MPAA College Toolkit Raises Privacy, Security Concerns
An anonymous reader writes "The Motion Picture Association of America last month sent letters to the presidents of 25 major universities (pdf), urging them to download and install a 'university toolkit' to help identify students who were downloading/sharing movie files. The Washington Post's Security Fix blog reports that any university that installs the software could be placing a virtual wiretap on their networks for the MPAA (and the rest of the world) to listen in on all of the school's traffic. From the story: 'The MPAA also claims that using the tool on a university network presents "no privacy issues — the content of traffic is never examined or displayed.' That statement, however, is misleading. Here's why: The toolkit sets up an Apache Web server on the user's machine. It also automatically configures all of the data and graphs gathered about activity on the local network to be displayed on a Web page, complete with ntop-generated graphics showing not only bandwidth usage generated by each user on the network, but also the Internet address of every Web site each user has visited. Unless a school using the tool has firewalls on the borders of its network designed to block unsolicited Internet traffic — and a great many universities do not — that Web server is going to be visible and accessible by anyone with a Web browser."
I don't see the universities listed anywhere in the article. Which ones are they? We need to know so we can write them letters.
This makes no sense. What are they going to accomplish by going after college kids, who really don't have that much disposable income? It seems counter-productive to me. You piss off a bunch of college kids, who can't afford to spend money on movies anyway, and who are going to earn money in the future, and will probably chose not to spend their money on movies, since the MPAA were being dicks. Not to mention the horrible invasion of privacy and security issues.
Any university that installs that has a problem. University networks are constantly "played with" by students, so the IT department has to be on the ball. Any dumb enough to install this probably have had many student hacks already...
Nice. For those of you that didn't read TFA, the toolkit is basically Xubuntu, with some tools like Snort preinstalled.
c++;
Given that the aim of the toolkit is supposedly to
then how do they manage it without examining traffic? If the toolkit monitors BitTorrent (and other) ports then that would tell you who is using P2P, but not who is sharing movies. Maybe all that traffic is from students internally torrenting various Linux distros or their garage bands' MP3s.
Thank goodness I never lived in University halls.
They're about to become corporate serfs. Give them a four year break from corporate dominance, so they have that much more psychological trauma when they exit school, which will make them the perfect mentally broken spiritual voids who need to buy our products.
Thanks,
The NWO
Anti-Globalism
it's all about control and flexing their legal muscles to intimidate the rest of the public into towing the line. The MPAA is using this to gather more ammo in order to sue the people who are old enough to know what P2P is, who tend to use P2P apps to get music/movies/etc. on a regular basis, and who tend to have limited resources to fight back in court.
Ad astra per aspera (A rough road leads to the stars)
Dear MPAA and RIAA:
You've noticed that the number of students who think downloading movies and music via the internet is OK. Well, here's some news for you:
Vox populi, vox Dei.
mpaaBuddy is an on-screen "intelligent software agent" created by the MPAA, and based upon Microsoft Agent technology. The goal of the program is to help users enrich their online movie experience as they discover digital movies together with the included "mpaaBuddy," which is an animated, purple Tom Cruise. Users can interact with Tom by asking him questions, get recommendations on new movies released by MPAA members, as well as be politely informed when unapproved websites are loaded.
Other features include, an integrated download tracker, movie-related themes, desktops, screen savers, and cute, animated emoticons, bearing a resemblance to top-selling actors. Also included is a desktop search utility that indexes a hard drive's contents in order to allow the user to easily perform searches.
While initial response to the program has been positive, a few early users complain that the program is buggy. "The program keeps changing my home page to a crappy MPAA home page," said one teenager who wished to remain anonymous out of fear of a MPAA-sponsored lawsuit. There have also been complaints of an increase in pop-up advertising.
Doctors destroy health, lawyers destroy justice, universities destroy knowledge, religion destroys spirituality
This is why they don't sue anyone at Harvard, they know in the long run that would create lawyers who dislike them.
Will they distribute the source code with it? Will they allow people to freely copy and modify that toolkit? I say, download it, get the tech department to modify it to their liking, and install it! That's what the open source spirit is all about, fixing broken software. I suggest they get fixing that privacy issue first...
Give Kashyyyk back to the Wookies
Also, the software developer is breaking the law. They haven't shipped the modified code they've made (eg ntop).
You wonder why no large media companies (fixed it for you) have a report devoted to this, or even report on it much or do anything but rehash the RIAA/MPAA press statements and never ever examine it.
Follow the money. You might as well ask, why do popular entertainment shows like Futurama show a dislike for things like napster and filesharing in general? Because they are the ones whose files are being shared!
Geez, name a news company that isn't part of some huge media giant. You might start to realize that those who should report on the RIAA/MPAA are in fact its members. Geez, you might as well expect Dell to launch a survey, computers, do we really need them.
What next, do you expect the tabaco industry to report on the dangers of smoking?
Follow the money, who is the person you expect to report on something paid for. There was an issue a few years ago around Oprah when she said something bad about meat. That was just the advertisers complaining. Reporting on the RIAA/MPAA tactics, that will get you a letter direct from the head office "STOP IT".
What next, Ruport Murdoch writing a story "Why it is a bad idea for one guy to own a lot of media"?
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
1. Since the kit is a derivative of the default Xbuntu install, is the MPAA still allowed to ship the kit with Canonical's trademark (Xbuntu) prominently displayed as boot splash?
2. Since the MPAA is distributing GPL'd software aren't they obligated to provide source code for the kit upon request?
3. Is there any MPAA written programs included in the kit? Is it based on GPL software and thus required under the licensing terms to have its source code available upon request?
4. IIRC, Canonical products ship with some proprietary drivers. Since the MPAA kit is a derivative of Xbuntu, does it have permission to distribute the same drivers, or did Canonical get special permission which the MPAA does not have?
5. If the MPAA does not supply any source code that the may be legally obligated to do under GPLv2 license, then can individual copyright holders of the multitude of programs included with Xbuntu, give notice that they are revoking the MPAA's right to distribute their software under the provision of Section 4? Section 4 states:
Note that Fyodor terminated SCO's right to distribute Nmap in any of their products under that section, which SCO complied with.
Even if there is a firewall at the perimeter of the school network, all of the students are inside of it!
"It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
http://universitytoolkit.com/ (mentioned in the pdf) seems to have some hidden content. The page displays a link to: http://universitytoolkit.com/MPAA_University_Toolkit_Admin_Guide.pdf. If you look at the source, you can notice a link at the bottom which isn't displayed: MPAA_University_Toolkit_Administrators_Guide.pdf (it's a relative link in the source).
This version is slightly longer, with what looks like a section detailing development goals. Can anyone see anything incriminating there?