Slashdot Mirror


Federal Judge Rules Against Reverse-engineering

zurab writes "A federal judge in Boston threw out a challenge to the DMCA brought by the ACLU for a Harvard Law School student. Ben Edelman decided to ask court's permission to reverse-engineer the Internet filtering software made by N2H2 in fears of being sued by the company. Of interest is a quote from the ruling: "there is no plausibly protected constitutional interest that Edelman can assert that outweighs N2H2's right to protect its copyrighted material from an invasive and destructive trespass." Full story on Yahoo."

35 of 477 comments (clear)

  1. my school uses that.. by Anonymous Coward · · Score: 5, Informative

    and its so freaking intrusive. it once banned slashdot for "vulgar language" (how often do you see that on /.?

    btw, fp!

    1. Re:my school uses that.. by VistaBoy · · Score: 4, Funny

      I never see any fucking vulgar language on Slashdot. Those cuntbags must just be fucking out of their fuck-ass mind.

      BTW, I actually am at a school that uses Bess, an N2H2 product. It banned Slashdot for being a "Message Board." I have a good mind to go there and give those networking bastards a piece of my mind.

    2. Re:my school uses that.. by EngMedic · · Score: 4, Interesting

      yeah. my old highschool uses bess... it was a pain in the ass. it banned the homepage of the comp sci department (hosted off campus on one of the teacher's personal servers) for being "a hate webpage" that also had kiddy porn and hacking tools. it would've been a pain, if i hadn't known the admin's username, and figured out that his passwords changed monthly, but were just the president's last names, starting from washington... last i checked, incidentally, Bess/N2H2 is under litigation for selling user browsing information in breach of their own privacy policy and contract.

      --
      filter: +3. Hey, look! all the trolls went away!
    3. Re:my school uses that.. by or_smth · · Score: 4, Informative

      Just a heads up for everyone:

      N2H2's Bess currently blocks an extremely large amount of sites, including google's image search (but not the main google site). It also seemingly blocks by a number of things, including ip address (I think it performs a reverse DNS lookup on every ip as it blocks the octal and hexidecimal ips of site as well) and string. What I mean by string is that you can get to the main Web Archive site (as a loophole), but you can't enter a blocked address there and try to recieve an archive of it. Same deal with google cache.

      Another thing is the shear rapidness of blocking. I started playing FlashFlashRevolution.com for about a week, and when I got back to school on monday it was blocked. I asked my Systems admin and he told me he didn't block me, so they must be monitoring bandwidth at some central station.

      The FlashFlash ban got me pissed off, so I found some open proxies at my house and manually searched out the internet options control panel file (InetCpl.cpl) to change my proxy settings. Sure enough, this worked. Of course, if you need a new proxy server absolutely every web-based proxy or open proxy list is banned (and you wouldn't believe the number of bans), so I had to VNC to my freebsd box at home to get a list. Sure enough, I can now play flash flash revolution during those boring high school comp science classes.

      If anyone has any other suggestions I'd love to hear them

    4. Re:my school uses that.. by JessLeah · · Score: 5, Interesting

      Wait, wait, WTF? Since when are/should "message boards" be banned from schools?! Isn't the whole point of school (supposedly) to facilitate intellectual conversations.. DISCUSSIONS, which of course is what said "message boards" are for?

      So these schools using Bess/etc. are basically saying "Go to msnbc.com / aol.com / cnn.com all you want, since they're nice big corporations, but don't discuss things amongst yourselves?" What is the justification given? Or is none at all given (as is typical nowadays)?

      I am confused.

      My good friend works at an office using WebSense (which both of us now call WebSenseless). It has, in the past, blocked her from accessing many perfectly legitimate sites, including my own site-- when I was trying to use my site to send her a technical document. It was very annoying.

      All these years, and censorware still hasn't gotten better? This is pathetic...

    5. Re:my school uses that.. by doorbot.com · · Score: 4, Informative

      Isn't the whole point of school (supposedly) to facilitate intellectual conversations.. DISCUSSIONS, which of course is what said "message boards" are for?

      No, primary and secondary schools are designed to shift responsibilities for children off of the parents' backs, so they have someone else to blame when their child doesn't turn out to be Superman and/or Wonderwoman.

    6. Re:my school uses that.. by NeoSkandranon · · Score: 5, Insightful

      You make one big assumption---that given the run of all the message boards on the internet, students will only go to the "good" ones---that is, the ones that promote discussion and whatnot.

      All I can say is, it must have been awhile since you were a student. The purpose of blocking message board sites is so kids dont dick around when they're supposed to be working, tying up what might be already scanty bandwith (my highschool had 1400 students with several labs and all teachers' computers on a 64k ISDN line.) doing things that are not at all school related.

      --
      If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
    7. Re:my school uses that.. by Anonymous Coward · · Score: 5, Insightful

      A couple years ago, I saw a reverse-engineered list of the keywords that Bess considered illegal. In addition to the standard seven unprintable words, there were many context-sensitive words like "breast". But the really disturbing find was "MacMillan" - a rival publishing company.

      OK, I'll admit some of the politically sensitive oversimplifications in their scientific textbooks were obscene, but not enough to ban them for.

      Tried to find the link again, but this is the closest I could come up with on short notice:
      http://danny.oz.au/freedom/censorware/ifi lter.html
      I know it's not an authoritave source, but this is slashdot.

    8. Re:my school uses that.. by orangesquid · · Score: 4, Insightful

      I think one of the main points of school is to lock kids up and keep them out of (most) trouble. But anyway...

      Banning reverse engineering?!?! What's NEXT?! I bet they're going to rule against literary analysis in English! Reading too far into something would endanger the author's critical intellectual property---if we knew *how* he (or she, of course) wrote what he wrote, there would be countless knock-offs and imitators! Oh wait, there already are..... so?

      Anyway.

      --
      --TheOrangeSquid Is it any wonder things seem so awry? We swim in a sea of confusion and don't have to think to survive
    9. Re:my school uses that.. by CustomFort · · Score: 4, Interesting

      The reason my school gives for blocking Discussion sites is the idea that when we surf the internet from school, we are representing the school. By allowing us to talk on forums and boards, they are afraid we may offend someone, and that would reflect poorly on the school.

      *Tongue in Cheek*

      The reality of Bess is is that it is unquestionable. Most of my teachers aren't willing to walk over to my computer and type in a password every minutes so that I can actually see the pictures of Mussolini's dead body. (We are covering WWI). The problem lies with Bess and other such filtering software in that its database is inaccurate and beyond reproach. Bess used to allow you to submit webpages that it blocked for reviews, it would even email me telling whether or not the site was allowed. I would usually get a response within 4 days, and they would usually agree with me, that the site shouldn't be blocked. Now, when you try to submit the page, there is no option to allow you to give them your email addy (I didn't use my private one of course), and they don't even allow you submit freepages. They are blocked by default. Without notification, they could never get around to checking the site, and you would never know which way it went unless the site was magically unblocked one day.

      I don't even get the point of having a filter at a High School. Very few people are stupid enough to be surfing Pr0n in the middle of library, so what are they afraid of? I dont't knw, maybe I'm just angry because they block /. and Penny Arcade, both of which I need to live.
      Just my two bits..

      P.S. This is my first post! Yay!

    10. Re:my school uses that.. by Minna+Kirai · · Score: 5, Insightful

      have the right to protect their copyrights.

      Reverse engineering is independent of copyright violation.

      To break a copyright, you make copies of the material.

      Reverse-engineering means you come to understand material already in your possesion.

      It does not damage copyright at all, except via circular reasoning.

  2. Holy crap the end is near by Zork+the+Almighty · · Score: 4, Insightful

    If this stands up, it will be a kick in the teeth to freedom. A free society depends on public disclosure and peer-review. It's sickening to see how so many laws are being aimed at those two targets these days.

    --

    In Soviet America the banks rob you!
    1. Re:Holy crap the end is near by the+gnat · · Score: 4, Insightful

      I would have said something different from the parent poster: scientific and technical progress depends on public disclosure and peer review. It also depends on the freedom to investigate a problem without interference from the government or companies (as long as no one gets hurt!).

    2. Re:Holy crap the end is near by nhavar · · Score: 4, Insightful

      Let us think about that for a moment. Suppose that you want to show the success or failure of a product who's maker claims the extraordinary. Back in the good old days you'd go to the store buy the product, test it out, take it apart and find out how it ticks. Most of the time you'd find out that the actual features were at a minimum technically misleading. At the end of your little test you'd post your results out to the web or tell your buddies or let other professionals know.

      Now you can't own the product. It's not yours. Not only is it not yours but you can't tinker with it. Tinkering with it is illegal. If the manufacturer says it's the safest product ever devised and you suspect that it's full of holes you aren't allowed to look. If they say it has technology developed by NASA and you suspect code looted from a GPL'd product - you can't check - it's illegal.

      If I'm doing a term paper on the effectiveness and accuracy of "filters" and I can't test the product, or publish my findings, how do I progress. When someone else is doing a study on the long term effects of filtering (i.e. what knowledge was lost/missed due to improper filtering) how can one do so without looking at how and what the filters filtered.

      Look at some EULA's lately. One EULA I got a couple of years ago said that "reviews can only be published after the written consent of 'COMPANYX'. COMPANYX reserves the right to sole editorship of any published reviews of it's products." This meant that ANY review that you saw on the web or in a magazine they effectively wrote. The problem was trying to find any real data on the product - every review was glowing, no problems, no benchmarks, and no real information.

      At the end of the day the product was a piece of crap. But the only way you could find out it was a piece of crap was by purchasing a license at 700+ per seat and doing your own testing. Which the company assured wouldn't be accurate without having a "production" environment to test against.

      More and more companies are hiding behind their EULA's, patent law, trademark law, copyright law, and so called "trade secrets" to hide the fact that their products are not of the quality nor even contain the feature sets that they advertise. And the judges and the politicians give them more and more room to maneuver every day. Filtering companies claim "Advanced Artificial Intelligence" and "Intelligent Algorithms" and we can't tell that they aren't just using a handcompiled blacklist updated regularly. And these are the companies that the politicians want EVERY LIBRARY and EVERY SCHOOL SYSTEM to use for filtering. I don't reallistically think that the government is going to make the effort to keep these vendors honest so I think WE should have the ability to do so. The only way to do that is through some ability to reverse engineer their products.

      --
      "Do not be swept up in the momentum of mediocrity." - anon
  3. how about the right of consumers to know... by dh003i · · Score: 4, Interesting

    If a product is really doing what it says it's doing? If it has an accurate method for filtering out what is pornography from what isn't? If the people writing the program used proper definitions of pornography when deciding what should be filtered? What the court has done is grant this company impermeability to review or criticism.

  4. Here is my beef. by st0rmcold · · Score: 4, Interesting


    There is a serious problem, maybe it's not with n2h2, but the fact that governement is using software to protect it's citizens completly blind. Sure it sounds all peachy, but cmon, if you're gonna block people off, make sure you know what is being blocked, don't give a company like n2h2 the playground.

    There are plenty of open source alternatives anyway, where you can manually control the blocked list, who is doing for the "consulting" for the governement, most likely someone who wants to keep his job. (prolonging the problem brings in more money)

    This is bad both ways, gov wants to use proprietary over open source, and gov dosen't care that they can't control which sites are blocked and which aren't.

    To be honest, that list should be public to the community, and sites should be debated by a community coucil for their library, to decide which should be allowed by standards in the area, no main entity is the know it all genie of what is right for everyone.

    --
    Posting useless rant since 2003.
  5. Already Exempt by rgmoore · · Score: 5, Informative

    While the judge's reasoning in this case appears to be wrong, the outcome of the his decision is correct. Part of the anti-circumvention clause states that the Copyright Office was to hold hearings to decide on specific classes of work that should be exempt. They only picked two, which were:

    1. Literary works, including computer programs and databases, protected by access control mechanisms that fail to permit access because of malfunction, damage or obsolescence.
    2. Compilations consisting of lists of websites blocked by filtering software applications

    In other words, what the plaintiff wanted to do is not illegal, so he has no standing to challenge the law. You can read about it here. FWIW, that may not be true for long. The Copyright Office is holding another round of hearings, and one of the scheduled topics is whether this exemption should be continued.

    --

    There's no point in questioning authority if you aren't going to listen to the answers.

  6. um ... by bryanp · · Score: 4, Informative

    Did the submitter read the article?

    N2H2 claimed that providing such information to Edelman would compromise trade secrets, and that Edelman had no legal standing to be granted such permission because there was no imminent threat he would be sued.

    Maybe they should have picked a more suitable case to file their lawsuit?

    --
    "An unarmed man can only flee from evil, and evil is not overcome by fleeing from it." Col. Jeff Cooper
  7. The encrypted protocol? I have it right here... by joelparker · · Score: 5, Funny
    The encrypted protocol? I have it here,
    and I can post it on Slashdot right now,
    right after I answer the knock at the door...

    Cheers, Joel

  8. In other news... by eyegone · · Score: 5, Funny
    The United States has imposed martial law in Baghdad. Rape and murder will be tolerated, but anyone who violates a copyright will be shot on sight.

    --
    "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety."
  9. constitutional interest? by quantaman · · Score: 4, Insightful

    there is no plausibly protected constitutional interest that Edelman can assert that outweighs N2H2's right to protect its copyrighted material from an invasive and destructive trespass.

    no constitutional interest eh?

    Edelman had asked a Seattle company called N2H2 for a list of sites its software blocks, but was rebuffed. ...

    "It's highly desirable that these products are accurate, that when they say they're blocking pornography, they're really blocking pornography, not people running for Congress who talk about the evils of pornography," he said Wednesday. "Yet the research to date indicates they make a lot of mistakes."


    Hrm... I'm not completely familiar with the American constitution but I was under the impression that Freedom of speech and by implication the right to discover what speech you were being denied access to would outweigh the right to protect copyrighted material. Oh and BTW how does finding the list constitute an invasive and destructive trespass.? Yes it could hurt them if competitors used their list in their own products (after all the accuracy of such a list would be the essential element of their system) but I hardly feel it would be destructive in any way. Is the judge just refering to economic damage or is there some other potentiaal cause for damage?

    --
    I stole this Sig
  10. Re:A sad state of affairs... by fliplap · · Score: 5, Insightful

    The problem is, everyone on slashdot would rather just complain on slashdot instead of actually writing thier representative a well worded letter.

    I was actually thinking about this the other day. What about a slashdot sponsered letter writing compaign that gave people a tangible reward for writing a good letter to thier congress(wo)man.

    They could have everyone write an email about what really matter to them, any topic, preferably a technological one as thats what scores points around here. Then have them mail them to thier representative and CC a copy to contest@slashdot.org as well as post it as a comment. Say, 10 highest rated letters win a free subscription (however many page views that is). The cost would be negligable, but the impact of tons of well worded emails coming from intellegent people would have an amazing impact. So, editors, what do YOU think? --btw, the letters should be worded better than this post.

  11. READ THE FREAKING OPINION!!!!!!! by ajakk · · Score: 5, Informative

    Am I the only one who actually read the Judge's VERY CORRECT opinion? The case was being brought under Declaratory Judgement, ie. I am suing N2H2 because they are about to sue me. The Judge ruled that there was not any proof that N2H2 was about to sue, so the case was thrown out. This ruling had nothing to due with the validity of the DMCA or the scope of reverse engineering exception.

    1. Re:READ THE FREAKING OPINION!!!!!!! by edrugtrader · · Score: 4, Funny

      am i still allowed to mention the RIAA?

      --
      MARIJUANA, SHROOMS, X: ONLINE?! - E
  12. Re:A sad state of affairs... by Zalgon+26+McGee · · Score: 4, Funny

    The real problem is that most /.'ers would rather browse http://www.whitehouse.com than http://www.whitehouse.gov.

    --

    ---

    Book(n): Utensil used to pass time while waiting for the TV repairman

  13. Re:A sad state of affairs... by tconnors · · Score: 4, Insightful

    The problem is, everyone on slashdot would rather just complain on slashdot instead of actually writing thier representative a well worded letter.

    Actually, the problem is a lot of /.ers are international. We see daily just how fucked up the good ol' US of A is becoming, and can do nothing about it. Now, that's not so bad - I don't ever want to travel to the USA myself, let alone live there, but in the meantime, our own counties are threatening to follow in their footsteps, so that we can further our trade agreements.

    So in that way, we whinge about the USA laws, because they will eventually influence our own laws.

  14. This opinion says nothing about DCMA by graybeard · · Score: 4, Informative

    Read the court documents here. Edelman asked the court to permit him to a) ignore the license which bars reverse engineering, and b) ignore N2H2's copyright by publishing the web sites he discovered. The judge noted that Edelman hasn't actually done anything yet, and declared that the court is not in the business of handing out a "get out of jail free" card in case he ever does his research, and N2H2 seeks relief.

  15. my highschool by SHEENmaster · · Score: 4, Funny

    uses a filtering "service" that's always down. The NT4 proxy servers only resolve an ip correctly two tries out of three.

    It's not too bad, because they have an 802.11b net my Zaurus and iBook can access as well as a "secret router" on 10.0.0.3 that I'm not supposed to know about.

    BTW, the NT4 proxy is sp2; I made a single URL that can crash the proxy if entered on any school computer. They really should fire the techies and let me do the job for a gym credit.

    --
    You can't judge a book by the way it wears its hair.
  16. Re:Writing your congressman works! by Gleef · · Score: 4, Insightful

    Just so you know, you don't need a PAC to lobby your own congresscritter. Many congresscritters are happy to hear from their constituents, and really give some consideration to what they have to say. Sadly, senators often have a much less substantial relation to their constituents.

    Also, even without cash (well, other than to buy stamps and paper, or to pay the phone bill), you can get involved. A congressman almost always has a local office in their district that they visit, for at least a few weeks while Congress is not in session. You might want to talk to his staff about getting some time to visit and talk directly while your representative is in town. If you get access, do your homework ahead of time and bring copies of supporting documents that you can give (executive summaries are nice too here).

    You can also offer time. If your congresscritter is doing a good job, volunteer to help on their campaign. If your congresscritter is doing a bad job, look over there opposition and see if there's someone there you'd like to help out instead. Nothing modifies a congresscritter's opinion faster than popular support for an opponent with a contrary opinion. If you hate all of these bozos, consider running yourself.

    Basically, the more involved and visible you are (in a friendly, non-wacko, non-stalker sort of way), the more likely the congresscritter is to give credibility to your opinion. Involved people don't just vote, they influence other peoples' votes, and that means a lot to someone who is up for reelection every two years.

    --

    ----
    Open mind, insert foot.
  17. why make a choice? by Erris · · Score: 4, Insightful

    Every company is entitled to keep trade secrets. It either that or they must patent their inventions. Patents require disclosure.

    Yes patents require disclosure in return for Federal protection of the exlusive use of the thing described. They are very expensive for a company and they give away all your hard work so that others can use it.

    Now, thanks to the DMCA, you don't have to chose. Neat eh? You can have your trade secrets published publically in an encrypted form and the US Government will make sure others don't tell anyone about how it works even when they are bright enough to figure it out. They will protect your feble trade secrets from "invasion"! This is really cool, now no one has to tell anyone anything AND be protected by the government. What a great trade! I pay taxes which are used to keep me from understanding the things I own.

    Well, I used to own things. Now that I can't do what I want with them or share what I do with my friends, I think some of my things belong to the people who made it. Just imagine this being applied to software! Oh wait, this is software! Really really neat. If I install that program on my computer so that I'm not tempted to look at things someone else thinks are nasty, I'm not only giving up my right to read, I'm giving up ownership of my computer! That's just unbelievable. Next thing you know, you won't be able to share what you know about BIOS. Well, it's good that other people are willing to be responsible for the things I want to use. That way I don't have to worry when they break. Someone will always take care of me.

    --
    DMCA, Hollings, Palladium. What might have sounded like paranoia is now common sense.
  18. Stop, Read, and Relax by Thalia · · Score: 4, Insightful

    The Court actually simply decided that there was no case in controversy. Edelman sued, before he did anything for a declaratory judgement giving him permission to reverse engineer. The court said they wouldn't decide the case, because it's not sure that N2H2 would sue, or that Edelman would do anything. The only time a court will make a decision if nothing has happened yet (like here, about future potential lawsuits) is if a fundamental right is at question. While copyright Fair Use is important, it is clearly not a fundamental right. So, chill. And wait for someone to actually be sued under the DMCA for reverse engineering for research purposes. If the Court then holds that there is no right to reverse engineer anymore (in spite of Sega v. Accolade.

    Thalia

  19. RTFO -- this isn't what it seems by werdna · · Score: 4, Interesting

    It is so important in these uncertain times that we focus our vitreol on case where there is actual legislative or judicial overreaching.

    Read the judge's opinion before leaping to conclusions. This is NOT a case that was decided on the merits of an underying DMCA claim.

    The plaintiff in this case was not N2H2, but rather the fellow who wanted to do his reverse engineering. He sued under a theory of equity, seeking what is called a declaratory judgment. Before even reaching the question about whether the plaintiff is entitled to act, the Court must first address whether or not it has jurisdiction.

    This isn't a light issue -- the Federal Courts only have jurisdiction over ACTUAL "cases and controversies." This is a constitutional limitation. The federal judiciary does not offer what is called "advisory" opinions -- ever.

    Here, without touching on the DMCA issue at any level, the Court simply ruled that our erstwhile declaratory judgment plaintiff didn't have the standing to drag D2H2 to court. I agree with others here that the reasoning for no standing was not the Court's strongest argument, but in view of the Copyright Office excemption, this case just doesn't hold water on the standing question.

  20. Re:Unsigned apps can't run on some installs by caluml · · Score: 4, Informative
    The application "dwi2.exe" could not be opened, because it has not been approved by the system administrator.

    C:\> ren dwi2.exe notepad.exe

  21. What he should have done by Quila · · Score: 4, Informative
    He should have started writing a program whose purpose was to clean-up N2H2's list, finding blocked sites that are no longer operating, so that he could send a list of dead sites to N2H2 in order to lighten their list.

    Of course, to do this his program needs to interoperate with N2H2's software. Hello DMCA exception:

    `(f) REVERSE ENGINEERING- (1) Notwithstanding the provisions of subsection (a)(1)(A), a person who has lawfully obtained the right to use a copy of a computer program may circumvent a technological measure that effectively controls access to a particular portion of that program for the sole purpose of identifying and analyzing those elements of the program that are necessary to achieve interoperability of an independently created computer program with other programs, and that have not previously been readily available to the person engaging in the circumvention, to the extent any such acts of identification and analysis do not constitute infringement under this title.
    In addition to its main function, the program also happens to identify sites that shouldn't have been blocked.
  22. It DOESN'T mean THAT! by Compulawyer · · Score: 4, Interesting
    This story is completely misleading about the actual ruling. The fact that the quote "there is no plausibly protected constitutional interest that Edelman can assert that outweighs N2H2's right to protect its copyrighted material from an invasive and destructive trespass" is taken out of context makes it worse.

    This ruling does not even reach the merits of the DMCA or reverse engineering. It is concerned with a legal doctrine called standing. The law of standing in Federal Courts means that you must be a proper person to bring a claim. Article III of the US Constitution requires that there be an ACTUAL "case or controversy" for a court to hear. The US federal courts decide cases. The courts do NOT give advisory opinions - e.g., if you do this you will (not) be breaking the law.

    The plaintiff here was a Harvard Law Student who asked the court to declare that IF he reverse-engineered the software THEN he would not be breaking the law - essentially asking for advice that the federal courts will not give.

    The federal Declaratory Judgment Act allows federal courts to "declare" the rights of the parties, but that is different from giving advice. There still must be an actual case or controversy. To show that, the plaintiff must show that he has a "reasonable apprehension" of being sued. Usually that is done by showing the court some communication between the parties in which one party has either explicitly threatened a lawsuit or because of the relationship between the parties it is obvious that a suit is coming. Here, the law student could not show that, so he lacks standing to bring this suit.

    If you doubt the correctness of my statements, look to the key part of Judge Stearns's quote: "there is no plausibly protected constitutional interest that Edelman [the plaintiff law student] can assert that outweighs N2H2's right to protect its copyrighted material...." He can't assert the rights he is trying to assert. In other words, you aren't the right person to bring this claim, you have no reasonable apprehension of actually being sued by these guys, you are merely asking for advice, we don't do that here, get out of my court but feel free to come back if you actually go ahead and reverse-engineer and you are threatened with a lawsuit.

    --

    Laws affecting technology will always be bad until enough techies become lawyers.