Is Apple's iCloud Music Match a Possible Honeypot?
betweenthenumbers.net
betweenthenumbers.net
He also completely ignores the fact that MD5 is not considered to be collision-resistant anymore. The idea of using MD5 hashing as forsenic evidence is so wrong, it's scary.
Let's not forget that nobody gets strung up on possession of illegal MP3s - it's the distribution of them that the RIAA gets you on. You have to be caught in an infringing activity (downloading from an unauthorized source, or providing downloads without a license) to be dinged on copyright infringement. To the best of my knowledge, nobody's ever been nailed on possession of illegal MP3s without a transfer component, because it's neigh impossible to prove that the files aren't legally licensed, and the burden of proof lies with the accuser.