[24391] in bugtraq
Re: Why is Microsoft watching us watch DVD movies?
daemon@ATHENA.MIT.EDU (Konrad Rieck)
Sat Feb 23 09:01:28 2002
Date: Fri, 22 Feb 2002 16:26:50 +0100
From: Konrad Rieck <kr@roqe.org>
To: bugtraq@securityfocus.com
Message-ID: <20020222152650.GA2068@roqe.org>
Mail-Followup-To: Konrad Rieck <kr@roqe.org>,
bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200202211042.g1LAgDR18727@hugo10.ka.punkt.de>
On Thu, Feb 21, 2002 at 11:42:13AM +0100, Patrick M. Hausen wrote:
> > and a cookie which uniquely identifies a particular WMP player. With
> > this two pieces of information Microsoft can track what DVD movies are
> > being watched on a particular computer.
>
> _This_ on the other hand is an unfriendly attack on anyones privacy.
> Does someone know if CDDB does similar things?
The Compact Disc Database (CDDB) protocol is used to query the database at
cddb.com (http://www.gracenote.com) for information on audio tracks, but it
is software independent and several different players and libraries make use
of CDDB.
A query includes the following components related to privacy
hostname
login
libname # Name of the player or library
libver # Version of the player or library
cddbmail # cddb-test@submit.cddb.com
See the perl package CDDB-1.08 for more information at
http://www.perl.com/CPAN-local/authors/id/R/RC/RCAPUTO/CDDB
In my opinion the above information are not sufficient to generate profiles
about individuals, although they allow the generation of general statistics.
But this is rather normal for a database service. ;)
Regards,
Konrad
--
Konrad Rieck <kr@roqe.org> -------------- http://www.inf.fu-berlin.de/~rieck
# Roqefellaz, http://www.roqe.org - PGP Key, http://www.roqe.org/keys/kr.pub
# ----------- Fingerprint 5803 E58E D1BF 9A29 AFCA 51B3 A725 EA18 ABA7 A6A3