RE: [7.8.2002 44916] Notice of Copyright Infringement]

From: Kayne Ian (Softlab) (Ian.Kayne@softlab.co.uk)
Date: 07/12/02 

From: "Kayne Ian (Softlab)" <Ian.Kayne@softlab.co.uk>
To: Vuln-Dev <VULN-DEV@SECURITYFOCUS.COM>
Date: Fri, 12 Jul 2002 09:27:33 +0100

2 points about this thread.

First, a lot of people have posted responses to the effect of "Unless xxx
downloads the file that is supposedly breaching copyright, they can't tell
if you *are* breaching copyright or not, thus breaching it themselves".
Unfortunately this isn't true (at least for EDonkey). EDonkey creates a hash
of the file on your hd, and compares it with the hashes on everyone elses
hd. If you're in the middle of downloading the file, Edonkey can be sure
it's resuming the same file from someone else (regardless of filename) by
these hashes. Therefore to prove copyright infringment, all these companies
need to do is to confirm your hashes are the same hashes as a "real" warezed
version of whatever movie. Of course the movie house give the company legal
permission to download etc the file, therefore they are not in contravention
of copyright law. So all the company does is run a donkeybot or similar,
scan the network and log all the people who are sharing a file with hashes
that match a warezed ver of the movie. Until it becomes illegal to own a
checksum of a file...

As a side note, this hashing works against them too. They may have been
flooding the p2p networks with "bad" versions of movies, but all any
sensible person needs to do is to use a website (sharereactor.com, for
example) and use the hash link off there. Providing the website is "true"
(and there are enough of them), you'll always be garanteed to download the
file you actually want.

Secondly, companies & "entities" in the USA really need to get a damn grip
of themselves. A friend of mine received an email from a company saying he
was breaching the DCMA etc for exactly the same reason as Keith Tyler. The
problem? He lives in the UK, just like me. Sorry to tell you, no matter how
much you don't want to believe it (and how many times you put a Skylarov in
jail) American law does NOT apply worldwide.

All that said, piracy is of course a crime. Views are my own. Standard
disclaimer applies etc etc.

Ian Kayne
Technical Specialist - IT Solutions
Softlab Ltd - A BMW Company

********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed.

If you are not the intended recipient or the person responsible for
delivering to the intended recipient, be advised that you have received
this email in error and that any use of the information contained within
this email or attachments is strictly prohibited.

Internet communications are not secure and Softlab does not accept
any legal responsibility for the content of this message. Any opinions
expressed in the email are those of the individual and not necessarily
those of the Company.

If you have received this email in error, or if you are concerned with
the content of this email please notify the IT helpdesk by telephone
on +44 (0)121 788 5480.

********************************************************************

Relevant Pages

  • RE: [7.8.2002 44916] Notice of Copyright Infringement]
    ... Unfortunately that totally nulls the usefulness of a p2p network that checks ... hashes to download from multiple sources. ... > |"real" warezed version of whatever movie. ...
    (Vuln-Dev)
  • RE: Using schmoo rainbow tables with rcrack
    ... The error message that has been shown indicates that the downloaded rainbow ... table for LM Hashes supports only Windows password of less than or equal to ... vulnerability management needs. ... Download FREE whitepaper on how a managed service can help you: ...
    (Pen-Test)
  • RE: [7.8.2002 44916] Notice of Copyright Infringement]
    ... Appending a single bit onto the end of the file makes a different hash. ... and you no longer match the hashes. ... The only way to prove you're breaking copyright is to download at ... |"real" warezed version of whatever movie. ...
    (Vuln-Dev)
  • RE: [7.8.2002 44916] Notice of Copyright Infringement]
    ... copyright in this fashion is just that kind of permission. ... > of the file on your hd, and compares it with the hashes on everyone elses ... Of course the movie house give the company legal ... > permission to download etc the file, therefore they are not in contravention ...
    (Vuln-Dev)
  • Re: Trojan.PWS.Bancos.142
    ... .The 'Download v1.0 Now' is located on the bottom left corner of the window. ... account individual or different modes of responses. ... > | With respect to my private e-mail address showing in your responses, ... > As for the URL provided, I could NOT locate, patchmonitor. ...
    (microsoft.public.security.virus)