Feeds

Siphoning MySpace tunes using Safari

MySpace leaves them free for the taking

Security for virtualized datacentres

When it comes to protecting digital content holders from the hordes of naughty file grabbers, you'll be hard pressed to find a more zealous partner than Apple. So we were surprised to learn that Apple's Safari browser makes it easy to download MP3 files hosted on MySpace that are supposed to be limited to streaming only.

MySpace programmers have taken pains to obfuscate the location of the MP3 file music artists embed into their MySpace profiles. Until now, pirates had to use programs like Ethereal or Burp to divine where a tune was stored. But thanks to a Safari feature called the Activity Window, that cumbersome process is no longer necessary.

We read Dave Shanley's writeup of the technique and were able to replicate the process, although with a few minor modifications.

At the moment, we're huge fans of the Dexateens, a Tuscaloosa, Alabama, quintet that plays a gritty, southern-fried psychedelia infused with punk. (So moved are we with their song "Makers Mound" from their most recent album that the sectors of our hard drive where that song is stored have been damn near ground to dust.)

So we were eager to see if we could use the technique to acquire "Lost and Found," a demo that we're pretty sure can't be acquired anywhere else. It took us a little while, but we got it. Here's how:

  • Safari will open that link, but it won't tell you very much without a little prompting. To do this, choose View Source from the view menu. You now have a window that contains lots and lots of links. Finding the link to the demo is as simple as searching for the string "mp3."

There are a few caveats. MySpace appears to behave differently depending on your IP address. For instance, if you're in California and put the last link into a browser, you're likely to get an error message indicating you are not authorized to access the file. We got around this by using the Unblock City web proxy.

We were also stymied by QuickTime, which popped up as soon as we were able to access the page. It presented us with a window pimping QuickTime Pro, which we were told is needed to actually download the file. Now, we know there's a way to change settings so QuickTime isn't invoked each time we click on an MP3 link, but we really, really wanted to download this demo. So we simply uninstalled QuickTime.

(We'd be indebted if someone would add a comment below reminding us how the hell to appoint some other player that doesn't try to punt pesky up-sell pop-ups.)

The lesson here is the same one we've heard over and over. Technology designed to limit what can be done with files distributed over the net to millions of people are at best a mere inconvenience. There's no putting the toothpaste back in the tube. Once you release something online, it's pretty much out there forever.

It's also worth noting that it's MySpace that has left the door open here. Safari is just an enabler that makes the hack easier than using a third-party app.

The insecurity doesn't seem to be lost on the Dexateens. The MP3 file containing their demo is encoded at a paltry 96 kbps. Any fan worth his salt is going to want a better sounding version of this song once it becomes available. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Ex-US Navy fighter pilot MIT prof: Drones beat humans - I should know
'Missy' Cummings on UAVs, smartcars and dying from boredom
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
The 'fun-nification' of computer education – good idea?
Compulsory code schools, luvvies love it, but what about Maths and Physics?
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
Sysadmin with EBOLA? Gartner's issued advice to debug your biz
Start hoarding cleaning supplies, analyst firm says, and assume your team will scatter
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.