouldn't be necessary if the adversary isn't aware and able to prove you are using truecrypt in the first place. And even if they did, I'm not sure how they can force you to unlock a container whose password you have forgotten...

    8. Re:Use TrueCrypt! by Anonymous Coward · · Score: 0

      That'd be Magnatune, http://www.magnatune.com/ . They really do have some fantastic music there.

    9. Re:Use TrueCrypt! by swillden · · Score: 1

      I'm not sure how they can force you to unlock a container whose password you have forgotten...

      That's easy. The judge will order you to provide the password. If you don't, he'll jail you for contempt. You can claim you've forgotten the password, but you'd better be really convincing because if the judge doesn't buy your story you could sit in jail for a long time.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    10. Re:Use TrueCrypt! by rmstar · · Score: 1

      A very insightful comment.

      Because as a matter of fact, "they" will be looking for anything that gives the impression of providing such hiding functionality. Thus, things like TrueCrypt, which are going to be a classic among smartasses with something to hide, will be well known in the forensics community for exactly that reason, and are actually a liability.

    11. Re:Use TrueCrypt! by mwilliamson · · Score: 1

      Truecrypt leaves behind no sort of "signature" that would identify data as being a TC volume in the first place. It also initializes every volume with random data to begin with. There is simply nothing to look for. However, one would need to be careful with playlists and history files and the like that might point to mountpoints for the volumes. That might be a bit harder to explain in court.

    12. Re:Use TrueCrypt! by PingXao · · Score: 1

      I think he was referring to TC being installed on the computer in the first place. Might be a good use for a "portable app", one that runs from a USB flash drive and leaves no trace on any of the system's hard drives that it was used. Then, make sure you've got the free VMware player and name your TC volumes whatever.vmdk. You can say the entire hard drive image got corrupted by Vista or something in a virtual machine.

    13. Re:Use TrueCrypt! by Harin_Teb · · Score: 1

      Encryption is no help in a dsicovery issue.

      Think about it: If you encrypt your files, great no unauthroised person can see it. RIAA takes it you laugh and sy good luck reading it. RIAA goes to judge and says "we subpeonad his hard drive and he gave it to us encrypted -- its not readable in this form." Judge orders you to give the encryption key and/or decrypt it for them.

      At this point (all legal and all logical steps) you have two choices. Choice 1 involves you saying no, and then getting fined (or worse) jailed for contempt of court. Choice 2 involves complying with the judges order in which case your encryption is pointless anyways.

      And yes it is a violation of the Federal Rules to try and obfuscate discovery documents.*

      *Documents = anything not necessarily paper documents.

    14. Re:Use TrueCrypt! by Sancho · · Score: 1

      But Windows might leave traces of the mounted drive.

    15. Re:Use TrueCrypt! by mwilliamson · · Score: 1
      Uh, I'd pick choice 2. I'd decrypt the volume which would have a few files in it and otherwise appear mostly empty. There would be no way to detect or prove the existence (or non-existence) of another encrypted volume within the first volume. End of story...and yes, you'd have to lie if asked if there was another volume contained within, but it would also be a very safe lie to tell, assuming you don't have something stupid like external references to stuff in the inner volume.

      -Michael

    16. Re:Use TrueCrypt! by mwilliamson · · Score: 1

      Mod parent up...I can't spell magnatune. It seems magnitune redirects to magnatune anyway, so I guess this is why I never noticed.

    17. Re:Use TrueCrypt! by Workaphobia · · Score: 1

      Glad to see someone else mentioning Magnatune once in a while. Normally when this kind of topic comes up people jump all over eMusic, when in reality the only thing they have going for them is the lack of DRM. Magnatune goes the whole nine yards with their phenomenally benevolent policies that benefit both the customer and the artist. No other label is anywhere near as geek-friendly, from the perspective of typical Slashdotter values.

      Of their artists, I would *highly* recommend Drop Trio and Thursday Group, under the jazz section.

      --
      Evidently, the key to understanding recursion is to begin by understanding recursion. The rest is easy.
    18. Re:Use TrueCrypt! by andcal · · Score: 1

      My bad. I guess I was just thinking aboout the hidden volume feature (one of the more attractive features of TrueCrypt):

      From http://www.truecrypt.org/docs/?s=version-history


      A hidden volume can only be created within a FAT TrueCrypt volume (i.e., the file system of the outer volume must either be FAT12, FAT16, or FAT32). NTFS file system stores various data throughout the entire volume (as opposed to FAT) leaving little room for the hidden volume. Therefore, the Volume Creation Wizard prevents the user from selecting NTFS as the file system for the outer volume. The hidden volume can contain any file system you like. Note that the outer volume (when file-hosted) can be stored on any file system.


      --
      --something witty
  31. In Unrelated News by ztransform · · Score: 2, Funny

    RIAA employees were discovered with a "significantly disturbing" volume of porn on their own machines. When questioned they denied that the material was sourced from hard drive mirror images..

  32. simple protection is the best by timmarhy · · Score: 1

    encrypt the filesystem, claim the drive is cactus and thats the reason it won't read. anyone have thoughts on this? would it be a fesible defence and is there a way to pull it off on a technical level. i'm guessing encrypted filesystems identify themselfs, would it be possible to hide the fact it's encrypted?

    --
    If you mod me down, I will become more powerful than you can imagine....
  33. Safeguards I use by hardburlyboogerman · · Score: 5, Interesting

    1.A loaded S&W .357 for use on the RIAA trolls trying to gain access to my house.(Under Ky Law I may defend my personal property using deadly force if I deem it necessary)
    2.A good self destruct device (easy to built and arm) for the hard drive(renders it absolutely useless to any forensic expert,since it physically destroys the platters.)
    3.I use an external drive to store the MP3 and other multimedia files on.Easily hidden,(like the old Varmit XL1000 CB Linear amps of decades past)
    Anyone wanting to seize my machine will pay dearly for trying.I just don't give a damn anymore since I had the nervous breakdown last year.
    That way,If the RIAA does get the machine,it will turn to scrap before they can get it 2 miles away.Paranoid? Sure,but with the corruption of the courts these days,these steps are needed.

    --
    Geek Hillbilly
    1. Re:Safeguards I use by thePowerOfGrayskull · · Score: 3, Insightful

      1.A loaded S&W .357 for use on the RIAA trolls trying to gain access to my house.(Under Ky Law I may defend my personal property using deadly force if I deem it necessary) KY state law doesn't allow you to shoot a deputy sheriff for serving a search warrant. And that's what this would be.

      2.A good self destruct device (easy to built and arm) for the hard drive(renders it absolutely useless to any forensic expert,since it physically destroys the platters.) of course, now you've tampered with evidence (the small sound of an explosion may give it away), which is an actual crime as opposed to the copyright infringement which is not.
    2. Re:Safeguards I use by hardburlyboogerman · · Score: 1

      That's right.But of course I need just 2 seconds,too.Like I said,I don't care anymore.

      --
      Geek Hillbilly
    3. Re:Safeguards I use by hardburlyboogerman · · Score: 1

      And try to prove there was any evidence there in the first place.
      Also a backup HD with a clean system takes less than 30 seconds to put in (it's run weekly to keep it updated).And the machine can be bolted to the desk.
      Theoretical situations,no matter how wild they seem,have a knack of showing up.
      Besides the music I listen to has been out of print for decades.I have them on vinyl LP records with a real good turntable.I don't buy Commercially made music CDs at all.never have,never will.I have purchased DRM-free indie music on occasion,making sure that the artist/group/label is not a member of the RIAA.
      Too tired tonight,getting scatter-brained and the anti-depressants have wore off.

      --
      Geek Hillbilly
    4. Re:Safeguards I use by jbo5112 · · Score: 1

      Does anyone know if anything ever happen to Sony over their rootkit virus? Last I heard, there was only a lot of noise and some wussy NY settlement for $7.50 per CD.

      I would have forced them to pay each CD purchaser 2x the standard rate of having a technician come out to your house and remove a virus, plus exchange each disc for a valid one, and jailed any exec who knew about it. They did purposefully market defective merchandise which they generally refuse to let you exchange and unleash a virus on people proven innocent. After all, you don't have the CD that installs the virus, unless you legally bought the music. On top of that, they would be required to go through a source-code audit (which courts can require) and someone, either Sony, F4I or both, would be charged a fair market rate for each copy of each stolen program they gave out, like LAME.

      I'm not sure what LAME or mpglib would do with around $50 million, but DVD Jon definitely deserves his well earned $250 million for all the copies of his difficult to write DRMS (not to mention his unpaid work cracking DVD for me to watch videos in Linux).

    5. Re:Safeguards I use by vidarh · · Score: 1
      It doesn't matter if there was any evidence there in the first place. If there is an investigation and the plaintiff have gotten a subpoena for your hard drive, it is evidence, and you will be in trouble if you destroy it. Your only defense would be to either convince the judge it truly was an accident (not bloody likely if you have an auto destruct mechanism) or that you were completely unaware that there was a chance it would be required as part of an investigation or court case.

    6. Re:Safeguards I use by hax0r_this · · Score: 1

      Is there any law that says you have to tell the guy taking the computer away there is a bomb in the computer? Whatever, it makes life interesting.

    7. Re:Safeguards I use by swillden · · Score: 2, Informative

      Is there any law that says you have to tell the guy taking the computer away there is a bomb in the computer? Whatever, it makes life interesting.

      I think not telling him would be excellent grounds for a reckless endangerment charge even if he's not injured. If he's killed you could potentially be charged with manslaughter or even murder. A really aggressive DA might even be able to argue first-degree murder, saying that your decision not to tell him while leading him to the booby-trapped computer constituted premeditation.

      So, yeah, there's a law against it.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    8. Re:Safeguards I use by Anonymous Coward · · Score: 0

      depends on where in KY you are at. I live in a backward county where I was told by the sheriff and I quote "If something happens to somebody while on your property, will, something happens."

      BTW I own a very large tract of land.

    9. Re:Safeguards I use by Anonymous Coward · · Score: 0

      Man, I hate the RIAA as much as the next guy, but you sound like a psychopath. You're giving a bad name to some or all of the following groups: gun owners, geeks, hardware hackers, "pirates," Kentuckians, music lovers, and people.

      If you actually had a nervous breakdown, I suggest you seek professional help.

    10. Re:Safeguards I use by hardburlyboogerman · · Score: 1

      I am getting help.And the computer is physically bolted to the desk.(stripped the threads so undoing it will be very difficult.and the desk weighs over 300 pounds empty.)After looking over the options presented over a 12 hour period,further steps have been taken to make damn sure that nothing can be recovered.
      I consider the RIAA and MPAA to be criminal organizations,and like some other poster said,they will manufacture evidence if none is found.
      BTW,switched main HD this morning to allow the "clean"backup to update.
      I've lived the nightmare of being falsely accused of something before and have taken the never again attitude about it.
      If pissed off,I live by this: "Give your heart & soul to GOD,because your ass will belong to me after everything is said and done."
      I've yet to fail to make good on that.
      "Mess with the best,die like the rest"

      --
      Geek Hillbilly
    11. Re:Safeguards I use by NewYorkCountryLawyer · · Score: 1

      SONY rootkit case was settled.

      --
      Ray Beckerman +5 Insightful
    12. Re:Safeguards I use by hardburlyboogerman · · Score: 1

      Just a guy pushed too far in another matter (Finally finished and it went my way totally).

      --
      Geek Hillbilly
    13. Re:Safeguards I use by Anonymous Coward · · Score: 0

      Tell 'em that there's a bomb in it(even though there isn't), and the local bomb squad will come out and blow it up for you.

    14. Re:Safeguards I use by thePowerOfGrayskull · · Score: 1

      Besides the music I listen to has been out of print for decades.I have them on vinyl LP records with a real good turntable.I don't buy Commercially made music CDs at all.never have,never will.I have purchased DRM-free indie music on occasion,making sure that the artist/group/label is not a member of the RIAA. Then contrary to common myths, you have nothing to worry about... while the RIAA practices are questionable, it's rare for them to indict someone who hasn't shared out files. And if you don't have anything from RIAA labels, they wouldn't care if you did.

      Seriously man, paranoia is has its place... but it's no way to live.

  34. Details are absurd because Big Picture is. by twitter · · Score: 2, Insightful

    1. Who pays for the neutral expert? 2. Who makes the deletion of the privileged files? 3. How are the privileged files going to be deleted?

    If media files are all the RIAA trolls are interested in, it would be easy enough to make a script to extract them. Standard tools like find and tar do exactly that and do it well. Fancier tools could be made to look for id tags if the RIAA is paranoid about people changing filenames. It is this list of files that should be agreed on and only that should be coppied for examination beyond the "neutral" party.

    Asking for more is just abusive but that's what this is all about, isn't it? "A few dollars a song is all we ask," they tell us, "isn't everything we can take away worth more than that?" Muggers use similar logic when they brandish their weapons.

    While the change from "The RIAA gets everything it wants, so shut up." in these tiny details is nice, there's a long way to go before anything like justice is served and these searches start to look reasonable or lawful. Everyone in my house has a computer or two. The burden of identifying each and every file that might be embarrassing or abused is well beyond the average user. Even if you can do that, the details of the deletion are still troubling. I'd say that the RIAA system that makes the original mirror is something that can't be trusted to begin with and all bets are off from the first step.

    Unreasonable searches are disruptive and dangerous. The easiest way to see what a powerful weapon this can be is to imagine if MLK were alive today. The kinds of people who tapped his phones and told him to commit suicide would be demanding his computers. Those who want to avoid harassment must give up many modern conveniences and efficiencies. The threat of revocation make the tools useless anyway. All it takes to end up on the list is an ISP.

    The only thing less reasonable than the "evidence" or motivation for these trials are the harsh penalties provided by law. Everyone of us faces the complete loss of property and livelyhoods at random, all to protect an industry from obvious technical obsolescence.

    --

    Friends don't help friends install M$ junk.

    1. Re:Details are absurd because Big Picture is. by Anonymous Coward · · Score: 0

      Ali-Baba, the keyboard is missing!

  35. Nothing reasonable about it. by twitter · · Score: 1

    The new order says agreed upon expert [makes the copy] and I agree, it does actually sound pretty reasonable.

    What's reasonable about being threatened with the loss everything and your reputation at random? All to protect some big rich music publishers. Bin Laden is loving it.

    Even if you can defend the witch hunt, this detail is still abusive. They are only interested in specific files and should be able to make a tool that extracts them transparently. Just imagine making a list of all the files that you want to delete.

    --

    Friends don't help friends install M$ junk.

    1. Re:Nothing reasonable about it. by Anonymous Coward · · Score: 0

      Ali-Baba, I can't find the monitor!

  36. Re:Piracy just hurts the little guy. by Heembo · · Score: 0, Offtopic

    Look moron, I legally pay for TV shows off of iTunes, and I save myself the hassle of not having to watch inane commercials. I also now legally download the one or 2 good tracks off of iTunes instead of wasting my money buying overprices CD's at your BS shops. Can you blame me? The world is changing and CD is dead. DEAD DEAD DEAD. Time for you to get a real job when you are done filing for bankruptcy. (If you have any ACTUAL skills)

    --
    Horns are really just a broken halo.
  37. Um, drop it... by Cap'n+Crax · · Score: 1

    Sure, here's my hard drive (trips over chair leg)...

    WHAP! (Noise made as hard drive is dropped and violently falls onto floor)

    Of course you would want to make your OWN image of the drive beforehand, and store it somewhere safe, like a safety deposit box at your bank or somewhere....

    --
    PK: 09F911029D74E35BD84156C5635688C0
    1. Re:Um, drop it... by Zantetsuken · · Score: 1

      yes, so that the bank/saftey-deposit box holder can be subpoenaed for the drive image...

    2. Re:Um, drop it... by Cap'n+Crax · · Score: 1

      Um, that is moronic. How can the RIAA search your bank safety deposit box? Can they? That is scary.

      How much does a hard drive cost? How much does an RIAA lawsuit cost? It's easy to buy a $100 drive and make a copy on your own.

      Make 10 copies. Put the hard drive in an ammo case and bury it in the woods. Give a copy to a friend. Copy it to a laptop hard drive and carry it in your pocket. Burn it onto DVDs and hang them on your Christmas tree. It's just data, zeroes and ones. Anyone who uses a computer should be able to copy the data. Use "dd" under Linux, use Norton Ghost under Windows. It's easy. It's logic. Make a backup, keep it somewhere safe. Give it to your Grandma to keep under her bed.

      Then fall over and drop the one they want. BAM as it hits the floor. OOPS, so sorry mister RIAA man.

      This whole hard drive as evidence argument is meaningless. Hard drives fail. Some fail often. It is easy to MAKE them fail. Dropping them is one way. Normal failure is no different than forced failure.

      --
      PK: 09F911029D74E35BD84156C5635688C0
    3. Re:Um, drop it... by Anonymous Coward · · Score: 0

      Note to self: make sure you drop that hard drive REALY hard, since when it is not spinning it can take shocks up to 350G's.
      As a comparison: a human is dead when exposed to +- 100G's.
      So either you survive and the HDD does as well; or you die, and who cares about the hard drive

    4. Re:Um, drop it... by vidarh · · Score: 1

      If they have subpoena for the contents of your hard drive and you destroy the drive or try to hide the data from them, you are committing a crime. It's that simple. If they find out and go to a judge with it, you'll be in far more trouble than if you just hand over the drive.

    5. Re:Um, drop it... by lattyware · · Score: 1

      Easiest way. Store all of your data on a modded Xbox, Ipod, or suchlike. They have the right paperwork to take your PC, but not that. Then you can go and burn your xbox as you please. You are doing nothing wrong by doing so. Old console you wanted to get rid of. I doubt they would even think of checking such a thing. You could even mod it, then unmod it so you can't access the data natively.

      --
      -- Lattyware (www.lattyware.co.uk)
    6. Re:Um, drop it... by freedomlinux · · Score: 2, Informative

      I doubt that the amount of damage caused by such an incident would cause much damage.
      First, there is a much lower chance of corrupted data when the drive heads are parked, as they would be as you hand the bare drive to someone.
      Second, it would take several heard crashes to cause data loss, as there would have to be significant damage to the platters.
      Third, professional date recovery companies can recover much of data from non-working drive, up until the point where a large majority of the physical platters are destroyed.
      Hard drives are resilient units... my experience:
      1. Running notebook dropped 1.5m onto concrete. Result = no data loss
      2. 80gb SATA drive carried for two weeks in an external pocket of a messenger bag. Result = MD5 hash same as previous hash
      3. Hard drive recovered from structure fire. Result = successful professional data recovery.
      4. Running notebook with remote ignition trigger for Thermite. Result = 2204 degreeC fire, platters physically destroyed, no data recovered. (See it at The Broken

    7. Re:Um, drop it... by ColdWetDog · · Score: 1
      That's it! Brilliant!

      I'm gonna drag out my old Otrona Attache (Z-80, 64k RAM, 128K double sided, double density 5.25 inch floppy disks) and use that. No one will ever suspect. Where are those old floppies???

      --
      Faster! Faster! Faster would be better!
    8. Re:Um, drop it... by Anonymous Coward · · Score: 0

      What about a decent magnet?

  38. I hate lawyers by Anonymous Coward · · Score: 0

    What's the difference between a lawyer and a catfish?

    One's a scum sucking bottom-dweller, the other one's a fish.

  39. Dude, thats just sick... by myowntrueself · · Score: 4, Funny

    and I'm proud to have one of the most extensive Christian rock sections that I know of.

    You mean that people are actually ripping and sharing Christian rock??

    Thats just *sick*.

    --
    In the free world the media isn't government run; the government is media run.
    1. Re:Dude, thats just sick... by fph+il+quozientatore · · Score: 1

      and I'm proud to have one of the most extensive Christian rock sections that I know of.

      You mean that people are actually ripping and sharing Christian rock?? Thats just *sick*. Don't worry, they already know they will go to hell for that.
      --
      My first program:

      Hell Segmentation fault

  40. Who moved my cheese? by rolfwind · · Score: 1

    Who reads this bullshit? It's god damned insulting to anybody with an IQ over 30.

    It should be:

    Shit happens.
    Who removed my brain?

  41. My Safegaurds For RIAA HDD Inspection: by Anonymous Coward · · Score: 0

    drive nuker

  42. Re:Piracy just hurts the little guy. by serialdogma · · Score: 1

    And since when a has feeding the trolls and brining them to more attention been considered a good thing?

  43. Re:Piracy just hurts the little guy. by Anonymous Coward · · Score: 0, Troll

    Copy&Paste trolls suck... expecially when spewing the EXACT SAME thing in each topic about similar issues.

    Some shit about exact comment previously being posted...

  44. Re:Piracy just hurts the little guy. by Yusaku+Godai · · Score: 1

    Look moron, first of all, stop feeding the goddamn troll.

    Second of all, how exactly is the CD dead? For some smaller labels and independent bands this may not be an issue, but I'd like to know one place where I can legally obtain CD-quality, DRM-less music downloads complete with high quality liner note scans of any major label artists (not that there are many who I like, but enough to justify buying the occasional CD). Because if such a thing existed, then I would have no need for CDs.

  45. Re:Piracy just hurts the little guy. by Anonymous Coward · · Score: 0

    That article absolutely reeks of bullshit.

  46. Why do they need the harddrive? by Jessta · · Score: 1

    Copyright infringement would be the distributing of a work that you aren't authorised to distribute.
    Having the data on your harddrive doesn't prove that you were distributing it.

    The only way to prove that your were distributing it would be to catch you while you are distributing it.

    --
    ...and that is all I have to say about that.
    http://jessta.id.au
    1. Re:Why do they need the harddrive? by Anonymous Coward · · Score: 0

      Copyright infringement is also reproduction, not just distribution.

  47. Agnostic mountain by flyingfsck · · Score: 1

    Reminds me of a really bad band called "The agnostic mountain gospel choir". Nobody, but nobody, will ever rip and share their music...

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!
    1. Re:Agnostic mountain by myowntrueself · · Score: 1

      I thought the whole point of Christian rock was that people could make heaps of money out of it because noone would rip it off -- the audience was that honest...

      Every Christian is a walking, talking wallet full of cash for buying Christian rock music.

      --
      In the free world the media isn't government run; the government is media run.
  48. Re:Piracy just hurts the little guy. by Venik · · Score: 1

    It was one of those boutique record stores that sell obscure, independent releases that no-one listens to, not even the people that buy them...

    I also once had a business idea that revolved around selling crap that nobody needs. I didn't go as far as to actually buy a boutique, but still I feel your pain...

  49. The first solution is to use only OSS by Anonymous Coward · · Score: 0

    This is not a windows bashing post. XP has become a decently stable OS after SP2, but my point is about its trustworthiness. Could a closed source operating system that phones home and over its inner workings the user has zero control be used to hide something from Microsoft, therefore from the governments MS is tied to?
    The answer is obviously no.
    Users should realize that most governments around the world aren't pushing Windows only because they are bribed by Gates or fear Ballmer throwing chairs at them, but because thanks to agreements with Microsoft they can have access to tools that put them in control of what users do with their PC. This has nothing to do with dictatorships, enslaving people or other tinfoil-hat theories: every government wants to stay in control, and uses the best tools available to achieve that goal.

    While this practice could be useful to catch lowlives such as potential killers, heavy drugs dealers or pedophiles, I'd suggest to fight it in any possible way when it's used to damage the average citizen with absurd fines for downloading music or movies.

    So, want to dl and share files on the net? Install Linux or BSD, learn how to cover your tracks with them, and be happy.
    No, OSX won't help either: it's neat and powerful, but closed source, therefore not trustworthy.

  50. Wow... by CamD · · Score: 1
    That's some good novel writing right there. Good thing it's harder to copy books over The Internet... er, unless you write it out on /.

    "Will we be able to keep the house, David?"
    I just shook my head, and tried to hold back the tears. "I don't know, Jenny. I don't know."
    Wow, is that ever a shitty attempt at not looking like the most stereotypical drama ever.

    +5 Funny!
  51. Re:Piracy just hurts my sides! Please stop!!! by Ox0065 · · Score: 1
    I vote mod $%&#ing hilarious. This can't be serious! How is it even possible to mistake this as anything other than an overweight piss-take?

    Metallica that have taken a stand against the powerful pirate lobby.

    I wanted to tell them the truth - it's because they wear old clothes and have cheap haircuts.

    Yeah, dude, that's really lete [sic], you'll get lots of respect."

    I don't sell sick stuff like Marilyn Manson or cop-killer rap, and I'm proud to have one of the most extensive Christian rock sections that I know of.

    "That's it. What's your name? You're blacklisted. Now take yourself and your little bitch friend out of my store - and don't come back." I barked. Cravenly It's absolute gold. Perhaps the coward needs canned laughter or emoticons for the sarcasm immune amongst us.
    --
    thx e
  52. FUCK THE RIAA -- HERE'S HOW: by bratwiz · · Score: 1



    Wherever, however you get your favorite songs and videos into your computer is your own business. If you choose to use less-than-forthright methods, that's up to you. I recommend using legal copies. However, all that aside... once you DO have the music and videos on your computer, why not simply go through each one and tweak some values a little here and there? Doesn't need to be much, just a +/-1 or 2 away from the original-- you'll never notice it (if you do, you really should be buying high-end audiophile gear anyway). Then if the RIAA ever tried to hash it, it wouldn't add up to anything they could complain about. And if everybody did it the RIAA would be so busy computing hashes they wouldn't have time for any other bullshit.

    1. Re:FUCK THE RIAA -- HERE'S HOW: by Anonymous Coward · · Score: 0

      That is one of the dumbest ideas I have ever seen. Tweak what values? the volume of the mp3? The brightness/contrast of the movie? The RIAA won't be able to tell what the mp3 is? The RIAA don't have hashes of songs that they use to compare files on your computer to make sure they are same.. just re-encoding the song would change the hash... "This sure sounds like britney spears but the hash doesn't match.. must not be the same song." The RIAA is dumb.. but I think they are a little smarter than that.

    2. Re:FUCK THE RIAA -- HERE'S HOW: by bratwiz · · Score: 1

      If you're so certain, then why are you posting anonymously?

      Songs can be called anything at all in the lists of P2P materials available-- ie. you could download "Little Bo Peep" and everybody knows (wink, wink) that its really Madonna's "Like a Virgin". The only way anybody could actually know is to either (A) Actually download the song and listen to it, or (B) look at the file's hash and compare it to a list of (one or more) known copies (hashes) of that song. The first is very time and bandwidth consuming. The second is not so much. But if lots of copies of music started popping up with lots of hashes of same, then it would be lots more time-consuming to compare hashes and that avenue would become more painful.

      And YES, tweak the volume a little, or alter the contrast-- its all numbers and if you make a little tweak here and there you'll never know it when you watch it but the media won't hash the same. Or even just add bytes here and there as filler, in areas that won't make any sonic/visual difference at all-- like a digital watermark. It just works the idea of identification in reverse. A little like reverse steganography except you aren't actually trying to embed anything in particular, rather just muddy it up a bit to make common detection methods (ie. hashing) harder.

      SO MOD ME BACK UP FUCKTARD-- its not such a dumb idea afterall.

    3. Re:FUCK THE RIAA -- HERE'S HOW: by JasonTik · · Score: 1

      This may be a helpful idea, but do you know of any practical applications of it that people can download and use? Until there are a few, this won't work for anyone but a few interested programmers with a lot of time on their hands.

    4. Re:FUCK THE RIAA -- HERE'S HOW: by bratwiz · · Score: 1


      Here are two links to Steganography. The first is to a wikipedia article explaining the concept. The second is to a list of programs that you can use to actually employ these techniques (I haven't checked them all out-- it was a list I found with a quick google search). The point being is the techniques and tools exist. Its simply a matter of letting people know about them:

      http://en.wikipedia.org/wiki/Steganography

      http://www.jjtc.com/Security/stegtools.htm

  53. I would have them remove... by Nom+du+Keyboard · · Score: 3, Interesting
    I would have them remove ABSOLUTELY EVERYTHING that can be proven not to relate to the RIAA's case before the RIAA can get their hands on it. Every e-mail, every history file, every log file, your installation of Microsoft Office, Media Player playlists, any other installed program that they're not looking for. Anything that's your business that it's on your hard drive, and not their business, should be gone gone gone! Even the operating system you use and its activation keys are none of their business in this case, since they're not suing you for having Microsoft Windows on your hard drive. And don't forget anything that indicates just how you connect to the Internet.

    In the end they should receive any MP3 files that are on their list of infringing files, and Online Media Distribution System (P2P file sharing program, for the rest of us) files for the OMDS they've claimed they've identified (e.g. KaZaA) if present, AND NOTHING MORE!

    As I understand it (IANAL), you are allowed to remove personal files that have no relationship to the case at hand. The RIAA can object if you try to protect files they say have a direct bearing on their case, however, they should find it an impossible task to justify why they need to see anything other than specified MP3 and/or OMDS files. Don't give them a byte more than they're entitled to.

    And most importantly of all, perhaps, wipe all the unused file space. Let them try to prove why they deserve access to areas of the hard drive not included in any files.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
    1. Re:I would have them remove... by caitsith01 · · Score: 1

      As I understand it (IANAL), you are allowed to remove personal files that have no relationship to the case at hand. The RIAA can object if you try to protect files they say have a direct bearing on their case, however, they should find it an impossible task to justify why they need to see anything other than specified MP3 and/or OMDS files. Don't give them a byte more than they're entitled to.


      (IAAL, albeit not in Texas, so this might not hold true there.)

      Unfortunately for your scheme, the plaintiffs do not need to identify specific documents/files, and you would be required to honestly categorise and identify them yourself.

      You would struggle to justify the removal of (for instance) a playlist file or log file for your MP3 playback software. Those files are clearly relevant to the question of whether you have copied or played any infringing copies of RIAA music.

      Despite the mantra of 'innocent until proven guilty', once a legal action is underway in the civil system some burden is placed on a defendant vis-a-vis the production of evidence. You are not entitled to stonewall until the other side comes up with something damning: in the end the objective is to reach the truth about the matters in dispute.

      The whole purpose of this exercise is to determine what you DO have. If the RIAA already knew what you had with the precision you describe, they wouldn't need to inspect the disk in the first place.
      --
      Read Pynchon.
    2. Re:I would have them remove... by Nom+du+Keyboard · · Score: 1
      You would struggle to justify the removal of (for instance) a playlist file or log file for your MP3 playback software. Those files are clearly relevant to the question of whether you have copied or played any infringing copies of RIAA music.

      Only in the RIAA's mind. A playlist does not indicate what music file was played, just it's title. It cannot indicate if a file is infringing, or not.

      The whole purpose of this exercise is to determine what you DO have. If the RIAA already knew what you had with the precision you describe, they wouldn't need to inspect the disk in the first place.

      The RIAA claims, with some precision, that the files they indicate, and the P2P software in question exists on some hard drive somewhere that was, at the time in question, connected to your Internet connection. And that the user/owner of that hard drive is the person they seek.

      All the defense is seeking to provide is that it isn't the the defendant's hard drive that had the alleged infringing files. So the RIAA says that these are the files that are on the drive in question. As long as you don't remove any of the files they claim are on the hard drive they're looking for, you haven't hidden any evidence. Anything else beyond that is a fishing expedition on their part.

      --
      "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  54. CHILD PORN on the RIAA's Computer Systems by bratwiz · · Score: 2, Funny


    One could make the case to a judge that with all the drives the RIAA has unethically examined using their wide, pervasive and invasive techniques, there is a better chance than not that they have CHILD PORN on their own computers, and that a low-level forensic examination of the RIAA's computer disks would likely reveal CHILD PORN was there even if it is now erased. My understanding is that is a federal crime no matter HOW the CHILD PORN got on the RIAA's computers or whether the CHILD PORN on the RIAA's hard disks is now erased. I firmly believe that CHILD PORN is wrong and the RIAA has no business engaging in CHILD PORN for any purpose whatsoever. Furthermore I think the slashdot user community should petition the court to appoint an appropriate forensic expert to look for the CHILD PORN on the RIAA's computers.

    1. Re:CHILD PORN on the RIAA's Computer Systems by cdrudge · · Score: 1

      There is a difference between your example and the one in the story though. In your example, it's not copyright infringement (usually civil matter), but rather child pornography (criminal matter). If you owned the copyright for the movie ChildPorn.avi and had evidence that the RIAA's IP address downloaded it, then you could go after them. However you probably would be in more trouble then they would.

      Besides, the RIAA themselves likely never have actual possession of the media. Their attorneys or "forensic experts" would. And if either found out that there was child porn on the drives, a simple call to the authorities would put you in more trouble then what the RIAA ever could have hoped for...and at a cheaper price as they no longer really have to go after you. The government would do it for free.

  55. Re:Some things I wonder about are....In One Case.. by Nom+du+Keyboard · · Score: 4, Informative
    Do they 'interview' neighbors and friends to see if there is a missing hard drive they are just 'holding'?

    Well, in one case they are demanding to image and search the hard drives and all MP3 players of the son of a defendant, who lives miles away, and claims to only have a desktop system at home that he uses for his job as a legal assistant (i.e. large amount of confidential files there). They're trying to do this because, having searched his mother's harddrive and found ABSOLUTELY NO EVIDENCE of illegal activity on it, and only assumed that they were given the wrong hard drive, and are now on the hunt for the correct one that they're sure exists.

    In the RIAA's twisted logic, he has either taken his desktop (not notebook/laptop computer) to his mother's house miles away to do illegal filesharing on her Internet broadband account, and then taken it home again, or REMOVED HIS HARDDRIVE and transported it over and back to infringe on record company copyrights. This theory, they feel, allows them to now search his hard drive -- or, I would expect, anyone within 4 degrees of separation from the defendant -- and all music players as they wish. While I believe this was finally ruled unreasonable and unlikely to produce admissible evidence, they now are fighting their best to avoid paying his legal bills that he entailed explaining this bit of common sense to them.

    So in answer to your question: Yes!

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  56. Re:Piracy just hurts the little guy. by Heembo · · Score: 0, Flamebait

    You feed me, you feed the Troll by proxy, Moron.

    CD sales dropped about 50% first quarter 2007 vs first quarter 2006. Ok, the CD is not dead, but the mortal wound has been applied. CD will go the way of record - it's only a matter of time. Download services are catching up to quality; EMI is not quite offering CD quality downloadable music, but they are beginning their push into "quality DRM-less music" in case you have not actually read the news lately: http://www.emigroup.com/Press/2007/press18.htm
    You are a fool if you think the CD is going to last much longer.

    --
    Horns are really just a broken halo.
  57. All the more reason to use.... by OneSmartFellow · · Score: 2, Interesting

    ... a virtual OS install for all your 'illicit' downloads.

    i.e. - VMWare, where the installation is hosted within a single file. For tin foil hat level security you may choose to keep the file on an removable device. The first hint that the RIAA is persuing you, you disconnect/erase the device/file.

    Ooops, the cat's out of the bag now !

  58. maybe this has been said by Anonymous Coward · · Score: 1, Interesting

    What if you have a system with multiple drives, one of which has all of your less than legal stuff- you get subpoenad and you simply submit the OS drive, unaltered and/or destroy the other drive? If you're vigilant about preventing recent files lists from building up- is there any way to detect there was another drive?

  59. If it's good enough for Big Oil... by professorfalcon · · Score: 1

    Is there some way that Nancy Pelosi could charge the RIAA a royalty for using U.S. courts to gain profit?

  60. Magic Switch by WarJolt · · Score: 1

    Thats why I have a little switch on my box that automatically self destructs the hard drive if anyone tries to open or move the case. Maybe I've played too many hacker games. ;-P

    1. Re:Magic Switch by Technician · · Score: 1

      Thats why I have a little switch on my box that automatically self destructs the hard drive if anyone tries to open or move the case. Maybe I've played too many hacker games. ;-P

      May I suggest an off the shelf solution?

      Look into the SimpleShare NAS with version 1.02-1.07 version of firmware. 1.09 lost the encryption.
      If it is shut down, the encrypted partition (they call it pool) un-mounts and does not remount. To mount the encrypted pool so you can use the folders, you have to enter the configuration utility (like a router) and enter the encryption key. Resetting the drive may get you past the configuration utility password by resetting to defaults, but it does not get you past the un-mounted encrypted pool. I have one just for taxes, banking, and other sensitive information. Physicaly removing the drive locks the encrypted data. Hacker games or not, data security is important for identity theft.

      --
      The truth shall set you free!
  61. Re:Piracy just hurts the little guy. by Anonymous Coward · · Score: 0

    Oh come fucking on people :)

    You can't be taking that seriously, the post is practically filled with clues.

  62. Trade group police? by rikkus-x · · Score: 1

    If I dragged someone into court, saying they sent me poison pen emails, would I be allowed access to their computer to search for evidence? Isn't that lunacy? So how come a trade group gets that privilege?

    1. Re:Trade group police? by MyNameIsFred · · Score: 1

      ...would I be allowed access to their computer to search for evidence?...
      The short answer is yes, its called the discovery phase of the trial. See for example, Wikipedia discussion. Granted the cost of doing all the forensic analysis comes out of your pocket.
    2. Re:Trade group police? by rikkus-x · · Score: 1

      It seems a bit crazy to me. Planting evidence in the form of files on a hard drive is, firstly, easy and, secondly, very difficult (if not impossible) to detect.

  63. Here's my safeguard... by Quiet_Desperation · · Score: 1

    If I get a letter from the RIAA, my hard drive goes into the furnace. Fuck 'em all and smile, baby. Scorch the Earth. Attica! Attica!

  64. Fine by me by JackMeyhoff · · Score: 1

    They can mirror my SECTOR ENCRYPTED drive all they want :) Good luck with reading it.

    --
    http://www.rense.com/general79/wdx1.htm
  65. Use an external disk for your warez then hide it by Joce640k · · Score: 1

    Use an external USB disk for your warez then hide it when they come a knockin'.

    --
    No sig today...
  66. RIAA is interested in by DrYak · · Score: 2, Interesting

    Files RIAA is interested in :

    1) kazaa.log
    2) spyware.log
    3) $sys$sonyrootkit.log

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  67. Re:Piracy just hurts the little guy. by justinlee37 · · Score: 1

    Do people prefer to watch TV, see films, read books? I don't know. But there is one, inescapable truth - Internet piracy is mostly to blame.

    This self-contradiction is so concise, it's remarkable.

  68. Too bad by nurb432 · · Score: 1

    Its too bad that the day i got the complaint i was so flustered on getting accused of somehing i didnt do, i accidentally blew up my harddrive, and it had to be completely reloaded..

    --
    ---- Booth was a patriot ----
  69. how to deter the forensics crew by bl8n8r · · Score: 2, Funny

    ln -s /usr/share/goatse.jpg $HOME/stuff_I_got_from_limewire.mp3
    ln -s /usr/share/goatse.jpg $HOME/movie2007.avi
    ln -s /usr/share/goatse.jpg $HOME/awesome_concert.mpg

    or maybe for more fun..

    for file in `find /usr/share/goatse -type f`; do
        ln -s "$file" $HOME/$RANDOM.mp3
        ln -s "$file" $HOME/$RANDOM.mpg
        ln -s "$file" $HOME/$RANDOM.avi
    done

    --
    boycott slashdot February 10th - 17th check out: altSlashdot.org
    1. Re:how to deter the forensics crew by chuckymonkey · · Score: 1

      I once did something like this. I'm from the camp of "you can search my drive when you pry it from my cold dead fingers". While in the Army we were getting ready to redeploy back to the States and we were told that our hdd's were going to be searched for classified *cough* porn (porn on your computer is bad news in a foreign country for some reason). Well found out the method that they were using was just a stupid little keyword search that displayed whatever picture or movie matched some key words and being the fun loving lad that I am I took a picture of myself flipping off the camera and titled it "fuck me big boy". Then I made thirteen thousand copies of it and flung them all over my hdd. Needless to say they gave up after about three hours of looking at me giving them the finger, oh and all my porn was well hidden in a cryptainer.

      --
      "Some books contain the machinery required to create and sustain universes."-Tycho
  70. Re:Cochrin by maxume · · Score: 1

    Zombie lawyers may be a neat feature of Discworld, but they don't really exist, especially if you require that a zombie must be 'undead'.

    --
    Nerd rage is the funniest rage.
  71. DoD 5220.22-M: use this diskwipe standard by gelfling · · Score: 1

    There are lots of progs that wipe your disk to this Dept of Defense standard. If it doesn't work then advertise that fact that the US government is using an insecure data protection standard.

  72. plausible deniability by bananaendian · · Score: 1

    The whole point of using TrueCrypt is that you have a second encrypted volume inside the first which is effectively hidden because it is impossible mathematically to prove that its there. You simply place some reasonably confidential personal information on the first layer of encryption like your personal financing, photos, (legal) porn collection etc. providing you with plausible deniability. In the second inner layer of encryption you place stuff you don't want RIAA or anyone to actually find.

    --
    www.tribalnetworks.org - helping tribal people around the world to own their own means of high-tech communications
  73. Re:Use an external disk for your warez then hide i by E8086 · · Score: 1

    Or 'get a Mac' as a second PC to claim it's your only computer since we know kazaa and a bunch of those other evil p2p apps don't run on an Apple, unless it's Mac hardware with Windows. Or get a used laptop and a larger hdd, paying cash for both so you might be able to try to deny even owning it. Then change the mac addr to match your primary PC so any network traffic from it will appear to come from your main and clean PC. Clean as in free of anything the MAFIAA may consider to the 'infringing' material. Or if you want to pass it off as a backup use full disk encryption with a hidden partition and store it on one of those fancy fire and water resistant safes and tell the judge that you're a little concerned about backups and security. But for the cost of doing all that you can get a few dozen used CDs and movies from amazon.com(new&used for...) or ebay and probably many other places. Even with as much as the MAFIAA may not like it, buying used media is still legal.
    You'll probably get into some kind of trouble if you tell the court you only have one computer and it turns out you had a second hidden somewhere. An examination of windows logs can probably determine that an external drive was used and the presence of p2p software on the computer will probably be enough for the MAFIAA to cry WITCH!!! or was that 'pirate' but you could claim that it belonged to someone else.

    --
    F7 doesn't work, ignore spelling and grammar
  74. Re:Some things I wonder about are....In One Case.. by NewYorkCountryLawyer · · Score: 4, Informative

    If anyone wants to look up that case it's UMG v. Lindor.

    --
    Ray Beckerman +5 Insightful
  75. Re:Piracy just hurts the little guy. by TechnicalFool · · Score: 1

    I know it's a troll but I can't help with replying: 'Here's £1000. Go buy this album for me, and you get to keep the change.' Or on amazon.com, 'yes, my name really is Mr Buttwinkle. Honest!' I'd love to see a blacklist implemented. I could spend a whole year laughing about that one.

    --
    09F9 1102 9D74 E35B D841 56C5 6356 88C0
  76. RIAA / MPIAA Proof yourself by mlwmohawk · · Score: 1

    (1) Own more than one computer
    (2) Never store anything "contraband" on your "main" computer
    (3) Setup and hide a server which uses an encrypted volume for file you wish to keep private. (While technically to comply with the law you would have to divulge the existence of said computer if asked, but one need not volunteer anything)
    (4) The encrypted volume should be an external storage system that has no entry in the log files of disk configuration.
    (5) Assuming Linux or Mac, create a folder, say Music or Movies, and put home movies and indie music there.
    (6) Mount the encrypted volumes on Music and/or Movies.
    (7) Clear the logs every hour.
    (8) Always backup your data and store it off site where it can not be tracked with billing records. (Small steel box buried in the back yard or something like that.)

    The purpose is to eliminate any sort of record or smoking gun. Their first subpoena will be sloppy and something you should be able to comply with easily enough. They won't have any legitimate evidence. They court will eventually tell them to shove off.

    1. Re:RIAA / MPIAA Proof yourself by freedom_india · · Score: 1

      Good suggestion.
      A slight change:
      1. Have legal iTunes downloads of songs and movies.
      2. Convert them to Audio CD/DVD legally.
      3. Rip those audio CDs and store them as specified above.
      4. Provide enough tantalising teasers to RIAA to pounce on you.
      5. Let them drag it to court.
      6. In front of the judge, prove that you own licenses to those content
      7. Prove you were just storing them safely and not with an intent to share.
      8. Watch and judge fume at RIAA's stupidity.
      9. ! Profit !

      --
      "Doing what i can, with what i have." ~ Burt Gummer
  77. Why the hash? by Anonymous Coward · · Score: 0

    Maybe I'm missing something here, but what's the point of making an MD5 hash of the imaged drive if the defence team is then able to delete the "privileged" files before giving it to the RIAA team? The hash will be different and won't tell the defence team if the RIAA has subsequently planted files.

  78. Where are the lawyers? by trawg · · Score: 1

    Surely there has to be at least ONE firm that is circling around the people getting sued by the RIAA looking at ways they can counter-claim. One firm with a lot of expertise in this area would get a lot of business from thousands of defendants, by the sounds of things.

    1. Re:Where are the lawyers? by NewYorkCountryLawyer · · Score: 1
      Yes there is some interest. And I do believe that something like that will happen one of these days, hopefully sooner rather than later.

      The problem probably is that the right wing's control over the presidency, and until recently Congress, has made class actions -- which are equalizers between rich and poor -- harder to bring. Which means there are less class action firms out there, and those that can operate can afford to be, and actually have to be, very selective.

      --
      Ray Beckerman +5 Insightful
  79. Now with 3X MORE DRAMA!! (Must Read!!) by PetoskeyGuy · · Score: 2, Funny
    • The parent post was awesome. Real Move of the week material, but still it was rather lacking in some ways. I've done my best to improve their content as much as I could. I give my permission for the RIAA or similar organizations to use this version in any way they like. I'm would just be happy to give something back to the music industry that has given me so much.

    As a record store owner who has failed to diversify or pay attention to industry trends , my business faces ruin. CD sales have dropped through the floor just like the previous obsolete formats before them . People aren't buying half as many CDs as they did just a year ago. Revenue is down and costs are up. My store has survived for years, but I now face the prospect of bankruptcy. Every day I ask myself why this is happening when I should be researching current trends and alternatives to restructure my business instead of wallowing in misery .

    I bought the store about 12 years ago. It was one of those boutique record stores that sell obscure, independent releases that no-one listens to, not even the people that buy them. I decided that to grow the business I'd need to aim for a different demographic, the family market. My store specialized in family music - stuff that the whole family could listen to. I don't sell sick stuff like Marilyn Manson or cop-killer rap, and I'm proud to have one of the most extensive Christian rock sections that I know of.

    The business strategy worked. Buying an existing profitable store and changing nothing was simpler then I ever imagined. People flocked to my store, knowing that they (and their children) could safely purchase records without profanity or violent lyrics. Over the years I expanded the business and took on more clean-cut and friendly employees. It took hard work and long hours but I had achieved my dream - owning a profitable business that I had built with my own hands, from the ground up. But now, this dream is turning into a nightmare.

    Every day, fewer and fewer customers enter my store to buy fewer and fewer CDs. Why is no one buying CDs? Why is no one buying cassette tapes, 33s or singles on 45s? My wax cylinders are literally covered in dust! Are people not interested in music? Do people prefer to watch TV, see films, read books? I don't know. But there is one, inescapable truth - Internet piracy is mostly to blame. The statistics speak for themselves - one in three discs world wide is a pirate. On The Internet, you can find and download hundreds of dollars worth of music in just minutes. Millions of people are finding and downloading any music item they want. It's so easy some people are downloading stuff they never would have listened to before just to check it out. It has the potential to destroy the music industry, from artists, to record companies to stores like my own. Before you point to the supposed "economic downturn", I'll note that the book store just across from my store is doing great business. Unlike CDs, it's harder to copy books over The Internet. Except for audio books. And it's really just as easy to copy the books - it's just a little harder to encode them and not as convenient to read them using a computer right now.

    Pirates are the worst. They are not as easy to identify as you would think. They almost never wear those little triangle hats. A week ago, an unpleasant experience with pirates gave me an idea. In my store, I overheard a teenage patron talking to his friend.

    "Dude, I'm going to put this CD on the Internet right away."

    "Yeah, dude, that's really lete [sic], you'll get lots of respect."

    "I just hope it will work in my CD player. I haven't bought a CD since the last two wouldn't work in my CD player and this guy refused to give me a refund for the defective discs."

    I was fuming. So they were out to destroy the record industry from right under my nose? F

    1. Re:Now with 3X MORE DRAMA!! (Must Read!!) by dteichman2 · · Score: 1

      Mod parent up Funny. That was great.

      --


      Silence is golden... and duct tape is silver.
  80. what if a virus... by Anonymous Coward · · Score: 0

    does anyone know what they would do in the event that a piece of malicious self-distributing software that specifically attacked mp3's and other audio files were to attack your pc? and in the attacking corrupt the files?

    surely if they were to then remove the virus this would be tampering with the evidence?

    worse still if the virus was such that it created copies of itself using the names of well known songs.

  81. Clean Hard Drive? WifI? Avoid jail? by thisNameNotTaken · · Score: 1

    Use Linux and learn how to use it with a crypt partition.

    Wipe logs.

    Do nothing on any computer except yours. Never at work, school, or a public computer.

    Do random downloads at various time.

    AND: Dump data to a remote USB drive and keep it separate from your other computer. As in not available to be found in a casual search.

    AND: Post the following on your computer room's door, "No one has permission to be in this room besides [your name here]. No person in this home has permission to allow others to enter or search this room without my written permission and me being present at the time of the search. Any questions may be directed to [my attorney name and phone number] or to me at [cellphone]."

    ABOVE: Place on your computer startup screen, too.

    If "they" come WITH a warrant, SHUT your mouth, be nice, get names and paperwork, and offer them something to drink. It is hard work doing a proper search. Or, If they come WITHOUT a warrant refer to the previous item. Except: do not let anyone in the house. NEVER NEVER EVER

    AND REMEMBER: Be nice and shut up. As is said, "Name , rank, and serial number only."

  82. shielding ??? by freaker_TuC · · Score: 1

    How exactly would the wireless signal get through the house with a (full) metal shield around it ?

    --
    --- I am known for the ones who want to find me on the net. Is that a privacy risk or a privilege? One might wonder..
  83. Save the magnets! by ivan256 · · Score: 1

    Hard drive magnets are super-strong rare-earth magnets... Some of the strongest you'll find commercially available. No sense in wasting them by sending them to the land fill. They're useful for all sorts of things. Just don't pinch your skin between them, because they *can* draw blood.

  84. I don't see the problem by MrMacman2u · · Score: 1

    If you keep offsite backups, just keep 2 hard drives on an easy to yank tray with a "standard disk" that's just never used and one with your actual mp3's and mpg's. When the RIAA comes knock-knocking, just yank the hard drive with the "perfectly legitimate" content and toss it into the wood chipper you happen to have sitting in your living room next to your desk for shredding your..... sensitive documents! 15 noisy seconds and one quick switch later, they can't prove nuthin'.

    --
    This signature is lame.
  85. Re:Use an external disk for your warez then hide i by zzo38 · · Score: 1

    If Windows logs indicate stuff about external drive and stuff, use Linux and rewrite the software to not write logs about such things. Pay cash for anything. I don't use, own, or plan to own a credit card. Or use your game console system, VCR, DVD player, or whatever to store stuff like that. I don't have a lot of warez (actually I hardly even have 1 or 2), and even the stuff I do have isn't stuff I could pay for if I wanted to (or had the money)! P2P software isn't illegal anyways, most of the files downloaded are illegal. You could encrypt all of your communications. Write a BIOS that stores stuff in the hard drive so that it seems to be something else if viewed from another computer or if the correct password isn't entered. Make the password change automatically and use a calculation to enter it. Somebody looking at your password will confused.

  86. Because the government is stupid, that's why. by zzo38 · · Score: 1

    Because the government is stupid, that's why.

  87. After getting the subpoena... by freedom_india · · Score: 1

    Set the date backwards 2 days, and open up the windows box to 'net... i mean without any protection....
    Wait and watch it get infected in 12 mins so much it cannot reboot.
    Shutdown and give it to the 'expert'.
    Watch him cry while the fully VD-infected PC boots up...
    If he claims to find the offendng file, simply say the evidence was planted.
    Ask judge to subpoena M$FT for expert testimony to how easy it is to hack a WIndows PC left unprotected.
    Watch the judge do a slow burn as it dawns on him the case is a sham since the PC is so slow and has been infected...
    !PRofit !

    --
    "Doing what i can, with what i have." ~ Burt Gummer