Waraxe IT Security Portal

sherrie · Beginner

Hi,

is it possible for a site to 'digitally sign' a file in such a way that it collects data from each computer that downloads it, and if it is file shared, the site owner can look at the file and see everyone who has handled that particular copy of the file?

The site that claims to have done this, is using this excuse to delete accounts belonging to kids, and not refunding their money, claiming they were tracked 'file sharing' by this method.

The files dont belong to the site owner, who stole them and illegally charges for them, which is why these files are being shared through legal sites.

if this type of tracking is possible, where would we go about finding the code on the file?

here is an example file that is supposed to carry this secret signature:

http://www.savefile.com/files/698012 - (this is not a link to the theft site nor the filesharing site)

people much smarter than me have checked this file and found no code, could they be missing something?

I've done a lot of reading on the subject at wiki, but I'm still confused. I know something called a digital signature exists, although I cant find it on the example files. all my reading still hasnt explained if its possible for the signature itself to actually collect information, and store it from those that download it, for example, so that the info can be retrieved if the signature owner were to redownload it from another source and find out the one person who downloaded shared it, out of 100's of downloaders who didnt.

all I can find on wiki is instances where a file can be marked with a signature, that does not gather more info as it's tranfered from person to person.

anyone care to help advise a noob?... please?

Chb · Valuable expert

A digital signature is just a proof that a file has not been edited or changed in any way. It is neither a program nor a code which can collect specific information.
If they collect information in any way, it was obviously not the digital signature...

http://en.wikipedia.org/wiki/Digital_Signature
http://en.wikipedia.org/wiki/Pretty_Good_Privacy#Digital_signatures