this post was submitted on 23 Feb 2025
859 points (98.8% liked)

Comic Strips

14172 readers
3026 users here now

Comic Strips is a community for those who love comic stories.

The rules are simple:

Web of links

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] owl@infosec.pub 7 points 1 day ago* (last edited 10 hours ago) (3 children)

Here is my idea: Everyone makes a private key. When they buy a song they receive the file and a digital signature by the label saying they sold it to your ~~private~~public key. When you are caught with a bunch of songs, you have to prove ownership using your key. Tadaa provable ownership, no blockchain, You loose the file, but still have the signature? You can download it again and all is good.

EDIT: Of course, they would sign the public key, sorry.

[–] Irelephant@lemm.ee 1 points 22 hours ago (1 children)
[–] owl@infosec.pub 2 points 10 hours ago

I don't think so. There nothing non fungible in my idea and nfts require a blockchain.

[–] bandwidthcrisis@lemmy.world 1 points 1 day ago (1 children)

A digital signature from the label would be created with their private key.

What would they be signing? Your public key plus the ID of the song? They can't sign your private key, it's private.

What stops you sharing your private key and a song with a friend. Then when either of you need to provide proof, you can both show that you have the private key that matches the signed file?

[–] owl@infosec.pub 2 points 10 hours ago* (last edited 10 hours ago)

Well they would sign my public key plus ID of the song. I can prove, it is my public key and everyone can verify the song belongs to me.

You are right, to ensure noone can "share login" so to say, it needs to be tied to you personally. That would deny privacy sadly.

EDIT: Didn't notice I wrote the wrong thing, thanks for notifying me.

[–] Allero@lemmy.today 3 points 1 day ago (2 children)

But what if you still have file, but lose the signature?

[–] owl@infosec.pub 2 points 10 hours ago

In this construct the key is the thing, that signifies the owner. If it's lost, there is no help. Unless the key is tied to you and an authority can vouch for you.

[–] bandwidthcrisis@lemmy.world 1 points 1 day ago (1 children)

Well if the record label was still around they could make ownership details public, or let you download the signed file again.

[–] Allero@lemmy.today 2 points 1 day ago

How would they know the copy legally belongs to you if you lose the key? Would they require some form of ID on top of that?