Qpass Study Reveals Major Security Hole in Many U.S. and European Websites

Jul 21, 2005 09:52 GMT  ·  By

A startling study conducted by Qpass of 100 leading U.S. and European digital content Websites revealed that more than one third of the sites are unsecured, allowing users to 'shoplift' music tracks and download them as free ringtones.

The extent of the problem in US may have already cost the mobile and music industries an estimated $40 million U.S. since the beginning of 2004, and a further $123 million U.S. by 2007, according to Qpass.

Qpass attributes this problem to the need for the mobile and music industries to enable users to preview music before they purchase it, an important part of the customer purchasing experience. Two thirds of web sites tested offered preview music files between 15 and 30 seconds, the perfect length to convert into a ringtone.

Preview content can be secured by using streaming, embedded pre-listening or the use of a DRM-protected file format. The study of digital rights vulnerabilities on mobile music web stores was conducted as part of the ongoing development of the Qpass Content Delivery Platform, which offers a comprehensive solution for securing mobile content.

The Websites tested included 42 mobile carrier portals and 58 online entertainment and music stores offering full track music downloads. Out of the sites tested, 40 percent of carrier sites and 31 percent of other portals such as online music stores and entertainment sites were unsecured. Ironically, some of the sites surveyed specialized in selling ringtones, which are inadvertently giving away their products for free due to the security hole.

The ringtone market currently accounts for between 6 to 10 per cent of music industry revenues worldwide according to Jupiter Research and Qpass, making this a significant revenue leakage problem for the industry. Qpass estimates that more than 20 percent of mobile users worldwide have downloaded content to their phone to date and this figure is expected to rise.