c. staley wrote:
So you are though you are hell-bent on finding some way to bypass the digital protection/identification in the track that you have purchased, please knock yourself out.
This accusation is completely unfounded and sensationalist. All I said was "Time for some digital forensics.....". My purpose for that is not to circumvent the watermarking, but to see if it exists at all *and* to see if YOU are telling the truth.
Let’s get to it…..
While it is feasible that Red Peters, Oglio (the company that processes the purchase), or whoever else is involved with the creation of the tracks has implemented a watermarking system, I find it very difficult to believe this to be true for just 21 karaoke tracks that aren't really all that popular compared to the rest of the karaoke world. If it were an easy thing to implement, ALL of the karaoke companies would be doing it and we would have heard about it.
c. staley wrote:
Make sure that you come back here and tell everyone in the world what you discovered about the watermarking. And yes, it is a "pretty sophisticated process to implement."
And here are the results.....
I bought the same track -
RedPeters-HolyShitItsChristmas-MXP-119.ZIP - using two different emails, two different names, two different PayPal accounts.
The emails are valid. The names are valid. The PayPal accounts are both valid, and both mine. (Something Chip should be able to verify)
Interestingly, I received unique payment receipts (one at each email address used) from Oglio Entertainment. However, I only received a single purchase receipt from the Red Peters site, to only one of the email addresses provided, with only a single download link. I just tried using the download link and recieved this message -
"This download is no longer valid, Please contact the site administrator for more information."So, how am I supposed to re-download in the future if I lose the file?Fortunately, at the time of purchase, a download link is provided in the web browser. Which is how I actually downloaded the files.
I downloaded each zip file to different directories to ensure no cross pollination.
The downloads were ~4 mins apart according to file stamps on the ZIP files.
I extracted each file to its own directory.
The .CDG files for both have identical Modified dates – 11/18/2011 at 8:33am which
indicates they are the exact same file and have not been modified since that date.
The .MP3 files for both also have identical Modified dates – 10/19/2015 at 4:14pm which were modified about the time I purchased. However, since both have the same Modified date and time,
this indicates they are the same file.My Initial Conclusion – The MP3 might be watermarked, but not on a per sale basis and not uniquely traceable to the purchaser. This amounts to not watermarking at all if it is the same watermark for multiple purchases and proves to be completely useless.
I then used 2 different file comparison utilities. They look at binary/hex differences in files and display the results in an easy to read format.
ExamDiff – Reported all files as identical.
However, it is a very simplistic file comparison utility and intended more for looking at text based files. So I used another app to verify.
BeyondCompare – Reported all files as identical
This utility provides much more detail and shows differences at a Hex and a Binary level (you can’t get any deeper than binary unless you go atomic and that would be on the storage media itself, not within the file). All files are binary identical.
BeyondCompare has the added feature of specifically comparing MP3 files. It indicated both are identical as well.
My Secondary Conclusion – All of the files are identical. They may be watermarked, but they are not uniquely traceable to the purchaser. I wasn’t satisfied though……
Since I did all of this from the same computer, I wanted to validate my findings by using different PC’s. I did this because there are methods to uniquely identify hardware via the web browser which could in turn be used to generate a watermark tied to a device. Of course this doesn’t do the seller much good since the MP3+G is portable and because hardware in a device can change or simply be transferred to someone else, thus breaking the tracking chain.
I also used the same Internet connection and thus the same IP. While that could also be used for identification, it suffers from a similar issue as the hardware check above. IP addresses are dynamic for most consumers and subject to change. But just to make sure, I decided to use 2 different PC’s on two different IP addresses for test #2.
For this test I appropriately used “Blow Me” as my test track.Machine #1 – Used my mobile phone as a hotspot.
Machine #2 – Used my home Internet connection
Machine #3 – Used my mobile hot spot (not the phone above and also with a different carrier)
This time I waited about 25 minutes between downloads 1 and 2 and performed download #3 about 1.5 hours later.
I performed the same tests.
Same results - Both utilities report all files as being identical.(Notably, I received Oglio purchase receipts at each email address, and again only one Receipt email from the Red Peters site for 3 purchases and again, the download link does not work. If you choose to buy tracks here, make sure you download from the web page link immediately to a safe place and back up since you won’t be able to re-download again after you close your browser or go to another page)My final conclusion and one that was made with irrefutable proof is that the files are identicalIn my previous post I said “Chip Lied”. That isn’t entirely fair.
c. staley wrote:
His tracks are watermarked..... both in the cdg and the mp3 file... thank you very much.
I can’t state that the tracks aren’t watermarked at all, but I can state that multiple downloads of the exact same track are identical and thus any included watermarking is also identical. This renders the watermarking useless for tracking to a purchaser or an account. Those so inclined to pirating the tracks don’t appear to have anything to fear about being caught with a track purchased by someone else because there is no way to prove it.
Chip’s intent with his watermarking claim is that it is being used as a means of tracking individual purposes and perhaps as a deterrent to piracy. Neither is true since it is easily proven that multiple purchases of the same tracks are identical.
But I am going to stick with "Chip Lied" because I believe we all understand where he was going with his statement.
So Red Peters is in the same boat as all other karaoke companies. They know how many they sold, but they cannot trace those files to an account, PC, email address, or even a person.
Besides, *IF* they were watermarking, they are somewhat obligated to tell their customers. Especially since they don't seem to allow you to re-download. A multi-rigger who purchases 2 copies for two systems may inadvertently delete one of those. Since he can't re-download or just out of simplicity, they would likely just copy from one system another to get their second copy back and make use of what they paid for. This would break unique watermarking as well.
Finally.....
c. staley wrote:
I'll have to check the sales records to see if you have purchased more than a single track – for your multiple systems.
Do you really want someone with an axe to grind, and a litigious history, knowing your personal information?
It should also be noted that there is no EULA or TOS posted anywhere on the site. Neither is included with the purchase receipt email or download link email. Huge oversight and provides a gaping loophole for a single purchase and use on multiple systems *OR* simply giving the track away *OR* pretty much doing whatever you want with it since there don't seem to be any restrictions at all.
Seems to me that without any kind of agreement in place, one can do whatever they want with the tracks after they obtain them.