Talk:Amazon Music/Archives/2015

International Use

Is there anywhere that mentions when Amazon may begin to sell MP3s to international users?--NeF (talk) 01:11, 14 April 2008 (UTC)

Well here's a very tenuous link [1] about the feature in the video game Grand Theft Auto IV which allows users to mark songs they like that they hear in the game and will then be sent a link to pay to download the song(s) from Amazon. It says that the service will be initially available to only the US which seems to imply that it will spread to other parts of the world. I don't really think this possibility should be added to the article until something solid is confirmed but perhaps a mention of the "Zit" service in GTA IV could be added?JimmyTV (talk) 12:27, 21 April 2008 (UTC)

Press Release - LwoodY2K (talk) 21:50, 6 June 2008 (UTC)

Requested info for article

Why have the major music labels allowed Amazon to sell DRM-free songs when they won't allow Apple to do the same? Also, after years of complaining about Apple's low price per song, why are the music labels allowing Amazon to sell for even less? --JHP (talk) 09:09, 3 December 2008 (UTC)

It might be because Apple is taking a higher premium for the tracks, as they are known to do for their hardware, but that is just me speculating Vman81 (talk) 18:50, 7 April 2009 (UTC)

Amazon MP3 Downloader is not secure

The Amazon MP3 Downloader file is not available as a secure download, as the following email attests....

Email conversation

{{{2}}}

and this makes it insecure, as the paper "Insecurities within automatic update systems" by ing. P. Ruissen and ing. R. Vloothuis makes clear to those for whom it's not immediately obvious.

It's odd that Amazon won't fix this. It's as simple as putting the md5 and/or SHA1 checksums on their website, which is available over https. Then security-conscious users would simply do this:

$ md5 AmazonMP3Downloader.dmg
MD5 (AmazonMP3Downloader.dmg) = 9e6e71dea15100eb7f5d659bc53aa81b
$ /usr/bin/openssl sha1 AmazonMP3Downloader.dmg
SHA1(AmazonMP3Downloader.dmg)= d48c4a09f7d773ff381957262ab0a1a514347c6e

and compare the results to the checksums Amazon had provided on their site. Even posting them here does a service, as any user not subject to a MITM attack should get the same checksums. Any edits to this page are logged and the page itself is available securely at https://secure.wikimedia.org/wikipedia/en/w/index.php?title=Talk:Amazon_MP3 .--Elvey (talk) 07:58, 7 December 2009 (UTC)

Can you find a reliable source for this, other than an email from customer support? It verges on WP:SYNTH and is certainly a primary source as-is. tedder (talk) 16:22, 7 December 2009 (UTC)

Yes. "Insecurities within automatic update systems" by ing. P. Ruissen and ing. R. Vloothuis and http://www.amazon.com/gp/dmusic/help/amd.html?ie=UTF8 ; google is your friend. --Elvey (talk) 07:31, 13 December 2009 (UTC)

That paper (which is a student research paper, not a peer-reviewed journal article) predates Amazon MP3 and doesn't mention Amazon at all. The help page you cited (three times!) also doesn't mention MD5 or SHA1 checksums. White 720 (talk) 18:55, 14 December 2009 (UTC)

That's the point I was trying to make- it's WP:SYNTH. tedder (talk) 22:17, 14 December 2009 (UTC)

Per WP:ABOUTSELF, the email was a reliable source for the (now dated) verifiable fact that "The Amazon MP3 Downloader file is not available as a secure download." The PC and Mac downloads are now signed, which ameliorates the security issue, so no need to put back the verifiable facts White 720 covered up regarding a security vulnerability. e.g. on Mac:

codesign -d --verbose=40 -vvvvv  /Volumes/Amazon\ MP3\ Downloader/Amazon\ MP3\ Installer.app/
Executable=/Volumes/Amazon MP3 Downloader/Amazon MP3 Installer.app/Contents/MacOS/Amazon MP3 Installer
Identifier=com.amazon.AmazonMP3Installer
Format=bundle with Mach-O universal (i386 ppc)
CodeDirectory v=20100 size=258 flags=0x0(none) hashes=6+3 location=embedded
Hash type=sha1 size=20
CDHash=73a314525830f4fd07cda2975db41da0605c5372
Signature size=8515
Authority=Developer ID Application: AMZN Mobile LLC
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=Dec 17, 2012 2:04:08 PM
Info.plist entries=20
Sealed Resources rules=4 files=140
Internal requirements count=1 size=192

--{{U|Elvey}} ^(t•c) 23:46, 1 July 2014 (UTC)

Availability

Amazon MP3 is also available in Austria. —Preceding unsigned comment added by 91.115.160.197 (talk) 12:31, 4 January 2010 (UTC)

Cloud Player

The Amazon MP3 Store now has a new feature called the Amazon Cloud Player / Amazon Cloud Drive, which should probably be mentioned in this article. I'm not sure to what extent, if any, this is related to their cloud computing services, Amazon Elastic Compute Cloud (EC2), and CloudFront. - dcljr (talk) 05:40, 29 March 2011 (UTC)

Since added to the article. -- Beland (talk) 05:26, 22 April 2012 (UTC)

Watermarks

As of April 2011 Amazon has changed their TOS and now some tracks do contain personally identifiable information. I don't have a source for this but if you look up eg "Born this Way" by lady gaga it notes it under "Record Company Required Metadata." This page should be updated to note this change. —Preceding unsigned comment added by 137.104.236.171 (talk) 18:08, 12 April 2011 (UTC)

Is this a watermark, or is the data appended to the file somehow? — Preceding unsigned comment added by 66.108.39.64 (talk) 13:13, 22 June 2011 (UTC)

I would like to see a more complete explanation of what underlying purpose and intention these "watermarks" or more specifically "Record Company Required Metadata" actually serve -- protection? anti-pirate? if so how? — Preceding unsigned comment added by Bob em (talk • contribs) 17:25, 27 November 2012 (UTC)

Generally, this data is stored as part of the audio track. It's outside hearing range, and stores data that's readable by computers that now it's there, and how it's stored. In the case of Amazon, I believe they'll store things like the record company, the fact that it was downloaded from Amazon, and sometimes the user who downloaded it. If you then, say, put this music on a torrent site, the record company can read this watermark data, find out who bought it from Amazon, and sue you. Basically, it serves as an anti-piracy measure. If they find their music somewhere it shouldn't be, then they can find out who's responsible for putting it there. drewmunn (talk) 17:56, 27 November 2012 (UTC)

Branding changed to Amazon Music

"Amazon Music is a free service available on Android tablets and smartphones, iPad, iPhone, iPod Touch, Kindle Fire, PC and Mac. The Amazon Music apps allow you to stream or download Amazon Music purchases including AutoRip CDs and vinyl on up to 10 devices." [2]

The part of Amazon.com that was Amazon MP3 is how just called "Digital Music" instead of Amazon MP3. The Twitter account has been retitled "Amazon Music". The mobile apps have been renamed "Amazon Music with Prime Music". Looking for sources. --Pmsyyz (talk) 15:21, 20 June 2014 (UTC)