There is a much more complete publication here->
http://opennap.sourceforge.net/napster.txt
david.weekly.org was not the first to publish the protocol, and said that he
was not the first and or best in a post on slashdot. david has a very good
presentation of it and would be a good reference, but a more complete
version is available above.
-Chris
-----Original Message-----
From: David U. [mailto:davidu_at_ELECTRICITI.COM]
Sent: Monday, February 07, 2000 7:17 PM
To: VULN-DEV_at_SECURITYFOCUS.COM
Subject: Re: how to transfer files on napster
Blue Boar wrote:
> Jordan Ritter wrote:
> >
> > On Sat, 5 Feb 2000, Blue Boar wrote:
> >
> > # Depends on whether you were trying to keep people solely from giving
> > # access to other files on accident, or if you were trying to keep
> > # people from trading other types of warez intentionally.
> >
> > I don't think the intention is relevant. This isn't a "security
concern";
> > there is no risk to guard against.
> >
>
> Agreed. I just let through the last few posts surrounding "tricking"
> Napster. If folks want to continue poking at Napster, you should look
> for some real bugs. I think the protocol was published recently, no?
> That would be a good place to start.
>
> BB
The protocol was published:
Protocol: http://david.weekly.org/code/napster.php3
Story: somewhere on mp3.com/news
-davidu
Received on Feb 09 2000