Using Watermarks to Combat Piracy 406
TheEvilOverlord writes to tell us PC Advisor is reporting that researchers at the Fraunhofer Integrated Publication and Information Systems Institute have developed a new watermarking system to help track and combat piracy. From the article: "The system lets content providers, such as music studios, embed a watermark in their downloadable MP3 files. Watermark technology makes slight changes to data in sound and image files. For instance, the change could be a higher volume intensity in a tiny part of a song or a brighter colour in a minuscule part of a picture. Even the best-trained human eyes and ears, according to Kip, can't detect the change."
Human? (Score:5, Insightful)
Who says anything about using human senses to detect the watermark? If these watermarks are embedded by machine, I'm sure it won't be long until Watermark Bob creates a "cleanser" program to detect anything unusual, and maybe even remove it.
Um, what? (Score:5, Insightful)
For whom was this intended again?
I'd be happy if there actually was plenty of music studios providing downloadable mp3's though.
Re:Human? (Score:5, Insightful)
Good point. All you'd really need is two or more copies of a given file, each with their own watermarks. Do a relatively straightfoward binary diff on the files and you'd quickly spot the watermarks. Normalize the diffs based on the similarities between the multiple file copies, and voila! Instant un-watermarked file.
Re:Human? (Score:2, Insightful)
uhm (Score:2, Insightful)
Trace it back to me? How? (Score:2, Insightful)
How, exactly? Supposing I went out and purchased a music CD (a radical idea, I know) with cash, how could they possibly trace that particular CD back to me should it somehow be made widely available to download? I mean, I wouldn't have provided any personal information to the store during the purchase so
Nothing to see/hear (Score:5, Insightful)
In other words, "Nothing to see/hear. Please move along?"
More seriously - although it could be stripped out (relatively) easily, you could embed watermarking data in the metadata segments of downloadable MP3s. I'd accept this as a tradeoff for music studios offering downloadable MP3 files: If some_hit_song_i_downloaded.mp3 shows up on a P2P network and contains metadata whose MD5 could only be generated by, say, hashing my credit card number with some_riaa_private_key, that'd be pretty reasonable grounds for RIAA to believe that I'm the schmuck who (a) paid for the right to download it from a RIAA-authorized source, and (b) uploaded it to a non-RIAA-authorized filesharing network.
Make it impractical for Joe Sixpack (who will be unaware of this type of watermarking, and who probably will be unaware of the existence of tools to strip it) to upload his files without risking fines/prosecution, and you can offer DRM-free MP3s to Joe Sixpack.
That's the spirit (Score:5, Insightful)
Things like the DRM and DMCA were put into place to fight piracy, and wound up just hurting regular consumers while the pirates just snickered as they continued along their merry way.
With these kinds of things, regular users will still be able to do what they like with their own copy, be it back it up or transfer it to another medium for personal use. At the same time, it will allow those tracking piracy to find the source and press charges only against that person, and not the random multitude.
I'm sure the pirates will figure out some way to work around this (be it to randomly change the volume slightly throughout an entire MP3, or brightening/dithering an entire picture), as they have everything else, but if this kind of technology can prevail and advance, it will allow those of us legally using our own purchased goods to do so without worry, while punishing those who deserve it.
medialoggers replace keyloggers as top malware (Score:3, Insightful)
Key question (Score:4, Insightful)
Are they planning to
The first is basically worse than DRM, the second is essentially an aid to enforcing existing copyright laws. I suspect that if the Content Cartel would finally accept that their business models need to change and go for the second approach, most of us could accept it.
Re:That's the spirit (Score:3, Insightful)
Identifying pirated music (Score:3, Insightful)
So, let's say you gave each legally sold copy of a song a unique randomly generated 64bit ID (that you record). The pirate could remove that ID. They might even put their own random ids in place of your id. The deal is, their IDs will not match those that you recorded, and you could make the the case that this is pirated music.
The thing that needs to happen is that publishers need to fight against the professional content copyright violators.
If done right, watermark technology would be sufficient to track and counter the extremely abusive copyright violations while allowing the use of open formats.
For that matter, I think "hidden" watermark technology is going in the wrong direction. The mark does not need to be hidden in the file. If you put a unique identifier on each thing downloaded. When you go to make the case that group A is pirating music you can either prove that there is a bunch of files with the same ID or with the wrong id. You don't even need to track back to the original buyer.
Indies? (Score:3, Insightful)
You code media players to detect the watermark (which would have to be in a standardized format) and refuse to play anything that does not contain the watermark.
So would independent recording artists be able to insert the watermark? If not, wouldn't that be grounds for an antitrust action? Or are they assuming that all possible songs are already copyrighted to a major multinational publisher, as hinted by this article [slashdot.org] and this article [lld-law.com]?
Re:That's the spirit (Score:4, Insightful)
What do others think?
How can it hold up in COURT? (Score:2, Insightful)
Re:And this fights piracy how? (Score:3, Insightful)
Ding! This is not a criminal proceeding, but a civil suit. A far more extreme example would be suing someone who allowed a murderer to get a hold of an otherwise legally obtained gun. They can't prove you committed the murder, but they can argue that your lack of security on the firearm contributed to the crime so you have some civil liability. And in civil court you only need a preponderance of the evidence, not proof beyond a reasonable doubt.
The analogy isn't perfect of course, but the important thing to remember is that these lawsuits are civil matters and have lower standards of proof.
Re:Nothing to see/hear (Score:4, Insightful)
So to be on the safe side... (Score:2, Insightful)
Re:Human? (Score:3, Insightful)
I mean, isn't it cheaper to let everybody know that you're watermarking the video files than it would be to actually watermark them? Maybe toss in a few random bits if you think that people would actually download two copies and diff them, to keep them guessing.
Social solutions to technical problems. Think of it as the, "Hey, I'll give you candy for your password," issue, but in reverse.
This will not replace current "DRM" schemes (Score:4, Insightful)
Even so, the labels might adopt something like this. But it would be in addition to their current copy restriction schemes, rather than a replacement for them. Consumers still lose as they'll still have to wrangle with FairPlay, WMA, or whatever copy restriction scheme the labels want to use.
Re:Human? (Score:5, Insightful)
E.g., radio stations get copies of songs weeks before the CDs actually hit stores -- and suspiciously, the songs tend to show up on P2P networks soon after they go out to radio stations. What the music producers would really like to be able to do is trace the leaked files back to whoever put them on the internet, and then get medeival on them for breach of contract.
You can imagine similar uses for prerelease screenings of movies that go out to critics, film review boards, etc. It's less about preventing piracy than it is about finding the snitch afterwards so they can be made an example of. Really, the piracy deterrent is not technological (the watermark), but social (whatever punishment gets inflicted). The watermark is just facilitating the latter.
I suppose in theory if you had a watermark that could be embedded into the file quickly and easily, you could use it on downloaded music (like the iTMS) to see if people were sharing files that they purchased, but really I think systems like this are designed to catch big fish, not Joe Preteen who's ripping files that he bought off of Napster and putting them onto Kazaa.
A lot of similar systems are used with images; actually many of the techniques used for watermarking are used for steganography (it's arguable that watermarking is really a form of steganography), like Least Significant Bit padding for one. There are also systems that have a robust enough watermark that they will survive printing and scanning, although they tend to begin to mess up the image slightly.
Re:So to be on the safe side... (Score:2, Insightful)
Re:Human? (Score:5, Insightful)
The purpose of making the watermark imperceptible isn't to trick the user. The user is fully aware that the music is watermarked. The reason it is done the way that it is, is because it is the only way to do it. There are really two requirements for the watermark. First, it must be intertwined with the actual data in order to make it non-trivial to remove. Simply sticking the watermark in a meta-information block would make removing it too simple. Second, because the watermark is intermixed with the audio data, it MUST be done in an imperceptible way in order to retain the quality of the recording.
So, making the watermark inaudible is not some attempt to pull one over on you. It's just the only realistic way it could be done.
Sounds great (not). (Score:5, Insightful)
A prosecution tool (Score:2, Insightful)
Re:That's the spirit (Score:3, Insightful)
Although it sounds like a very attractive alternative to DRM, there are some serious security issues that would have to be adequately addressed.
Lossy Format (Score:3, Insightful)
If the watermark is applied to the file after compression to mp3, then it is very easily defeated by decompressing and recompressing with a non-watermarking encoder, of which many exist for mp3. The act of decompressing the file will obliterate whatever bits were flipped for watermarking purposes. If the hidden information is subtle enough, the lossy compressor will simply throw it out. If it's obvious enough to not be obliterated by lossy compression, then I can hear it in the file, and the product is inferior. The only option would be for the encoder to recognize the watermark and purposefully retain the data, and then we're tied to a specific piece of software just like DRM.
However, if the watermark was applied before the compression (i.e., directly to the wav file on the CD), then the act of compressing the file will change the watermarking somewhat, and matching the "fingerprints," as they are called in the article, would be statistical in nature, not exacting like a hash is. The fingerprint would have to be considered "close enough" to be a match.
Also, every single watermark would have to be unique in order to match it to a specific source, which means creating a Big Database (tm) of customer info, which is easily defeated by paying with cash. On the other hand, if the record companies weren't interested in identifying a specific source, but the presence of a watermarked file in an upload directory is sufficient, then that's no different than the existence of any other file in an upload directory which contains copyrighted material, which is what they've been going after for quite some time now.
And the point is...?
Re:Human? (Score:2, Insightful)
Re:Human? (Score:2, Insightful)
A lot of the threads here are confusing DRM and watermarking. Anything with DRM is just security through obscurity. DRM schemes will invariably be broken, as the players have the secret key.
With watermarking, however, the player does not have the secret key.
This type of watermarking is the only viable long term solution, and one that I think will eventually be quite universal, and accepted. And yes, it could (and should!) be open sourced. The algorithm could be completely open - with just the "key" being kept secret.
Think about it, you need to hide what - let's conservatively say 512 bits - 64 bytes - into files that are normally multi-megabytes in length? I have no experience in this area, but off the top of my head I can think of 3-4 ways of easily doing this, with redundancy. This is an arms race which the studios can win. They can't with DRM.
And for Joe Sixpack - he's bought some mp3 online - they contain some bit of hidden watermark in the file that indicated "Joe Sixpack bought this disk". He never knows this nor cares - he can download the mp3 to his iPod. Save it to a CD to play in the car, etc. Why should he even bother with any stripper program on the net? He has no incentive. Most of the reasons for anti-DRM programs on the net was to allow LEGAL users to listen to their LEGALLY purchased music, which for whatever reason DRM had broken.
But, when said mp3 file starts showing up all over the net then the studios has some evidence that says Joe Sixpack is illegally sharing files.
And to be honest, this is ok with me. The studios aren't going to go after kids sharing files with friends (well, at least when they final understand that it's isn't working, and hurting business). They will (and should) go after major pirates on the net, and this is a viable tool they could use.