I'm pretty sure they use audio fingerprinting (Gracenote MusicID has been cited) but using metadata with track lengths would probably suffice most of the time w

I'm pretty sure they use audio fingerprinting (Gracenote MusicID has been cited) but using metadata with track lengths would probably suffice most of the time without too much piracy risk.