Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
Patents

Napster Server Protocol Has Been Published 243

C|Net is publishing a story about a Stanford University Senior who reversed-engineered the Napster server protocol. The story also mentions a Web page in SourceForge which gives links to various Napster clients for different OS's. I wonder how many new Napster servers clones we'll have soon.
This discussion has been archived. No new comments can be posted.

Napster Server Protocol Has Been Published

Comments Filter:
  • ...would be to store the id3 tags 'offline' so that when the client clicks on the file it could then upload the id3 tag to the server and then send it to the client. An id3 tag is not big, so that would not be too much of a problem. I don't see any reason for Napster to have all of the id3 tags online for instant demand.
  • by Lonesmurf ( 88531 ) on Wednesday January 26, 2000 @05:09AM (#1334470) Homepage
    [I know that I had posted this in reply to someone already, but that particular someone was moderated (let us not judge, for in the future we too shall be judged) down into the fiery depths of hell. So I am re-posting this in the main thread. Please forgive my sorry butt. ;)

    Original text:
    We need more napsters and less RIAA


    I hate to sound raw and bitter (i'm both, but we really shouldn't go into that here), but while your at it, why don't we all ask for unlimited bandwidth, world peace, and the end to all diseases. (None of which will happen. Ever.)

    The RIAA or some form of it, whether it be in idea or literal form, will always be around.

    The problem does not stem from the fact that some big, nasty association is on the prowl all the time, it comes from the fact that the values that our societies are built on are fundamentally flawed. Values such as greed, lack of honesty, and good, old-fashioned foulplay.

    While Napster is a great program, and I fully intend to continue to use it, I am not going to wish for anything like not having the RIAA around. Why?

    1) It won't happen.
    2) On some levels, we actually need associations like the RIAA to keep the really bad people (not us poor intellectuals (hehe)) from harming the industry. Large pirating firms.. etc.


    Just like I won't be wishing that people will start using the privelage of voting and booting the conservative nitwits from their high horses.

    To when Pigs fly,
    Cheers,
    Rami James
    http://w3.to/rjames/

    --

  • Good. but tunnel it through Jabber, to piggyback off an existing infrastructure and to prevent just your one protocol being banned in the way Napster's is. And, forget about traffic analysis, in a Napster style situation and with multiple random wrapped bounces between sender and recipient, there simply isn't going to be time for the Feds to trace individuals. Better to optimize those packets so as to shorten the time available to eavesdroppers.
  • I just don't understand how since *WE* are paying for the service, you can just deny it... I could see if the RESNET was a free service offered to students (but like I said in an earlier post that is sorta hidden heeh) I wouldn't mind them doing what they want w/the network. *I* pay about $20.25/month for the service, I feel that the *users* should decide what happens w/the network. It is here for the students, and the students put the money into it. It isn't a free world I understand, but if my ISP was blocking say IRC because "it stole bandwith" I would think that they would just add more to accomodate their users, afterall it is a business. RESNET's are no different. They are a business. They get money from the students, and offer a service.
  • This is the behavior of the original Napster client. With the Napster protocol in the public domain, new clients can behave however they want, including allowing users to specify the addresses of their own servers.

    If the original Napster client hardcoded the hostname of the "server server" and not the IP address, it's trivial to associate a different IP address with that hostname (see /etc/hosts).

  • If people liked the music, the band should be able to get some concerts.

    How often does the Orb tour? Orbital? Boston? King Crimson? I could name hundreds of bands, if I had the time.

    Throwing out logic has nothing to do with it. You're just rationalizing not having to buy the music.

    You'd think that true artists would care more about their music going around the world than making money selling CD's.

    Further rationalization. While the "starving artist" cliche might sell a warehouse full of bad paintings, it's a pretty horrible life to live. Beethoven and other composers had "patrons," or people who commisioned them to compose pieces, often for specific events. The analogy doesn't fit. One patron has been replaced by thousands or million sof individuals, voting for music with their dollars. You're removing those dollars from the equation.

    "True artists" need to make a living too. I know a lot of "true artists" who are waiting tables, washing dishes, or having to give up on their art because it's not paying the bills.

    I apologize for replying to all the posts in this thread, but this "i want it for free and I'll get it for free" attitude is just plain wrong. I don't agree with the RIAA's reasoning, I know that it's just plain greed, but a lot of musicians are going to get screwed in the process.

    If you're not willing to support the musicians, you don't deserve the music. Do you realize that you're bitching that the record execs are robbing the musicians while doing it yourself?
  • It does suck. However, I've found that hitting resume a few times will give you the File Complete! message.

    Which, by no means, excuses this.

  • "There is no way that this can be construed as being the function of our Internet connection." I find this statement to be amazing. the internet is what it is. Just because it does't behave the way you want it to is your problem. You could 1. add more bandwith charge the students more for the addition. 2. stay offline... your policy reminds me of the chinease goverments policy...if you give the students the connection and u dont like what thier doing charge them for the extra bandwith.
  • Glad to see that a college student will misspell a headline. :-)

    This gets into that whole "educational use only" argument. I live on campus, and the internet net connection that I *pay* for here is the only one I get. Are you about to tell me that just because it is hooked up to the campus network directly that I'm not allowed to use it for anything non-eductional? That I'm not allowed to look at anything interesting on the Internet? I take great offense to that. This is my home. This is my Internet Connection. I have no other. I believe I have a right to download whatever the heck I want.

    The problem is that you (both individually, and the larger collective "you" of the masses of college students downloading and trading mp3's) are on their physical network and using a network more than partly funded by various 3rd parties. The university is held accountable when its students use the network to break laws (we could get into a discussion about whether copyright law is outdated at this point -- but you'd probably find me on your side there). The universities don't generally have a moral concern here -- they are a business. They have to watch out about copyright violations just like they have to watch out about kids getting killed on top of elevators (universities could give a crap whether you elevator surf or not, but their insurers make them care about their bottom line...).

    Additionally, if a sizeable percentage of their bandwidth (btw, you don't know their utilization unless you work for the network administrators -- and even then you only get one piece of the picture, believe me) is going to mp3z, the research being done elsewhere might well be suffering. While you are their livestock (the masses used to generate income), the researchers, and the occasional future benefactor (which may emerge from the herds), are their real priority. If the researchers complain that the bandwidth the University bought for them is unusable, the University will act. This is, again, all a part of being in the University business.

    Finally, since the University is a business, and a PR-based business to a great degree at that, rampant news stories about college students "Breaking the law" do not look good for Universities. Parents don't want their children going away to become criminals. Alumni don't want their degree tarnished. Donors don't want to give to a cesspool. This may seem like exaggeration, but this is how most universities view these things.

    Believe it or not, you don't have a right to download and trade mp3's (again, we could have a long discussion about the validity of the laws which prohibit this, but they are the same laws the universities are forced to live under). Eventually the ability of the university to insulate you from the disciplinary structure of the rest of society will break and you will have to be accountable for your actions. Believe me, I understand how university life is -- been there, done that.

    I doubt the previous poster was jealous of your bandwidth (I have more bandwidth than I can generally use coming into my house). Many of us have used and/or administered networks on pipes that would boggle you. Penis envy of a 10/100 line on a university-size public use network with thousands of users is rarely in order. The fact that you have to pay for your bandwidth, however, is an unfortunate part of the unfairness of college life. The university can make you pay, even though you have no other choice. The fact that 9x% of college students are between 18 and 25 years old points to the fact that if you're going to raise a stink over not being able to download mp3z on your pipe you are going to have to get mommy&daddy involved. Guess what? The university knows that mommy&daddy don't want to get involved if they know it's about mp3z/warez/pr0n/etc. Anyway, they stick it to you and you can't do anything about it.

    With regard to cost issues, you should know that 5 years ago only the most cutting-edge and/or affluent universities had wired dorms. The fact that it's a "selling point" now is an indication of how much things have changed. The ubiquity of campus connectivity, however, belies the cost of this infrastructure. The universities (hell, the society at large as we subsidize the bulk of this infrastructure) will be paying for this upgrade for years to come. To assume that this is some sort of grift job to squeeze a quick profit out of students, or that wiring campus was cheap and easy (and therefore a right) is just plain ignorant. The problem with being in college is that, as the individual student in this day and age, you are the least important and least influential part of the university business plan; however, it may take 5-10 years after graduation to figure this out (truthfully most college grads never figure it out). Yet, we are generally sent to college at our most arrogant and idiotic phase of development, so we prattle on about our rights, our importance, and How It Really Is.

  • [ Really idiotic crap about 'bandwidth jealosy', etc., deleted. ]

    This gets into that whole "educational use only" argument. I live on campus, and the internet net connection that I *pay* for here is the only one I get. Are you about to tell me that just because it is hooked up to the campus network directly that I'm not allowed to use it for anything non-eductional? That I'm not allowed to look at anything interesting on the Internet?

    So you pay for it. Did you look at the agreement you most likely signed? It probably had some sort of 'educational use only' clause in there. If you don't agree with that, you shouldn't have signed it. Move off campus and get a cable modem or DSL and you can download all the porn and illegal MP3s you want, and the campus IT folks would have no say over it.

    I take great offense to that. This is my home. This is my Internet Connection. I have no other. I believe I have a right to download whatever the heck I want.

    The dorm is your home? Unless you own the place, that's not true. Sure, you pay to live there, which by law grants you certain priveledges, such as physical privacy, but you are using the campus network. You have the right to download only what they allow you to download. If they disallow televisions, and you want one, you have to either a) deal with it, or b) move out.

    First of all, I have to pay, as I said.

    So, assuming you are a savvy consumer, you know what you payed for in the first place.

    Secondly, the cost of the bandwidth here is mostly fixed cost which has already been paid for. Adding my small bandwidth usage to the pot cost almost nothing to the University.

    Who cares.

    Third, having a wired school is a selling point. It probably makes them more money by attracting students.

    Again, who cares? That has nothing to do between the contract you signed with the school.

    Fourth, high bandwidth for cheap encourages students to become net savvy, as you said. This is a good thing.

    No, it encourages them to download porn and illegal MP3s. Unless you can think of any other educationally oriented high bandwidth uses for dorm networks, that use off-campus resources...

    Did you ever use the phones to call a friend? Did you have cable at school? This isn't about enterntainment, this is about some basic things that people in the US expect of their living quarters. If my dorm wasn't networked, I wouldn't be here. It's that simple.

    Most people wouldn't sign away their rights, and then bitch about it, like you apparently are. It's that simple.

    -joev

  • by Freshman ( 9729 ) on Wednesday January 26, 2000 @10:01AM (#1334482) Homepage
    No matter how you slice it, Napster included a license agreement IN THE INSTALLER that required the end-user to completely accept its terms, or not install the application. The license agreement that David Weekly accepted told him he could not reverse engineer.

    I have only seen "YAY OPEN SOURCE FOREVER" threads, and no discussions on the legalities of this.
  • I only noticed the problem the first time, after I *ahem* dumped a batch of 2,000 mp3s onto my box. First connection took minutes, after that it seems back to normal (a few seconds).
  • In my opinion, anything that's sending/recieving the full local pathnames of files is BAD.
    Why doesn't napster use logical shares like an http server? It's obviously much safer to send something like
    "//clientname/soundtrack/something.mp3"
    as opposed to
    "C:\private\pr0n\kiddiepr0n\other\mp3\soundtrack \something.mp3"

    Now that this is being talked about, it shouldn't be long before somebody comes up with a hacked client that peruses through unsuspecting Napster PC's.
  • He said that he had done so. He said that he "didn't have to, he could have chosen to have packet monitored", but he was using the client.
  • by Anonymous Coward
    I actually DO think it is a publicity stunt. Here's one perspective to think about -- look at the history, and question the motives:


    1. runs a huge pirated mp3 site at stanford, shut down

    Almost 100% illegal content, which he was solely responsible for making available to the entire Internet, at the expense of his university. They soon discovered the site and shut his illegal website down.

    Curiously, a Playboy.com article spotlights him as a victim of his university (laugh) and as the self-proclaimed leader and evangelist of the "MP3 Consortium", whatever the hell that is.

    During a period when more than just a few colleges are cracking down on their irresponsible students, I wonder what brings the focus on this person alone? Suspicious..


    2. discovers napster, champions it as a way to continue his habits while likely shirking liability

    For whatever reason, spends a night re-inventing the wheel and reverse engineers the napster protocol (again), which is clearly in violation of the EULA distributed with the client.

    When notified of his apparent inattention to the questionable legal nature of his activities and asked to take it down, he immediately sends an email to the open source napster developer's list explaining that he's under attack from Napster, Inc., saying "I'm not going to let them bully me!"

    Amazingly enough, though much more significant and thorough reverse engineering has been posted and made publically available, a major news organization somehow finds this self-proclaimed evangelist of illegal activity and spotlights him, yet again.


    No, folks, this person has a verifiable history of illegal activity, and maintains a juvenile attitude towards breaking the law, while painting himself as some hacker hotshot whose "horrible plight" everyone should empathize with.

    Further, it seems clear that he has a strong thirst for media attention (hooray for vanity websites), coupled with (and made much worse by) actual intelligence. This reminds me of Agent Steal. Anyone remember him? If you do, then you know what I'm getting at.

    Question the motives.
  • There is nothing special about the Napster protocol, actually it's missing a few abilities:

    --The ability to uniquely identify files (which would enable split downloads where you get parts of a file from different hosts)

    --The ability to deal with other types of files (well, not really a protocol issue but controlled by Napster)

    --The ability to continue after a legal attack on the "Server"

    --Load balancing of the transfers

    --...

    The only real advantage is that they use a central server and are willing to take the heat for hosting that server.

    Making a reliable transfer protocol is not difficult--look at GetRight. The trick is in communicating and hosting the databases. As long as there is a need of a central repository there is a vulnerability. It's not only that you could take out that one server site and shut down the whole network, but that there are a limited number of subnets that could be "Sniffed" to find out who was serving what.

    Is there anyone out there who thinks that the files they "Host" for napster downloads aren't tracked?

    What we really need is a more amorphous system where a list of IP's and files is hosted on each system and is synchronized constantly in the background. When you start your computer it would try to contact all the IPs it had before. If you are lucky, one will connect and you'll get a new list. If you're unlucky, you download a text file from any of hundreds of places where the latest lists would be stashed.

    It could even be implemented as a BADFS (Big Ass Distributed File System). You would just "Mount" what you wish to share somewhere into the system and load any files you want from other areas.

    Having different "Groups" to connect to might solve the problems that will occur because of the size of the directory.

  • [GASP!] Napster SENT the COMPLETE location of the file!!!!
    Does this mean that there is a way to coax the client to offer up ANY file?


    Hrm.... I can just picture Cult of the Dead Cow [cultdeadcow.com] writing a BO [bo2k.com] plug-in for Napster, allowing you to download any file off of a windows box.

    :-)
  • Here's a cute little project that shouldn't take very long to do:

    A Napster proxy.

    Run a server on one of the common ports, say, 80, and reroute requests to the real Napster servers.

    What's that saying about routing around censorship, etc.?

    ...j
  • Scot Hacker wrote a book about mp3's for O'Reilly.

    http://www.oreilly.com/catalog/mp3/
  • How are charges Napster is illegal unjustified?
    Correct me if I'm wrong, but don't the people running Napster have a "see-no-evil, hear-no-evil" attitude about pirate MP3's? (They're just providing a service for users to trade MP3's and can't be held responsible for content, etc.) Granted, Napster themselves aren't the ones pirating music. However, if ISPs can be held responsible for allowing spammers to freely send spam off their mail server, why can't the music industry hold Napster responsible for allowing users to distrubute pirated music as far as they possible can? Even though spam is quite annoying, there's no laws (yet, unfortunately) against it, yet distrubuting pirated music breaks copyright laws. Are you supporting Napster just because you don't mind pirate music, thus you don't mind services that aid in distrubuting pirated music? (Not that I don't have a bunch of MP3s myself. I'm not trying to argue against pirate MP3s; my gripe is against Napster.)

    Seems to me Napster is a company that wants to make a quick buck off questionably legal content that users provide (i.e. the MP3's they swap). This bothers me. It's one thing to swap music between friends, its a totally different thing to try to make money off it. Personally, I'd like to see Napster sink on principle. There'll always be ftp or hotline servers to trade MP3's on that are run by people not trying to make money off the servers.

    George Lee

  • Yeah.. On a Linux box you could use rdir to redirect traffic on localip:80/napsterport to napsterserver:napsterport, then ensure that napsterserver has an implicit route. No actual proxy would be needed.

    Don't know much about routing do you?

    Unless I have misread what you stated, your linux box *still* needs to get through my router to get on to napster. And if I block all outgoing traffic to port 6969 you won't get there, no matter how many redirs you have going because that implicit route still needs to get through my router.

    Now something you could do is have an outside box do the redirection. Unfortunately all traffic would be going through that box so you wouldn't want to proxy too many people. :-)

  • Don't know much about routing do you?

    don't make me come up there and get all thumpin' on yo ass, tzanger! technos be da man. besides, y'all checked out dese here cute 'mick-lips'?

  • Actually, except for the hugest of performers, tours are generally break-even or even loss-leaders in order to promote the bands current CD.

    If you think you're supporting a band by NOT buying their CD, distributing MP3's, and going to see them live, you're mistaken.

    Yes, they like to perform, but that's not where the money is for most musicians. Even if they get only $1/CD, and a "mildy" successful band manages to sell 250,000 cd's that's decent money for a 5 person band.

    People keep talking about how MP3's are so great for supporting starving artists, but in reality, some may benefit, but most will probably be hurt in some sense. They stand to lose their royalty checks for one, and without record sales to gauge their popularity, they have no idea of what their real worth would be.

    Like them or not, the record industry is here for the long haul. Yes, they may end up getting a little revamped in the process of figuring out the internet, but in the end, they're needed.

    Think of them as the VC's of the music industry. No one runs around trying to find a way to cut the venture capitalist out of the equation when trying to start a tech company, so why is everyone trying to cut out the people that actually put up the money to produce all the records they adore?
  • We need more napsters and less RIAA
  • by Weezul ( 52464 ) on Wednesday January 26, 2000 @10:14AM (#1334506)
    I don't see how free, illegal distribution of music gets the artists money without the record companies taking a cut. Artists realize the power of internet distribution, and are trying to capitalize on it. Napster is most definitely not a way for them to do so. Napster is a way for their hard work to proliferate to a million ears without a single penny of income.

    This is the most ignorant thing I have heard all day. The truth is that promotion is the bigest obstical to a bands success and band who have any clue ARE making money from mp3 promotion. It is really fucking easy to realease an mp3 to all the pirate sites and include a message asking them to visit your website in the comment (or maybe even in the audio). No,w once they visit your website you can sell them all sorts of shit like: shirts, stickers, CDs, mp3s of other mixes of your songs.

    Now, you say "well people would just pirate the other mixes that the band sells." Well, this is no problem for the band because they can just keep producing newer diffrent things and rolling the old ones into promotional material. The people who want it will pay because some of it will never show up.

    The truth is that the whole ideea of buying a CDs full of static music is STUPID. Music should be a service and not a product.. just like software. If you really liked music you would be willing to pay for the new shit. Hell, the fact that lissening tothe same thing over and over again is why we have a DJ club culture.

    Piracy is no threat to ANY artist because the artists has the distribution advantage. Piracy is just free promotion of what you have done in the past.. just look at what thei nternet comics have done. Now, you could say that we should not pirate RIAA music because we souln't want to give those artists free promotion.

    Plus, If we added the way to bundle a webpage with a song then it would give an artist a way to add all kinds of profit making material: visual art, links to the artists web page, advertisments.

    Hell, If I was a recording studio equipment maker I would give studio equipment to good artists for free with the requirment that they mention that they used my equipment at the end of the songs they distribute on mp3. Just think of all the minor leage DJs who will hear it everytime they play the song!

    Jeff

    BTW> It will not be long before there are companies specialising in internet promotion of music, i.e. pay us to upload all you shit tot he pirate sites.
  • This seems like fairly good news. Imo if the riaa is able to defeat napster in the lawsuit then we have all of the new servers people can put up. Independent of napster of course. Although the riaa doesn't have anything on napster anyway. Best of all this should result in considerably better linux clients which is what we all want!
  • So let's do the math... $1/cd for $250k... Now let's see a couple hundred thousand people pulling in the tunes off of napster instead, there goes another $200k. Watch the internet grow, watch the growth rate of Napster, and watch the numbers pile up...

    You example fits a lot of record companies, (Geffen almost killed God Street Wine), but there are a lot of smaller labels putting out good music. I've seen a lot of Rhino releases (I mean, they continue to print Zappa, MST3K, all kinds of shit that would never see the light of day otherwise) getting posted all over the place.

    I don't work for Rhino, or any other record company, I'm just a musician. Whoever called me a "shill" or whatever this morning couldn't be more wrong. I'm in a similar situation, playing fusion that isn't "commercially viable" either.

    I like to give fugazi, mmw, mr bungle and a lot of other bands outside the mainstream money. The most direct way for me to do it is by buying a CD. Downloading the mp3 without paying for it is in no way going to support the band.
  • Actually, I implemented something sorta like this in Tcl and some C with IRC eggdrop bots, though I don't think I have the sources anymore. Basically you could join a certain channel, upload a list file which you were offering to a central bot that managed the database. Then anyone could easily get an index, search, etc from the central server bot(s), and it would filter the requests to fetch files to the appropriate children bots (or people) that offered the items. Alas, it didn't catch on back then (94 or 95), and my interests moved elsewhere...

    Ah well, one minor invention sticks around for years, three or four other better inventions fall by the wayside. ;)
  • by SETY ( 46845 )
    Thank-You!!!!!!
    This will speed up prgress for many of us. No ones perfect and I am sure I have overlooked things. The more knowledge the better.
  • he vast majority of their income comes from your purchase of actual physical media, which becomes obsolete every 4-8 years.

    While I agree with most of your arguement, I have to point out that most bands obsolete much faster than the media that their music is distributed on.

    And media lasts much longer than 4-8 years. Records were here for 4 or 5 decades. Cassettes were here for 2 or 3 decades. CD's have been here for 15 years. DVD isn't even here yet, and when it arrives it will probably be the smoothest transition yet, since it won't obsolete your music collection. You'll just need a new player if you want to take advantage of the new format (probably either longer songs or higher quality).
  • Comment removed based on user account deletion
  • Will anything be proprietary anymore? Are we heading to Open Source everything?

    Am I being paranoid?

    Is the Truth out there?
    Where's Scully?
    There's the little green men!

  • its called /etc/hosts or c:\windows\hosts. Edit that file to point to the right IP and you're set.
  • by AndyS ( 655 ) on Wednesday January 26, 2000 @04:31AM (#1334518)
    There's also one at

    http://opennap.sourceforge.net/napster.txt

    which, although I dunno how accurate it is, is distinctly more readable and understandable.

  • An outside box is what I had in mind.. The company firewall can be, er, restrictive sometimes, so I use a combination of rdir and IP masquerading on my private (outside) boxen to get what I need. I've run AIM, ICQ, Napster, use it to check my POP3 box and also use it to peruse the grey hat web circuit. (banned; the network people are using a dialup and a 'free' ISP cus they got sick of arguing with the powers-that-be)

    And I do know a thing or two about routing. I'm not godlike, but I get by..
  • What an AWESOME last name! I guess his destiny was set in stone when he was born...


    I think i'll change my name to Hacker Ace, just to upstage him. :)

  • by Foogle ( 35117 ) on Wednesday January 26, 2000 @04:32AM (#1334521) Homepage
    Don't we already have the protocol for Napster? I mean, I've seen like 40 different Napster-clones for Linux (and even one for Java). I don't think this is revolutionary, or am I missing the picture?

    -----------

    "You can't shake the Devil's hand and say you're only kidding."


  • Now napster servers will become as common as your average Warez FTP server. There is no stopping the power of distributed computing :)

    As soon as the RIAA shuts down one server, two more will pop up. Haven't we seen something like this before?


  • I have been wondering, Napster was created by a small Californian (?) firm. Why? How do they plan to make some $$$ out of it. Have they planned to make napster a commercial (licensed) program after the beta period (changing something in the servers, so the beta wouldnt be able to acces again?).
  • by garcia ( 6573 ) on Wednesday January 26, 2000 @04:33AM (#1334526)
    recently there have been many articles in our campus newspaper [bgnews.com] about the speed of the network being slowed by MP3 transfers (not really, but they have to make an excuse for the poor technology). They are apparently blocking all access to Napster servers (or ports I really don't know). I recieve a "no route to host" error when I try to connect now.

    I really think that in order for Napster to live on they are going to have either allow for random ports or a lot of people are going to have to start setting up servers :)
  • Just a random thought--what about piracy of live shows? Bootlegs are already a problem. Concert shows aren't the end-all answers to everything. I wouldn't be surprised if in 30 years there were pirate concert shows you could download and view, due to some fan coming to the show somehow sneaking in a small camera and microphone. Who knows? I guess we'll find out how this affects the music industry in the coming decades.
  • $0.01: There have been clones out for ages, all you need is a packet sniffer, a napster clone and 5 min and you can have that "published" information... not to mention read the source code from one of the clients.

    $0.01: And Napster really needs networked servers like IRC so the "hotlist" function actally works... you can find people without reconnecting nonstop.
  • when I was in college (back in the early 80's) we didn't have oodles of bandwidth. heck, most of us users didn't even know much about networking. and networking was essentially running a few wires across campus to link some departments' systems together.

    within the last few years, bw has gotton REAL cheap (eg, I now have dsl at home and my home server connection is faster than many small companies). and university students are becoming net.saavy. that's cool - BUT I personally see no need in funding their high-bandwidth entertainment downloads.

    don't get me wrong - I see nothing at all wrong with what they're doing (snagging mp3 files) - but using university resources isn't the right way. let them purchase personal accounts (like the one I'm using right now, from home). then their behavior is between them and the ISP they're paying each month. and the univ. won't have word one to say about it.

    so its the free ride that I think the univ's are complaining about. its not the morality of grabbing mp3's. please - that's totally not the issue. its the cost of supporting the entertainment life of the students. when I was in school, I don't remember the univ. funding ANY of my non-school related entertainment. not one bit. if I wanted to see a movie, I'd pay for it myself ;-)

    perhaps go to a voucher system, as a compromise. "ok mr. student, you have X credits of bandwidth this semester. you can waste it on mp3 stuff or use it toward doing the research you're supposedly here to learn. its your choice."

    and if the students want to pay for more vouchers, its entirely up to them.

    ultimately, as adults, it has to be up to them.

    --

  • Ahhh... the oracle of South Park!
  • I think the best bet is to sell hardware. Let the software be free. Make a little server designed for Napster use (various good audio interfaces, network/firewall, admin interfaces) ready for plug and run, with everything tuned for optimum quality. Make money from the people willing to pay for the quality.

    Consider the do-it-yourself crowd as future customers. There will also be a bunch of innovators coming up with new stuff which can keep your industry moving -- you'll just have to deal with the competition (oh, look, a Handspring pocket recorder IR links to an audio diary...).


  • Given the protocol, what kind of interference can the RIAA and similar organizations foist upon the Napster users? Honey-pot servers collecting ip addresses? Water down their database? Is it just a matter of time before a list of "egregious copyright abusers" gets hauled into court to be made examples?

    I haven't used Napster, nor have I read the spec, but I'm familiar with it (at least one friend if Napster- and Ebay-addicted). So pardon me if I'm demonstrating marked ignorance.


  • Oh, so you think you can just change the terms of the contract after I signed it?!?

    I don't know the exact terms of your internet contract with your university, but I strongly doubt they'd be dumb enough to promise you unlimited bandwidth for whatever you choose to use it for. if that were the case, what would stop you from selling spare bandwidth to non-students? if you ran a NAT box, this could easily be done, and the univ. wouldn't be any the wiser (usually). If I want to download legal 650Meg .ISO files every night guess what, I will

    its nice to know that our univ's are turning out considerate and polite new graduates [cough, cough]. thats what I pay this school for

    wrong! you are supposedly there to gain an education; not d/l the latest mp3z, warez, etc, etc. study the network, learn about it - fine. but to use it as your own personal bulk e-delivery service is so selfish it sickens my stomach!

    If the network is slow due to a lot of people on it guess what, thats not the other users problem - its the schools problem and they had better upgrade.

    please tell me your real name so that if you apply to a company I work at, I can bypass the interview process and save us all a lot of time... I would not want you anywhere near a place that I work at. not until you grow up and stop thinking the world owes you this and that.

    --

  • Apologies. The kernel port forwarding hasn't been called rdir since the 1.1.xx's.. It's ipportfw these days... I'm terminally stuck in the past..
  • When I walk around the city, I often drop a few coins to street musicians (buskers) whose music I enjoy. Would it be possible to embed some sort of artist account ID into mp3's (eg, in the header) that would let users of Napster and similar software make voluntary payments to artists?

    Perhaps not many people would do it, but if you make it easy, like dropping virtual coins into a jukebox or a street buskers' instrument case, maybe enough people would do it to allow artists to make a living--or at least produce a CD while remaining free of monopolistic recording companies and big-brother organisations like the RIAA and ASCAP. I'm fully aware that current mp3 payment mechanisms aren't being used much, but maybe if it were as easy as clicking a button, more people would contribute. This would also allow mp3 enthusiasts to take some moral high ground away from the bureaucrats who are "representing the interests" of the artists.

    The client would have a SSL connection to a "bank database." Periodically you would add, say $50.00, to the bank using your credit card and standard ecommerce software. Then as you listen to new mp3's you could click a button for songs you would like to license.

    If used, this would deflate the self-righteous rhetoric of the industry and union middlemen, who seem to think that consumers are common thieves unless we choose to buy our entertainment through their cartels. It would also remove their legal bases for shutting down independant artist and programmer efforts--unless they are going to try to argue that they are legally entitled to a self-serving monopoly.

  • see even if you are descended from George Washington dosn't mean shit in the modern world.

    I am a decendent, and your are right...it doesn't mean shit other than an interesting 30 second conversation every year or so.

    I think i just commited karmacide
  • With the Napster protocol in the public domain, ...

    You mean, the same way DeCSS is in the public domain, dontcha? ;-)
    Meesa thinks napster.com wouldn't agree with that statement.
    ---

  • If they did have 30-50 people working for them, I what the heck they do all day? They don't have any advertising, and their web site doesn't change much. I don't see much PR going on other than word of mouth. Their "jobs" page hasn't changed in several months indicating they haven't filled any positions (which indicates they don't have any money). hmm. I suspect napster is a tiny company - if it is more than one person.

  • Hopefully no.

    You do not have Open Source everything and I do not think that was ever the aim. But what is important is that we all know how to talk to each other. That the standards are not monopolised by one company (Halloween Document). By having OPEN standards for how we get different systems talking to each and inter-operating we get the following advantages: 1) Better competition, 2) Easier to build working systems, 3) Ability to then concentrate on real issues rather software ones. Does anybody believe that Microsoft would have been as successful if they worked with Open standards? Why would anyone change their word-processor vendor if the new vendors could not read all their old documents? Have a standard for the documents and I will be able to choose the product based on quality, price and functionality regardless of vendor or even choose to edit my documents on a different OS.

  • by / ( 33804 ) on Wednesday January 26, 2000 @06:04AM (#1334559)
    On some levels, we actually need associations like the RIAA to keep the really bad people (not us poor intellectuals (hehe)) from harming the industry. Large pirating firms.. etc.

    Nonsense. We already have governments to enforce existing laws against actual crimes -- the DOJ can hold its own just fine. All organizations like the RIAA do is the stuff we don't like such as:

    Enforcing a cartel atmosphere where prices are constantly inflating ($18 for a cd, huh?) and quality hasn't much improved

    Lobbying Congress for some more favorable-for-the-industry-but-at-the-expense-of-e veryone-else copyright laws

    Beating up on the little guy who's properly trying to use his music under fair-use doctrine but in ways contrary to the $ interests of RIAA-member corporations.

    I agree with your first assertion that it's futile for us to merely hope that the RIAA will just disappear, but don't delude yourself into thinking they're actually good for something good. We don't need the RIAA any more than we need OPEC or DeBeers.

  • Some universities LOSE money by providing internet access. Students here pay about $12 a semester for a "technology fee" which cover on campus labs, access to scanners, printers, and of course RESNET. The entire purpose of RESNET is to allow people to use the internet for educational purposes. There's even information about this when they apply for an account.

    When legit uses of the network of an educational institute are hampared by people downloading as many MP3s as possible, the university has an obligation to put an end to it. We're not talking about minor amounts of traffic here either. As I mentioned earlier, it's take a full 20% of the bandwith (well, not anymore!). If it wasn't slowing down legit network traffic, then I'm sure no one would have a problem with it.

    My point is that if each users network traffic didn't affect any other users network traffic, life would be good. But it _does_ affect network everyone's traffic. (All it takes is about 10 boxes to completly saturate a single segment of resnet.) And that results in legit users getting mad.

    They are a business, I agree. Their business is to provide their students with the best education possible. This includes libraries, computer labs, language labs, etc. All these are for education. Napster, as far as I know, provides NO educational value. So when it clogs bandwith, POOF, it's gone. Just keeping their business going.

  • Here's an idea to implement:

    A file sharing system like Napster, but it shares arbitrary files, using a heirarchical directory structure.

    * Its pseudonymous and anonymous, and uses multiple-bounce remailer-style protocols to guarantee an untraceable data stream from file provider to recipient. Traffic analysis is irrelevant, so it can operate at full normal speed. Pseudonyms are unique but are destroyed again at log-off.

    * The entire data stream is encrypted (and re-encrypted in wrappers for each remailer-type bounce).

    * It uses a serverless protocol, Jabber would be ideal, leaving no main server to shut down. Also by piggybacking on Jabber, it would be impossible to block just this file server protocol from within Jabber, and it would be commercial suicide for the ISPs to agree to block Jabber altogether.

    * When you share a diectory full of files, you can merge it into the category heirarchy under an existing category, or under new categories, subcategories, etc. If you create a category, others will then see it as an option to merge their directories with. Directories can be shared under multiple categories.

    * Searches are "search in category" and "search category and sub categories".


    Should be do-able. Would be Fed-proof. Any takers?
  • Yeah.. On a Linux box you could use rdir to redirect traffic on localip:80/napsterport to napsterserver:napsterport, then ensure that napsterserver has an implicit route. No actual proxy would be needed.
  • First off, there are many insecurities in napster. The port is opened when the program starts, and it stays open. Anyone with the correct knowledge can access your computer. I have seen it done. Second, in reply to an early comment about Napster being responsible for much of a Universities traffic... VERY TRUE, I know here (unnamed college) that Napster was specifically responsible for 60% of the traffic on the network in the first semester. The University got smart and is actually cutting Network throughput completely to anyone who trasfers data across Napster. It is very easy for them to track since Napster leaves its port open. I have had several friends lose there entire connection because of this, to get it back they have to write an essay! What a crock. PS Keep your eyes open for a program that will rock Napsters world. www.absolutepc.net
  • Lessee... search for 'napster' at sourceforge reveals ...
    jNapster: cmdline java
    gNAP, Gnapster: Gnome
    kNapster: KDE
    beNapster, Crapster: BeOS
    jNap: Swing GUI Java (really good!)
    apster for MacOSX (MacXter?)

    Funny, coz I've been tweaking on jNapster for a couple of weeks now and just now does it make it onto the /. radar.
    ---

  • OK, you're an artist, trying to make a living playing music rather than selling your soul to some subicle-owning master.

    What exactly is a "subsicle-owning master" I must have missed that reference. Trying to make money from art is extremely difficult. Many people in this world favor job security and being able to know that they will be able to pay the bills instead of living in a homeless shelter. I would rather do a job that I hate and still get paid then not to get paid. Or I could just jump off a tall building and remove myself from the public scene. Even that choice I think would be better than uncertainty and instability from being an artist.

    You actually get a contract, get a CD out, and try to survive through the first couple of releases until you start making money yourself rather than the record company.

    Noble work. I salute you sir.

    Meanwhile, 5 people buy your CD, rip it, and share it on napster. Eventually a million people have it, and never spent a cent to support the artists. The CD sales are low, so the label drops the band. The band, with no viable source
    of income, goes back to working day jobs.


    Why does everyone think that the entire earth has PCs now? Even more people assume that those people are proficient enough using their new found power to get and support a massive distributed effort at revolution and espionage. Come on people we don't have the whole earth wired and probably never will at the rate we are going.

    As far as working day jobs people have to do 'real' work eventually. What strikes me as odd is why no one even thought that working is still done. You know there are a whole class of people who are working on jobs that don't have the ability to do something that they get mass fame for you know.

    Really, it's mighty sad. I mean, we've all seen a startup company go under at some point, I've been part of a couple, and it's a despairing moment. Multiply that by the factor of artistic expression and hopes and dreams of not having
    to become a mouse jockey to survive, and you've got some really sad shit.


    Well to use that colorful vernacular I have seen more depressing shit than that. People who are wealthy or self important enough to take high risk ventures are people for the most part are a little batty or are just not thinking about future probabilities. Every day I think about the probabilities (informally because not even mathmetics allows for all the really interesting things that the human brain can do) that will arise. These probabilities work on the factor of the path of least resistance. Taking the path of most resistance will have a higher likelyhood of creating bad things and should therefore be avoided. You see events like you describe because we have the ability to artificially increase the age of people beyond what most individuals can mentally calculate in reasobable terms. What will become aparent in the next 20 years is that living will become really quite sour from many people's perspectives and will therefore mutate into increasing use of euthansia as a cure. And it's all because of people's thinking that risk = good for many things.

    It's no wonder the RIAA is up in arms. I hate the fat record execs as much as anyone else, but I worry about the artists too. Noone seems to even think about that anymore, which is just sad.

    What a bunch of crock shit. If I am an executive I can hire anyone I want. Suppose a band is removed from a record label. So what I probably can choose any band from at least 1,000 or so in the USA and abroad. The RIAA dosn't care if people die or even worse suffer. They want money so they can be comfortable and never have to wory about anything. This is not altruism it's greed plain and simple. And that dear Watson is the reason why your reasoning is completely baseless.
  • I've been informed by people who've analyzed the packet stream that Napster sends that it's horribly insecure - frighteningly so, in fact.
    It would really not surprise me if something similar to your scenario were allowed to happen, though by current standards, I consider the sending of autoexec.bat to be pretty tame. In my opinion, it's pretty pointless to try to "hack" any box that still uses an autoexec.bat, but just think - the blackmail possibilities are endless!
    Things like this coupled with the sheer instability of Napster (I have to reboot my box, a 500 Celeron with 128 megs of ram, every time I use it), made me just decide to delete the entire install and mooch off of my friends who have 60+ gig mp3 archives.

    "During your times of trial and suffering, when you see only one set of footprints, it was then that I was riding the pogostick."
  • I think it is a prefrence of listening. Using mp3's allows you to listen to a wide variety of songs, without haveing to change cd's, or buy cd's. If you get a good player, it will pick songs for you based on your prefrences, and then you
    can listen to any given time's worth of random mixed up music. It is basically like listening to the radio, but being sure that only the kinds of music you like is going to be played, and there are no comercials...


    A while back radio was dieing out as a medium that most people reall cared about. I am just wondering why people have such a fascination with music when most of the future is becoming based on highly visual interactive formats. I realize convience is nice but why sound? Is this the direction human society is taking?
  • by AugstWest ( 79042 ) on Wednesday January 26, 2000 @07:38AM (#1334597)
    Your argument is a bit naive, and I think you're fully aware of that.

    There have always been studio bands that tour extremely rarely. Touring is an extremely grueling process, which can totally tear up the lives of musicians and their families. A lot of bands do not tour, and rely on studio album sales to keep their efforts going. They shouldn't be forced out on the road just so that you can save your $10-15 and listen to the tunes for free.

    2. However, what they are really afraid is that artist can get big and earn big bucks without going through a record label. They are scared shit because once artists realize this, the industry will go in for a major overhaul.

    I don't see how free, illegal distribution of music gets the artists money without the record companies taking a cut. Artists realize the power of internet distribution, and are trying to capitalize on it. Napster is most definitely not a way for them to do so. Napster is a way for their hard work to proliferate to a million ears without a single penny of income.

    Really, the main reason the RIAA and the industry in general is scared of napster, MP3 and digital music in general is that the vast majority of their income comes from your purchase of actual physical media, which becomes obsolete every 4-8 years.

    The main reason I worry about it is the artists loss of income. There are a lot of smaller record companies, especially now that pretty much anyone could start one for under $10k, that are getting screwed in the process. A lot of electronic bands are getting ripped off unimaginably, especially since a lot of them rarely, if ever, play live. They're on smaller labels, just getting started, and are losing a lot of income due to things like napster.

    At some point, you're taking food out of a musician's mouth. Rationalize that with as much rhetoric as much as you like, it's the basic fact beneath all this.
  • What I meant was this: at our college, we have a stated policy in place for computer lab use. Academic usage takes absolute priority over personal use. If the computer lab is full and there are students waiting in line to type their papers, the lab assistant will go to the front of the lab and announce, "Could those who are using the computer lab for personal use please finish what they are doing and log off; we've got people waiting to type their papers here." We're applying a similar principle to our Internet connection: if personal use of the network is limiting academic use, it will be restricted. Unfortunately, we haven't found a good traffic-shaping solution yet, so we're stuck with all-or-nothing blocking. We're actively searching for a traffic-shaping solution that will work, but haven't found one yet.
    -----
    The real meaning of the GNU GPL:
  • I know traffic-shaping solutions are being considered (I'm not in that particular decision loop), but I've heard that we haven't yet found one that works for us.

    Actually, I personally know next to nothing about what's involved in network traffic shaping: does it happen at the router level? Do you put some software on your firewall? Most importantly, if it's software, are there any open-source traffic-shaping programs out there?

    I'd appreciate learning more about this.
    -----
    The real meaning of the GNU GPL:

  • by Anonymous Coward on Wednesday January 26, 2000 @12:31PM (#1334609)
    OK, this may sound pretty naive, but have you considered implementing some kind of traffic shaping solution?

    I'm a network admin myself, and I've encountered the same sort of thing that you have (MP3 sites being the worse culprits) but I think that port blocking is overkill.

    In addition to port-based shaping (telnet gets highest priority, FTP lowest, etc..) dynamic load-based shaping is a possibility (lowering the priority of packets to/from bandwidth hogs).. so that the single user (in your example) would get their effective bandwidth lowered automatically, instead of having to wait a week/month for you to analyze the traffic logs.

    I'm not saying that port/host blocking isn't necessary in some cases (if you pay by the packet, for instance,) just that if shared bandwidth is the main concern, that there are other solutions.

  • by dew ( 3680 ) <david@week l y .org> on Wednesday January 26, 2000 @12:45PM (#1334612) Homepage Journal
    I don't think that you realize that you're talking about a person, namely me. You could talk to me and become my friend, or you could blithely post personal attacks anonymously on slashdot. I'm not some illegal computer hacker. I'm friends with the guy who shut down my Stanford MP3 site in 1997 and now regularly engage him in conversation about new media. I'm amused by the media more than thirsting for their attention; I never sent out this information to the media, but I was genuinely concerned that there would be an effort to make this sort of thing illegal. (I still have that concern!) Is this not fair?

    Why do you attack me? Why do you show hate? When I do something simple, I call it for what it is. If I am distressed, I call for help. If I am confused, I discuss something. What in those clauses makes me the evil person you describe me to be? Call me.


    David E. Weekly (dew, Think)

  • by dew ( 3680 ) <david@week l y .org> on Wednesday January 26, 2000 @12:53PM (#1334615) Homepage Journal
    BTW, my "vanity website" exists for the purpose of A) having a permanent home on the web and B) disseminating information. I think everyone has got something interesting to share; not just me. I regularly encourage my friends to make their own websites with their own unique contributions.

    I'm not a hacker hotshot, either. Do I not state explicitly that others have done a better job?Neither did I claim myself as such a hotshot. Where do you get this from? Or did you already make up your mind about me without even considering who I really am?

    Finally, I'm not running from anyone. The very first thing that I did when I completed the analysis was to notify Napster. My actions are here for all to see, judge them as you may.


    David E. Weekly (dew, Think)

  • by Anonymous Coward on Wednesday January 26, 2000 @06:35AM (#1334618)
    >"c:\WINDOWS\DESKTOP\mp3s\Nirvana-Lithium.mp3"
    >[GASP!] Napster SENT the COMPLETE location of the
    >file!!!! Does this mean that there is a
    >way to coax the client to offer up ANY file?

    >Uhm. Someone should check into this. If a file is
    >not in the user's listed mp3's or their chosen
    >directory, does the napster client still send it?

    I just checked this. I hacked up the gnome-napster client to give me IPs, and then followed the protocol to ask for C:\MSDOS.SYS, and it responded "FILE NOT SHARED" with an abrupt disconnect. It wasn't a truly thorough test, but I believe the security is good enough to stop opportunistic file stealing. See log below

    Connected to x.x.x.x.
    Escape character is '^]'
    1GET
    NOBODY C:\MSDOS.SYS 1
    FILE NOT SHAREDConnection closed by foreign host.

    The reason I say it wasn't a thorough test, even though 95% of napster users use the win32 client, and linux clients are just starting to come out, was that there's no way for me to check the client version from this end. It gets sent to the server upon connection, but never gets transmitted between clients. So, it's a distinct possibility that this person may have been using a different client, and that it simply responds with FILE NOT SHARED if the file either isn't shared or isn't accessible. I'll keep playing.

    Jason
    em: infi*at*sleepdep.net
  • by Stavr0 ( 35032 ) on Wednesday January 26, 2000 @06:43AM (#1334622) Homepage Journal
    From observing napster's behavior with netstat, the first thing the client does in request a server IP at a 'server server'. Its address is (?) hardcoded in the client.
    If an injunction is served, they'd shutdown that server, effectively stranding *all* closed-source clients with no means of changing the connection address.
    ... until there is an open-source equiv. of a napster client AND server.

    (If I'm wrong, tell me now and make my day!)
    ---

  • by AugstWest ( 79042 ) on Wednesday January 26, 2000 @06:43AM (#1334623)
    OK, you're an artist, trying to make a living playing music rather than selling your soul to some subicle-owning master.

    You actually get a contract, get a CD out, and try to survive through the first couple of releases until you start making money yourself rather than the record company.

    Meanwhile, 5 people buy your CD, rip it, and share it on napster. Eventually a million people have it, and never spent a cent to support the artists. The CD sales are low, so the label drops the band. The band, with no viable source of income, goes back to working day jobs.

    Really, it's mighty sad. I mean, we've all seen a startup company go under at some point, I've been part of a couple, and it's a despairing moment. Multiply that by the factor of artistic expression and hopes and dreams of not having to become a mouse jockey to survive, and you've got some really sad shit.

    It's no wonder the RIAA is up in arms. I hate the fat record execs as much as anyone else, but I worry about the artists too. Noone seems to even think about that anymore, which is just sad.
  • What we need is a general purpose protocol in which the server helps clients to search contents in them. Instead of trying to emulate what napster does, we can start from scratch and design a secure protocol. This does not need to be specific to sharing MP3 files. This can be used for sharing any type of files including program binaries and other multimedia contents. Once this protocol stabilizes and is published as an RFC, it just becomes one more internet protocol like ftp and http. And then, we can have meta servers (like Archie of yester years). We can have servers and meta servers specific to content type, etc.
    Let us see who can block a standard internet protocol. [Of course, we may then have filters which block specific sites, etc. :-( ]

    -Siva
  • "subcle" was a typo. It should be "cubicle."

    So you don't understand artists or the drive to be one. Fine. Don't be one. We really don't care. You've obviously never felt the drive.

    Why does everyone think that the entire earth has PCs now? Even more people assume that those people are proficient enough using their new found power to get and support a massive distributed effort at revolution and espionage. Come on people we don't have the whole earth wired and probably never will at the rate we are going.

    Extremely valid point, but we're still looking at a growing hemmorhage of income for musicians.

    People who are wealthy or self important enough to take high risk ventures are people for the most part are a little batty or are just not thinking about future probabilities.

    True, very true. Mozart was a bitch to be around. Liszt was very abusive to the people around him. Artists are often temperamental and a little batty. Doesn't make them or what they produce any less valid.

    Wealth and self-importance aren't the basis for becoming an artist. A lot of poor artists exist too. The path of least resistance is not very fulfilling, and frequently leads to depression, or feelings of having wasted your life. If I gave up my instruments, I'd have no reason to live. Apparently in your world-view this would be a good thing.

    What a bunch of crock shit. If I am an executive I can hire anyone I want. Suppose a band is removed from a record label. So what I probably can choose any band from at least 1,000 or so in the USA and abroad. The RIAA dosn't care if people die or even worse suffer. They want money so they can be comfortable and never have to wory about anything. This is not altruism it's greed plain and simple. And that dear Watson is the reason why your reasoning is completely baseless.

    This is enforcing my point, not arguing against it. Don't forget, my point is about Napster taking away from musician income. In a scenario in which Napster delivers music to 30,000 people who would have otherwise bought the music, the record company sees slumping sales and axes the musicians. The musicians lose out. I'm not defending the record companies, I'm defending the musicians. They have to go through the record companies to make money, that's the system in place right now. If Napster and MP3 transmissions rob their sales, they rob their careers as well.

    And that dear Watson is the reason why your reasoning is completely baseless.


    That's good for discourse, it shows that you're open to new ideas and that you're actually listening to others. /sarcasm
  • I think one flaw in your thinking, and an attitude to which I can't relate, is in your statement, "...why people have such a fascination with music..." Music is a very powerful force in many people's lives, it's not just a "fascination." My wife likes some music, but she can take or leave it. I, on the other hand, am PASSIONATE about music and am very aware of how it affects me.

    Radio is fairly useless to me, because it panders to a certain mass-market. CDs are OK if I want to listen to a specific artist or type of music. But at work, I want to have a wide diversity of music available. Thus, over time, I've ripped a number of my CDs and put them on my workstation. I then set this large music list on "random" and I end up with quality music that keeps me entertained.

    Yes the future will contain more "visual interactive formats," but music will always be around for those of us who love it.
  • Did someone say Reverse Engineering ? I smell lawsuit ,
    Well need an injuction to stop people doing this, Ow wait that will mean stop using Napster as well, Ow well


  • This doesn't really have anything to do with open source. Well, certainly it makes *writing* open source versions of napster easier, but the protocol was never that complicated to begin with: there are already a number of napster-clones out there. And, on top of that, Napster is still proprietary. They're still running the servers that connect them all, and they could easily change the protocol (to something *much* more complicated) if they chose to.

    -----------

    "You can't shake the Devil's hand and say you're only kidding."

  • Nah, they where hoping for advertising in the app. But with all the opensource apps popping up, they can forget the linux market anyway. But perhaps if they improve the windows client they can still get some revenue from that.
  • by dew ( 3680 ) <david@week l y .org> on Wednesday January 26, 2000 @01:00PM (#1334640) Homepage Journal
    Great idea. I've had a similar one myself [weekly.org].


    David E. Weekly (dew, Think)

  • by dew ( 3680 ) <david@week l y .org> on Wednesday January 26, 2000 @04:37AM (#1334643) Homepage Journal
    That's my site.

    Yes, the protocol is already very well documented by other people. No, this is not a publicity stunt of mine. Yes, my documentation is pretty poor. No, it's not very revolutionary. It's me learning how to reverse-engineer a network application. Please don't get pissed off at me; I'm not really trying to prove much of anything with this release other than I have the very beginnings of how the protocol works.


    David E. Weekly (dew, Think)

  • Voting is the privilege of citizens. If you are not a citizen, you dont get to vote.

    Voting is neither a right (convicted felons cannot vote, not just noncitizens) nor a privilege, but rather a duty of the citizenry. The citizenry, of course, shirks its duties any chance it can.

    Which in itself I consider partially a violation of my rights, in that I am being "taxed without adequate representation".

    Oh, cry me a river, liberal. You want representation? Move back to the country you hold citizenship in.

    Dont give me any "just become a citizen" crap. That doesn't address the injustice that I pay thousands of dollars a year in taxes, but I dont get any say in what gets done with them.

    Well boo fucking hoo. You want a say, become a citizen. You don't want to become a citizen? Sorry, no say. You want to keep your original citizenship while leeching off government services (police, firefighting, highways, courts) without having to pay taxes to maintain them? Not here, buddy.

    Not having representation (suffrage) is the cost of keeping your original citizenship. When you live in a country and use its public services, you pay taxes to maintain them. That's the deal. You want to alter or abolish those services, you have to vote -- and to that, you have to be a citizen. That's a separate, unrelated deal.

    Of course, the government shouldn't be in the business of doing many, many of the things it does, and taxation levels at home (USA) and abroad are atrocious bordering on ludicrous, but hey, that's the welfare-state for you. I'm waiting for the Boomers to destroy Social Security so we can finally freaking get rid of it.

    gomi
  • I wouldn't worry about anyone getting mad at you. More likely you'll just see people whining about how Slashdot is going down the tubes in terms of content.

    Just out of curiosity: How exactly are you an MP3 Representative?

    -----------

    "You can't shake the Devil's hand and say you're only kidding."

  • This from http://www.onelist.com/messages/napdevMessage: 2
    Date: Tue, 25 Jan 2000 11:37:30 -0500
    From: Brian Ristuccia
    Subject: Re: WARNING!

    On Tue, Jan 25, 2000 at 03:27:49AM -0800, David E. Weekly wrote:
    > From: "David E. Weekly"
    >
    > I was just contacted by Napster and asked to take my protocol documentation
    > off of my servers. At any rate, I'd encourage you all to make copies of Dr.
    > Scholl's document (and mine, if you so desire) since Napster may start
    > cracking down on these documents. I'm not going to let them bully me! And
    > remember: linking to documents is perfectly kosher. Looks like someone's
    > already made a copy at http://lovenapster.tripod.com/
    >

    What were their grounds for requesting removal? I got a threat letter from
    the MPAA asking me to remove DVD related software and documentation from my
    web site a few weeks ago. I sent them a strongly worded response and haven't
    heard from them since.

    The threat letter:

    http://osiris.978.org/~brianr/css/demand.txt

    My response:

    http://osiris.978.org/~brianr/css/draft-response .txt


    Good luck.

    --
    Brian Ristuccia
    brianr@xxxxxx.xxx.xxx
    bristucc@xxxxxxxxxxxxxx.xxx
    bristucc@xx.xxx.xxx

  • by iserlohn ( 49556 ) on Wednesday January 26, 2000 @07:02AM (#1334656) Homepage
    Most artists make their money going on tour. Napster is good, because it is their best promotional tool.

    Why do big name bands and singers have to go on tour?

    1. They like performing live
    2. It's their bread and butter (income).

    Why do artist need to sign on to record labels to grow?

    1. They get a tiny fraction of the profit from CD sales.
    2. The promotional activities that the label do aids their popularity especially when they go on tour.

    Why is the RIAA scared of Napster?

    1. Every 18 year old freshman can serve thousands and thousands of ripped songs on his own machine

    2. However, what they are really afraid is that artist can get big and earn big bucks without going through a record label. They are scared shit because once artists realize this, the industry will go in for a major overhaul.

    Naspter was not explicitly designed to pirate music, just as guns were not designed explicitly for murder. IANAGRA, however. What the RIAA and the DVD CCA is afraid of is that they will lose their iron grip on the industry, and that their cartel position would be challenged. Yes they are concerned about piracy, but they are more concerned about the common guy having access to tools which could revolutionalize music distribution and promotion.

    It's like a totalitarian regime, in which the governement has control over the distribution of information because that's what keeps it in power. The same goes for these industry group. If they lose control over distribution, their days as cartels are limited.
  • On some levels, we actually need associations like the RIAA to keep the really bad people (not us poor intellectuals (hehe)) from harming the industry. Large pirating firms.. etc.

    I would agree that we need some sort of organization to protect the rights of musicians and go after pirates. But given recent history, I can't see how RIAA is anything like this.

    They have gone after MP3 playback devices, like the Rio. What could the justification for this possibly be?

    They somehow pressured lawmakers into passing a "media tax" that is based on the assumption that some things are bought for the purpose of piracy. The destination of this money is obscure at best, and assuming that any musician ever actually sees any of it, the relative amounts are certainly arbitrary.

    We do not need anything like the RIAA. It should be disbanded and replaced with an organization that limits itself to protecting the interests of musicians. Control of media formats is totally out of line with that need.


    ---
  • by slashdot-terminal ( 83882 ) on Wednesday January 26, 2000 @07:14AM (#1334658) Homepage
    Ok I guess I can blow a couple of karma points right here and get this off my chest.

    Why are mp3s so terribly popular? I mean all they are is basically a collection of electrnic bits representing a sound wave and such. It almost gets to the point where it's even more popular than porn and that's really a stretch for something to do. One would only see this type of thing in areas that involve narcotics and such. Why all this trying to get hundreds of terabytes of music on a computer? Aren't there more fascinating things than non-visual communication and data exchange?
  • For something free, have a look at a (dead) version of a napsteroid protocol I drew up when I had to much time on my hands. Distributed FileServer over Irc [www.var.cx]


    Hmmm, wel it is in a moment. I just need to have a small talk with httpd... With a large aluminium bat.
  • Wow, short sighted and bitter.

    why don't we all ask for unlimited bandwidth, world peace, and the end to all diseases.

    These things you mention we cannot control or create because of the laws of physics, world peace might be an exception someday. The RIAA is an organization exerting artificial control over a technology. This technology is egalitarian, it levels the playing field (removes their distribution channels), and that is unacceptable to them.

    I don't know about you, but I like any technology that puts me on the same level as anyone else.


    On some levels, we actually need associations like the RIAA to keep the really bad people (not us poor intellectuals (hehe)) from harming the industry.

    1. Why can't I pay the artists a few bucks directly instead of paying 18 to a corporation who markets shitty music and spoon feeds it to the masses? Why can't we develop this model? All the terchnology is there, we just need to implement it.

    2. The RIAA is a corporate representative. Corporations are fascist. You have no rights within a corporation. They'd control us externally as well if they could, the only thing that stops them is our government (which vaguely represents us). At least our government has some resemblance of democracy. I'd rather let them do the "protecting".

    We can get rid of anything we want in society including the RIAA. All we have to do is say so. The only problem is getting everyone organized to do it, and prevent everyone from getting indoctrinated by the media. You know exactly what I'm talking about.
  • by Chris Johnson ( 580 ) on Wednesday January 26, 2000 @08:29AM (#1334666) Homepage Journal
    I hope you get to eventually have the option to pay a few bucks to an artist directly because you want to. I'm a musician, and the conclusion I've come to is that mp3 is radio- so I'm working really hard to get together a catalog of music to put out there, and hope to make available inexpensive but high quality CDs for people like you. I don't want to just ask for money for the mp3s, I'd rather offer something else, something additional (that doesn't involve _withholding_ songs from you and putting you in a bind).

    Everytime I see a music listener like you asking why they can't just cut out the middleman and pay the artist a couple bucks, I get a little bit of badly-needed hope. Keep it up- and keep new formats like mp3 and old formats like Red Book Audio CD alive for me, man. When you're just a musician doing everything yourself without help or money sometimes it can take a long time to get things done- I'm waiting on an ADAT repair and need to build some equipment to do the MP3 mastering I need to do. Delays, costs, there's never enough time and I'm scared my chance might dry up and blow away (or be stomped on by the RIAA) before I get to step up to the plate and take my swing. Keep the faith! There are people out there who need you as much as you need them.

  • by griffjon ( 14945 ) <.GriffJon. .at. .gmail.com.> on Wednesday January 26, 2000 @07:28AM (#1334668) Homepage Journal
    Oh, the NT password hash file comes to mind as a valuable file to upload and then run l0phtcrack on ...
    Or, say, certificate private keys from the netscape directory, or anything in the pgp directory...

  • Alright, what we need next is support for different file types by Napster. Like .mpegs and .rms. So that er... new music groups can put up their own music videos without having to go through the tyrannical music industry. Yeah, that's right.
  • I explain MP3 to people. The media, friends, etc. No, I don't represent MPEG, but I just thought it would be a cute tag-on to let people know (it's one of my hobbies; I'm actually writing a book about MP3s now!)...and I mean "hacker" in the "works with computers" sense more than 1 4m 4 w4r3z d00D!"


    David E. Weekly (dew, Think)

  • Agreed, the above linked documentation is better than mine. I say so at the top of my page in no uncertain terms. =) Mine's a pretty sloppy 4-hour hack job, never touted to be anything different. Why the fuss about mine? Beats the hell outta me.


    David E. Weekly (dew, Think)

  • by TheTomcat ( 53158 ) on Wednesday January 26, 2000 @04:50AM (#1334681) Homepage

    From http://david.weekly.org/code/napster.php3 [weekly.org]:

    "c:\WINDOWS\DESKTOP\mp3s\Nirvana-Lithium.mp3"
    [GASP!] Napster SENT the COMPLETE location of the file!!!! Does this mean that there is a way to coax the client to offer up ANY file?


    Uhm. Someone should check into this. If a file is not in the user's listed mp3's or their chosen directory, does the napster client still send it?

    Also, the article shows that when requesting a file, the client sends the full path name, but no info is given when SENDING a file. I wonder if something like "SEND ../../../../../../../../autoexec.bat" would work.

    This could be really bad.

  • That's very similar to what an ISP I worked for back in The Day did with its newsfroup expiry times: The expiry times were dynamically assigned by newsfroup volume, so (frinstance) alt.fan.karl-malden.nose or alt.sex.hello-kitty had 3-5 week retention, heavy-traffic (but still text) groups like talk.politics.guns got down to 1-2 weeks at the worst, and w4r3z/pr0n newsfroups (especially .iso and multimedia) had retention waaay down in the 'hours,' or sometimes 'minutes,' range.

    Just a coincidence that the biggest diskspace hogs happened to be hot IP, really.

    gomi
  • jodio is slang for 'jodido,' tense of 'joder,' the verb 'to fuck' in Castilian ('proper' Spanish, like from Spain -- rich and varied regional slang abounds throughout South and Central America, for example: 'chucha,' a large, weasel-like rat in Colombia with no naughty overtones, means 'a woman's pudendum' just 100 miles south in neighboring Ecuador). 'Jodio' could also stand for the past tense of 'joder' if there's an accent over the second o. If you're omitting the second 'd' in 'jodido,' it should be spelt "jodi'o" if you're trying to represent the vernacular -- just like writing "don'" for the slurred "don't".

    "Ramera" means "whore."

    "Pendejo" is actually a more complicated translation than just "asshole." It occupies a similar linguistic niche, but is at more of a 'damn' level of naughtiness -- you could get away with it in the more relaxed workplaces, or with relatives you're pretty close to, but not in front of Great Grandmother Carmen or in a job interview. Literal translation is tricky -- closest sense (from context) is 'dweeb,' 'loser,' 'suckwad,' 'pusmaggot,' and similar denigrations of eptitude or capacity.

    In the same vein, "no tengo tiempo para tus pendejadas" scans to "I don't have time for your crap/shit", but that doesn't mean 'pendejo' means 'shit,' just that it fills the same linguistic niche.

    gomi
    mr. pedant today
  • by Robin Hood ( 1507 ) on Wednesday January 26, 2000 @09:02AM (#1334695) Homepage
    I work for the Resnet group (RESidence hall NETwork -- Ethernet in the dorms) at my college, and let me tell you, Napster looks very different from the "other side", when you're the admin trying to run around making sure everyone has enough bandwidth. Before we introduced Resnet, our bandwidth (two T1's) was almost never more than 50% full. Bandwidth usage graphs for the second T1 showed long periods of inactivity with the occasion spike of 3% or 5% usage. Now, two years later, we've got 100% usage on both T1's during the middle of the day, and I wouldn't be surprised if that expanded until both our T1's are completely filled all the time.

    Napster and Hotline are two of the many reasons our bandwidth is filling up (streaming media and games are other reasons, but we've found that games aren't sucking up too much bandwidth -- yet). When the first Hotline server showed up on our network, we noticed it right away: bandwidth usage on our Internet connection was suddenly 100%, all the time. A little research showed that all this bandwidth usage was coming from JUST ONE USER! We immediately blocked the Hotline ports (and explained to that user why Hotline's use of bandwidth wasn't acceptable -- he hadn't realized what a bandwidth hog Hotline was and had been acting ignorance, not malice). Now Napster is doing the same thing, sucking up bandwidth that has nothing to do with the primary goal of this institution (it is, after all, an academic institution and academic Internet use gets first priority over everything else). Furthermore, a little packet-sniffing shows that most (I estimate 90%, though I don't have hard figures at the moment) of the traffic is OUTGOING -- people outside of the college downloading MP3s from Napster servers within out network. There is no way that this can be construed as being the function of our Internet connection.

    The legality or otherwise of Napster's primary use (sharing MP3s) had nothing to do with the decision to block it except to make the decision process marginally shorter. If folks had been passing around Linux .iso images, we might have argued it for another five minutes or so, but we still would have reached the same conclusion: we have limited bandwidth, and we need that bandwidth to remain accessible to everybody. A small number of users cannot be allowed to continually suck up all the available bandwidth.

    Of course, in a few months another bandwidth-hogging program will appear, and we'll have to block yet another set of ports / IP addresses / whatever. And the game of bandwidth whack-a-mole continues...
    -----
    The real meaning of the GNU GPL:

  • by Chris Johnson ( 580 ) on Wednesday January 26, 2000 @09:13AM (#1334701) Homepage Journal
    It is NOT FEASIBLE to be a recording act that doesn't tour. Hasn't been for _years_. Many years. Don't even go there. It's not going to happen. It's part of the system now that you tour at your own expense to support the release. If you even get an advance that will cover that you'd better spend it on getting out there because if you don't you lose.

    You are so totally wrong that anyone can expect to be a studio band in this day and age and be signed to a major label. Try it, just try it. Hell, even bands that _lip-synch_ tour now! You're making this up. How is a band supposed to self-promote except through touring? You don't seriously think the label does promotion? They only do that for about 3 albums a year for which they're prepared to do tonnage. They'll do it for the Spice Girls. They won't do it for you and they won't sign your band unless you agree to tour and promote the album for them. The tour may be written into the contract. You pay for it yourself out of the advance that is taken out of your supposed royalties.

    There's no such thing as losing income that was never there in the first place. That's like saying that bands lose huge amounts of income because there aren't coin slots on every radio. That's like saying recording acts traditionally make money instead of losing it. That's totally flat wrong...

    Do you have any fscking idea how much a band has to PAY to get a gig at certain well-placed clubs? How much a band would have to PAY to get radio airplay, to get a video in even light rotation on MTV? You're so off base it isn't even funny. Music has _never_ been a sensible job, and in recent years (the last twenty or so) it has become even worse, and it is the record labels who have done the most damage. Have you ever read a music industry contract? Did you know that jotted down notes on a memo pad (seemingly innocuous) routinely become a legal straightjacket for acts, forcing them to accept a deal whether they like it or not, or to quit the business entirely ('deal memos', in other words, that force the band into an unspecified deal, at which point all the leverage is on the label's side and the band takes a really BAD deal because they have no choice- in effect they have already signed without seeing the terms).

    That's not even getting into the fact that large numbers of 'indie' labels are in fact wholly owned subsidaries of major labels, kept for their 'image', or semi-independent indies kept on a very short leash. You didn't know this? Let's see a list of the labels you're thinking of, so we can look up whether they are actually run by BMG or EMI or Sony.

    I don't know who you are, AugstWest, but either you have a lot to learn about the way this industry works, or you're just a label flack busily fighting for your side. And that's cool, fight away if such things please you. But the picture you're painting is a damned lie. You're trying to induce guilt by suggesting that not supporting the industry is depriving musicians of money. It would be more accurate to induce guilt by suggesting that _supporting_ the industry is supporting a system in which musicians are routinely screwed with mind-bendingly nasty deals whose implications they don't even guess at until it's too late, in which musicians are routinely broken and left to have their bands break up, twisting in the wind with no label support, in debt to the record company from failure to recoup even modest advances, contractually bound to not play or record a note except with the record label that is now no longer interested.

    If you want to support that, be my guest. I think that turning the acts loose with whatever mp3 popularity they can get is probably a lot more likely to result in some sort of income for the band. That becomes a question of business, and whether the band can charge much for a gig, can sell CDs out of their kitchen, can print up posters or have T-Shirts made.

    At any rate, if you're worrying about artist income or artist rights or artists' welfare, you're worrying about the wrong things. Start figuring out how you can destroy the major labels if you want to do some real good. Things were out of hand even as early as the '80s, but now they are just ridiculous. Don't even support it.

  • recently there have been many articles in our campus newspaper about the speed of the network being slowed by MP3 transfers (not really, but they have to make an excuse for the poor technology).

    Well, I know that the resnet traffice here was 20% napster. That's 1/5th of the bandwith. People on the same subnets as the heavy napsters users started complaining about the slowdown. They had no idea it was being caused by napster, just that their connection had gotten slower.

    Since napster provides no "educational value" and was "hampering system resources" we had to can it. there wasn't really a viable alternative. Napster was affecting our network, and after people complained we blocked connections to the napster servers. This isn't "an excuse for poor technology", it's "people wasting bandwith and hampering other peoples connections."

    Until every single person has unlimited bandwith to anywhere, this will be a problem.

  • Congratulations on an excellent comeback! Do you intend to make any follow-up on that warning about perjury if Mr. Gallagher and/or the firm of Sargoy, Stein, Rosen & Shapiro do not retract their statements? If so, I would suggest documenting your claims now. Get someone from your ISP to validate your claim that no links to sites containing DeCSS exist. Get a written and/or PGP-signed letter from Frank A. Stevenson repeating his authorization to publish his cryptanalysis of CSS paper. And with documentation in hand, send Mr. Gallagher and his law firm another letter asking them to retract their statements. If they fail to respond within a reasonable time, approach an attorney about a lawsuit against them for libel. (Or is it slander? One is written, the other spoken, but I always forget which).

    Of course, it's up to you, but that's what I would be doing if I had gotten a threatening letter such as that one. And if you do this, please publish the results to let everyone know what happens. It would be nice to know that lawyers can't get away with threatening people without cause...
    -----
    The real meaning of the GNU GPL:

  • by Anonymous Coward on Wednesday January 26, 2000 @05:04AM (#1334710)
    These guys have several million dollars from a round or two of venture capital financing, from forward-looking investors in Silicon Valley and/or San Francisco.

    My guess is that they are going to try to get bought out by someone like MP3.com or one of the Big Five (Four with EMI bought-out?) music groups.

    The 30 or 50 people who run Napster are in this for the money. Big time. And who can blame them for that?

    But lets make sure that the open source servers are fully operational before they decide that they need to strong-arm them into nonexistence. At some point, Napster, will be demanding control over all the client software. They have to do this or its game-over for the next tier of investment opportunity. Its not a matter of if; its a matter of when.

    They have already shown that they are _extremely_ sensitive to PR issues. If you want proof, see how they handled the whole Linux napster client fiasco in December. So it will be interesting to see how they respond to such an open threat to any perceived proprietary nature of their technology.

    Please moderate this up so people will realize that Napster is a larger company than they would have you believe. Their web site is a ploy to make them look tiny.

Our business in life is not to succeed but to continue to fail in high spirits. -- Robert Louis Stevenson

Working...