RIAA wants to seed P2P networks with viruses

N&P: Discuss governments, nations, politics and recent related news here.

Moderators: Alyrium Denryle, Edi, K. A. Pital

User avatar
Durandal
Bile-Driven Hate Machine
Posts: 17927
Joined: 2002-07-03 06:26pm
Location: Silicon Valley, CA
Contact:

RIAA wants to seed P2P networks with viruses

Post by Durandal »

The Recording Industry Ass. of America wants to seed Peer2Peer networks with executables disguised as files which will either delete MP3's from your system, freeze your machine and force a reboot or flood your internet connection with useless traffic. No mention of liability is made if one of these programs deletes a legitimate file from your system. Perhaps the virus will display a nice EULA absolving the RIAA of liability before it executes.

Please keep in mind that the Melissa virus searched your hard drive and deleted MP3 and JPEG files. It was considered illegal. Other viruses which freeze your machine and force a reboot are considered illegal. Flooding a connection with useless traffic to impair internet connectivity is also illegal. This is known as a denial of service attack.
The New York Times wrote:Some of the world's biggest record companies, facing rampant online piracy, are quietly financing the development and testing of software programs that would sabotage the computers and Internet connections of people who download pirated music, according to industry executives.

The record companies are exploring options on new countermeasures, which some experts say have varying degrees of legality, to deter online theft: from attacking personal Internet connections so as to slow or halt downloads of pirated music to overwhelming the distribution networks with potentially malicious programs that masquerade as music files.

The covert campaign, parts of which may never be carried out because they could be illegal under state and federal wiretap laws, is being developed and tested by a cadre of small technology companies, the executives said.

If employed, the new tactics would be the most aggressive effort yet taken by the recording industry to thwart music piracy, a problem that the IFPI, an industry group, estimates costs the industry $4.3 billion in sales worldwide annually. Until now, most of the industry's anti-piracy efforts have involved filing lawsuits against companies and individuals that distribute pirated music. Last week, four college students who had been sued by the industry settled the suits by agreeing to stop operating networks that swap music and pay $12,000 to $17,500 each.

The industry has also tried to frustrate pirates technologically by spreading copies of fake music files across file-sharing networks like KaZaA and Morpheus. This approach, called "spoofing," is considered legal but has had only mild success, analysts say, proving to be more of a nuisance than an effective deterrent.

The new measures under development take a more extreme ? and antagonistic ? approach, according to executives who have been briefed on the software programs.

Interest among record executives in using some of these more aggressive programs has been piqued since a federal judge in Los Angeles ruled last month that StreamCast Networks, the company that offers Morpheus, and Grokster, another file-sharing service, were not guilty of copyright infringement. And last week, the record industry turned a "chat" feature in popular file-trading software programs to its benefit by sending out millions of messages telling people: "When you break the law, you risk legal penalties. There is a simple way to avoid that risk: DON'T STEAL MUSIC."

The deployment of this message through the file-sharing network, which the Recording Industry Association of America said is an education effort, appears to be legal. But other anti-piracy programs raise legal issues.

Since the law and the technology itself are new, the liabilities ? criminal and civil ? are not easily defined. But some tactics are clearly more problematic than others.

Among the more benign approaches being developed is one program, considered a Trojan horse rather than a virus, that simply redirects users to Web sites where they can legitimately buy the song they tried to download.

A more malicious program, dubbed "freeze," locks up a computer system for a certain duration ? minutes or possibly even hours ? risking the loss of data that was unsaved if the computer is restarted. It also displays a warning about downloading pirated music. Another program under development, called "silence," scans a computer's hard drive for pirated music files and attempts to delete them. One of the executives briefed on the silence program said that it did not work properly and was being reworked because it was deleting legitimate music files, too.

Other approaches that are being tested include launching an attack on personal Internet connections, often called "interdiction," to prevent a person from using a network while attempting to download pirated music or offer it to others.

"There are a lot of things you can do ? some quite nasty," said Marc Morgenstern, the chief executive of Overpeer, a technology business that receives support from several large media companies. Mr. Morgenstern refused to identify his clients, citing confidentiality agreements with them. He also said that his company does not and will not deploy any programs that run afoul of the law. "Our philosophy is to make downloading pirated music a difficult and frustrating experience without crossing the line." And while he said "we develop stuff all the time," he was also quick to add that "at the end of the day, my clients are trying to develop relationships with these people." Overpeer, with 15 staff members, is the largest of about a dozen businesses founded to create counterpiracy methods.

The music industry's five "majors" ? the Universal Music Group, a unit of Vivendi Universal; the Warner Music Group, a unit of AOL Time Warner; Sony Music Entertainment; BMG, a unit of Bertelsmann; and EMI ? have all financed the development of counterpiracy programs, according to executives, but none would discuss the details publicly. Warner Music issued a statement saying: "We do everything we feel is appropriate, within the law, in order to protect our copyrights." A spokeswoman for Universal Music said that the company "is engaging in legal technical measures."

Whether the record companies decide to unleash a tougher anti-piracy campaign has created a divide among some music executives concerned about finding a balance between stamping out piracy and infuriating its music-listening customers. There are also questions about whether companies could be held liable by individuals who have had their computers attacked.

"Some of this stuff is going to be illegal," said Lawrence Lessig, a professor at Stanford Law School who specializes in Internet copyright issues. "It depends on if they are doing a sufficient amount of damage. The law has ways to deal with copyright infringement. Freezing people's computers is not within the scope of the copyright laws."

Randy Saaf, the president of MediaDefender, another company that receives support from the record industry to frustrate pirates, told a congressional hearing last September that his company "has a group of technologies that could be very effective in combating piracy on peer-to-peer networks but are not widely used because some customers have told us that they feel uncomfortable with current ambiguities in computer hacking laws."

In an interview, he declined to identify those technologies for competitive reasons. "We steer our customers away from anything invasive," he said.

Internet service providers are also nervous about anti-piracy programs that could disrupt their systems. Sarah B. Deutsch, associate general counsel of Verizon Communications, said she is concerned about any program that slows down connections. "It could become a problem we don't know how to deal with," she said. "Any technology that has an effect on a user's ability to operate their computer or use the network would be of extreme concern to us. I wouldn't say we're against this completely. I would just say that we're concerned."

Verizon is already caught in its own battle with the recording industry. A federal judge ordered Verizon to provide the Recording Industry Association of America with the identities of customers suspected of making available hundreds of copyrighted songs. The record companies are increasingly using techniques to sniff out and collect the electronic addresses of computers that distribute pirated music.

But the more aggressive approach could also generate a backlash against individual artists and the music industry. When Madonna released "spoofed" versions of songs from her new album on music sharing networks to frustrate pirates, her own Web site was hacked into the next day and real copies of her album were made available by hackers on her site.

The industry has tried to seek legislative support for aggressive measures. Representative Howard L. Berman, Democrat of California, introduced a bill last fall that would have limited the liability of copyright owners for using tougher technical counterpiracy tactics to protect their works online. But the bill was roundly criticized by privacy advocates. "There was such an immediate attack that you couldn't get a rational dialogue going," said Cary Sherman, president of the recording industry association. He said that while his organization often briefs recording companies on legal issues related to what he calls "self help" measures, "the companies deal with this stuff on their own."

And as for the more extreme approaches, he said, "It is not uncommon for engineers to think up new programs and code them. There are a lot of tantalizing ideas out there ? some in the gray area and some illegal ? but it doesn't mean they will be used."
Damien Sorresso

"Ever see what them computa bitchez do to numbas? It ain't natural. Numbas ain't supposed to be code, they supposed to quantify shit."
- The Onion
weemadando
SMAKIBBFB
Posts: 19195
Joined: 2002-07-28 12:30pm
Contact:

Post by weemadando »

I can smell the lawsuits brewing from here...

What happens if I lose one of my radio show segments that I have been editing? What happens if it destroys one of my assignments?

If the RIAA does this I will be donating money to whatever lawyers/groups want to fuck them up.
HemlockGrey
Fucking Awesome
Posts: 13834
Joined: 2002-07-04 03:21pm

Post by HemlockGrey »

Fuck tobacco corporations. I think the ACLU should get it's ass in gear and start running some TV ads on this crap.
The End of Suburbia
"If more cars are inevitable, must there not be roads for them to run on?"
-Robert Moses

"The Wire" is the best show in the history of television. Watch it today.
User avatar
Alyeska
Federation Ambassador
Posts: 17496
Joined: 2002-08-11 07:28pm
Location: Montana, USA

Post by Alyeska »

What happens when it delets the MP3 I ripped from my very own CD? Its LAWSUIT TIME!!! :twisted:
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."

"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
User avatar
Glocksman
Emperor's Hand
Posts: 7233
Joined: 2002-09-03 06:43pm
Location: Mr. Five by Five

Post by Glocksman »

What happens when it delets the MP3 I ripped from my very own CD? Its LAWSUIT TIME!!!
Unless Howard Berman (any relation to Rick Berman? :twisted: ) or one of the other RIAA whores in Congress pass a law granting them immunity from such suits. :x
"You say that it is your custom to burn widows. Very well. We also have a custom: when men burn a woman alive, we tie a rope around their necks and we hang them. Build your funeral pyre; beside it, my carpenters will build a gallows. You may follow your custom. And then we will follow ours."- General Sir Charles Napier

Oderint dum metuant
User avatar
Darth Wong
Sith Lord
Sith Lord
Posts: 70028
Joined: 2002-07-03 12:25am
Location: Toronto, Canada
Contact:

Post by Darth Wong »

And people wonder why there are those who push campaign finance reform.
Image
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing

"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC

"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness

"Viagra commercials appear to save lives" - tharkûn on US health care.

http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
User avatar
Durandal
Bile-Driven Hate Machine
Posts: 17927
Joined: 2002-07-03 06:26pm
Location: Silicon Valley, CA
Contact:

Post by Durandal »

Glocksman wrote:
What happens when it delets the MP3 I ripped from my very own CD? Its LAWSUIT TIME!!!
Unless Howard Berman (any relation to Rick Berman? :twisted: ) or one of the other RIAA whores in Congress pass a law granting them immunity from such suits. :x
Well, considering that a Judge ruled that Verizon had to turn over the names of subscribers that the RIAA suspected to be trading pirated media, I'd say that they're pretty close to becoming judge, jury and executioner.
Damien Sorresso

"Ever see what them computa bitchez do to numbas? It ain't natural. Numbas ain't supposed to be code, they supposed to quantify shit."
- The Onion
User avatar
Hamel
Sith Marauder
Posts: 3842
Joined: 2003-02-06 10:34am
Contact:

Post by Hamel »

Thar's some stupids in a slashdot thread on the matter:
idiot slashdotter FallLine wrote:What kind of geek in his right mind would actually take a job like this? Seriously, who in good conscience would take a job where you are supposed to crack computers so Hilary Rosen can have her way?

If the RIAA is allowed to follow through on this, I wish nothing but the worst of geek hell to whoever does their bidding. Yes, I mean the worst: having the maintain someone else's Perl code.


I would. While I surely would not support or condone many of the ideas suggested here (e.g., deleting all mp3s, installing trojans, etc) there is a lot more that RIAA can do that I would be happy to help them with. For instance, I think it is totally defensible for RIAA to find the hashes/checksums of their most popular confirmed IP on Kazaa and like networks and then deploy some fake P2P clients around the internet to inject BAD data into any client that attempts to download said files. (Such a scheme might work very well--even if clients ultimately reject the finished download--how do you track down the offender in a decentralized environment? how do you stop further corruption?). Likewise, I could see a strong argument for RIAA's say, attacking the most blatant and productive (fastest/most files/etc) pirated file sharers. Though this may be a legal grey area right now, I believe it could be worked out legally. Such an attack need not be any more invasive than merely preventing further downloads, i.e., it wouldn't consume more bandwidth than a single download, it wouldn't affect other users at that user's ISP, it wouldn't infect the person's computer, and so on. One such way that I might impliment such an attack (though ultimately defeatable) would be to consume all that's person's download queues by slowly downloading with numerous cooperating (fake) clients or maybe an (extremely low volume) SYN attack on that filesharing port or maybe leaching said files as fast as possible to soak up their bandwidth (nothing they're not already offering).

Long story short: I would and I could help, without breaking the law or feeling guilty about it. Say whatever you will about RIAA, but this is about more than just RIAA, this is about intellectual property itself. This is about the right of a person and, by extension, business concerns, to control the product of their own mind. Yes, I recognize that there have always been varying degrees of legal limitations of IP rights, but this sort of P2P recognizes no such compromises. IP owners have every right to fight the good fight. I, as an alleged "geek", am particularly sympathetic to their plight since I myself share in their concerns.

If P2P piracy is carried out to its logical extreme, then I wish on you and those that support it a life of struggling to secure development jobs around businesses that are left with no other option then to pursue profitable business around misguided notions such as the GPL. Good luck.
"Right now we can tell you a report was filed by the family of a 12 year old boy yesterday afternoon alleging Mr. Michael Jackson of criminal activity. A search warrant has been filed and that search is currently taking place. Mr. Jackson has not been charged with any crime. We cannot specifically address the content of the police report as it is confidential information at the present time, however, we can confirm that Mr. Jackson forced the boy to listen to the Howard Stern show and watch the movie Private Parts over and over again."
User avatar
Darth Wong
Sith Lord
Sith Lord
Posts: 70028
Joined: 2002-07-03 12:25am
Location: Toronto, Canada
Contact:

Post by Darth Wong »

I like the way the person argues that various specific types of hacking activities are OK in the pursuit of intellectual property rights, and of course, draws the inevitable false dilemma between letting the RIAA ass-rape consumer rights and destroying the computer business.
Image
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing

"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC

"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness

"Viagra commercials appear to save lives" - tharkûn on US health care.

http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
Asst. Asst. Lt. Cmdr. Smi
What Kind of Username is That?
Posts: 9254
Joined: 2002-07-10 08:53pm
Location: Back in PA

Post by Asst. Asst. Lt. Cmdr. Smi »

So, what the RIAA wants to do in this case is illegal, and there could be "collateral damage". I foresee them getting not even the slap on the wrist for this.
BotM: Just another monkey|HAB
User avatar
Crayz9000
Sith Apprentice
Posts: 7329
Joined: 2002-07-03 06:39pm
Location: Improbably superpositioned
Contact:

Post by Crayz9000 »

Does anyone want to explain HOW they're going to disguise viruses as files?

The old .txt.vbs trick has been done to death already. And MP3s aren't executable.

So, how the hell are they planning to do this?
A Tribute to Stupidity: The Robert Scott Anderson Archive (currently offline)
John Hansen - Slightly Insane Bounty Hunter - ASVS Vets' Assoc. Class of 2000
HAB Cryptanalyst | WG - Intergalactic Alliance and Spoof Author | BotM | Cybertron | SCEF
User avatar
Darth Wong
Sith Lord
Sith Lord
Posts: 70028
Joined: 2002-07-03 12:25am
Location: Toronto, Canada
Contact:

Post by Darth Wong »

Crayz9000 wrote:Does anyone want to explain HOW they're going to disguise viruses as files?

The old .txt.vbs trick has been done to death already. And MP3s aren't executable.

So, how the hell are they planning to do this?
They need to find exploits in media software. Windows Media Player had some very serious exploits for a while that would allow an MP3-embedded virus to execute.
Image
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing

"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC

"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness

"Viagra commercials appear to save lives" - tharkûn on US health care.

http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
User avatar
Superman
Pink Foamin' at the Mouth
Posts: 9690
Joined: 2002-12-16 12:29am
Location: Metropolis

Post by Superman »

The RIAA is really making stupid decisions here. They are going to make ALOT of enemies and will probably be sued out of existence.

Hopefully, someone will flood the RIAA with computer viruses...
Image
User avatar
RedImperator
Roosevelt Republican
Posts: 16465
Joined: 2002-07-11 07:59pm
Location: Delaware
Contact:

Post by RedImperator »

The faster this entire hatfucking industry collapses, the better. For Chrissakes, who the fuck do these people think they are? Deleting Goddamned MP3s off my hard disk, freezing my Goddamned computer, flooding my motherfucking Internet connection, which I pay for? Why don't they just break into my fucking house and go through my fucking computer from the comfort of my own chair? Christ almighty, I'm a full-bore hardcore free market capitalist and someone who supports strong copyright laws (for what I hope will one day be my own self interest), so I'm about as likely an ally they'll find in my age group, and right now I feel like downloading music just to spite them.
Image
Any city gets what it admires, will pay for, and, ultimately, deserves…We want and deserve tin-can architecture in a tinhorn culture. And we will probably be judged not by the monuments we build but by those we have destroyed.--Ada Louise Huxtable, "Farewell to Penn Station", New York Times editorial, 30 October 1963
X-Ray Blues
User avatar
Crayz9000
Sith Apprentice
Posts: 7329
Joined: 2002-07-03 06:39pm
Location: Improbably superpositioned
Contact:

Post by Crayz9000 »

Darth Wong wrote:They need to find exploits in media software. Windows Media Player had some very serious exploits for a while that would allow an MP3-embedded virus to execute.
However, Winamp didn't have that problem, and it is far more popular that any version of WMP. Or RealPlayer, for that matter. Or XMMS...

The problem is that they've got to design one program that can be embedded into any MP3 file, and can use a number of exploits. The more exploits they build into their virus, the more the chance of detecting it increases...
A Tribute to Stupidity: The Robert Scott Anderson Archive (currently offline)
John Hansen - Slightly Insane Bounty Hunter - ASVS Vets' Assoc. Class of 2000
HAB Cryptanalyst | WG - Intergalactic Alliance and Spoof Author | BotM | Cybertron | SCEF
User avatar
Superman
Pink Foamin' at the Mouth
Posts: 9690
Joined: 2002-12-16 12:29am
Location: Metropolis

Post by Superman »

Hopefully, all of the file sharers (the millions of us) will declare war on these fuckers and make them wish they had never done any of this.

And you know, it's not like the artists are losing money because of this sharing. It's these idiots at the record companies and I suck "fuck them."
Image
User avatar
Durandal
Bile-Driven Hate Machine
Posts: 17927
Joined: 2002-07-03 06:26pm
Location: Silicon Valley, CA
Contact:

Post by Durandal »

Unfortunately, the recording industries have a revenue that rivals the GNP of many nations. They can buy as many politicians as they want. Maybe if the file sharing community pooled its money ...
Damien Sorresso

"Ever see what them computa bitchez do to numbas? It ain't natural. Numbas ain't supposed to be code, they supposed to quantify shit."
- The Onion
User avatar
Crayz9000
Sith Apprentice
Posts: 7329
Joined: 2002-07-03 06:39pm
Location: Improbably superpositioned
Contact:

Post by Crayz9000 »

OMFG...

http://slashdot.org/comments.pl?sid=62990&cid=5870926

Think of your typical Slashdotting, and multiply by a hundred... ouch, somebody is going to be hurting.
A Tribute to Stupidity: The Robert Scott Anderson Archive (currently offline)
John Hansen - Slightly Insane Bounty Hunter - ASVS Vets' Assoc. Class of 2000
HAB Cryptanalyst | WG - Intergalactic Alliance and Spoof Author | BotM | Cybertron | SCEF
User avatar
Darth Wong
Sith Lord
Sith Lord
Posts: 70028
Joined: 2002-07-03 12:25am
Location: Toronto, Canada
Contact:

Post by Darth Wong »

Crayz9000 wrote:OMFG...

http://slashdot.org/comments.pl?sid=62990&cid=5870926

Think of your typical Slashdotting, and multiply by a hundred... ouch, somebody is going to be hurting.
The irony, of course, is that the RIAA will attempt to report this to the authorities, even though they planned to do the same thing.
Image
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing

"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC

"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness

"Viagra commercials appear to save lives" - tharkûn on US health care.

http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
User avatar
Crayz9000
Sith Apprentice
Posts: 7329
Joined: 2002-07-03 06:39pm
Location: Improbably superpositioned
Contact:

Post by Crayz9000 »

Darth Wong wrote:The irony, of course, is that the RIAA will attempt to report this to the authorities, even though they planned to do the same thing.
Although that does beg the question of who they're going to implicate.

Slashdot? They're not responsible for the content of their users' posts.
The user who posted it? I dunno, is making a remark against the law?
Everyone who decided to ping them? Good luck :roll:
A Tribute to Stupidity: The Robert Scott Anderson Archive (currently offline)
John Hansen - Slightly Insane Bounty Hunter - ASVS Vets' Assoc. Class of 2000
HAB Cryptanalyst | WG - Intergalactic Alliance and Spoof Author | BotM | Cybertron | SCEF
User avatar
Durandal
Bile-Driven Hate Machine
Posts: 17927
Joined: 2002-07-03 06:26pm
Location: Silicon Valley, CA
Contact:

Post by Durandal »

Wouldn't the RIAA seeding networks with viruses and conducting DoS attacks be a violation of their ISP's terms of service? It certainly is if I do it.
Damien Sorresso

"Ever see what them computa bitchez do to numbas? It ain't natural. Numbas ain't supposed to be code, they supposed to quantify shit."
- The Onion
User avatar
Stormbringer
King of Democracy
Posts: 22678
Joined: 2002-07-15 11:22pm

Post by Stormbringer »

I hope they really do go through with this and get nailed for it. It'd be perfect, they'd have pissed off thousands of people and have no way to hide it. Some one (or better yet plenty of someones) will nail their collective ass to the wall.
Image
User avatar
Crown
NARF
Posts: 10615
Joined: 2002-07-11 11:45am
Location: In Transit ...

Post by Crown »

Crayz9000 wrote:OMFG...

http://slashdot.org/comments.pl?sid=62990&cid=5870926

Think of your typical Slashdotting, and multiply by a hundred... ouch, somebody is going to be hurting.
*Jots the command line furiously on note book*

Well if my computer ever downloads an mp3 virus I know how I will choose to show my protest!

Lovely.
Image
Η ζωή, η ζωή εδω τελειώνει!
"Science is one cold-hearted bitch with a 14" strap-on" - Masuka 'Dexter'
"Angela is not the woman you think she is Gabriel, she's done terrible things"
"So have I, and I'm going to do them all to you." - Sylar to Arthur 'Heroes'
User avatar
EmperorMing
Sith Devotee
Posts: 3432
Joined: 2002-09-09 05:08am
Location: The Lizard Lounge

Post by EmperorMing »

The RIAA is seriously fucking up with this kind of activity. I'm just wondering what kind of retaliation against them will be...

Jerks!! ThEY are the ones riping off the artists in the first place with their fucked up contracts... :evil:
Image

DILLIGAF: Does It Look Like I Give A Fuck

Kill your God!
User avatar
Superman
Pink Foamin' at the Mouth
Posts: 9690
Joined: 2002-12-16 12:29am
Location: Metropolis

Post by Superman »

Don't these file sharing programs like KaZaA have virus scanners built into them or something?
Image
Post Reply