OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Napster a little insecure?
From: Ken Williams (Ken.WilliamsEY.COM)
Date: Mon Jan 31 2000 - 09:16:13 CST

The real concern is that anybody, including music industry lawyers and law enforcement officials, can download Napster and find out exactly who is "distributing" or "stealing" copyrighted music. This is the anonymity factor that makes this situation very different from simple FTP or HTTP requests that you send out and receive. Of course, if you're not allowing anybody to access any copyrighted music that you might legally possess, then you have nothing to worry about ...

Proxied sessions are not really an answer either, in this case, for people concerned about their anonymity - you need bandwidth to transfer large amounts of data in a timely fashion.

- kw

m_a_n_i_a_c_HOTMAIL.COM on 01/31/2000 01:08:38 AM

Please respond to m_a_n_i_a_c_HOTMAIL.COMInternet
To: VULN-DEVSECURITYFOCUS.COMInternet
cc:
Subject: Re: Napster a little insecure?

I don't think he was complaining about the ethics of MP3s. He was stating
an honest concern that Napster logs *YOUR* IP address when you download an
MP3. With a court order, could the music companies not get this information
from Napster? Would this not give them enough of an audit trail to crack
down on people?

Its a possibility....

>
>Wtf?
>What has mp3 pirating with volnurability todo?;p
>Please take your etichal problems about mp3's some where else.
>I am sure most of the readers of this mail list has mp3's of music which
>is copyrighted, and I wouldn't be surpised if even YOU have it ;p
>
>- technot
>

-==-Man!ac-==-
"I don't intend to offend, I offend with my intent"

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com

*******************************************************************************
Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Ernst & Young LLP
*******************************************************************************