{"id":54597,"date":"2021-02-13T09:02:16","date_gmt":"2021-02-13T09:02:16","guid":{"rendered":"https:\/\/www.cryptocabaret.com\/?p=54597"},"modified":"2021-02-13T09:02:16","modified_gmt":"2021-02-13T09:02:16","slug":"deezer-targets-pirate-apps-maliciously-retrieving-publishing-encryption-keys","status":"publish","type":"post","link":"https:\/\/www.cryptocabaret.com\/?p=54597","title":{"rendered":"Deezer Targets Pirate Apps \u201cMaliciously\u201d Retrieving &amp; Publishing Encryption Keys"},"content":{"rendered":"<p><a href=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2021\/02\/deezerlogo.png\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2021\/02\/deezerlogo.png\" alt=\"Deezer\" width=\"277\" height=\"181\" class=\"alignright size-full wp-image-149074\"><\/a>In common with all music streaming services, French streaming giant Deezer played an important role in the fight against file-sharing and other forms of music piracy.<\/p>\n<p>Millions of former pirates have left the high seas to join Deezer and rivals such as Spotify but for the past several years, Deezer has been trying to mitigate piracy of a different kind. With the assistance of third-party tools, it\u2019s possible to download high-quality tracks from Deezer with minimal effort, without paying a penny.<\/p>\n<h2>Deezer\u2019s Long History of Takedowns<\/h2>\n<p>Over the past five years, Deezer has targeted these pieces of software with DMCA takedown notices. Many have been filed against Github, requesting that the development platform removes tools such as <a href=\"https:\/\/torrentfreak.com\/deezer-tries-to-shut-down-hacked-pirate-versions-171223\/\">Deezloader<\/a> and <a href=\"https:\/\/torrentfreak.com\/deezer-tries-to-remove-pirate-downloading-tool-but-under-what-law-190202\/\">several<\/a> <a href=\"https:\/\/torrentfreak.com\/deezer-piles-pressure-on-pirates-deezloader-reborn-throws-in-the-towel-180315\/\">successors<\/a>. <\/p>\n<p>The company has mostly stuck to the same notice format, stating that third-party apps use \u201cillegal methods\u201d to download music. However, in a new notice filed against Github this week, the company goes into much more detail.<\/p>\n<h2>\u201cMalicious\u201d Tools Defeat Deezer\u2019s Encryption<\/h2>\n<p>In common with earlier notices, Deezer highlights that downloading tracks from its service outside user licensing terms is forbidden. This time Deezer emphasizes that it has put in place \u201cstrong Digital Right Management tools\u201d to protect musical content alongside \u201cextremely high level encryption\u201d to protect supporting systems.<\/p>\n<p>According to the notice, the targeted tools (which include Deezloader, Deemix, Deezloader Reborn, Deezloader Remix, SMLoader and Deezer Grabber) circumvent Deezer\u2019s systems to download copyrighted content and elements of its service. Specifically, the apps are illegally retrieving and then publishing Deezer\u2019s secret encryption keys on Github.<\/p>\n<p>\u201cWe have discovered that the following links make available Github repositories created to make available softwares which enable users to download the Deezer Content without any authorization,\u201d the notice reads. <\/p>\n<p>\u201cTo do so, these repositories are sharing the private encryption keys retrieved maliciously to bypass Deezer\u2019s security measures to unlawfully download its music catalogue, directly from Deezer\u2019s servers in total violation of our rights and those of our music licensors (phonographic producers, performing artists, songwriters and composers).\u201d<\/p>\n<p>At this point, Deezer drops in an important phrase that has become increasingly topical in recent times in respect of the DMCA\u2019s anti-circumvention provisions.<\/p>\n<p>\u201cBy creating and developing these projects, the developers have knowingly procured or offered to others, without our authorization, a mean especially dedicated to the circumvention of our effective technological measures, in order to allow unauthorized persons to directly download our phonograms and others producers\u2019 phonograms out of our servers,\u201d the notice adds.<\/p>\n<h2>Github Complies With All Takedown Requests<\/h2>\n<p>Github responded to the <a href=\"https:\/\/github.com\/github\/dmca\/blob\/master\/2021\/02\/2021-02-10-deezer.md\">complaint<\/a> by removing every repository and link listed in Deezer\u2019s DMCA notice. While this isn\u2019t a surprise, the platform\u2019s actions stand in contrast to those taken in response to similar takedown notices filed by the RIAA against Youtube-dl, the well-known software tool that allows people to download content from YouTube.<\/p>\n<p>In that case, Github reversed a decision to take down Youtube-dl and put <a href=\"https:\/\/torrentfreak.com\/github-reinstates-youtube-dl-and-puts-1m-in-takedown-defense-fund-201116\/\">$1 million into a fund<\/a> to defend against wrongful takedowns.<\/p>\n<p>The big difference here is that while there seem to be grounds for arguing that youtube-dl doesn\u2019t circumvent a technical protection measure (TPM), the same cannot be argued for any of the projects that allow downloading from Deezer. They tend to use Deezer\u2019s publicly available API but also exploit a flaw in Deezer\u2019s encryption.<\/p>\n<p>In the past, developers have suggested it\u2019s Deezer\u2019s fault for not fixing the problem but as far as the law goes, having an encryption system that can be easily bypassed doesn\u2019t negate its standing as an \u201ceffective technological measure\u201d. As a result, it is extremely unlikely that Github will reconsider the takedowns on any grounds.<\/p>\n<p>From: <a href=\"https:\/\/torrentfreak.com\/\">TF<\/a>, for the latest news on copyright battles, piracy and more.<\/p>\n<p class=\"wpematico_credit\"><small>Powered by <a href=\"http:\/\/www.wpematico.com\" target=\"_blank\" rel=\"noopener\">WPeMatico<\/a><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In common with all music streaming services, French streaming giant Deezer played an important role in the fight against file-sharing and other forms of music piracy. Millions of former pirates have left the high seas to join Deezer and rivals such as Spotify but for the past several years, Deezer has been trying to mitigate [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":54598,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[308],"tags":[],"class_list":["post-54597","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-torrent"],"_links":{"self":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/54597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=54597"}],"version-history":[{"count":0,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/54597\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/media\/54598"}],"wp:attachment":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=54597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=54597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=54597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}