Slashdot Mirror


AT&T Announces Plans to Filter Copyright Content

An anonymous reader writes "The LA Times reports that AT&T has announced plans to work with the Hollywood movie studios and major recording labels to implement new content filtering systems on their network. The plans raise many troubling legal issues including privacy concerns, false positive filtering, and liability for failure to filter."

84 of 436 comments (clear)

  1. Oh good... by Anonymous Coward · · Score: 5, Insightful

    I was wondering when they were going to give up their common carrier status. Now they can all go to jail for monopoly!

    1. Re:Oh good... by DDLKermit007 · · Score: 3, Insightful

      The real question is have is how is this supposed to make them money? Any investors that find out about this should be throwing a shitfit, and replacing anyone involved with this. Decisions like this look to make AT&T LOSE more money than they gain. Time spent on a such a dumbassed idea, pissed off customers, lawsuits when they fail to filter, lawsuits for filtering the wrong content, etc. This makes beyond no sense.

  2. Ouch. by Short+Circuit · · Score: 2, Informative

    The plans raise many troubling legal issues including privacy concerns, false positive filtering, and liability for failure to filter ...and loss of common-carrier status.
    1. Re:Ouch. by AKAImBatman · · Score: 4, Insightful

      Yeah, I don't get that either. They can have the absolute best filtering software in the world, and it will all go tits up the moment the client encrypts his communications. The users will continue to swap pirated material, and AT&T will find itself on the legal hook for it.

      I mean, how stupid can you get?

    2. Re:Ouch. by ScrewMaster · · Score: 4, Interesting

      As I understand it, the telcos aren't common-carriers with regards to so-called "data services" anyway, so they can perfectly well get away with this. Granted the distinction between a voice service and a data service is technologically non-existent anymore, but from a legal perspective it's still very important (as it happens, I have AT&T's Callvantage VoIP service at home ... which set of laws would apply to AT&T in the case?) That's part of the law that does need to be changed, I think.

      Now, whether or not they'll have many customers when it's all over is another story. The moment my ISP starts making decisions for me about what I can and cannot download is the day I find another provider. If there aren't any other providers, then I'm going to drive to Washington, D.C. (probably none of us will be able to actually board aircraft at that point), grab Orrin Hatch and a few other select Congresspeople by their lapels and shake some sense into them.

      What's amazing about this is the level of influence the media companies are able to wield, in both the government and private sectors. Honestly, they must have some part of their organization whose only job it is to dig up dirt on Congressmen and corporate CEOs. Otherwise I can't see why AT&T would just roll over on this.

      --
      The higher the technology, the sharper that two-edged sword.
    3. Re:Ouch. by jon787 · · Score: 2, Interesting

      Ah but SSL/TLS can be detected and they can just block it.

      --
      X(7): A program for managing terminal windows. See also screen(1).
    4. Re:Ouch. by daeg · · Score: 5, Insightful

      Exactly. By the time AT&T gets anywhere with filtering, BitTorrent clients will come with encryption enabled by default and will all select a random set of ports.

      Is AT&T suggesting they can somehow go up against an encrypted, data-heavy connection using random ports? Or even well-known ports like 443? You can't very well just block long transfers, either. If you do that, P2P clients will be programmed to cycle connections, only transmitting one MB or such per connection before resetting.

      Best to build for the capacity you sell to your users. If you can't handle what you sold, downgrade their plans, raise prices, or install new lines.

      I'm not for piracy at all, but the ISPs should stay out of criminal and civil matters altogether until they have a public order from a judge instructing them otherwise.

    5. Re:Ouch. by roseanne · · Score: 3, Interesting

      Here's the problem as I see it: AT&T knows that ISPs have to compete on service, price and network superiority. There's not too much room to "add value" to their network (i.e., offer proprietary services that work best on AT&T's network). They're betting that by adding legit content and keeping off 'pirate' content, they can create a network that not-very-expert users who want video-on-demand etc will use, and that their competitors will do this anyway to keep up.

      And what they will probably do is aggressively packet-shape so that folk who encrypt traffic will see lousy transfer rates AND lobby for exemptions to common-carrier rules for copyright defense.

      It doesn't make too much sense, but hey, no one expects good business from AT&T.

    6. Re:Ouch. by kimvette · · Score: 4, Insightful

      This will render ecommerce impossible, and I'm sure that if they go to that extent, they'll block VPN and ssh, which will make a home internet connection useful only for instant messaging, viewing porn, and arguing endlessly on slashdot. ;)

      --
      The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
    7. Re:Ouch. by tx_kanuck · · Score: 4, Funny

      what are you talking about? We don't endlessly argue on slashdot!!! Everything here is nice and polite.

      --
      Now, if that makes sense to anyone, could you please explain it to me? I think I've confused myself.
    8. Re:Ouch. by Volante3192 · · Score: 2, Interesting

      As I understand it, the telcos aren't common-carriers with regards to so-called "data services" anyway, so they can perfectly well get away with this.

      This leads me to wonder, if they don't have common-carrier status to data transmission, why hasn't anyone brought the big telcos up for allowing illegal material to go across on their data lines? Seems to me if there wasn't CC status given to data, those types of cases would be slam dunks.

      Plus, if they try doing this for copyright violations, what's to keep someone from forcing at&t to follow suit for things like child porn or other illegal content? It can't be too hard to adapt one filtering system to do another task (at least, I'm sure that's how the argument will go.)

    9. Re:Ouch. by loners · · Score: 2, Informative

      The Safe Harbor provision of the DMCA.

    10. Re:Ouch. by stonedcat · · Score: 2, Funny

      I used to think of the children constantly, but then they locked me up for it.

      --
      You can't take the sky from me.
    11. Re:Ouch. by aztracker1 · · Score: 4, Insightful

      Well, given block/chunk size in bittorrent clients, they should recover from any sporadic disconnects after 1-2 blocks are transferred, will have an increased overhead in terms of new connections, but should still work... I also have to agree that AT&T should stay out of content blocking... I know that if I hosted britney_spears.mp3, which turned out to be a commentary file, and it was blocked, I might have something to sue about... AT&T is opening a can of worms on the legitimate side alone.. I know for a fact I wouldn't use AT&T for services before, let alone now.

      --
      Michael J. Ryan - tracker1.info
    12. Re:Ouch. by Volante3192 · · Score: 2, Insightful

      DMCA applies to copyright violations, not outright illegal material. (Hence the 'C' part of the acronym.) You don't send a DMCA takedown to a child pornographer or someone passing around leaked state secrets or whatever else; you send in the FBI right then.

    13. Re:Ouch. by DragonWriter · · Score: 4, Informative

      The safe harbor provision of the DMCA applicable to carriers (there are different provisions for hosts and caches) requires, in part, that, for its protection to be available, that the "transmission, routing, provision of connections, or storage" of material be carried out "without selection of the material by the service provider". (17 U.S.C. Sec. 512(a)(2))

      I don't know if there is any case law yet on this, but at first blush it would seem that the more selectivity the carrier applies to what content is allowed and what is blocked, the less clear it is that they are within the protection of the safe harbor. And while it might seem paradoxical that the carrier could become more liable for copyright infringement for blocking some infringing materials, there is a good reason for this—it makes a carrier choose whether it wants copyright to be the responsibility of the users (and thus, it is "hands off"), or whether it wants to seek the potential rewards (in terms of favorable details with copyright holders to monitor and enforce) along with the potential costs (in terms of liability to those whose rights are violated despite the carrier's intervention) of taking a "hands on" policy.

    14. Re:Ouch. by Zonk+(troll) · · Score: 3, Insightful

      Yeah? And what would people switch to? Dialup?

      For example, where I live the only broadband I can get is Comcast. If they fucked over the customers like AT&T I'd have no other choice.

      --
      "The Federal Reserve is a fraudulent system."--Lew Rockwell
      End The FED. -
    15. Re:Ouch. by PopeRatzo · · Score: 5, Insightful

      (T)hey'll block VPN and ssh, which will make a home internet connection useful only for instant messaging, viewing porn, and arguing endlessly

      Bingo. That's the whole idea. This internet thing has been nothing but a headache to those in power anyway. You get foul-mouthed hippie bloggers who say bad things about our sainted politicians, you have web sites that actually help people find the lowest prices on products, and there are even ways for people on the internet to send messages that are hard to eavesdrop. We can't have that, now, can we?

      The ideal internet for the people who run things would be a place where people shop, watch movies and TV (but only what they pay for) and buy songs from iTunes and msTunes and sonyTunes and warnerTunes. It's OK for folks to talk to one another, as long as they do it over a clear channel (say!) and they can post pictures of their dogs and babies but not police beating protesters or (God forbid!) that troublemaker Michael Moore.

      Once this mess of an internet gets straightened out, people will have all the freedom they could want, as long as it's within these reasonable parameters.

      Oh, I forgot: THE CHILDREN! THE CHILDREN!
      --
      You are welcome on my lawn.
    16. Re:Ouch. by Perseid · · Score: 4, Insightful

      Because there is no money to be made by saving the children.

    17. Re:Ouch. by sudog · · Score: 2, Informative

      They already have. Encrypted data is just as easy to profile as unencrypted. They can just block that too. You'll have to waste bandwidth to create subliminal channels and by that point there will *be* no point. People have some pretty strange notions of what encryption can actually buy them. I think it's actually steganography that you are implying will somehow magically save you from AT&T filtering. But it won't.

  3. It'll be neat... by Anonymous Coward · · Score: 5, Interesting

    ... when AT+T takes down an iTMS download of a purchased movie for being a copy. Which, of course, it would be. Merely one being paid for correctly.

  4. Easily defeated by HeavensBlade23 · · Score: 2, Insightful

    Just put everything in a passworded protected archive. Hell, I bet you could even skip the password protected part, since opening every archive that comes across the wire would be prohibitively slow.

  5. So much for my business by glindsey · · Score: 2, Interesting

    I had been considering switching from Comcast to AT&T as soon as DSL became available at my house... so much for that idea.

    Encryption forever!

    1. Re:So much for my business by omeomi · · Score: 4, Funny

      I had been considering switching from Comcast to AT&T as soon as DSL became available at my house... so much for that idea.

      Talk about a choice between Giant Douchebag and Turd Sandwich...

  6. No surprise here by jpetts · · Score: 3, Informative

    This is not surprising in the least. AT&T has a dishonourable history of sticking it to the consumer whenever anyone asks them to.

    Most notable is the current lawsuit against them alleging collusion with the NSA in massive illegal domestic wiretapping.

    --
    Call me old fashioned, but I like a dump to be as memorable as it is devastating - Bender
  7. Dinosaur Managers: Please Retire! by Futurepower(R) · · Score: 5, Insightful

    We need to wait for all those dinosaur top managers to retire.

    Practically every business I know is managed by someone who started managing before the personal computer revolution. It surprises me, but in more than a decade they don't seem to have learned anything. They hit blindly without understanding what they are doing, or even caring what they are doing.

    We are seeing in our culture HUGE disrespect for technically knowledgeable people. The wild imaginings of someone who knows nothing are considered better than the counsel of those who have learned how things work.

    1. Re:Dinosaur Managers: Please Retire! by drinkypoo · · Score: 5, Insightful

      We are seeing in our culture HUGE disrespect for technically knowledgeable people. The wild imaginings of someone who knows nothing are considered better than the counsel of those who have learned how things work.

      We're talking about a culturally pervasive issue, though. Although I hate to bring it into a discussion here for various obvious reasons, Al Gore's Truth movie raises this point quite significantly. We have nothing but contempt for the only people actually qualified to make decisions on a scientific basis in this country.

      Frankly, I blame this on religion, which has a stranglehold on many aspects of our existence here.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Dinosaur Managers: Please Retire! by Anonymous Coward · · Score: 2, Interesting

      We need to wait for all those dinosaur top managers to retire.

      Practically every business I know is managed by someone who started managing before the personal computer revolution. It surprises me, but in more than a decade they don't seem to have learned anything. They hit blindly without understanding what they are doing, or even caring what they are doing.

      We are seeing in our culture HUGE disrespect for technically knowledgeable people. The wild imaginings of someone who knows nothing are considered better than the counsel of those who have learned how things work.


      While I sympathize with your position, cynicism and overall view on this issue, it has nothing to do with technology.

      It has been this way for countless generations. Power is not awarded based on merit. It is awarded based on wealth. Show me anyone in a position of power who has not paid their way there.

      This will never change, regardless of how many revolutions we may have, it is but one sad component of the tragedy known as the human condition.

      [IP address changed for this post to defeat slashdot's asinine 30 minute post flood interval.]
    3. Re:Dinosaur Managers: Please Retire! by morgan_greywolf · · Score: 3, Insightful

      Frankly, I blame this on religion, which has a stranglehold on many aspects of our existence here.

      This may not sound right to some, but it's dead on! Especially certain religions, which seem focused on the 'fact' that their God beats all and and that makes them right and everyone else wrong. No comment on which ones.
    4. Re:Dinosaur Managers: Please Retire! by martinX · · Score: 2, Funny

      Especially certain religions, which seem focused on the 'fact' that their God beats all and and that makes them right and everyone else wrong. No comment on which ones.
      All of them?
      --
      When they came for the communists, I said "He's next door. Take him away. Goddam commies."
    5. Re:Dinosaur Managers: Please Retire! by hausrath · · Score: 2, Insightful

      I think in this case, it has more to do with a distorted view of reality that many companies have these days (RIAA,MPAA). I would submit that the vast majority of good management/leadership skills are applicable across industries and technologies.

      "The wild imaginings of someone who knows nothing are considered better than the counsel of those who have learned how things work."

      I would totally disagree and say that this is not the case here and the situations of many top managers. "Those who have learned how things work" are precisely those who are in top management positions. There's a huge difference between knowing technology and knowing how to lead. Of course I wouldn't say AT&T has the best leaders (who know when to listen to others who know better), but you get my point.

    6. Re:Dinosaur Managers: Please Retire! by Doctor_Jest · · Score: 2, Insightful

      Sticking one's head in the sand and ignoring evidence to the contrary isn't a new phenomenon, and it's not solely the parlance of the religious... just the stupid... whether or not the stupid are religious I think is secondary to their stupidity. If they worshiped a can of Snow Peas, or their left toe wouldn't change the fact that they are idiots, and sometimes those same idiots are in charge (bleh!)

      IOW, morons have been around long before we had organized religion to put a name to the unnamed "fear" of change. ;)

      And quite frankly, this extends itself into every aspect of our society... as is evidenced by the random chripings from the chicken littles of the industry... "Few doubt the piracy problem" (so says the article) and goes on to claim billions lost.

      If they lost so much, do they write it off on their taxes? Oh yeah.. they can't. ;)

      --
      It's the Stay-Puft Marshmallow Man.
    7. Re:Dinosaur Managers: Please Retire! by illumin8 · · Score: 2

      I first noticed the accelerating proliferation of this "belief in magic" at the point where city populations became dominated by a 3rd generation raised away from the farm, who didn't have even a grandparent's tales to connect them to How The World Really Works.
      That's an interesting theory. Since I moved to the east coast I'm amazed that some of the most intelligent people I know, who should know better, actually believe in some of this magic. Mediums, psychics, fortune telling, you name it. It's been pretty shocking to see some well educated people that are easily in the top 2% as far as income is concerned lose all sense of reality and fork over hundreds (thousands?) of dollars to these charlatans.
      --
      "When the president does it, that means it's not illegal." - Richard M. Nixon
    8. Re:Dinosaur Managers: Please Retire! by Reziac · · Score: 2, Interesting

      Yeah, same thing I see in California, with all manner of charlatans. Weird diets are a big one around here. In Montana, 99% of these weird beliefs would get you laughed out of the state, and the other 1% would get you committed. ;)

      Trouble is, some of the charlatans have PhDs** so that gives them credibility, especially among the educated, who don't realise it's perfectly possible to be both educated on one subject, and woefully ignorant of everything else. My favourite to date from one of these PhDs: "Corn ferments in the digestive tract! So you should only eat rice!" (Er, what do you think they make sake from, bamboo??)

      ** "Piled Higher and Deeper"

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    9. Re:Dinosaur Managers: Please Retire! by drinkypoo · · Score: 2

      IOW, morons have been around long before we had organized religion to put a name to the unnamed "fear" of change. ;)

      While I agree with you (and others in this thread, whose comment yours appeared above, thus garnering a reply) that religion is not a requirement for stupidity, and while I feel that not all religious people are stupid, there is a certain willful ignorance that at least seems more common among the religious than the atheistic or agnostic. I guess the thing that really stands out in my mind right now is the creationism "museum". Typically a museum commemorates or seeks to clarify a historical event, so perhaps it shouldn't be called a museum at all, but that is the root of an entirely ridiculous debate.

      Again, not all religions push this kind of willful ignorance; but it is important to remember that even those which do so benefit from science. The same process involved in the science that they do not agree with that tells them the cosmos weren't formed in a literal week and all the animals couldn't literally have fit in one boat produced the technology behind the computers upon which they develop their propaganda.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  8. SSL For All My Friends! by Doc+Ruby · · Score: 4, Interesting

    If Firefox and Apache both made HTTPS their default protocol instead of HTTP, AT&T wouldn't be able to invade any of our private traffic that happens to get routed over their WANs. Then they'd have only their Net Doublecharge, preferential routing between IPs paying their extortion fees, to work against us, and that gambit will likely get killed by the government that otherwise protects AT&T's resurgent monopoly.

    If we act now, while we still can, before AT&T and their telco/cableco cartel shuts us down.

    --

    --
    make install -not war

    1. Re:SSL For All My Friends! by Blakey+Rat · · Score: 4, Funny

      If we act now, while we still can, before AT&T and their telco/cableco cartel shuts us down.

      We're almost convinced, but I think we need a few more random bold tags before it can happen...

    2. Re:SSL For All My Friends! by ortholattice · · Score: 4, Informative
      This is not correct. You can have your own private certificate server on the same server as Apache is on, and a man-in-the-middle attack will not work. The only problem is that it is a nuisance for the user to click through the "Accept this certificate" screen, but the user only has to do it once.

      How do you think SSH works? There is no third-party certificate server, and man-in-the-middle certainly can't defeat it.

      To install a private certificate server under Apache is trivial; see for example my post. (On Windows, it is a little more complex, as that post indicates.)

      The purpose of the third-party certificate is to provide some degree of trust that you are going to the web site you think you are, so that you can have some confidence that you aren't submitting your credit card number to an imposter. If all you are interested in is encryption and the prevention of man-in-the-middle interception, SSL with a private certificate server will work fine. The encryption is accomplished via public key cryptography, which allows you to exchange the private key used for the encrypted session. A third party is not required for public key cryptography to work.

    3. Re:SSL For All My Friends! by Doc+Ruby · · Score: 2, Funny

      Try saying it out loud, emphasizing the words in bold. You can do it. You'll gradually learn to understand how to read silently, with the emphasis in appropriate places, and maybe even stop moving your lips while you read. It'll be harder for you to understand the words, why some are emphasized, and how it's not random. But with practice, you'll learn to fool listeners into believing that you know how to read.

      --

      --
      make install -not war

  9. They needed a new use for the NSA gear by Anonymous Coward · · Score: 2, Funny

    This makes total sense, if they dont do this they are underutilizing their networking spying equipment. You need to keep that gear operating for a certain number of years in order to make the total cost of ownership values work out.

  10. Re:Fairly easy to by-pass filtering by AKAImBatman · · Score: 2, Insightful

    Just run some simple encryption, nothing major, just enough to scramble the data and confuse the filters. Hell, ROT13 would probably be enough

    No, you'd need to be somewhat cryptographically secure. If you just pay lip-service to the concept, you'll trip off a digital arms war between file sharing and AT&T's filter upgrades. It's better to be secure up front so that AT&T gets the idea that there's no way of enforcing these filters.

    It's not that difficult to exchange symmetrical keys using an asymmetrical encryption method. Once those keys are exchanged, you can communicate freely without AT&T being able to eavesdrop. When they finally finish cracking your packets a year or two later, they'll find themselves in big trouble for having lost their common carrier status.
  11. Won't work. by serviscope_minor · · Score: 5, Insightful

    It won't work. If they block P2P, people will use a different port. If they search traffic for P2P, people will use encryption. If they look at traffic analysis, people will figure out how to disguise traffic patterns. And so on.

    And by people, I mean that a few clever hackers will implement it and everyone will just use it (kind of like bittorrent).

    Of course, they could start by blocking youtube... that'll make them really popular.

    Well, the figure for losses about bootlegs I can kind of believe. After all you have to pay cash for a bootleg, and that is real money which isn't going to the copyright holder. The figure for online piracy seems like one of those bogus ones. It is only a loss if the person would otherwise have paid. I doubt that they have a good way of measuring that.

    And finally, can we PLEASE get some accuracy in the titles. Everything (bar public domain) is under copyright. If they filtered out copyright content, there would be nothing left for the customers. How would they even find the public domain content without any search engine's copyrighted front (and filtered) page?

    --
    SJW n. One who posts facts.
    1. Re:Won't work. by Greyfox · · Score: 2, Insightful
      Yes. Common carrier status allows them to avoid escalating that war but as soon as they start filtering they'll lose that, and that means that they will be required to inspect (And probably retain for some period) all their customers' traffic.

      So there's AT&T, forced to fight a war it can not possibly win and each time they tighten the screws they'll piss off more of their customer base. And the data retention costs will just keep going up and up. Oh yeah. They really want to open that can of worms.

      Hey here's an idea, someone find the genius who came up with this idea and arrange an interview here. I bet we all submit a bunch of questions which never get answered (Kind of like the SCO interview) and the whole affair is quietly dropped shortly thereafter.

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  12. ISPs are not common carriers. by Anonymous Coward · · Score: 4, Informative

    ISPs are not common carriers. There is a difference between voice and data, according to (stupid) law.

  13. Encrypt everything by Harmonious+Botch · · Score: 4, Insightful

    They can have the absolute best filtering software in the world, and it will all go tits up the moment the client encrypts his communications Yes, P is right. Now we should start writing free, low-strength, fast encrytion/decryption software. Nothing that requires the NSA to break, but just enough to make it economically impractical for ATT to decrypt.
    1. Re:Encrypt everything by Phil+Karn · · Score: 4, Interesting
      Why write low-strength encryption software when high-strength software already exists and is plenty fast? Why do people just assume that high-strength cryptography has to be unacceptably slow?

      For years I've routinely encrypted as much of my communications as I can (e.g., when I control both ends of the connection) and the overhead is completely invisible.

    2. Re:Encrypt everything by Harmonious+Botch · · Score: 3, Interesting

      Why use weak crypto? To avoid triggering some kind of knee-jerk reaction from the US govenrment intelligence agencies.

      I'm assuming that if ATT goes to the NSA and says "Please help us pass a law that says that stuff can't be encrypted" and the NSA sees low-grade crpyto they will reply "You pussies, we solved that stuff in kindergarden". But if they see high-level crypto, they may start screaming "national security" and do something that is stupid, unconstitutional, or both.
    3. Re:Encrypt everything by FraterNLST · · Score: 4, Insightful

      Can't you see how depressing this kind of reasoning is? That you - hell, we, my country is no better - live in a place where your first thought is "despite the perfectly good, high strength, fast encryption we've got, lets make a dodgy kludge one to avoid confrontation with the government." In a true democracy, the government is an extension, a physical manifestation, of the will of the people. There should never be a situation where the people have to make concessions to the government. Of course, if the majority of people were against encryption, that would be a different matter. And might even happen, as the current world governments wield the word terrorist like a weapon and steal liberties in the name of security, whilst the masses applaud. And, this argument assumes that America is a true democracy, which is quite laughable, but an entirely different discussion.

      --
      Doublethink is basically the power of holding two contradictory beliefs in one's mind simultaneously, and accepting both
    4. Re:Encrypt everything by Phil+Karn · · Score: 2, Interesting
      The irony factor of going after AT&T with the DMCA would indeed be highly satisfying, but AT&T has enough lawyers that they can probably find a loophole in the DMCA.

      Besides, the DMCA is really about the copying of material that is already publicly available to anyone who wants to buy it. It's not about protecting the confidentiality of private conversations. Although most DRM schemes do (ab)use cryptography, the DRM threat model is fundamentally one that cryptography cannot address. Every cryptosystem assumes that the parties trust each other to not reveal plaintext to their enemies, and that the parties possess secrets that the enemies do not have.

      DRM violates both assumptions, so any use of crypto by DRM is fatally flawed. If your (potential) enemy has physical possession of all the relevant secrets to decrypt the material (and they must, otherwise they wouldn't buy it), then the cipher is breakable no matter how strong it might be when the keys are secret. So DRM is ultimately impossible at a purely technical level, and therefore it must be backed up by laws.

      Cryptography is all about protecting the confidentiality of a private communication between two trustworthy parties against an eavesdropper who doesn't have the keys. And it has become very successful at that objective. We should just use it, routinely and for everything.

  14. Re:Loss of Common Carrier Status? Why? by pavon · · Score: 2, Interesting

    The big question is whether this filtering is just for their DSL and F2P customers, or also for the huge chunk of the backbone that they own and operate. The articles that I have read seem to suggest the latter.

  15. Do we really need more laws? by Nymz · · Score: 4, Interesting

    Unless you believe that companies (AT&T, Google, MS) and government agencies (Big Brother) have a right to listen in on every conversation you have, review every site you visit, and examine every transaction you make, then either don't let them or stop complaining.

    Instead of sending everything by postcard, send everything by envelope (encrypted), and stop expecting every lawyer, politician, company, government agency, and identity thief to respect your privacy.

  16. So I'd better make other plans by overshoot · · Score: 4, Funny
    to get my holiday movies from North Africa to my relatives on NewATT?

    I'm guessing they're not going to like a file transfer of casablanca.mov

    --
    Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
  17. Try Again by Anonymous Coward · · Score: 5, Funny

    I think you meant to say, "Everything here is nice and polite, jackass."

  18. Time for Telecommunications Monopolies to End by BlueMikey · · Score: 3, Insightful

    If AT&T is going to start watching every single thing its users does and the users have no recourse whatsoever, I say it is time to end the monopoly that cable and wired ISPs and phone companies have in most areas and let competition reign. If I had the choice between a company that is going to spy on me and give anything they think is suspicious to the RIAA/MPAA or paying a few extra bucks to a company that will truly honor my privacy, the choice would be extremely easy.

    Instead, I'm stuck with one cable company and one DSL company servicing my area. Thanks, local government.

    1. Re:Time for Telecommunications Monopolies to End by BlueMikey · · Score: 2, Insightful

      Yeah, satellite for Internet, you go first.

      Look, that is not competition (, son). It is as if your city told you that you could only shop for groceries at Trader Joe's or Albertson's and not a single other competitor could open up shop. Competition allows for as many organizations as the market can bear and certainly, with the paltry lineup most of the wired telecommunications services we all are offered and the high cost, the market could certainly handle it.

      The majority of the urban centers in the US have only two options for high-speed Internet: the cable company or the DSL company. Period. If they were forced to compete with, say, two more cable companies and one more phone company, prices would dip and service would go up.

  19. piratebay blocked by seven+of+five · · Score: 4, Informative

    I wasn't looking for anything in particular, but when I put the url of piratebay in my browser a blocking service page came up. First time I saw anything like this. I get DSL in Chicago thru, I guess it's AT&T now...

    This is all well and good if it's like a parental control thing but I'm a 50 year old paying customer and I'm not used to getting flipped off by my ISP. I suppose I should be looking over my shoulder.

  20. New Sourceforge project for AT&T content filte by snowblind · · Score: 2, Funny


    Glad to see the US ISPs joining the ranks of Chinese ISP

  21. AT&T is NOT AT&T, it is SBC. by Futurepower(R) · · Score: 4, Informative

    AT&T is not AT&T now, because the name was sold to an abusive west coast telephone company named SBC.

    My understanding is that everything else of value in the original AT&T was sold piece-by-piece, and SBC bought mostly just the name. My understanding is that the SBC trademark was worse than useless because the company is so abusive. So, the managers bought another name.

    Apparently, for $16 Billion SBC got AT&T's VOIP customers, and the AT&T name.

    AT&T's VOIP customers were Sheila and Gerald Funk, who have since moved to Elbonia. Wait... That last sentence my contain an error.

    So, what we are seeing is SBC mismanagement under a new name. Soon just saying the name AT&T will cause people to become upset.

    1. Re:AT&T is NOT AT&T, it is SBC. by Anonymous Coward · · Score: 2, Informative
  22. arbitrary depth tunneling by The_Wilschon · · Score: 2, Insightful

    But HTTP underneath SSL/TLS which happens to be tunneled inside of plain HTTP (or any other "legitmate" protocol) would still not be blocked. No matter what, to have perfect (or, I would say, even adequate) filtering, they would have to be omniscient regarding the intention behind the contents of all packets. Or just unplug everything.

    --
    SIGSEGV caught, terminating

    wait... not that kind of sig.
  23. Communications Decency Act Section 230 by michaelmalak · · Score: 4, Informative
    AT&T may not be a "Common Carrier" with respect to data, but it is (was) provided immunity by Section 230 of the Communications Decency Act:

    No provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider.
    In analyzing the availability of the immunity offered by this provision, courts generally apply a three-prong test. A defendant must satisfy each of the three prongs to gain the benefit of the immunity:
    1. The defendant must be a "provider or user" of an "interactive computer service."
    2. The cause of action asserted by the plaintiff must "treat" the defendant "as the publisher or speaker" of the harmful information at issue.
    3. The information must be "provided by another information content provider," i.e., the defendant must not be the "information content provider" of the harmful information at issue.
    1. Re:Communications Decency Act Section 230 by Anonymous+McCartneyf · · Score: 2, Interesting

      I am not a lawyer, but this looks like AT&T would be immune to prosecution for blocking any "pirated"/grey copyrighted content carried over its lines as long as it isn't actually hosting the work. That is, if the work isn't actually on att.com or sbc.*.com, AT&T won't get in trouble for blocking us from it.
      Is this right?

      --
      There is a fine line between recklessness and courage... -- Paul McCartney
    2. Re:Communications Decency Act Section 230 by Dread+Pirate+Skippy · · Score: 5, Insightful

      It seems to me to be more along the lines of, there's no real legal need for AT&T to do this, as they're already immune to prosecution by copyright holders if users transmit copyrighted information across their networks. Thus, the only reason they would have to implement something like this involves the crisp, green lining in their pockets getting a bit thicker.

      But IANAL either, so the cycle of speculation continues.

    3. Re:Communications Decency Act Section 230 by billcopc · · Score: 2

      So you're saying they can block whatever they want without repercussions ? If they do the only thing they can do, which is to install a bunch of Cisco PIX boxes and filter all P2P traffic down to 0.001 bit/sec, couldn't that be considered Denial-of-service to legal content providers on P2P nets ?

      I really wish people would just mind their goddamned business. If ISPs are indeed immune to prosecution then it is in their best interests to not cooperate with the MAFIAA at all. Their allegiance is to their customers! Let the MAFIAA die already, before they infect every aspect of our lives with their welfare whining.

      --
      -Billco, Fnarg.com
    4. Re:Communications Decency Act Section 230 by Anonymous Coward · · Score: 2, Insightful

      By blocking illegal content, they save money through not having to have as much bandwidth for the customer side of their business. I'm sure there are numbers around that say X% of traffic is illegal content being thrown around. Remove that X% and profit.

      In the non perfect world of being a last mile carrier (monopoly), users have no real choice but to go along with it. Even if there was competition, I'm sure the other provider in the area will be doing the same filtering.

      I've said this 1000 times in the past 15 years. Until we can separate the line from the service, we are all getting screwed the whole way around. This applies to channel packages, lack of specific channel choices, internet filtering, internet bandwidth, cost for cable, cost for internet, cost for phone, having to keep a phone number to get DSL, long contracts, blocking ports, half assed roll outs to only very select areas for "new" and "improved" services, screwed up bandwidth limits (you have 1.5/128 but next county over has 6.0/384) and all for the same price by the same company, the carrot and stick of give us, the monopoly carrier a long term contract for your city and we will upgrade (wink wink), hidden monthly limits redefine unlimited, unknown rules and practices for data retention etc..

      We as tax payers and monthly bill payers to these monopoly carriers already pay for the last mile from our own pockets. Why not pay a third party instead of being tied to same company that also provides the service? Verizon is not more efficient at laying lines then a third party company would be, I'm sure that third party would end up hiring the same contractors that already lay the line anyway.
      There are wrong ways to do it as well. A 7500 unit housing development in my area does not use Verizon for the last mile, they ran it themselves, the bad part is the people that live there only have one choice for internet access and that is whatever company the HOA decides to go with. I guess the good side is they can switch providers at the gate if the service is not what they were promised and they still control the last mile themselves.

    5. Re:Communications Decency Act Section 230 by pyite · · Score: 2, Funny

      If they do the only thing they can do, which is to install a bunch of Cisco PIX boxes and filter all P2P traffic down to 0.001 bit/sec, couldn't that be considered Denial-of-service to legal content providers on P2P nets ?

      Silly wabbit, PIX are for kids! Seriously, though, no one uses them. My company buys millions upon millions of dollars of Cisco gear per year and zero PIXes. They're kinda sucky. Just FYI.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

  24. How do you really detect in real time? by maxwells_deamon · · Score: 4, Interesting

    Real time is the KEY here. They promise to block and not to just detect.

    Sure, you can detect ssh, etc, known protocals and block them.

    But if today the server encripted an MP3 file with rot13 no computer would automatically detect it as an mp3. And tomarow they just do it different. Tomarrow they make a jpg out of it. Change the extention and Bob's your uncle.

    An application is written that everytime it starts it downloads a plugin with todays encription standard. There is no way they could even think of keeping up without breaking things for there customers on a daily basis.

    1. Re:How do you really detect in real time? by CastrTroy · · Score: 2, Insightful

      This is kind of like my idea for torrents. Back when SuprNova was crashing under the pressure of too many users, I thought they should just make a daily torrent of all the torrents, and have a web server with static links to those torrents. So, you download the torrent list over bit torrent, and browse and search it on your own computer. Then you just download the stuff you want. Simple, with no websites needed to distribute the actual torrents, and the authorities have nobody to shut down.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
  25. Re:Fairly easy to by-pass filtering by Phil+Karn · · Score: 5, Insightful

    It's not that difficult to exchange symmetrical keys using an asymmetrical encryption method.
    Indeed. When I read the documents on the passive optical splitters that AT&T installed for the NSA, it became utterly obvious to me that those of us who developed the present generation of Internet encryption protocols in the 1990s (and I'm one of them) made a big mistake. We were too concerned about major-league threats like active man-in-the-middle attacks and not concerned enough about simple, transparent and totally automatic encryption that would still be 100% effective against passive eavesdropping. Our existing crypto protocols generally require a heavy-duty public-key infrastructure and administrator or user action to generate those keys and get them signed. Most people don't bother, so they just operate in the clear. Had we standardized a simple unkeyed Diffie-Hellman exchange as the starting default with signatures as an option, we could have stopped this kind of massive dragnet eavesdropping in its tracks.

    I still think one of the most brilliant developments in practical cryptography was SSH. The idea of simply caching the public key on the first connection and checking to see if it has changed on later connections is vulnerable to a man-in-the-middle attack on that very first connection, but it still solves 99% of the problem with 1% of the effort. That's the proper model for any new effort to routinely encrypt everything, all the time, to make the haystacks as big as we can.

  26. You do understand... by jd · · Score: 3, Interesting

    ...that in many countries, when a carrier censors content, it automatically loses "common carrier" status and becomes liable for what it carries. In other words, AT&T probably can't be sued right now for movies on their lines, but if they censor those lines and miss something - however accidental - they are liable. In the UK, carriers have been sued into bankrupcy after losing common carrier status. I don't know if this is true in the US, but if it is and someone wants to go digging for gold, they would be doing everyone a huge favour.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  27. Re:Oh really? by MrWa · · Score: 2, Interesting
    Preview is your friend...and I failed at using...

    The plans raise many troubling legal issues including privacy concerns,
    Really? Anything you transfer over the Internet is touched by how many other computers before it reaches the final destination? If you want privacy on the Internet use encryption or a private network. Anything else and you are just kidding yourself. Ask all those people that didn't realize posting drunken pictures of themselves on Facebook or that hilarious video on Youtube.

    false positive filtering,
    This may be a real concern depending on where the filtering occurs. If EVERYTHING that touches an AT&T router is filtered then this may be a big deal: How easy is it, as an end user, to bypass AT&T networks? What impact on general reliability and performance will this have?

    and liability for failure to filter.
    Doubtful...if anything, AT&T would probably be getting something nice in return for doing this, such as exclusive content, pricing, etc. from the major studios.

    So...actually, I am curious: can you avoid AT&T networks? Maybe Google will need to start using all the dark fiber they were supposedly buying a while back?

  28. Re:AT&T shutting down the internet... by jonfr · · Score: 2, Insightful

    Try to speak my native language (Icelandic) before you come with that comment. Then we can speak on even terms.

    Also, Republicans in the U.S are mostly nothing but a group of losers with a thing for 1699 and a lot of money. They don't care if they destroy the planet in the progress and censor everyone how disagree with them. Just as the make one more buck on it and in between.

  29. Re:Loss of Common Carrier Status? Why? by Phil+Karn · · Score: 4, Insightful
    Spam filters like Spamassassin actually work remarkably well. Why? Because spam recipients, by definition, are unwilling. The users, filter maintainers, blacklist operators, ISPs and sometimes even the government are all willing to cooperate to a common goal.

    It's an entirely different story when you have two resourceful parties who want to communicate and will deploy all sorts of resourceful defenses and countermeasures -- starting with end-to-end encryption -- to ensure that they can continue to communicate. Stopping spam is absolutely trivial by comparison.

  30. Odd thought by nehumanuscrede · · Score: 5, Interesting

    The article doesn't mention AT&T as an ISP. It merely states they plan on filtering this content as it runs across their network. Well, the bad news is that most ISP data in the US traverses the AT&T network in the form of optical longhaul systems ( Read that Sonet ) at some point in it's journey. Your ISP leases lines from Company X who, in turn, leases their lines from AT&T. Is similar to when your WoW session is hit with a lag storm and you start yelling at your ISP to ' FIX YOUR SH*T ', when it's actually an optical level issue on lines owned by someone else that is taking the data longhaul across the country. Sprint, AT&T, whatever ) Given the technology that allowed the NSA to split the optical signal so they could watch traffic, I wonder if they're considering applying their ' filtering ' technology in the same manner. In other words, would they act as big brother over all the data packets that travel ' their ' pipes and filter anything they feel is necessary ?

  31. PC Level Monitoring by nurb432 · · Score: 2, Insightful

    This almost sounds like a setup ' see, we tried, but you cant do it on the network side we need legistlative help'. Then congress mandates an 'approved/trusted' OS+connection software+local monitoring software to get online. ( and of course new hardware to go with it so you cant disable anything 'bad' while offline either )

    If you try to conect with anything other then the above either it doesnt work, or you get reported for an 'attempted circumvention'.

    Scary times ahead.

    --
    ---- Booth was a patriot ----
  32. Clearly not thinking... by FellowConspirator · · Score: 4, Insightful

    Every post on Slashdot is copyrighted -- it's a creative form of expression in a fixed medium (namely bits on a disk somewhere). Yet here they are... How can that be? It's because the posters are granting a public license to view their work, implicitly by placing it in a public forum.

    The fact of the matter is that the vast majority of the content flowing through AT&T's networks are copyrighted. It's not sufficient that a work is copyrighted, but rather that the exchange itself is a violation of copyright. But how can the computer know? If you have a license to the work through some asset purchase, it's not infringing; if you have a license agreement that grants certain rights to obtain/distribute copies, it's not infringement; if you are using the content for academic research, the purpose of criticism, or in parody, it's not infringing. So, how is their computer system to know, a priori, of the legal arrangements, or your intent to use a work? What if you live in a jurisdiction that doesn't recognize the copyright (e.g., it may be public domain because the copyright expired in your jurisdiction).

    The point is that it's technically not feasible to police copyrights. AT&T may be inerefering with network traffic on behalf of a third party for fun and profit, but they are most certainly not protecting copyrights. It's a little disingenuous.

  33. How can they possibly judge intent? by holt · · Score: 3, Insightful

    How is it that they think they can judge intent? Even if they're only going to look at major Hollywood productions, how do they know that a given transmission is pirated, and not the exact same transmission, but with license agreements in place to allow the distribution? What's the difference between a download from iTunes Store and a download from another host online? Are they going to maintain a whitelist of "legitimate" sites that can distribute copyrighted material?

    Nevermind the fact that if they're going to start protecting the interests of the major studios, why aren't they going to "protect" the interests of the rest of us? How do they know the difference between me uploading my photography to my website and someone else sending copies around that infringe on my copyrights?

    The entire concept is ridiculous. There is technically no difference between a legal and an illegal transfer. It's all in the offline licenses and agreements that have (or have not) been made.

  34. Legal - I think not by Garry+Anderson · · Score: 2, Insightful

    I am British - but what right does AT&T have to invade an Americans privacy?

    Isn't privacy protected in the Bill of Rights - or has that all gone out the window now, since 911?

    I thought that even the police have to get a judge to authorize a warrant to search - and only if there is reasonable grounds against an individual (not the populace of whole country).

    Why is this not like the US Postal Service looking in your mail or DHL opening your packages to see if you have anything illegal - without a search warrant?

  35. Re:Fairly easy to by-pass filtering by Phil+Karn · · Score: 2, Insightful
    I absolutely agree that it would be wonderful if everybody opportunistically and automatically encrypted every connection they make. It would sure help stop port filtering and other aggravated assaults on the end-to-end principle.

    But IPsec (FreeSWAN is an IPsec implementation) didn't exist when Microsoft was copying all the Internet protocols into Windows. FreeSWAN also existed as a set of patches that you had to apply yourself to the Linux kernel sources and recompile. You also needed a fair number of user-space tools and a fair bit of knowledge to set it all up. Not even your average Linux user routinely builds his own kernels, and (as we know) only a small fraction of computer users run Linux.

    At least VPNs (which also use IPsec) are already widespread in telecommuting. Any move by the ISPs to block them would be met with an immediate user outcry, and even better, heavy pressure by the affected employers wanting to know why the ISPs Hate Business, and by extension, Hate America...

  36. When they're not spying by jihadist · · Score: 2

    Wired News, with help from some readers, attempted to get real answers
    from the largest United States-based ISPs about what information they
    gather on their customers' use of the internet, and how long they
    retain records like IP addresses, e-mail and real-time browsing
    activity. Most importantly, we asked what they require from
    law-enforcement agencies before coughing up the data, and whether they
    sell your data to marketers.

    http://www.wired.com/politics/onlinerights/news/20 07/05/isp_privacy

    But after negotiations with AT&T, EFF has filed newly unredacted documents describing a secret, secure room in AT&T's facilities that gave the National Security Agency (NSA) direct access to customers' emails and other Internet communications. These include several internal AT&T documents that have long been available on media websites, EFF's legal arguments to the 9th Circuit, and the full declarations of whistleblower Mark Klein and of J. Scott Marcus, the former Senior Advisor for Internet Technology to the Federal Communications Commission, who bolsters and explains EFF's evidence.

    "This is critical evidence supporting our claim that AT&T is cooperating with the NSA in the illegal dragnet surveillance of millions of ordinary Americans," said EFF Legal Director Cindy Cohn. "This surveillance is under debate in Congress and across the nation, as well as in the courts. The public has a right to see these important documents, the declarations from our witnesses, and our legal arguments, and we are very pleased to release them."

    http://www.eff.org/news/archives/2007_06.php

    Open Source needs to find some way to infiltrate corporate America, because these bastards are really giving it to us in the ass. Then again, that's just good business, and 99% of the people seem to like it.

    I guess I should just admit I think democracy and capitalism are as insane as communism and autocracy.

  37. Re:Fairly easy to by-pass filtering by tbo · · Score: 2, Interesting

    We were too concerned about major-league threats like active man-in-the-middle attacks and not concerned enough about simple, transparent and totally automatic encryption that would still be 100% effective against passive eavesdropping.

    As soon as that happens, Cisco et al will start selling specialized boxes that do MITM attacks, can handle OC3 bandwidth, and provide the unencrypted traffic for inspection, filtering, and recording. There would certainly be a lot of demand, as there are lots of network administrators with more-or-less legitimate reasons to want to filter their traffic (university network admins, for instance).

    90% of a solution is not a solution.

  38. Re:Fairly easy to by-pass filtering by Phil+Karn · · Score: 3, Informative
    And when they do, the end-points will start signing their key exchanges. Or they'll play the port-hopping game. Or they'll find any of dozens of other ways to obscure the fact that they're doing a Diffie-Hellman key exchange.

    As for traffic filtering and shaping, the battle between ISP and user will end only when they agree on QoS markings and policies that are advantageous to both. This can happen.

  39. Next up... by Guppy06 · · Score: 2, Insightful

    AT&T Announces Plans to Filter All Mention of Illegal Wiretapping.

  40. Here's another possible reason by PapayaSF · · Score: 2, Interesting

    It seems to me to be more along the lines of, there's no real legal need for AT&T to do this, as they're already immune to prosecution by copyright holders [snip]. Thus, the only reason they would have to implement something like this involves the crisp, green lining in their pockets getting a bit thicker.

    Or it could be the RIAA/MPAA suggesting to AT&T that cracking down on piracy would be a good way to avoid dealing with hordes of high-priced entertainment industry lawyers for many years....

    --
    Q: What does the "B." in Benoit B. Mandelbrot stand for? A: Benoit B. Mandelbrot