Don’t Torrent that song: DRM free iTunes songs can identify you

Apple iTunes“Sure, you can now download music from the iTunes store without DRM, but that doesn’t mean you should just willy nilly start sharing that music with your friends. For one thing, it’s illegal. For another, your account information is embedded into that m4a music file,” Erica Sadun reports for TUAW.

“Bottom line: DRM-free doesn’t mean that Apple suddenly supports piracy,” Sadun writes.

Full article, with instructions on how to see identifier strings in iTunes songs, here.

[Thanks to MacDailyNews Reader “qka” for the heads up.]

50 Comments

  1. It’s strange that use unix commands to search for your name in that DRM-free song.

    I bet there’d be several people willing to test their accounts to see what apple does to them.

    At the end of the day, if it were as easy as embedded just like that… then my golly, apple is making their security a lot easier than I thought.

    More likely they would be watermarking their songs, with phase-shifted frequencies that are invisible to the ear… but detectable using DSP algorithms.

  2. How is this a bad thing? This is the perfect balance between protecting copyright holders and allowing consumers fair use with their music. The only way this gets you in trouble is if you allow your music to be shared illegally. Music isn’t free and the people who make it have a reasonable expectation of being compensated for what they do.

    This gives honest consumers all of the fair use they have always had the right too and is an awesome first step. The only negative is its just 1 label so far. More to come though, cause the floodgates have been opened.

  3. How is this a bad thing? This is the perfect balance between protecting copyright holders and allowing consumers fair use with their music. The only way this gets you in trouble is if you allow your music to be shared illegally. Music isn’t free and the people who make it have a reasonable expectation of being compensated for what they do.

    This gives honest consumers all of the fair use they have always had the right too and is an awesome first step. The only negative is its just 1 label so far. More to come though, cause the floodgates have been opened.

  4. How is this a bad thing? This is the perfect balance between protecting copyright holders and allowing consumers fair use with their music. The only way this gets you in trouble is if you allow your music to be shared illegally. Music isn’t free and the people who make it have a reasonable expectation of being compensated for what they do.

    This gives honest consumers all of the fair use they have always had the right too and is an awesome first step. The only negative is its just 1 label so far. More to come though, cause the floodgates have been opened.

  5. How is this a bad thing? This is the perfect balance between protecting copyright holders and allowing consumers fair use with their music. The only way this gets you in trouble is if you allow your music to be shared illegally. Music isn’t free and the people who make it have a reasonable expectation of being compensated for what they do.

    This gives honest consumers all of the fair use they have always had the right too and is an awesome first step. The only negative is its just 1 label so far. More to come though, cause the floodgates have been opened.

  6. This is a preemptive strike on all the tinfoil-hat comments that are sure to come…

    Sure sucks when you realize that the stack of bills you swiped from the ATM got tagged as you broke in, and now the cops have you nailed. Sure sucks when the convenience store security cam got your tags as you sped away with a full tank of “liberated” gas.

    Sure sucks when you buy IP after agreeing to Terms of Use, misuse it, and get identified.

    This is completely innocuous unless you are a large-scale thief. Even if your theft IS noticed, you can probably argue that someone must have stolen the song from you – there’s no password or special protection on it.

    Lest some say and say (as others constantly whinge) that this is the same as indiscriminate wiretapping — have a look at the bills in your wallet. They most likely came from an ATM. Bills go into it sequentially, and that sequence is probably recorded somewhere. This is about the same thing – unless you rob the ATM/bank, there is no chance that the info could affect you in any way.

  7. I can’t believe so many people expected this data to be removed from digital purchases, just because the song is now DRM free. The Purchase History, which includes: purchased by, account name, and purchase date have nothing to do with DRM at their basic level of functionality. They’re basically the equivalent of a UNIX Timestamp when making database modification. You combine the timestamp with the user account, and you have a unique variable.

    Just like Amazon, and a whole host of internet sales company, Apple tracks sales, some users may not like it, but most users find the convenience of having a system that tells you when you’ve already purchased an item, or the ability to be able to go back three years and search for the title of purchase, as great features and functionality.

    Personally, I use those two functions a lot. And while I’m happy to verify my taste and music and books are predictable, I am appalled at the verification that ‘my memory just ain’t what it use to be’; because I attempt to repurchase the same singles and books quite frequently. Also a downside of only keeping 30GB of my over 300GB music collection on my PowerBook. I’m also a fan of the various recommendations that iTunes and Amazon offers, so I don’t mind the tracking of purchases.

    The data is purchase history data, it was used to help create DRM, but stands on its own; and existed before iTunes. So why expect it to go away just because DRM did? Stupidity, I guess.

  8. Digital Watermarking of all content has been going on for quite some time, what you DON’T KNOW IS THAT…

    Id information is stored in sound and video not just a simple metadata, so it’s transfered as you convert the file to other formats.

    TRUSTED COMPUTING courtesy of Intel and their EFI standard which is now governed by the UEFI group consisting of Microsoft, Intel, HP, Dell etc. (no Apple) have created this powerful firmware level that sits between the OS (and any apps) and the hardware.

    EFI can contact the internet, download, report on WATERMARKED FILES and all sorts of other things, like refusing to play ill gotten content WITHOUT THE OS EVEN BEING LOADED!!

    Old Apple is sliding the most privacy evading firmware and stringent DRM right under your noses. And they have given ALL CONTROL OVER TO THE UEFI GROUP!!!

    Apple refers all questions about EFI to Intel and Intel gives you a little bit and sends you to UEFI.

    GOOD NEWS IS EFI ON INTEL MAC’s FROM APPLE IS ESSENTIALLY BLANK. NOTHING IN THE EFI GUID PARTITION ON YOUR HARD DRIVE EITHER AT THIS TIME.

    However thrid party developers CAN INSTALL SOFTWARE IN EFI ON INTEL MAC’s.

    For more information visit, also search Wiki

    http://refit.sourceforge.net/

  9. Really, who didn’t see this one coming a mile away?

    I’m not worried. The record industry doesn’t care that you share it with 5 of your friends or so. They care when you share it with 5 million “friends” or so. I doubt iTunes will regularly check your purchases to make sure they are yours. But you can count on the RIAA checking songs on LimeWire for names.

  10. The sky is falling, the sky is falling!

    Geez, guys, get a GRIP. You have NO expectation of privacy if you conduct your affairs in PUBLIC! That means, if you download music from the iTunes Music store, and the upload your songs to LimeWire, and you get busted, you can’t whine and cry that your privacy was violated because you were breaking the law and you were doing so in public. GET OVER IT. So your name, address, social security number, blood type, next of kin, and sexual orientation are all encoded on that mp3 file. Who cares? The file was sold to you for your own PRIVATE use. If you gave it away to the public, guess who’s fault that is? Like it or not, this is the information age, and really, the only people who should care about all this data collection are conspiracy theorists and thieves.

  11. Ahhh, watermarking is also going on in cd’s and dvd’s

    After all it’s a simple matter of changing a section or two of video/audio information before a cd/dvd is burned.

    It might not have the users info, but a tracking number that can be gleamed later when the cd/dvd is first used, then compared to video/audio fles found on p2p networks.

    One way around this watermarking

    Is to have “all your media stolen”, make a police report and don’t upload anything locally.

  12. So you share your iTunes song with your girlfriend and next month after you split up she hates you and puts your songs on Limewire.

    It would be your siongs and your ass that would get busted…

    Oh dear.

  13. What if I make an iMovie or Final Cut Pro production strictly for friends and family, like of a long vacation or something, and then I use iDVD or DVD Studio Pro to make multiple copies for everyone … AND FOR THE SOUNDTRACK I GRAB MUSIC FROM MY LEGALLY-PURCHASED iTUNES COLLECTION?

    Does my “personal purchase data” go along for the ride on the finished DVD? If so, that sucks.

  14. to reply to the “what if the songs are stolen” argument,

    You have to remember that in this country, you are still considered innocent until proven guilty. It might not seem like that all of the time, but you are. If your MacBook is stolen, report it. Report it to the police and your insurance company. Then your insurance company will buy you a new MacBook. That is what your check every month to eRentersInsurance is going to. That’s nice isn’t it. Now you will be asked for proof that it you owned it to begin with. But that can be done with a simple photo of the laptop.

    Now that you have your reports out to your local police office and your insurance agency, when the RIAA comes a knocking you can just point to that and say, “It was stolen from me. I have notified the police and they are looking for the perpetrator.” They may still try to sue you, but they will use the dumb cheap lawyers, as you should too. You won’t have to pay a penny to them.

    On the contrary. If the music is found on BitTorrent long before you write the report, that probably means that you were sharing it, not the thief.

  15. The extremely vocal arguments against the user name and email tags are completely hypocritical. Let’s see some examples.

    You buy your songs; you burn them on CDs for your car, your kitchen, bathroom(s), bedroom(s), garage; you put them on your iPods, cellphones, you bring them to your office PC(s), etc. No matter how many time you play these files, no entity in the world will know what you did with them.

    Now, let’s say, you make copies of your files and give them to your girlfriend. Her brother finds the files on her Mac, burns them on a CD, takes them home and puts them on LimeWire. If we are talking about 15 songs, probably nobody would bother. However, if the number is 1,000 (for which you paid $1,290, by the way), RIAA police my come knocking on your door. You would say: ‘No, I didn’t do it!’; they’d say, ‘Well, it’s your signature!’; so you ‘d think ‘OK, who else might have these files?’ and would be able to figure this out. Much like prescription drugs, or licensed commercial software, it is your responsibility to control access to it.

    Let’s also explore another scenario; someone who hates you, and knows that you have a nice iTunes Plus library of songs, and also knows your name and e-mail, decides to play a nasty prank on you. They buy a bunch of iTunes Plus songs; they crack the tags and change them to your name. They upload them to P2P. Now, RIAA finds them; goes to Apple to check against your user account purchases and finds out that none of those songs were purchased by you at the time the tags show they have been purchased; however, another user has purchased the exact same songs, at the exact same times. Now, instead of coming after you, RIAA police is coming after your friend, charging him not just for copyright infringement, but also for DMCA violation (circumventing a copy control mechanism).

    There is absolutely nothing sinister in this system. It is the same as the money you have in your wallet; if you took it out of an ATM, the bank can track that bill back to you as the last person who took it from them. This is the perfect solution for all those who cried how DRM was hobbling them and their fair-use rights.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.