Feeds

Morpheus fesses up to user lockout security breach

Exchanges insults with former ally KaZaA.com

  • alert
  • submit to reddit

Intelligent flash storage arrays

Morpheus has re-instated its file swapping service after ditching support for the P2P stack supplied by developer FastTrack and embracing the Gnutella protocol.

Last week, users unexpectedly found themselves locked out of the MusicCity Morpheus network. The organisation blamed incompatibilities between Morpheus and a fresh release of software provided by FastTrack software, the KaZaA Media Desktop v1.5.

This was not the entire story:

In launching the Gnutella-friendly Morpheus Preview Edition, StreamCast Networks/Morpheus chief executive Steve Griffin admits its servers were hit by a massive Denial of Service attack last week.

"It appears that the attacks included an encrypted message being repeatedly sent directly to your computers that changed registry settings in your computer," a statement by Griffin to users on the accelerated availability of Morpheus Preview Edition states.

"Later, it appears our ad servers were attacked resulting in messages being sent to other sites without our knowledge, which threatened our most basic revenue model."

Postings to the BugTraq security mailing list two weeks ago documented a denial of service exploit on PCs running older versions of the FastTrack P2P stack (prior to KaZaA 1.5), which was used by KaZaA.com and Grokster as well as MusicCity's Morpheus system. Confusingly, this had nothing to do with encrypted messages and referred instead to exhausting the memory available on a client by creating multiple pop-up windows.

Neither MusicCity Morpheus nor Sharman Networks Services, the firm behind KaZaA.com, offered any comment on this pop-up Window DoS problem when we quizzed them about it last week, preferring instead to issue statements on their rift.

This tiff has escalated in recent days with MusicCity describing FastTrack-Kazaa software as a security risk (or a vector for spyware). KaZaa has hit back with a Morpheus migration tool.

Entertainment industry execs - who've been trying to shut both services through the courts - should be pleased with the latest developments. ®

Related stories

Morpheus goes to sleep - users locked out
Morpheus application is 'safe'
KaZaA.com 'evaluates' Dutch court ban
Ala-KaZaA-m!
KaZaA ordered to cease infringing copyright
Napster to ask court to reaffirm Appeal Court ruling
Get your filthy hands off my CDs
RIAA targets post-Napster MP3 sharers
Popular file-share utilities contain Trojans

Intelligent flash storage arrays

More from The Register

next story
Bladerunner sequel might actually be good. Harrison Ford is in it
Go ahead, you're all clear, kid... Sorry, wrong film
Euro Parliament VOTES to BREAK UP GOOGLE. Er, OK then
It CANNA do it, captain.They DON'T have the POWER!
Musicians sue UK.gov over 'zero pay' copyright fix
Everyone else in Europe compensates us - why can't you?
I'll be back (and forward): Hollywood's time travel tribulations
Quick, call the Time Cops to sort out this paradox!
Megaupload overlord Kim Dotcom: The US HAS RADICALISED ME!
Now my lawyers have bailed 'cos I'm 'OFFICIALLY' BROKE
Forget Hillary, HP's ex CARLY FIORINA 'wants to be next US Prez'
Former CEO has political ambitions again, according to Washington DC sources
prev story

Whitepapers

10 ways wire data helps conquer IT complexity
IT teams can automatically detect problems across the IT environment, spot data theft, select unique pieces of transaction payloads to send to a data source, and more.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.