Re: Apple embeds email address in DRM-free downloads

[David Farber <dave () farber net>]

Begin forwarded message:

From: max <max () do4d com>
Date: June 4, 2007 4:36:17 AM EDT
To: dave () farber net
Subject: Re: [IP] Re: Apple embeds email address in DRM-free downloads

more on apple drm-free music from EFF:

they ran tests on the same track bought by two different customers.  
one of them is 360 k larger than the other. to explain the difference  
they reckon "it may be that large amounts of iTunes library data are  
present in each file. It's also possible that Apple has found a way  
to watermark the AAC encoding itself, such that users would need to  
either crack the watermark or transcode the audio signal in order to  
produce a file that does not identify them as the source."

"Apple's DRM-Free AAC Files Contain More Than Just Names and Email  
Addresses"
http://www.eff.org/deeplinks/archives/005282.php

max





David Farber schrieb:
> Begin forwarded message:
>
> From: Joe Touch <touch () isi edu>
> Date: June 2, 2007 9:04:35 AM EDT
> To: dave () farber net
> Subject: Re: [IP] Re: Apple embeds email address in DRM-free downloads
>
> Hi, Dave (et al.),
>
> Some responses to Scott's comments below. I am currently working to
> figure out whether I can update some sort of mp4 checksum so the
> ID-stripped file will play correctly. If anyone has suggestions or can
> help, please contact me off-list.
>
> Joe
>
> > From: Scott Moskowitz <scott () bluespike com>
> > Date: June 1, 2007 10:28:53 AM EDT
> > To: dave () farber net
> > Subject: Re: [IP] Re: Apple embeds email address in DRM-free  
> > downloads
> >
> > > From: Joe Touch <touch () isi edu>
> > > Date: May 31, 2007 11:06:22 PM EDT
> > > To: dave () farber net
> > > Subject: Re: [IP] Apple embeds email address in DRM-free downloads
> ...
> > (Prof Farber from our many conversations on DRM over a decade ago  
> > - Scott)
> >
> > Joe:
> >
> > Not to be pedantic, but how exactly do you arrive at the conclusion:
> > "They're managing digital rights if they force the tag to remain  
> > in the
> > song"?
> >
> > 1) Most items that you transact have receipts including  
> > intangibles such
> > as software
>
> Scott (et al.),
>
> As does even DRM-free song 'purchases' (their words, not mine) from
> iTunes. However, this is more like purchasing an engraved item - one
> that was engraved without Apple telling me, and without my being  
> able to
> remove the engraving.
>
> That sort of tagging is done for some items - e.g., cars, where most
> major parts are tagged, but that tagging is something the public  
> knows.
> It can be used to track that item - e.g., by the police, parts stores,
> etc. Note that nobody sells cars as "free of rights management",  
> though.
>
> > 2) Receipts are indicative of transactions and ensure proper  
> > accounting
> > (no one wants to pay for something twice or not be compensated for
> > something sold twice)
>
> (see above)
>
> > 3) That the song is "DRM-free" did not make the song "free", nor
> > eliminate transactional value such as Apple's responsibility to pay
> > royalties to artists, composers and/or copyright holders
>
> That's true for truly DRM-free sales, e.g., software whose  
> registration
> code is not logged when I make a purchase (shrink-wrapped store  
> boxes of
> software comes to mind), as well as vinyl records. However, in none of
> these examples is the seller required to engrave an item for potential
> future tracking.
>
> > 4) Once you have the song what exactly is being managed? (except your
> > knowledge that the song has a tag)
>
> My ability to play that song without being digitally tracked - even  
> for
> non-illegal use, such as for song ratings, or tracking the fact that I
> like songs about balloons (so others can target me for balloon sales).
> You can see where this could easily go - songs about certain topics,
> songs traced to those who commit crimes, etc - could be used for  
> targeting.
>
> > 5) No one has announced that "they force the tag to remain in the  
> > song"?
> > (though such an ability across a network would be quite valuable and
> > potentially abusive)
>
> No one has announced that "they will put the tag in the song in a way
> that is difficult* to remove" either.
>
> *- as noted above, I'm not yet sure how difficult this is, or whether
> there's some sort of signature that prevents its removal.
>
> > Should you distribute the song to someone who can trace it back to  
> > you
> > would seem to simply indicate the tagged song belongs to you.
>
> Which is a digital right. You can argue that Apple didn't sell me that
> right, but you cannot (IMO) argue that the song is DRM-free.
>
> > The "fact" the song has been made unique to the transaction has  
> > little
> > or nothing to do with active controls associated with traditional
> > notions of "DRM".
>
> A unique tag is exactly what caused similar issues with Intel's CPUID.
> Note that a Pentium (and its successors) could be purchased with cash,
> rendering the uniqueness of such an ID untraceable to the owner.  
> Such is
> not the case with the AppleID.
>
> > Every right should have a responsibility.
> >
> > Apple appears to have shifted responsibility to the person who  
> > pays for
> > the song.
>
> Apple is still entwined in that responsibility, since they are the  
> ones
> who have the AppleID -> owner maps.
>
> DRM-free means that such rights (and responsibilities, deriving from
> misuse of those rights) are not managed in the digital domain. Apple's
> version of DRM-free does not provide that.
>
> Joe
>
> (PS- as always, my posts represent my individual position, not that of
> USC or my current appointment with the USAF)
> ------------------------------------------
> Joe Touch
> Sr. Network Engineer, USAF TSAT Space Segment
>
>
> -------------------------------------------
> Archives: http://v2.listbox.com/member/archive/247/=now
> RSS Feed: http://v2.listbox.com/member/archive/rss/247/
> Powered by Listbox: http://www.listbox.com

-------------------------------------------
Archives: http://v2.listbox.com/member/archive/247/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/247/
Powered by Listbox: http://www.listbox.com