We recently reported how Ohio University spent more than $75,000 on the CopySense anti-piracy system, and we promised an insight into how the system works. CopySense is the network equivalent of the Eye of Sauron, watching over the lands it controls, looking for something of interest, and attempting to kill it. Instead of Orcs, however, it uses RST packets.

As stated previously, for your money you get a box that you plug into your network as close as possible to the Internet connection. Here it monitors all the traffic it can see, looking for data that matches the fingerprints stored in it. If it detects a transfer matching a fingerprint, it terminates the connection, in the same way Sandvine does , by sending RST packets to both ends of the connection, spoofed to look like the other sent it.

Although it seems like a fairer system than the Sandvine box Comcast used, it still has some significant flaws. Perhaps of greatest interest, is that it can be configured to act just like Sandvine, but more so. Literature for the system claims it “automatically filters copyright infringements, operating in a manner similar to a virus filter, without disrupting legitimate file trades.” But does it live up to the hype?

Audible Magic’s support site contains the answers to the basic questions most of us have about CopySense.

Q: What P2P protocols/programs are recognized?
A: The CopySense Appliance recognizes signatures from over 150 popular P2P applications and their derivatives. As new P2P applications are introduced, additional recognition capabilities are provided as software updates under your maintenance agreement
Q: How does it block traffic?
A: The appliance can be instructed to block all P2P traffic or to block only copyrighted content from P2P applications. The CopySense Appliance uses a patented packet-resetting process, and it sends a packet reset to both the requesting and sending IP addresses each time they attempt a P2P transfer that is to be blocked. The P2P application is thus forced to time out with an unsuccessful transfer.
Q: How does it recognize copyrighted content?
A: The CopySense technology examines the perceptual characteristics of a media file and compares that signature with those contained in a database of protected works. Publishers of media content register their works in Audible Magic’s database. The database is regularly updated in the CopySense Appliance as part of a content update subscription.

As the name of the site is TorrentFreak, and the main protocol in use is BitTorrent, let’s start there. Torrents are non-sequential downloads (illustration), that take ‘random’ (generally rarest first of what’s available) pieces from peers on the torrent, in 16KiB chunks. Also, although chunks might be sequential, pieces rarely are. A data stream may consist of 5 chunks from the start, then 2 from the back, and 1 from the middle. From just that 128KiB of data, Audible Magic claim they can identify a copyrighted work, and then terminate the connection.

If it sounds implausible, that’s because it is. It may work with systems like DC++, or possibly eD2k (as well as SoulSeek and KaZaA), but there is no way it can be accurate or effective with BitTorrent. Such methods would work better with HTTP (like Rapidshare) or FTP transfers, but aside from CopySense saying they don’t interfere with anything non-P2P, there is another problem.

As highlighted in the recent case involving the baby dancing to a Prince soundtrack, fair use is a perfectly adequate defence. This system makes no allocation for fair use at all. In the case, the judge ruled that before copyright enforcement can take place, the copyright owner is required to consider if the usage is fair use. An automated system is incapable of that. There have also been doubts surrounding the effectiveness of the streaming content version, which is based on the same technology.

So, in essence, CopySense does not (and can not) work to inhibit the most popular p2p protocol out there. If it could, then we would simply see a resurgence in passworded RAR files being torrented, with the passwords posted either on the torrent site, or even in the comment field of the torrent. CopySense also fails to check if a copyrighted file that it might identify (if you’re using a protocol that it can actually detect) is being used in a way consistent with fair use, or is licensed for use (although extremely improbable, the possibility exists, especially if copyrighted recording is right at the start).

In part two, we will look at claims that have been made from those who have used CopySense, and how that affects copyright infringement cases already in progress, and just how you get your content protected.

Post from: TorrentFreak

torrentlog.com - Full movie downloads (dvdrips and divx)

CopySense Sleek Predator, or White Elephant? torrent downloads.

Ohio University (OU) and 7 other universities decided that blocking the many legitimate uses for P2P is not the best idea. Instead they have decided to go the high-tech route instead. They went for the method touted by the music industry, and paraded by the RIAA around Capitol Hill in 2004. A ‘fingerprint’ recognition service called ‘Copysense‘.

Copysense works by listening in on ALL network traffic, and looking for data patterns that match signatures, or ‘fingerprints’ loaded on it. If it detects data packets matching one of its signatures, it terminates the connection by sending forged RST packets to both sides of the connection (Comcast anyone?).

Piracy detection services like Copysense are not cheap. Ohio University paid around $60,000 in 2007 for the system, and an additional $15,500 a year for updates and support. For this, they got a network monitoring box, and some questionable results that prompt more questions than answers, but we will discuss these another time.

There are more issues though, a system working in promiscuous mode is also a big security risk. Passwords, and user names, if transmitted unencrypted, are observable, as is any other traffic sent in the clear. When J. Brice Bible, the CIO at Ohio University, took up his post, it was in the wake of data security breaches. Now he has paid tens of thousands of dollars for a box that can potentially cause a similar breach. Of course, potentially any network client can do this, but only on their local network, not the entire university network.

Ohio University seems to be happy with the entertainment industry’s favorite anti-piracy system. Of course, the less skeptical amongst us would think that outgoing head of the WIPO being an alumni is pure coincidence, as is the CEO of Fox News. People with a strong pro-copyright agenda having contact with an early adopter of a technology pushed heavily by the MPAA and RIAA, is something that rose some eyebrows at the TorrentFreak office though.

Regardless, Ohio University claims the program has been a success. Speaking in the student newspaper, Bible said, “It works very well for today, (but) I don’t know if it will work well tomorrow or the next day or the year after. I want to hear from students … I think students should be engaged in this discussion—and faculty, too.”

If you’re a student at Ohio University, or one of the other universities that use Copysense, why not let him know, and get involved.

This is an article from: TorrentFreak

Tackling College Piracy: MPAA and RIAA’s Favorite

torrentlog.com - Full movie downloads (dvdrips and divx)

Tackling College Piracy: MPAA and RIAA’s Favorite torrent downloads.

Under the College Opportunity and Affordability Act, colleges and universities that get federal funding have to come up with ways to deal with “Campus-based Digital Theft Prevention”. The bill doesn’t give specific methods, and universities can come up with their own methods, as Missouri S&T has done with their P2P quiz.

The subject of universities and (illicit) filesharing has been slowly gaining prominence over the past year, and more now than ever, with the passage of the College Opportunity and Affordability Act of 2008. We have taken a look into the different ways universities around the US are dealing with the subject. In part one, Missouri University of Science and Technology.

Initially a mining school, the university, known until the start of the year as University of Missouri–Rolla, is not exactly the largest around. Even though the university has just over 6,000 students, they have not been ignored in the scattergun campaign that is Internet-copyright-enforcement by organizations such as the RIAA.

In a recent press release, however, the university claims to have reduced its influx of notices, and credits it to a new system. This groundbreaking system is a multiple choice test, that students have to get completely correct each time, before being allowed access to filesharing applications. Once the test is ‘aced’ the student is granted 6 hours of p2p access. In a month, a student can use no more than 8 six-hour periods (48 hours total) a month.

In theory, this could work, but as more things move to a p2p based distribution model, having the ability to access things only on a timed basis is somewhat shortsighted. The content industries are pushing for this kind of restriction, and might see this as a promising development, but have been quiet on Missouri S&T’s program.

Also, the restriction on what can be seen as ‘mainstream p2p’ could lead to an increase in p2p that is harder to monitor and notice, as students will most likely encrypt their traffic or attempt to access content in ways not restricted. Sites that host files like rapidshare wouldn’t be affected by the time restrictions, and internal dc++ hubs, to share what is transferred in during the 6-hour windows would spring up.

It is also unclear which protocols are counted as p2p for these purposes. Newsgroups, as well as showing a resurgence in popularity for file sharing, are also a valuable tool for information exchange in general (and one sometimes embraced by major content producers. Michael Straczynski has been posting posts regularly to rec.arts.sf.tv.babylon5.moderated, and Terry Pratchett is a regular on alt.fan.pratchett). However, it’s one potential way to prevent WoW addiction in students.

Requests to the university’s system security analyst, Karl Lutzen, were not answered at the time of publication.

Source TF

torrentlog.com - Full movie downloads (dvdrips and divx)

Tackling College Piracy: The P2P Quiz torrent downloads.

The subject of universities and (illicit) filesharing has been slowly gaining prominence over the past year, and more now than ever, with the passage of the College Opportunity and Affordability Act of 2008. We have taken a look into the different ways universities around the US are dealing with the subject. In part one, Missouri University of Science and Technology and their P2P quiz.

Initially a mining school, the university, known until the start of the year as University of Missouri–Rolla, is not exactly the largest around. Even though the university has just over 6,000 students, they have not been ignored in the scattergun campaign that is Internet-copyright-enforcement by organizations such as the RIAA.

In a recent press release, however, the university claims to have reduced its influx of notices, and credits it to a new system. This groundbreaking system is a multiple choice test, that students have to get completely correct each time, before being allowed access to filesharing applications. Once the test is ‘aced’ the student is granted 6 hours of p2p access. In a month, a student can use no more than 8 six-hour periods (48 hours total) a month.

In theory, this could work, but as more things move to a p2p based distribution model, having the ability to access things only on a timed basis is somewhat shortsighted. The content industries are pushing for this kind of restriction, and might see this as a promising development, but have been quiet on Missouri S&T’s program.

Also, the restriction on what can be seen as ‘mainstream p2p’ could lead to an increase in p2p that is harder to monitor and notice, as students will most likely encrypt their traffic or attempt to access content in ways not restricted. Sites that host files like rapidshare wouldn’t be affected by the time restrictions, and internal dc++ hubs, to share what is transferred in during the 6-hour windows would spring up.

It is also unclear which protocols are counted as p2p for these purposes. Newsgroups, as well as showing a resurgence in popularity for file sharing, are also a valuable tool for information exchange in general (and one sometimes embraced by major content producers. Michael Straczynski has been posting posts regularly to rec.arts.sf.tv.babylon5.moderated, and Terry Pratchett is a regular on alt.fan.pratchett). However, it’s one potential way to prevent WoW addiction in students.

Requests to the university’s system security analyst, Karl Lutzen, were not answered at the time of publication.

This is an article from: TorrentFreak

Tackling College Piracy: The P2P Quiz

torrentlog.com - Full movie downloads (dvdrips and divx)

Tackling College Piracy: The P2P Quiz torrent downloads.