{"id":471,"date":"2011-06-10T21:35:30","date_gmt":"2011-06-11T03:35:30","guid":{"rendered":"http:\/\/invertedsky.net\/?p=471"},"modified":"2016-11-28T09:35:00","modified_gmt":"2016-11-28T15:35:00","slug":"record-company-required-data","status":"publish","type":"post","link":"https:\/\/invertedsky.net\/?p=471","title":{"rendered":"Record company required data"},"content":{"rendered":"

I was buying an MP3 album from Amazon the other evening, when I spotted a link to this statement:<\/p>\n

The record company that supplies this song or album requires all companies that sell its downloadable music to include identifiers with the downloads.\u00a0 Embedded in the metadata of each purchased MP3 from this record company are a random number Amazon assigns to your order, the Amazon store name, the purchase date and time, codes that identify the album and song (the UPC and ISRC), Amazon’s digital signature, and an identifier that can be used to determine whether the audio has been modified.\u00a0 In addition, Amazon inserts the first part of the email address associated with your Amazon.com account, so that you know these files are unique to you.<\/p><\/blockquote>\n

So after downloading the songs, I looked at the files with a binary viewer.\u00a0 At the beginning of the music file in a private portion of the ID3 tag is a small XML file with all of my purchase information:<\/p>\n

PRIV www.amazon.com
\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>
\n<uits:UITS xmlns:uits=\"http:\/\/www.udirector.net\/schemas\/2009\/uits\/1.1\" xmlns:xsi=\"http:\/\/www.w3.org\/2001\/XMLSchema-instance\">
\n<metadata>
\n<nonce>A2iypxZe\\<\/nonce><\/strong>
\n<Distributor>Amazon.com\\<\/Distributor>
\n<Time>2011-06-09T02:07:24Z\\<\/Time><\/strong>
\n<ProductID type=\"UPC\" completed=\"true\">00731451469626\\<\/ProductID>
\n<AssetID type=\"ISRC\">GBAAN9300103\\<\/AssetID>
\n<TID version=\"1\">we\/TZ6xKpBy5iS2Iarj3Qg9D3o2peqx5\\<\/TID><\/strong>
\n<UID version=\"1\">info\\<\/UID><\/strong>
\n<Media algorithm=\"SHA256\">e22c0ed224ca5cea4c4c205e8a2248197118093265042fa3de9f7c161396a93a\\<\/Media>
\n<\/metadata>
\n<signature algorithm=\"DSA2048\" canonicalization=\"none\" keyID=\"9b3a598acfcfea37b486aba46bdfb50c92b8f7fe\">
\nMCwCFAJisz2c1ks\/zGrrUePJGmS\/1KxgAhQW0+OrlLtzn2ULedD0uLw5Sowb7Q==
\n<\/signature>
\n<\/uits:UITS>
\n<\/code><\/p><\/blockquote>\n

To the untrained eye it looks unintelligible. The Time section contains the date and time of my purchase; the TID is the transaction number of the sale, which in Amazon’s database has my credit card info, address, etc.; the UID is the first part of the e-mail address I used (“info”).\u00a0 There is other uniquely identifiable in there, too.<\/p>\n

Since this information is required by the record cartel, it’s main purpose is to identify people who publicly share files.\u00a0 Should any of my files escape into the wild, I would be identified and arrested or sued by the cartel, even if I wasn’t intentionally sharing the files.<\/p>\n

What if I lost my MP3 player or it was stolen? What if my laptop was stolen?\u00a0 All of those music files would end up in someone else’s collection and possibly shared and I’d get blamed for it.\u00a0 I can think of a lot of scenarios where having MY information unwillingly embedded in MY files for the sake of making it easier to prosecute file sharers is not a good idea.<\/p>\n

I looked around for an utility that would strip this particular info and couldn’t find one.\u00a0 So I decided to write my own.\u00a0\u00a0 And I decided to make it remove iTunes stuff, too, since I don’t use it.<\/p>\n

It’s called “iDesiccate”.\u00a0 It runs on Windows and can be downloaded here<\/a> if you would like to use it.<\/p>\n

The program will clean your files in batch mode.\u00a0 You start by selecting the folder of the files you want checked.\u00a0 It will search any sub-folders.<\/p>\n

\"\"<\/a>A few notes on the options.\u00a0 If you want to remove Amazon info, check the PRIV and COMM boxes.\u00a0 If you want to remove iTunes info, check COMM and UFID.\u00a0 Checking COMM will remove all comments from your tags.\u00a0\u00a0 Right now it only works on mp3 files. I don’t have any Apple files (m4A?) to try it on.<\/p>\n

I’ve run over 2000 files through it as a test and there weren’t any problems.\u00a0 But I can’t guarantee that if you have a corrupted file that iDesiccate won’t corrupt it further.\u00a0 So back up your files first and run small batches through it.\u00a0 Let me know if you encounter a problem.<\/p>\n

\"\"<\/a>I’ve provided an option where you can run through your files first without making any changes.\u00a0 This will give you a preview of what it will do to the files.<\/p>\n

iDesiccate will remember your settings next time you use it.<\/p>\n

I hope this solftware tool is helpful.\u00a0 Writing it made me feel somewhat re-empowered.<\/p>\n

[5+ years later]<\/p>\n

The source code can be downloaded here<\/a>. As far as I am concerned, it’s public domain. It is written in C# for Microsoft Visual Studio 2005.<\/p>\n","protected":false},"excerpt":{"rendered":"

I was buying an MP3 album from Amazon the other evening, when I spotted a link to this statement: The record company that supplies this song or album requires all companies that sell its downloadable music to include identifiers with … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[80],"class_list":["post-471","post","type-post","status-publish","format-standard","hentry","category-technical","tag-desiccate"],"_links":{"self":[{"href":"https:\/\/invertedsky.net\/index.php?rest_route=\/wp\/v2\/posts\/471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/invertedsky.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/invertedsky.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/invertedsky.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/invertedsky.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=471"}],"version-history":[{"count":12,"href":"https:\/\/invertedsky.net\/index.php?rest_route=\/wp\/v2\/posts\/471\/revisions"}],"predecessor-version":[{"id":2096,"href":"https:\/\/invertedsky.net\/index.php?rest_route=\/wp\/v2\/posts\/471\/revisions\/2096"}],"wp:attachment":[{"href":"https:\/\/invertedsky.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/invertedsky.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/invertedsky.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}