Subject: Re: [linux-audio-user] The Open Loop Library, a few questions
From: Taybin Rutkin (trutkin_AT_physics.clarku.edu)
Date: Sun Dec 22 2002 - 00:44:06 EET
On Sat, 21 Dec 2002, Darren Landrum wrote:
> But wait, there's more! :) This now brings us to the "prevention of
> upload of copyrighted sample sets / loops / patches" part of the design.
>
> If we have a working checksum database to check against stored
> metadata, why not gather all of the checksums we can for every loop
> library for Acid, every sample set for Gigasampler / Unity Session /
> etc. that we can get our hands on (legally)? Remember, we're only
> running these through MD5 to get a checksum, then uploading the
> checksum to the server.
>
> Here's the good part, although I'm sure most of you are ahead of me.
> Whenever a user uploads a loop or sample set, the server will first
> decompress the file, then run an MD5 on it, which will then be compared
> to the checksum database. Any matches are flagged for removal by an
> administrator.
This might not be good enough. Modifying a file in the slightest way will
change the MD5 enought to get past a filter, but not a lawyer. It'll only
guard against innocent uploading, not malecious.
Taybin
-- http://www.piratesvsninjas.com
This archive was generated by hypermail 2b28 : Sun Dec 22 2002 - 00:41:38 EET