Anti-RIAA Attack Methodology

[schnarff]

I just read the most recent Slashdot article on RIAA's "war" tactics (http://slashdot.org/article.pl?sid=03/05/03/204241&mode=thread&tid=188&tid=141&tid=126&tid=95) and decided to try to do something about it. Since I'm more of a writer/idea guy than a programmer, I wrote an article about a method for detecting virii/trojans/corrupt files (http://www.schnarff.com/anti-riaa-trojan.html) . I'm trying to spread the word on it so that someone with more programming skills and time than me will implement it.

Please feel free to contact me with any thoughts/improvements to this concept, or if you want to implement it somewhere.

Alex Kirk

[NDGAARONDI]

I'm just waiting the RIAA to wage a war against people outside the USA......then I will happily sue them! :shy

[Kyle06]

I agree that does sound like a good idea all we have to do now is to get someone to help you with it I would but I do not know how to program yet but I am hoping someday I will learn how but untill then...................

[NDGAARONDI]

Excellent. I just thought if Kazaa can have action taken against them and they're abroad, then so can I against the RIAA :devil

[eivioolla]

This has already been done in a way. The verified sites that offer sig2dat is exactly MD5 or other such hash value.

The problem in your suggestion is that there's nothing to prevent RIAA clicking every file as a bad file.

[nasrules]

Originally posted by NDGAARONDI
I'm just waiting the RIAA to wage a war against people outside the USA......then I will happily sue them! :shy

Sounds about right to me :-D

[zaphodiv]

@Schnarff

I think that keeping lists of known good files is more effective.
Thinking about making a decentralised system to provide the function
of verified link websites, it would be a lot easier to work out
who provides good links than to work out who votes honestly for
bad files.
A voting system seems doomed to failure to me. Resourcfull
adversarys can appear to be thousands of different peers.

File ratings could be cryptographically signed so that nobody
can send out a fake file recommendation that appears to
be from "sharereactor" or "some random group that downloads far
too much."

old post by me (http://zeropaid.com/bbs/showthread.php?s=&threadid=5380)

A p2p client could ocassionally nag users to tell it if a
downloaded file is good or not and based on that information
descided that it trusts file rating from "sharereactor"
because they recommended the file. Trust networks could be
built so that when you descide to trust some "joe-random"
who has rated a few mp3's you also start to trust "Bob666"
because joe trusts his rating.

People would post messages to forums and newsgroups saying
"add sharereactors public key to your list of trusted file
raters to get a reliable good files list" or the program
could come will a list of people to trust when it is first
installed.

[Theinfamousone]

I think I'm going to write a letter to the editor. I'm going to go step by step what is wrong with the RIAA and how they shouldn't have the legal ground to harm anyone's computer.

Basically, it's their fault things are going down the drain, and there are so many problems with their marketing strategy that it's a wonder they are in business at all.

File sharing is a symptom, not the problem.

[NDGAARONDI]

Well said, Theinfamousone, I couldn't have put it any better
:fire

Do you think they will listen though? They should be seeking as to WHY it is happening.......oh well

[method]

If they do get a trojan out to attack us and screw with our connections, software, etc. you can bet PressPlay will be down within hours, same with all other popular (?) pay-2-play services.

[NDGAARONDI]

Thing is even a court could order a worm to infect P2P. Once it's out it could affect people outside the courts jurisdiction, and those victims should not be affected because of this.

If it does then poeple from aborad will just start sueing etc.

Say a great way to take out any spyware company, is to have an OS, like ones you can build, patented in your name, and then register it. Then when spyware comes and modifies anything you can sue them because they've modified your intellectual property without prior permission.

I wouldn't mind being able to build my own OS, just make it simple to accept IC and then take action :shy