Privatunes claims to delete your personally identifying information from iTunes Plus files. Privatunes 0.9 overwrites the user's name and address. or isn't it so ?
Aside from the name and email address, there are other fields that Apple, or a litigant that subpoenas Apple, could use to identify the purchasers of iTunes Plus files, even if they've been run through Privatunes 0.9.
There are two fairly large fields, marked sign and chtb, that are unique to each copy of a given track. There are also several other places where copies of the same song vary by three or four bytes (they can be readily observed with a program like vbindiff).
It should be assumed that a file is potentially identifying unless all of these fields have been overwritten.Lastly, Privatunes 0.9 just overwrites the name and email address using ASCII spaces (0x20). This means that the lengthof these two fields can still be seen after the file has been modified. For complete anonymization, these lengths should be made unreadable.
Still, Privatunes gives 5 rock solid reasons to erase personal data from legally acquired iTunes Plus track:
Am I still a child who needs his pencilcase and schoolbag tagged with my name?
I bought the damn tune, but someday I may want to sell it (hey, how is it more stupid that selling old CDs ?).
I just have a thing for privacy. Is it dirty?
How the heck do I know it's not gonna be shared on P2P networks by my 6 year old step sister???
I thought good customer-seller relationship ment something like... how do they say, "trust' ?
