Microsoft bans employees from music swapping<br />10:07 Monday 29th July 2002<br />Joe Wilcox, CNET News.com <br /><br />Staff at Microsoft have been warned not to swap music or files over peer-to-peer networks because of 'significant' security concerns<br /><br />Microsoft warned its employees on Thursday night that no swapping of music or other files is to occur via its PCs or networks.<br /><br />In an email sent to the company's more than 50,000 employees, three senior Microsoft executives warned that peer-to-peer (P2P) networks used for sharing files raise "significant legal, public policy, and security concerns."<br /><br />[Advertisement]<br />[Get ZDNet in print. FREE! ZDNet week.]<br />Peer-to-peer networks are popular means for sharing MP3s and other files, typically in violation of the content owner's copyright.<br /><br />"The email kind of speaks for itself," said Microsoft spokesman Jon Murchison. "Given the proliferation of the P2P network sites, we thought it was a good time to reiterate a longstanding corporate policy to our employees."<br /><br />Microsoft distributed the email the same day that the House of Representatives introduced a bill that would allow copyright owners to legally hack into peer-to-peer networks. Last week, tech executives, including Microsoft chief executive Steve Ballmer, sent a letter to Hollywood studio chiefs expressing willingness to cooperate in the crackdown on piracy through file swapping.<br /><br />In their email to employees, the three Microsoft executives -- Will Poole, corporate vice president for the Windows Media division; Brad Smith, general counsel; and Rick Devenuti, chief information officer -- warned of the fine line the company walks with regard to peer-to-peer networks.<br /><br />"Microsoft is a leading innovator in the area of P2P technology," the executives wrote. "We also are a company that makes its living based largely on our intellectual property, just like music labels and movie studios. It is therefore incumbent upon all of us to ensure that our employees develop and use P2P technology appropriately and securely."<br /><br />They emphasised that the importance of "respecting and protecting IP (intellectual property) rights is particularly relevant now, in light of discussions in Congress the past few months regarding IP protection."<br /><br />That fits with what others have been saying on the matter, given the activitism of groups such as the Recording Industry Association of America.<br /><br />"I've been advising my clients to also ban music-sharing software in the workplace," said security consultant Richard Smith. "Companies are just sitting ducks for RIAA lawsuits."<br /><br />In the memo, the executives contrasted the peer-to-peer efforts of music-sharing distributors AudioGalaxy, Kazaa and Morpheus against the work Microsoft is doing with Groove Networks. On Monday, Groove said it would incorporate support for Microsoft's SharePoint Team Services technology into its product.<br /><br />"While there are legitimate uses for all of these and other P2P networks, using any P2P network to obtain or share copyrighted content such as music, movies or software is strictly against corporate policy," the executives warned.<br /><br />They emphasised that copying personal music CDs to a PC is acceptable -- "you just can't share them with other people, or download ones offered by others, using company PCs or networks."<br /><br />Microsoft also is concerned that some peer-to-peer networks create potential security problems for the company.<br /><br />"Running such programs on company PCs or through company servers substantially increases the risk that our network could be hacked, that viruses could be introduced into our network, and that internal corporate documents could inadvertently be shared with others outside the company," the executives wrote.<br /><br />To support their point, they referred to two CNET News.com stories regarding separate security problems raised by Kazaa: exposing personal files and unleashing a worm.<br /><br />The executives instructed employees to obtain permission before installing or running third-party peer-to-peer network software and warned that the company would occasionally monitor its internal network for file sharing activity.