MPAA Requests Immunity to Commit Cyber-Crimes
The news has been buzzing around for the last couple of days that Representative Berman, whose palm has been crossed with silver by the entertainment industry, would introduce a bill permitting copyright holders to hack or DoS people allegedly distributing their works without permission. Well, the bill has been introduced - read it and weep. Although the bill wouldn't allow copyright owners to alter or delete files on your machine, they would be allowed to DoS you in essentially any other way. Let me restate that: the MPAA and RIAA are asking that they be allowed to perform what would otherwise be federal and state criminal acts and civil torts, and you will have essentially no remedy against them under any laws of the United States.
If it applies only to big business (RIAA, MPAA, BSA), and not to joe sixpack, it's unconstitutional under the Equal Protection clause of the 14th Amendment.
Oh, and this post is Copyright (c) 2002, by me, "sconeu". I reserve the right to search any and all computers for unauthorized reproductions of this post.
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
The Register is actually looking forward to this becoming law!
None are more hopelessly enslaved than those who falsely believe they are free. Johann Wolfgang von Goethe.
As of a few days ago if citizen do these same things they can be considered terrorists and subject to a maximum sentance of life in prison. Now who again is being helped by our lawmakers now?
jello.
aka aron.
I wonder at what point the revolt will happen. Something tells me it will be when it's far too late, and anybody trying to be proactive about it will be called a terrorist or something.
When will the American people wake up? It's so blatantly obvious to the rest of the world that your corporations are out of control. When are you going to finally realize it's time to put a leash on them?
The Canadian Private Copying Collective wants more of your money.
On top of raising existing levys, they want to tax any media that can store copyrighted material. This includes Hard drives and Flash media. While the MPAA is crashing your computer in the US the CPCC is robing you blind every time you buy recordable media.. And how much are the artists getting??? According to reports, after 2 years of the levy being collected NOTHING has been paied to ANY artist.. Theroy has it they are spending all the money lobying for higher levys.
http://www.sycorp.com/levy/index.htm
EA David Gardner -"... but the consumers have proven that actually what they want is fun."
MPAA - 'Can we have immunity from laws designed to protect the computer infrastructure and commit damaging acts against networks and computers that don't belong to us?' - Pending
John Ashcroft and Federal LEO's - 'Can we have immunity from the fourth ammendment and commit invasion of privacy against americans?' - Denied up until 9-11, then granted, despite the fact that they already had information about the WTC attacks. Permanent acception is pending the Patriot act's expiration date.
George Bush and Oil Industry CEOs - 'Can we have immunity from laws protecting the environment and virgin wilderness in order to increase our profits and control of the energy industry by drilling in Alaskan wilderness and completely ignoring global warming and any other environmental concerns that are too expensive for us to worry about?' - Pending.
What's next?
Preists - 'Can we have immunity from laws protecting children from molestation and rape so we can get our jollies with 9 year olds?'
Corporate Executives - 'Can we have immunity from laws protecting our investors and the general public so that we can pad our pocketbooks and live lives of luxury?'
Police - 'Can we have immunity from laws protecting citezens from police brutality so that we can beat, maim or kill with impunity?'
The Rich - 'Can we have immunity from laws protecting people from slavery and oppression so that we can further entrench our selves in oligarchy and profit from the abuse of our fellow humans'?
The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
The MPAA would hire a couple of "consulting" companies to carry out these acts.
These consulting firms would attack and disable some script kiddies computer who is serving MP3s.
So, what does the script kiddie do? He and his bunch of script kiddies go and shut down the offending consulting firms internet connection(s) with a DoS that's about 100 times more massive (because they can use everyone elses poorly protected servers to do it). And that's just if they pick on a teenager in the US.
Say they try and shut down some actual knowledgable hacker in, say, Russia. Wait a second... why are the bank account numbers, credit card numbers, home address and telephone for the head of the MPAA up on MPAA.com? Weird.
My question is, how does this web site even stay up?
I'm sure the script kiddies internet provider will just be pleased as punch that the MPAA just hacked one of it's customers and possibly used a DoS attack to do it (there by degrading the quality of service for all their clients)
Sounds great to me. It'll work like a charm this new law (if passed).
And why does the MPAA sound like a police orginization to me?
From their website:
To battle the problem, in 2000, the MPA launched over 60,000 investigations into suspected pirate activities, and more than 18,000 raids against pirate operations in coordination with local authorities around the world.
The MPAA/MPA directs its worldwide anti-piracy activities from headquarters in Encino, California. Regional offices are also located in Brussels (Europe, Middle and Africa), Mexico (Latin America) Canada and Hong Kong (Asia/Pacific).
Uhmm... that scares me
Casual Games/Downloads
I sent off this Letter to the Editor to newspapers in Coble's 6th District in North Carolina (Greensboro, High Point, Burlington, Asheboro, Lexington) this morning, before the bill was officially introduced. Hopefully it'll get published in at least one of the papers:
######
To The Editor,
For years, Congress and law enforcement has been telling us about the dangers posed by computer hackers. They have warned computer users about how you should be on guard for the damage that hackers can do to your computer systems.
However, Rep. Howard Coble is preparing to submit a bill in Congress that would grant almost complete immunity to large music and movie companies to hack into your computers, if they have the suspicion that you might be sharing copyrighted files. No proof or involvement by law enforcement will be needed. And what's more, if they damage your computers in this vigilante action, you'll need to prove real damages of over $250 and get the permission of the US Attorney General to file suit against them.
What Rep. Coble is saying is that computer hacking is bad, unless you're a rich corporation with lots of money to provide in campaign donations. The hypocracy of such a bill is stunning. The voters of Congressional District 6 need to decide whether Rep. Coble is looking out for their interests, or Big Hollywood's.
You must be a troll (or a cartel lackey ... the hotmail account should give it away I suppose).
... they are preparing the public consciousness for exactly this event ... having the industry and government thugs come into our personal lives and, in a very personal way, tell us exactly what we can and cannot do.
A lot of people around here think there's no harm in hackers doing that to other people's computers, going so far to squeal when they get "ratted out" by others or end up in court for their actions.
Very few here thing that illegally cracking system security and breaking into computer systems is a "good thing." A fair number of people take exception to the absurd disparity between sentences and the severity of the crime, but few (if any) argue that engaging in this sort of behavior is in any way a positive act.
But when governments and large corporations can go around vandalizing and harming people legally, and the law makes it illegal to defend against such acts (by perhaps doing the same thing) for individuals, then, by any definition, we live under tyranny.
As uncool to say, and as extreme as it sounds, the digital sky is truly falling. Our freedom of expression is under wholesale and organized and concerted attack from both the media cartels and Microsoft, and the tame politicians they have in their pockets, and the reasonable sounding denials of these very stark facts don't make them any less true. We will either wake up and get involved politically and socially, educating our representatives and the lay public about these issues, or, just like the British Crown did with the printing press when it enacted the first iteration of copyright law, we will have the modern, digital equivelent of the printing press taken from us. In other words, our ability to speak and publish freely, and be heard, will be taken from us, and modern general purpose computers as we've come to know them will become a very restricted item.
Even Microsoft is publicly admitting that the end of open computing is at hand
If you are such a lackey, or so blinded by your own petty greed or agenda, that you cannot see this coming, then you will no doubt be getting exactly what you deserve. Unfortunately, the rest of us, who have the observational and congnative skills that exceed those of the common garden slug, will be taken down into the pit along with you.
The Future of Human Evolution: Autonomy
First, copyright holders were allowed to take you to civil court for theft of copyrighted material, which was all well and good. Then, the big guys realized that civil proceedings cost them money, so they paid for a law (DMCA) that would make copyright violations a criminal offense so the government would foot the bill. And now that they aren't getting the results they wanted from the government they want to legalize vigilante justice? I guess buying your politicians in bulk really pays off...
do not read this line twice.
Sure you could use the link above to write in electronically, and that's fine, but you should more or less expect that if you don't write a physical letter then you'll be ignored. It's not always competely true, but it's true enough. If you don't write your rep and this thing passes then you've pretty much forfieted your bitching rights.
Behold the Power of Cheese!
If the MPAA or RIAA decides they want to DDoS him for sharing their material, it's darn sure going to impact my EverQuest and Warcraft III connections (as well as whatever more "legitimate" uses I may be putting my bandwidth to).
Will non-infringers who suffer such collateral damage have any recourse against the companies or trade groups who are "protecting their rights"?
Hmm...no cancelled checks in my account made out to any Congressmen, so I somehow doubt it.
"Notwithstanding" means that the other statutes are preempted and literally will not withstand conflict with the present statute.
Notwithstanding
notwithstanding Pronunciation Key (ntwth-stndng, -wth-)
prep.
In spite of: The teams played on, notwithstanding the rain.
adv.
All the same; nevertheless: We proceeded, notwithstanding.
conj.
In spite of the fact that; although.
IN SPITE OF any other federal or state laws, they can do what they like.
Oh, and they can delete any file they want if it is "necessary" to prevent you from trading their copyrighted files.
Yes, it REALLY is that bad.
-- IANAEG - I am not an elder god.
Sure there is. If it passes I'll be blacklisting every RIAA and MPAA netblock I can find. I'd also nominat the for an RBL listing due to the DoSing attempts from their netspace and their disregard for abuse@ mailings. They can't DoS my customers if they can't get past my border router. If they still flood me as a business, I'll sue for damages. :-)
What this bill boils down to, is that a group wants a special privelege to defend itself against a crime that has technically not occurred. They're asking for the ability to act as an arm of the judicial system, wherein they can determine whether a crime has been committed and determine the proper remedy, and then become an agent of the executive, and actually dole out the punishment.
Not a whole lot of due process going on here.
GNUnet - Completely encrypted and completely anonymous file sharing. It's designed to be resistant to attack, let's see them go after that once it's up to a few million nodes. ;)
Lets just say that I have T-1 line to the Internet and Verio is providing that line. When a DOS attack is launched it could potentialy flood every router between my box and the intiator of the attack.
Okay by law they were given the right to DOS me but not the ISP which can still file criminal charges. So, it sound like they are still shit out of luck unless the law gives them a "get out of jail free card" for all acts commited during the execution of a plan to attack the offender. Wow, now if that were the case it would open up a huge new can of worms.
"Help me Obi-/.-Kenobi,your my only hope!" -$
Did the person who wrote the Slashdot editorialization for this story even read the bill?
You're new here, aren't you?
There is no reasonable defense against an idiot with an agenda
:wq
Everytime this appears we get a bunch of "we'll show them posters" threatening all kinds of interesting punishments. Forget it.
If/When the law passes each attempt to hack into their computers for any reason will be met with the recently passes "capital crime" of hacking punishment.
You are an individual. They are a corporation.
You are a terrorist. They are protecting the rights of American copyright holders.
You will get 5 - 25 years. They will get new releases on how good a job they are doing stopping these kids from stealing their products.
They donate large sums of money to congress. You are listed as a non-voting demographic. [Better than opposition party or extremist, you are a non-entity.]
I will be surprised if this makes the nightly news anywhere. They want this to be a non-story and will pay plenty to keep it that way. Any story that does arise will be spinning the "protecting America against copyright theft."
If you really want to do something, take five minutes, right now and FAX your representatives [You could try email. Are they any better at reading them today than last year?].
Be polite, be firm and be specific. DMCA got passed because many people expected someone else(our representatives) to see the lunacy in the approach. This just proves we can never underestimate the ability of smart people to do dumb things with the right incentive.
Here are the contacts:
Senate Locator
House of Representative Locator
Do it now
- (B) causes economic loss to any person
other than affected file traders; or
- (C) causes economic loss of more than $50.00 per impairment to the property of the affected file trader, other than economic loss involving computer files or data made available through a publicly accessible peer-to-peer file trading network that contain works in which the owner has an exclusive right granted under section 106;
This means that if they dos someone on my local cable segment then I can sue them if it impacts my bandwidth, Comcast can sue if it deprives their customers of service and/or uses their resources, and all the backbones and other service providers whose bandwidth is eaten up can call for reimbursement.The two downsides of this is that the bill is not limited to dos. It is pretty wide open in that they can do pretty much anything technologically which has the effect of "disabling, interfering with, blocking, diverting, or otherwise impairing the unauthorized distribution, display, performance, or reproduction" of their material. Which includes crashing or otherwise rendering inoperable network communications on the computer.
Not only that, but anyone who tries to face up to them needs very deep pockets to fight them - even if they caused more than $50 of damage they'll still have to prove it in court.
In other words, "Shoot now, ask questions later" and "You are guilty until proven innocent" should be stamped across this bill.
Translation: Fight the bill here and now. It'll be ten times more difficult and costly to remove it from law than it is to keep it from being placed there in the first place.
-Adam
I believe that the only moral response in such a case is to violate those laws. Screw the MPAA. Screw the RIAA. Screw Congress. It is time for freedom loving people to declare openly that they will not recognize copyrights held by the MPAA and RIAA.
Well, that is step one. Step two in a civil disobedience campaign would be to openly and publicly violate their copyright and fully accept the consequences of that act. You see, the point of civil disobedience is that you want to get arrested and charged under the unjust law, and you want to received the punishment mandated by that unjust law in the hopes of making the public at large aware of just how bad the law is.
Are you still down with that?
*** Where are we going? And what's with this handbasket?
Heh, good point.
Ya know, reading this further, since it's on the "file trader" (I love that term) to notice and complain about the action, any time you lose a file or "get hacked", you should send a letter all of the MPAA/RIAA folks asking for a report on what they removed and why (See 2A through 2C).
Since there's no way to know who actually did it, and there doesn't appear to be any reason to believe the DoJ would care to tell you, you'd have write all of them to figure it out. Wonderful law eh!
You ever see the movie "Brazil?" Not the horrible horked version, but the director's cut (Terry Gilliam.) If not, you're really missing something great. Anyway, at the beginning of the film there's a short scene where a national government official is being interviewed on television and the subject is his government's war on terrorism. Here's the dialog from a draft script, the movie has very minor differences:
...? ... in a free society information is the name of the game. You can't win the game if you're a man short. ... ... ... and a very merry Christmas to you all.
INTERVIEWER: Deputy minister, what do you believe is behind this recent increase in terrorist bombings?
HELPMANN: Bad sportsmanship. A ruthless minority of people seems to have forgotten certain good old fashioned virtues. They just can't stand seeing the other fellow win. If these people would just play the game, instead of standing on the touch line heckling -
INTERVIEWER: In fact, killing people -
HELPMANN: - In fact, killing people - they'd get a lot more out of life.
INTERVIEWER: Mr. Helpmann, what would you say to those critics who maintain that the Ministry Of Information has become too large and unwieldy
HELPMANN: David
INTERVIEWER: And the cost of it all, Deputy Minister? Seven percent of the gross national product
HELPMANN: I understand this concern on behalf of the tax-payers. People want value for money and a cost-effective service.
INTERVIEWER: Do you think that the government is winning the battle against terrorists?
HELPMANN: Oh yes. Our morale is much higher than theirs, we're fielding all their strokes, running a lot of them out, and pretty consistently knocking them for six. I'd say they're nearly out of the game.
INTERVIEWER: But the bombing campaign is now in its thirteenth year
HELPMANN: Beginner's luck.
INTERVIEWER: Thank you very much, Deputy Minister.
HELPMANN: Thank you, David
Everything in the Universe sucks: It's the law!
Talking about "getting them back" is pointless.
They will probably direct their DoS attacks against the internals of the P2P protocols, rather than the users machines. They will use disposable (and anonymous) nodes to do so--they may be unscrupulous, but they are not stupid.
Nonetheless, the proposed law is extremely prone to being abused.
What we need to do is start designing the next generation P2P systems that will be immune to things like legitimate-looking users posting bogus files, etc.
----------------
Here's what I can think of on the spot
1) Community-based systems (akin to slashdot) where some nodes have more "credibility" points.
Node "karma" would be based on
-Total Kbytes streamed out
-Moderation by other "trusted" nodes
The community aspect must not get in the way of reaching a "critical mass" of users, without which any P2P system is bound to fall.
2) Ability to randomly sample small segments of files on remote nodes in order to determine whether they are legit. This would stop them from uploading complete garbage, or legitimate-looking beginnings followed by garbage.
3) Distributed method of establishing trust. This is the tricky part. We could use public-key crypto in some fashion. Perhaps nodeID blacklists or whitelists could be distributed among the users, or uploaded to FreeNet. Before downloading a song from an unknown node, my machine would query 10-20 random nodes for blacklist info. This would make it a lot more difficult to set up random nodes hosting garbage.
5) Other heuristics to determine the trustworthiness of nodes and/or files.
7) Doing all of the above in a relatively speedy (i.e., not impractically slow such as gnuTella) and relatively anonymous/pseudonymous way.
-----------
Please reply (i.e., follow-up to the post) with any further ideas. Perhaps we can seed the minds of the developers who'll be coding the next generation of P2P software. Are there any ideas we can glean from eBay's trust management system?