main

Music industry claims MP3s are traceable

configure   on 30 August 2003 - 02:54 · 24 comments & 2525 views

Advertisement (Why?)
Recording industry lawyers have claimed that detailed analysis of the data in MP3 music files can prove the files were downloaded illegally from an online file-sharing network.

The revelation came with the release of court documents relating to a case against a New York woman. She is accused of sharing 1000 songs through a peer-to-peer file network, using the online pseudonym "nycfashiongirl". She claims to have made the MP3 files found on her computer from CDs that she owned.

But lawyers for the Recording Industry Association of America (RIAA), which represents the world's largest record companies, write in a court document: "The source for nycfashiongirl's sound recordings was not her own personal CDs."

The RIAA says the username of another computer user was found in the header of one of the MP3s. Headers are routinely used to store a song's title and length, but some MP3 compression software may also add information such as the username of the person who created the file.

The RIAA said that it also examined the digital fingerprints, or "hashes'', of the MP3s and found that some matched those of files previously see on file-sharing networks.

Markus Kuhn, a computer researcher at Cambridge University, UK, says the process of MP3 encoding involves variables that can create tell-tale differences between two files of the same song.

News source: Newscientist - Music industry claims MP3s are traceable


According to Microsoft spokesman Jim Desler, the company has yet to make any firm decision on how it may alter IE in reaction to the court decision. He said Microsoft is waiting to see what occurs during the ongoing post-trial process, during which a judge will decide what sort of injunction could be imposed on the company, based on the ruling. Desler said Microsoft is preparing to appeal a court injunction, if necessary.

"We still feel there's a chance the judge may recognize Microsoft's claim that Eolas involved itself in inequitable conduct, as we believe Eolas had knowledge of...existing Microsoft technology before submitting its patent application," he said. "This discussion was excluded from the jury trial, and we think it's a powerful argument."

Desler confirmed that Microsoft is considering taking some precautionary steps with IE to bring it into accord with any potential injunction from the courts. At this point, the company is "reaching out to the industry and standards bodies to inform people what our thinking is and to get feedback regarding any possible changes," he said.

Desler said Microsoft is already considering potential workarounds for IE if the company is indeed served with an injunction that it cannot appeal.

Post a comment · Send to friend Comments · There are 24 additional comments
#1 idbuythatforadollar on 30 Aug 2003 - 09:06
bloody hell, why dont mp3 compression programs put in your credit card number while their at it?
(1 reply) #2 ms998 on 30 Aug 2003 - 09:33
could this be the RIAA trying to scare peopl again?

I know a lot of mp3's have information in the ID3 tags about who created the file. Could it be this they are on about?
#2.1 Jugalator on 30 Aug 2003 - 22:44
QUOTE (#2.0)
I know a lot of mp3's have information in the ID3 tags about who created the file. Could it be this they are on about?

Yep, since that's basically the only metadata in an mp3 file, that's probably it.
(1 reply) #3 Fedr0 on 30 Aug 2003 - 10:35
That's stupid, that's nothing like that. What the lawyer meant and the press distorted, is that on those mp3s she downloaded there was the tag "ripped by xyz" in the comment field of the id3tag.
#3.1 Sawyer12 on 30 Aug 2003 - 13:18
Exactly theres no way of telling who created the file from there user name. its 100% pure bull.
#4 Jeffsoft on 30 Aug 2003 - 10:37
that's bull ****...
#5 Sawyer12 on 30 Aug 2003 - 10:48
yeah how the hell do they put the user name in them of the person that created them. its not like they are created using kazza or anything is it. What idiots. Scare tactics.
#6 Sickmyduck on 30 Aug 2003 - 11:47
For them to say that she is responsible for that song circulating, they would have to concede that the song is hers. If they are saying it's not hers, how can she be responsible for it. Perhaps she owns the cd, and merely downloaded the song. I do't believe there is anything wrong with that.
(5 replies) #7 icdover on 30 Aug 2003 - 14:34
Ok this is gay... lots of files can have the same hashes...
#7.1 roadwarrior on 30 Aug 2003 - 16:16
Exactly. If two people use the same program with the same default settings to encode a song from a CD, they are going to get exactly the same file.
#7.2 Jon on 30 Aug 2003 - 19:05
Completely wrong I'm afraid, even ripping the same song in two different CDROM drivers will result in a different hash.

The chances of two different people ripping the same song resulting in the same hash are VERY VERY low.

Try it if you dont believe me..
#7.3 Tom Servo on 30 Aug 2003 - 20:29
That depends on the CDROM you've got. Some of them can rip bit accurate and thus produce the same output. A pal and I got the same Plextor 40x burner, and it outputs the same hash for the ripped stuff, provided we used the same EAC settings. CRC32 and SHA1 are both the same.
#7.4 Jugalator on 30 Aug 2003 - 22:46
QUOTE
Ok this is gay... lots of files can have the same hashes..

???

Have you ever seen any? Have anyone in the world ever seen any? I doubt that, although there's a small theoretical chance. But the same goes for DNA evidence which has some chance in a million of giving the wrong indication. Still it's commonly used in court. (which I agree they should continue with too)
#7.5 Jugalator on 30 Aug 2003 - 22:48
QUOTE (#7.1)
Exactly. If two people use the same program with the same default settings to encode a song from a CD, they are going to get exactly the same file.

No, users on Slashdot recently tried this since they believed it too, but the same track from the same album was different depending on at least the CD-ROM drive.
(2 replies) #8 PKHelloNasty on 30 Aug 2003 - 18:25
Accorind to the full article, they are saying that they compare the binary data with the data of other files they downloadedfrom the net. It is almost guaranteed that when you rip an MP3 on two different machines, they will not come out identical. Espesially if different ripping programs were used. By comparing the raw data, they can tell if the file matched one in their database of illegal files. They cannot tell who made the file, but they can tell "she did not make it" which was what the defence relied on.

They also mentioned ID3 tags as another way to tell who made the file, a much easier process.

So when is someone goign to come out with a program that erases all the ID3 tags, and randomly edits the files hash code?
#8.1 Jugalator on 30 Aug 2003 - 22:53
Should be rather easy. To remove the ID3 tags... The program could also add some random data to the mp3 file in its metadata section (where the ID3 tag is stored). So the mp3 would be identical in sound as the changes wouldn't be to the actual tune.

However, since this would generate a new hash and p2p networks are based on identical hashes to group of sources, it would completely wreck p2p sharing. You'd see stuff like this:

Madonna - Like A Virgin.mp3 (1 source)
Madonna - Like A Virgin.mp3 (1 source)
Madonna - Like A Virgin.mp3 (1 source)
+ hundreds more

And picking one would only look for exactly THAT one which probably only one user in the world has. I.e. no particular transfer speeds to speak of.
#8.2 mipra on 13 Nov 2003 - 03:08
hmm...wondering
(1 reply) #9 kowcop on 30 Aug 2003 - 22:04
what a crock, it sounds like the Gov just trying to sound technical when all the poor woma forgot was that all of her ID3 tags probably still said 'uploadedbyTranceaddict'.. hashes don't make sense.. ID3tags do

#9.1 Danrarbc641 on 31 Aug 2003 - 05:26
LOL

It's RIAA lawyers not the gov't
#10 Webgraph on 31 Aug 2003 - 12:20
This is pure BS! The RIAA can't always trace the file swapper to the source, especially with KaZaA Lite's capabilities of blocking RIAA access! Whenever you transfer any file via P2P, e-mail, or ICQ; nothing is embedded into the file to identify who pirated the file and to whom the file is transferred to! I simply removed all P2P software off my computer because downloading movies and music off the Internet is wrong (Also, I already got too many songs) and they're an unreliable source for software. That's what mIRC is for, right?
#11 hoodedone on 31 Aug 2003 - 16:59
This is why I always edit the ID3 tags. For one thing, the ID3 tags of files shared by people are usually crap, and altering them takes care of the RIAA's "tracking" entirely, both by metadata and hash.
(1 reply) #12 phen!x on 31 Aug 2003 - 23:14
/me hates riaa
#12.1 mipra on 13 Nov 2003 - 03:07
ehm..sue them?
#13 mipra on 13 Nov 2003 - 03:07
that's kinda creepy when they can trace something via MP3

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)