Judge Orders TorrentSpy to Turn Over RAM

virgil_disgr4ce writes "In an impressive example of the gap of understanding between legal officials and technology, U.S. Magistrate Judge Jacqueline Chooljian 'found that a computer server's RAM, or random-access memory, is a tangible document that can be stored and must be turned over in a lawsuit.' ZDNet, among others, reports on the ruling and its potential for invasion of privacy."

Comments

What's the problem?

[jonbryce]

Take the chips out of the machine and send them to the other side.

Re:What's the problem?

[no_pets]

Take the chips out of the machine and send them to the other side. No shit. That is exactly what I would do.

Re:What's the problem?

[benfinkel]

I read a couple of other articles on it (google 'em, easy to find) and basically the Judge understands more than this Slashdot abstract says.

Torrentspy was contending that they had no record of user's IP addresses, since they don't do any IP logging. The Judge has ordered that since, even though there is no logging, the IPs are available in the RAM for a period of time, that constitutes a recording and they were ordered to capture that information from the RAM in a more permanent spot.

This is new because it's the first time that volatile RAM has even been considered as evidence in that manner.

Re:What's the problem?

[Anonymous Coward]

Maybe a few minutes later. Not hours or days. The decay is total by then, and there isn't even theoretical equipment that could distinguish its state from noise.

Re:What's the problem?

[MyLongNickName]

Yeah... uh right. I am sure there is some type of theoretical possibility here, but practically no. RAM has to be constantly "refreshed" to keep the charge high enough to be read. After about ten seconds without power, I doubt any instrument would be able to read the state before power down.

Re:What's the problem?

[cyphercell]

So, lick the contacts before mailing right?

Re:What's the problem?

[pixelpusher220]

It also says

(3) the data in issue which is currently routed to a third party entity under contract to defendants

That's the achillies heel, if they are pulling the data out and transmitting it already, they are sunk.

Re:What's the problem?

[RetroGeek]

info can still be retrieved from it if it's carefully read

Wow, I did not know that.

But then all you get is a snapshot of what the server was doing at the instant you turned it off, which would be AFTER all the programs terminated. And at termination the OS would probably re-use that RAM for its own shutdown code.

Then you need to wade through a huge pile of binary (ok HEX) printouts to try to determine the contents.

If the server held 8GBytes, and you get 16 bytes per line, and there are 66 lines per page, then you would have 8,134,407 pages to read through.

Of course you could put this on a drive, then try to use some sort of search program, but it is not trivial. Memory fragmentation(1), binary representation of text, object storage (rather than straight characters) would all contribute to the confusion.

1. Yes I know that the OS tracks the fragmentation along with pagination, but where is that in RAM?

Re:What's the problem?

[Red Flayer]

I read a couple of other articles on it (google 'em, easy to find)

Replying to a post high in the comments, asking that they not only RTFA, but to Google it and read some other fucking articles?

Sure... and I want a unicorn for my birthday... I'm just as likely to get it.

That said, what you've written makes a whole lot more sense.

The question I have is, how feasible is it to log all IP addresses from the RAM and associate them with the transactions in question?

Re:What's the problem?

[sammy baby]

That oughtta work. I do that recreationally anyway.

Re:What's the problem?

[BosstonesOwn]

Like I said depending on the ram.

http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_ del.html

Completely doable.

I bet this poor page is in for one hell of a /.ing.

Re:What's the problem?

[AuMatar]

Not in modern DRAM. Modern DRAM is basicly a capacitor. YOu set it to 1 by charging the capacitor, 0 by letting it discharge. However, due to the natural resistance of silicon there is always some leakage current leaving the capacitors. This means that RAM left alone for more than a few tenths of a milisecond will lose enough voltage to drop to a logical 0. TO prevent this, RAM is constantly refreshed- the ram chip will spend spare cycles writing its own value to itself. SO unless you transfer the computer without unpluggint the ram or powering dowjn the machine, you will not be able to recover any data.

Re:What's the problem?

[TheRaven64]

A bit of DRAM[1] is basically a transistor and a capacitor. Due to the small size of the capacitor, its stored charge leaks away very quickly, on the order of a few milliseconds. A DRAM 'refresh cycle,' which happens around every 64ms in modern RAM, involves reading the value of every bit and re-writing it before it leaks away. This is done in parallel; every bit receives the clock signal and refreshes itself. Storing data in DRAM requires a constant application of energy; as soon as you cut power to RAM, the bits will all be reset to the same value (whether this is one or zero is largely a matter of convention).

Oh, and whoever moderated this informative, please never ever use mod points again.

[1] Main memory in all mainstream machines is DRAM.

Re:What's the problem?

[FrankSchwab]

If you're going to comment on a technical subject, at least have some clue as to what you're talking about.

DRAM stores ones and zeros by storing charges on a tiny capacitor. If enough charge is stored, it reads back as a one; if too little charge is stored, it reads back as a zero. Ones are changed to zeros by draining the charge (attaching the capacitor plate to ground). Zeros are changed to ones by storing more charge (attaching the capacitor plate to Vcc). Due to technological limitations in the fabrication of the capacitors, the stored charge on them will dissipate over time - on the order of microseconds. Milliseconds after you remove power (or stop refreshing them), memory will start to become corrupted. Seconds after you remove power, all data will be gone. Within minutes of removing power, not even the most sophisticated probing of the part would be able to tell a one from a zero.

And I have no idea whatsoever where you got that idiotic 01->10->11->00 progression concept. Please wipe that from your mind.

/frank

Re:What's the problem?

[BosstonesOwn]

No but there are other things like oxides that are capable of being read. While expensive they do it and it works.

Re:What's the problem?

[Anonymous Coward]

No dear Judge Jacqueline Chooljian,

A document stored in RAM is not a tangible document.
A document stored in RAM is a volatile document.

Yes! It volatilizes!

If i power off the PC then ... no such volatile document exists.

Re:What's the problem?

[BosstonesOwn]

Guess I expect to much of people to read links off of an article they obviously haven't seen before. Just keep modding them redundant because people are lazy. Great moderating.

7. Methods of Recovery for Data stored in Random-Access Memory
Contrary to conventional wisdom, "volatile" semiconductor memory does not entirely lose its contents when power is removed. Both static (SRAM) and dynamic (DRAM) memory retains some information on the data stored in it while power was still applied. SRAM is particularly susceptible to this problem, as storing the same data in it over a long period of time has the effect of altering the preferred power-up state to the state which was stored when power was removed. Older SRAM chips could often "remember" the previously held state for several days. In fact, it is possible to manufacture SRAM's which always have a certain state on power-up, but which can be overwritten later on - a kind of "writeable ROM".

DRAM can also "remember" the last stored state, but in a slightly different way. It isn't so much that the charge (in the sense of a voltage appearing across a capacitance) is retained by the RAM cells, but that the thin oxide which forms the storage capacitor dielectric is highly stressed by the applied field, or is not stressed by the field, so that the properties of the oxide change slightly depending on the state of the data. One thing that can cause a threshold shift in the RAM cells is ionic contamination of the cell(s) of interest, although such contamination is rarer now than it used to be because of robotic handling of the materials and because the purity of the chemicals used is greatly improved. However, even a perfect oxide is subject to having its properties changed by an applied field. When it comes to contaminants, sodium is the most common offender - it is found virtually everywhere, and is a fairly small (and therefore mobile) atom with a positive charge. In the presence of an electric field, it migrates towards the negative pole with a velocity which depends on temperature, the concentration of the sodium, the oxide quality, and the other impurities in the oxide such as dopants from the processing. If the electric field is zero and given enough time, this stress tends to dissipate eventually.

The stress on the cell is a cumulative effect, much like charging an RC circuit. If the data is applied for only a few milliseconds then there is very little "learning" of the cell, but if it is applied for hours then the cell will acquire a strong (relatively speaking) change in its threshold. The effects of the stress on the RAM cells can be measured using the built-in self test capabilities of the cells, which provide the ability to impress a weak voltage on a storage cell in order to measure its margin. Cells will show different margins depending on how much oxide stress has been present. Many DRAM's have undocumented test modes which allow some normal I/O pin to become the power supply for the RAM core when the special mode is active. These test modes are typically activated by running the RAM in a nonstandard configuration, so that a certain set of states which would not occur in a normally-functioning system has to be traversed to activate the mode. Manufacturers won't admit to such capabilities in their products because they don't want their customers using them and potentially rejecting devices which comply with their spec sheets, but have little margin beyond that.

A simple but somewhat destructive method to speed up the annihilation of stored bits in semiconductor memory is to heat it. Both DRAM's and SRAM's will lose their contents a lot more quickly at Tjunction = 140C than they will at room temperature. Several hours at this temperature with no power applied will clear their contents sufficiently to make recovery difficult. Conversely, to extend the life of stored bits with the power removed, the temperature should be dropped below -60C. Such cooling should lead to weeks, instead of hours or days, of data retention.

Re:What's the problem?

[Detritus]

The bank of memory that I was experimenting with had its own refresh controller. The address decoding logic prevented it from being refreshed by memory accesses to other banks of memory. The board's keyboard monitor software was running in a different bank of memory.

Re:What's the problem?

[Dancindan84]

I can already see it coming.

Judge, "The RAM you sent was erased! You're being held in contempt of court! Bailiff, take them away."

Re:What's the problem?

[despe666]

Wanna bet they'll charge them with destruction of evidence if they actually comply with the order and pull the chips from the computer?

Re:What's the problem?

[flitty]

I hereby order you to bring in your computer monitor, to see if we can recall any images that appeared in it, and get IP addresses that way!

Re:What's the problem?

[emurphy42]

You were apparently right about the link getting slashdotted. Nevertheless, while the theory (bit flips have a side effect on the physical material that can be detected with sufficient effort) is at least plausible, I don't think it leads to anything resembling a practical solution:

1. As previously noted, you'd have to wade through a huge hex dump
2. And you'd only get the data that was most recently in RAM; digging deeper, if possible at all (I know it is for hard drives), would be even more expensive
3. And why would the **AA spend all this money, when they can (as I believe they have) just have the court order TorrentSpy to log the relevant info to disk? The government digs deep into a hard drive when it has to, e.g. they reasonably expect to find useful info re a planned terrorist attack

Re:What's the problem?

[rs79]

Attention dipshits: learn to read.

From the first line of TFA:
In a decision reported late Friday by CNET News.com, a federal judge in Los Angeles found (PDF) that a computer server's RAM, or random-access memory, is a tangible document that can be stored and must be turned over in a lawsuit.

Note the "can be stored" bit.

If you'd read the PDF of the court order you'd have noted the judge understands quite well that the RAM is volotile and that he was asking the relevant parts be stored. Specifically, he wants the ip addresses stored.

The story headline should have read "judge orders torrentspy to store IP addresses".

Re:What's the problem?

[robbiethefett]

you could simply explain to the judge that the wizards who live in the magic machine box have cast a very powerful spell that makes it extremely difficult to get the RAM out. i mean, it's pretty apparent that this judge would take that as a reasonable explanation.

Re:What's the problem?

[canajin56]

There are established rules that say that a defendant cannot be compelled to create new documents for the plaintiff, even if the new document would just be a compilation and/or summary of other documents. TorrentSpy maintains that they do not currently log IP addresses, and therefore an order to begin logging IP addresses and turn over their logs would be illegal. The judge has ruled that RAM is legally a document, and therefore they DO in fact have such documents in their possession, if for a very short period of time. As such, he has stated that a requirement to enable logging does not constitute creating a new document, and is simply transcribing a document from one format to another, which they CAN be required to do. And that's why he referenced the RAM, because without acknowledging that this data is contained in the RAM "document" at one point, they cannot be legally compelled to enable logging.

Re:What's the problem?

[cyphercell]

Can't read your link, but I'm assuming your talking about NVRAM, or NAND flash RAM and this stuff is hardly common-place.

Re:What's the problem?

[Trigun]

Or loan him RAM. Or anything else, for that matter.

Re:What's the problem?

[AK Marc]

It is illegal to demand a document be created. The judge declared that the IP logs did exist at some time, even if only in RAM, so they must be produced. Not capturing the contents of RAM before it changes is destruction of documents. The only way around this would be a literal interpretation of the details, such as producing the contents of all RAM, without context. Just the strings of 1s and 0s, as that is how the "document" is stored in RAM. The implication is that the raw contents of RAM will not be produced, but instead the data that they are seeking will be distilled from the RAM and formed into a standard file. Such additional work is not necessary and it is illegal for the judge to demand. It is akin to the judge ordering you to present your address book because it contains the number of your bookie and holding you in contempt because in addition to the "b"s (where everyone lists Bookie under "b"), you included the As, Cs, Ds, etc. You *may* do the additional work, but there is never a legal requirement. If they don't like it, they can sift through the data themselves. If they didn't want the contents of the RAM, they shouldn't have subpoenaed it.

Re:What's the problem?

[Joe Snipe]

Heluvan excuse (hlvn), noun; colloquialism, slang

1. Any attempt to justify or obtain forgiveness by blaming others.

2. A reference to Steve Heluvan; known for coining the phrase "They made me do it."

other examples of modern colloquialisms include 'allen wrench', 'pulling a homer', and 'jack off'.

Re:What's the problem?

[mako1138]

Google cache:
http://72.14.253.104/search?q=cache:PxTwoO6oZzMJ:w ww.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html +http://www.cs.auckland.ac.nz/~pgut001/pubs/secure _del.html&hl=en&ct=clnk&cd=1&gl=us&client=firefox- a

Note that this paper is from 1996, is from a symposium, and deals mainly with magnetic media. There are absolutely no citations in the part that talks about solid-state memory (lots of cites in the magnetic part though), so I am skeptical. If it could be done, he could have easily presented proof.

And now it's been ten years, with device area getting cut in half just about every two years. In modern DRAM, the charge storage is so minute that any accumulated oxide stress effects would be lost in the noise.

(While I'm at it, 00 -> 01 -> 10 -> 11, WTF?)

Re:What's the problem?

[ZWarrior]

A better headline would read " Judge Orders TorrentSpy to Turn Over RAM dump" That would have made a lot more sense, and keep the kneejerks to a minimum.

Re:What's the problem?

[calgar99]

He's lived all his life in a train station. Ever see one of the Grand Central Station boards flip ALL the way through the destinations before resetting itself back to nothing? I used to think that was so cool... -Matt

Re:What's the problem?

[oskay]

I follow you most of the way, but I'm not sure how arsenic, cesium, and darmstadtium fit into this discussion.

Re:What's the problem?

[sowth]

Because the guy is making up bullshit. It is obvious to anyone who knows anything about electronics or computers. DRAM is made up of capacitors which do store charge, but it leaks away in a matter of seconds or minutes based on the quality and size of capacitor. SRAM is made up of transisters and loses all its state as soon as power is lost.Neither one of these would retain any data whatsoever without power after even a small amount of time, say 15 minutes.

There is flash memory, but no one will use it as RAM because it goes bad after only a few thousand state changes--would probably only last a few seconds on a modern computer. There are also magnetic forms of memory used in chips, but from what I understand it is still experimental and bulky, though it was used in some ancient computers (before the days of microchips).

Re:What's the problem?

[Jon_S]

But...

This RAM goes to 11!

Re:What's the problem?

[Tim C]

No, as that's not what was ordered. The order was to start logging the information so that it can be submitted as evidence in the future, not to hand over the RAM chips themselves.

Re:What's the problem?

[MoFoQ]

well they can't really...since the original order will inevitably lead to violating the law no matter what; some what of a Catch-22/entrapment.
Following the order requires the separation of the RAM from the computer which destroys the data.

anyways, as far as logging, that's also very difficult to do. Lets say that 25% of the operations of a given computer are to manipulating memory and that the clock of this hypothetical computer is 1 billion cycles per second. So that means 250 million bytes per second, which in turn is already beyond the performance ability of hard drive storage devices. That's 21.6 trillion bytes per day. Plus how long do you have to retain the data?
This doesn't include things that happen in various buffers and caches (L1/L2, etc.) nor the fact that the mere act of writing to the hard drive changes information in memory. (and yes, 1GHz is pretty low and a single core, etc.)

I could have sworn there was a law that requires judicial orders to be grounded in the realm of reality.
But then again.....

Re:What's the problem?

[Xyrus]

Make the log, copyright it, and then forbid its distribution.

~X~

Re:What's the problem?

[Anonymous Coward]

Correct, but the wanted information is the one off the RAM itself.

To prove that TorrentSpy was making it easier to share files, the studios told Chooljian that it was necessary that they obtain records of user activity. They convinced her that the only way to do this was to obtain the data from RAM.

It also shows that the judge doesn't understand technology and blindly follows the lead of MPAA which suggested getting the data off the RAM. It's the case of the blind following another blind.

I suggest TorrentSpy create a memory dump off the RAM and give the printout to the judge. Since the data keeps changing, they can also ask the judge when they need to do another memory dump.

Re:What's the problem?

[aichpvee]

Why not, most americans think that's how the universe was created. So it only makes sense that computers run on magic, too.

Re:What's the problem?

[complete loony]

Worse, this sets a very bad precedent. Imagine this ruling being applied to a router at your ISP. All traffic that passes through a router will at some point hit a memory register, even if it is only within a network card. Thus the ISP has a document they could produce in discovery so long as they stop destroying it and record it somewhere permanently. Allowing any kind of wiretapping in a civil case.

Re:What's the problem?

[Mr2cents]

if you put "cat /dev/mem | uuencode | mail judge@court.gov" in a cronjob and let it run every minute, I'm sure he will be more than pleased.

Re:What's the problem?

[cafucu]

All trolls go to hell.

Re:What's the problem?

[fyngyrz]

The only way I can think of to get the contents of RAM chips out is to use acid to dissolve the epoxy cases, snip the little gold wires, then veeewwy veeeewwy carefully pry the silicon off the metal base.

Then you could scrape the chips until the doped silicon, metallization and insulating deposits they contained were out, and then send that along to the judge. I'm sure she wouldn't be interested in the substrate; after all, it never held any data.

I love being ruled by morons, I really do.

Re:What's the problem?

[simm1701]

The big bang was jump started by Lister using the jump leads from star bug

You've seen back to reality right? ;)

Re:What's the problem?

[GreyPoopon]

you could simply explain to the judge that the wizards who live in the magic machine box have cast a very powerful spell that makes it extremely difficult to get the RAM out.

As funny as this is, the problem is that most judges have a sense of humor that is directly proportional to their understanding of the subject matter. In other words, if the judge is confused, he's not likely to find anything funny about it (even if the rest of us do).

Re:What's the problem?

[WhyDoYouWantToKnow]

No. Due to the (often decried as faulty) moderation system, you don't get karma for being funny. That's why someone who's being funny will get mod'ed insightful then adjusted to funny. For some reason ./ doesn't think that being funny is good for your karma. I'd really hate to live in their nirvana where there is no laughter.

What's next?

[raeb]

"Please sir, hand over your motherdisk."

Re:What's next?

[Opportunist]

I insist that you hand over your ISDN drive. And your SCSI modem.

Re:What's next?

[heinousjay]

Complaining about a common term promoted by the purveyors of the equipment is geekery at its best. I salute you sir, truly your pedantic nature must make you a hit at parties.

Re:What's next?

[k1980pc]

I think he should have targeted those tubes which carry the data. Turn in all the ethernet cables.

Re:What's next?

[bassgoonist]

Actually, if you believe wikipedia (I do in this case), modem IS the correct term http://en.wikipedia.org/wiki/Modem

"Broadband modems should still be classed as modems, since they use complex waveforms to carry digital data. They are more advanced devices than traditional dial-up modems as they are capable of modulating/demodulating hundreds of channels simultaneously."

Re:What's next?

[jkmullins]

Actually, they are. The data has to be modulated to a particular frequency that equates to a television channel, using 64-QAM or 256-QAM modulation on the downstream (to the customer) channel, and QPSK or 16-QAM on the upstream (to the provider) channel. The cable system I used to work for used 64-QAM on 105MHz downstream (a very, very low frequency for a cable modem, equating to channel 97 digital 1 if I remember correctly) and QPSK on 26MHz (pretty typical). Just because the channel is carrying digital data doesn't mean it isn't modulated.

Re:What's next?

[jelle]

"Since they carry digital data over a digital medium, I would disagree. They aren't "modulating" anything."

The 'cable' is coax, which is an analog medium, not digital. The 'cable modem' modulates (QPSK/QAM, etc) the bits into an analog signal that then again is modulated into a fixed channel (usually 5MHz wide) and puts it onto the coax...

There really is a lot of 'modem' (MOdulator DEModulator) activity going in in a cable modem...

Re:What's next?

[jelle]

I'm not trying to be pedantic, but "modulation" for the devices originally called "modems" means altering the pitch of the audio signal. They were analog devices by definition. But I guess times are a changin'.

Nope...Altering the pitch? Only FM does purely that (frequency modulation), and even telephone modems have used more advanced method than that for any speed over 1200 bps...

PSK = Phase shift keying: modulates the phase

AM = Amplitude modulation (...)

QAM (as used in both your telephone modem and also in cable modems) = Quadrature _AMPLITUDE_ modulation... modulates the IQ (amplitude and phase together)...

http://en.wikipedia.org/wiki/Modulation

"In telecommunications, modulation is the process of varying a periodic waveform, i.e. a tone, in order to use that signal to convey a message, in a similar fashion as a musician may modulate the tone from a musical instrument by varying its volume, timing and pitch."

Re:What's next?

[fbjon]

Actually QAMQADM, the 'M' is for Modulation. It looks vaguely arabic... Qam q'adm.

HD

[gregoryb]

Maybe she meant 'hard drive'? The majority of the people I supported while working IT during college used the terms RAM and hard drive interchangeably.

-gb

Re:HD

[AKAImBatman]

No, nothing like that. I can only presume that the judge's order explained the reasoning in detail, but basically the court has decided that if it's in RAM it's an electronic document. To that end, the judge has ordered TorrentSpy to turn on logging to capture these "electronic documents".

It's basically some wild legal theory invented to provide a method of giving the MPAA the discovery information they want. The bright side is that the judge has decided that the individual IP addresses may be redacted to prevent TorrentSpy's users from being targeted.

Re:HD

[voice_of_all_reason]

Are you crazy? You can't play "oh, I meant" games here. He is Serious Judge and this are Serious Court.

What if he said "Oh, he's not guilty, but I really meant 5 years in prison."

Re:HD

[Random832]

IME, it is very common for users to call disk drives "memory". And while geeks like us don't use it that way, it's probably technically correct, both for the everyday and technical meanings of "memory", even though we don't normally use it that way. True, it's not random access memory.

Yes it is.

Blank RAM

[Esion Modnar]

And these guys get arrested for destruction of evidence when they find that the RAM is blank. Un-freaking-believable.

Re:Blank RAM

[LordSnooty]

We're now at a stage where people should be employed by the courts system to act as educators and technical experts for any case - not advocating one side or the other of course but at least clarifying points like this for a judge. Why is this not happening.

Re:Blank RAM

[zCyl]

Apparently "Your honor, you seem to be an idiot," is not an effective objection.

Re:Blank RAM

[Anonymous Brave Guy]

I doubt anybody will get in trouble because a judge doesn't know a PS/2 port from a SATA connector.

Don't count on it. In the UK, under the Regulation of Investigatory Powers Act, anyone can be required to turn over the password to decrypt any encrypted data they have that is needed for certain legal purposes... even if the "encrypted data" is just random bits, with no significance and not derived from any meaningful data. You are presumed guilty if you won't (or can't) supply the appropriate password.

If this case happened in the UK, the RIP Act would appear to make you guilty by default if you couldn't supply a password that "decrypted" whatever data was in the RAM when it was next powered up to turn it back into whatever they think was there before. And given that these are people who don't appreciate the volatile nature of RAM, I wouldn't hold out much hope of explaining to the judge why it's not possible to comply with their ruling.

Aren't you glad that our inept legislators and your incompetent judges work in different jurisdictions?

Re:Blank RAM

[bcattwoo]

And these guys get arrested for destruction of evidence when they find that the RAM is blank. Un-freaking-believable. No, because the article summary misrepresents the actual ruling. TorrentSpy claims that it can't turn over certain data because it was never logged. The judge ruled that since the data in question was in the RAM, TorrentSpy was in possession of said data and must preserve it for discovery, i.e. start logging it. The judge in no way ruled that they must physically turn over the RAM chips.

Re:Blank RAM

[ultranova]

Aren't you glad that our inept legislators and your incompetent judges work in different jurisdictions?

Inept ? Incompetent ? You just described one of the most brilliant schemes to get around the laws proctecting ordinary citizens from arbitrary arrest I've ever heard of, and you call the people who came up with it incompetent ? Just what are your standards for competence, pray tell ?

Re:Blank RAM

[Jehosephat2k]

"or run any programs on their servers." of course, doing that would taint the evidence, the contents of the RAM running the program they are using to extract it. What a tangled web we weave when we practice to deceive.

Re:Forgive My Ignorance, But...

[RingDev]

You are correct, so the only viable solution is to remove the RAM with out turning off the machine!

-Rick

PS: KIDDING!!!

link is broken

[chip rosenthal]

Here is a working link to the article: http://news.zdnet.com/2100-9588_22-6190900.html

Re:link is broken

[Otter]

Also, the description of the ruling is inaccurate. The issue is whether data "stored" in memory but never written to disk are sufficiently stored in the user's system that a user might be compelled to archive them to disk or paper. The judge isn't AFAICT saying that the bits actually in the RAM can be demanded.

New Law

[Orclover]

It should be Law that legal officials of all sort have to have a "qualified technical advisor" present when giving any court order or summons. Mind you we geeks would then lose our main advantage when it comes to skating on the fringes of laws *cough"mp3 collection"cough*.

hmm..

[JustNiz]

I wonder if its floppy or hard ram?

Re:hmm..

[Coraon]

Depends, is there cute girl ram around?

Re:hmm..

[Virgil Tibbs]

I used to have a 5 inch floppy, but its got reduced to three and a half now.... :(

Seinfeld?

[eharvill]

Reminds me of the Seinfeld episode where George wants to keep his high score in a Frogger arcade machine and rigs up a car battery so he can unplug it and move it elsewhere.

Sure

[Nom du Keyboard]

Sure, I'll unplug it and send it to you right away, your Honor!

Re:invasion of privacy

[iluvcapra]

As the TFA explains, the judge means that the RAM would become a legal document, and that any information put on it would have to be retained for later examination, and that if this ruling were extended to things like SOX, a SOX-complying company would have to keep transaction logs or images of their RAM so that the state of the RAM at any point in the past could be accounted. EEep.

precedent

[nomadic]

Keep in mind this is a magistrate judge, which is one step below a trial court judge (who is already generally below 2 levels of appeals courts). Magistrate judges work on a very fact-specific level, so I don't think this ruling would make even persuasive authority. I think I cited a magistrate judge like once, and that was just because the subject was so obscure I couldn't find anything else...

Re:Judges shouldn't be allowed on these cases.

[benfinkel]

Do some googling. This Slashdot bit doesn't adequately explain it.

Torrentspy has been ordered to retain records of all of the information that is in their RAM as part of discovery. Not turn the physical RAM chips over to the court.

Even if they had the information off the ram...

[CaptainPatent]

Even if they had the information off the ram, there's no way to tell what context they're running the information in.

1001011010100100 - Well with this information I have no choice but to rule the defendant innocent... oh wait...
1001011010100101!! That changes everything! - I have no choice but to rule the defendant guilty !

Re:invasion of privacy

[laughing rabbit]

Damn! I knew we should have stopped referring to 'pages' of memory.

all well and good but....

[otacon]

Even if they could prove you went to torrentspy...theres nothing they can do......even if they proved you downloaded a torrent...there is nothing they can do, as torrents have no copyrighted data.....tey would have to prove you downloaded the content the torrent pointed to, which at that point is out of the torrent spy loop...but who know what they'll try to say

Re:invasion of privacy

[advocate_one]

and that if this ruling were extended to things like SOX, a SOX-complying company would have to keep transaction logs or images of their RAM so that the state of the RAM at any point in the past could be accounted.

oh please let it be so... that would show just how ridiculous it is... the sheer amount of disk space and processor cycles required to effectively record the state of RAM for enterprise servers would bring this whole stupid ruling crashing down...

Re:invasion of privacy

[iluvcapra]

oh please let it be so... that would show just how ridiculous it is...

Wholly agree. Another implication in the article is that someone could hit you with a court order, and the moment you were served, if your machine was on, turning it off (or even killing a process or doing something that caused a pageout) could be destruction of evidence.

Over Simplified Headline...

[nick_davison]

It has nothing to do with handing over physical ram. It's about whether you have a piece of information in memory but deliberately fail to ever write it to a log - and whether you can be compelled to add that to your logs.

The more worrying demonstration of ignorance for me is:

"To imagine my information being disseminated without my written or verbal consent is unnerving," she said. "Then again, if I'm doing something I know is illegal, can I protest?"

If you smoke dope in your own home, can you protest if the police break in without any kind of a warrant?

If you like oral sex in any of the states that ban it, can you protest that your landlord installed a hidden video camera to catch it?

If you had depression and were hospitalized for being potentially suicidal, can you protest if the hospital gives the information to a former spouse who's trying to get child custody?

Of course you can damn well protest. Violation of your privacy is not acceptable simply because you're happening to commit a crime at the time.

It's especially not acceptable if you're not even necessarily committing a crime (seizing all server logs of all people using a torrent when only some of them are sharing copyrighted information over it). "Many people in group X are criminals, thus we're pulling all information on group X" is absolutely not acceptable. Imagine if the argument was "Many people in this housing project are involved with drugs. So we're demanding complete phone taps for everyone that lives there and we'll decide who's a criminal once we have that."

Re:Over Simplified Headline...

[Puls4r]

Excellent argument. Also, I'm curious how this would fall under the 5th amendment. I'm having trouble thinking of some type of legal analogy. The information exists, however it is not available to law enforcement in its current form. So they try to force the defendant to give it to them, thus incriminating themselves? It would seem to me that a good argument could be made that if the authorities want it, they should have to create a warrant and go get it themselves.

Re:Over Simplified Headline...

[nick_davison]

Joss Stone had a similar problem:

She moved to the U.S. at 16, started dating her producer's son at 17. She then proudly went around telling everyone how great the sex was - afterall, it's legal in England from 16. In California where the californicating was happening, the age of consent is 18. Everyone sat around wondering how long it was before he got arrested as a child molester because of her pride in her relationship.

Places where oral sex is illegal: Alabama, Arizona, Florida, Idaho, Kansas, Louisiana, Massachusetts, Minnesota, Mississippi, Georgia, North and South Carolina, Oklahoma, Oregon, Rhode Island, Utah, Virginia and Washington D.C.

In Georgia those charged and convicted for either oral or anal sex can be sentenced to no less than one year and no more than 20 years imprisonment.

In Nevada it is illegal to have sex without a condom.

In Willowdale, Oregon it is against the law for a husband to talk to dirty in his wife's ear during sex.

In Washington State there is a law against having sex with a virgin under any circumstances (including the wedding night!).

In Fairbanks, Alaska it is illegal for mooses to have sex on the city sidewalks.

http://www.journalism.sfsu.edu/flux/gSpot/sexLaw.h tml

Re:Over Simplified Headline...

[Anonymous Coward]

OK, so is a pregnancy in Nevada considered sufficient evidence to convict, or can you argue that the condom must have failed?

Presumably Nevadans are becoming a rare species....as should Washingtonians, unless they are sensible enough to go out of state for the big night. Although I suppose there is some obscure law about transporting people across state lines for immoral purposes.

Re:Judges shouldn't be allowed on these cases.

[mypalmike]

he still couldn't understand this udderly basic principle

Moo.

principles

[Anonymous Coward]

if he still couldn't understand this udderly basic principle, how is he going to be competent with the remainder of the case? Maybe the litigants cud moove for dismissal then milk it for publicity, but I suppose the cow-ards are graduates of Bovine University.

Re:principles

[dr_dank]

I have a beef with the AC, mod down his bull.

Re:What's the problem? Ordered Recording!

[redelm]

This is unbelieveable, especially in a Civil case. Sure, you can order the production of documents. Even expost format conversions. But I've never heard of imposing a requirement to make new documents.

The meatspace equivalent to RAM-recording is to require conversations to be taped and those tapes to be produced. Worse (more intrusive) actually, since RAM must be slowed to be recorded. RAM is as ephemeral as air.

I expect an appeal. I understand the desireability and value of the evidence, but rules are rules.

Re:invasion of privacy

[Martin Blank]

ZDNet appears to be forwarding referred clicks (possibly just from Slashdot) to the .comnull address. It works fine if you just paste in the link and press Enter.

Re:You would think that???

[Hijacked Public]

Since all we have is her decision in the case, I'd have to assume that the in court arguments made it around to the fact that TorrentSpy isn't logging connections to their server therefore the logs requested by the MPAA do not exist. The MPAA probably made the argument that the data did indeed exist (it appears the location they chose was in RAM), but it just wasn't being captured.

The order is far closer to an order to maintain logs than it is a request to pull the RAM out of the server and mail in. But being dramatic about how stupidly stupid the MPAA is and Judges and everybody but Slashdot geeks is much more fun than actually reading and understanding a court order.

What is most worrisome about the ruling, if everyone would shut up about physical RAM chips, is that a transient collection of 1s and 0s is considered a 'document'.

Thought control

[drDugan]

At every point in our technical development, the most functional machines are always compared to humans. Now, the closest machine that can emulate actions similar to our own is the mini(personal) computer and connected devices. This analogy will continue, as machines get more and more functional.

For purely technical reasons, we have a convention now that a person's thoughts are private. We have no technical way of reading a person's active thoughts or dreams trolling their memories. We have different levels of social responsibility for a person's thoughts and actions.

Aside from the technical issues of volatility, this issue is central to what information is public and what information is private. Taking a copy of a computer's RAM, which is technically possible in a running computer using, say and external hard drive, by order of a court, is a very real possibility, and one that has extremely deep implications for what information society deems as "discoverable".

I think the real issue here - the one that would be fascinating to discuss - is for senescent beings (and computers are marching that way closer and closer), is there a line that we should not cross and allow other beings (humans, computers when we agree they are sentient) to have truly private thoughts? According to the mentality of this ruling, no any information you can grab is fair game. It bodes very poorly for future generations with highly advanced MRI devices that can read thoughts.

Oh my. I think you are a fellow old-timer.

[hummassa]

When I was a kid, RAM was made of flip-flops and I had to go to school with three feet of snow, and it was uphill both ways. Oh boy.
Nowadays, BosstonesOwn (794949), RAM is made out of capacitors and they have to be "refreshed", that is, some circuit re-reads/re-writes the same values all over many times per second. One second without refresh, and all the data is gone for ever and ever and ever.

BEFORE: a flip flop has an input, a clock, and an output. when you put 0 in the input and pulse the clock once, the output is now 0; if you put 1 in the input and pulse the clock, the output now has 1. This is how one bit of memory is stored. Also know as SRAM, this kind of memory is fairly large in terms of integrated circuits (like 20 transistors in-die), is reasonably fast, and it's still found in L0/1/2 caches of microprocessors, in quantities in the range of Megabytes.

NOW: you have a capacitor, if you put 1 in its input (that is the same pin as its output) it retains this one for a fixed period of time (T). if no-one tries to read this bit in, like, T/2, a circuit in the memory reads this bit, and if it's 1, writes again 1 in its input. Also known as DRAM, this kind of ram is smaller per-bit (one capacitor in-die, 40-60 times smaller than a bit of SRAM), but the memory itself has to add in the end the size of the refreshing circuit, it's slower (because read cycles must be synched in time with refresh cycles), and is found in the "RAM" socket of your motherboard, in quantities in the range from hundreds of Megabytes to Gigabytes.

So, DRAM _really_ clears, i.e., if unplugged when plugged again it's all beautifully zeroed.

Ok??

Re:Oh my. I think you are a fellow old-timer.

[trolltalk.com]

When I was a kid, RAM was made of flip-flops and I had to go to school with three feet of snow, and it was uphill both ways. Oh boy.

You were lucky - you had a supply of cheap beach sandals! We had to make our bits out of acorns. Our computers would crash every fall when the squirrels would bury all our RAM.

Re:Oh my. I think you are a fellow old-timer.

[ScriptedReplay]

Why sonny, count yer blessings. Them acorn-based computers crashed only once a year. We didn't have no acorns so we had to make do with bundles of straw - upright was 1 and tumbled was 0. And the memory bus was rock-based - we threw rocks to flip them bits, and let me tell ya, it was SLOW to flip 'em back to 1. Then rain would get the straw all soggy and zero 'em bits so we'd have to hack'em open and spred 'em in the sun to dry. And we'd have to rebuild them computers daily anyway, 'cause in the morning sheep would pass through the field and the blasted rams would eat at the memory.

I'd still use one even now, for ol'times' sake, 'cause my lawn gets so little rain these days, but the damn kids are worse than the rams. And I thought about using them kids instead, but my son's lawyer advised me against it. So I have to make do with flipping 'em the bird instead.

Re:Oh my. I think you are a fellow old-timer.

[OldManAndTheC]

We didn't have no acorns so we had to make do with bundles of straw - upright was 1 and tumbled was 0.

Whoa, whoa ... you had ones and zeros?!?!

Luxury!

Perception

[tyrantking31]

The problem the judge has in this case is perception. The plaintiff's are arguing that there is a way for the defendant to create a tangible record of the contents of their RAM which the defendant is obligated to produce under the rules of evidence. The defendant, in trying to educate the judge as to the nature of RAM is perceived as hiding something. The judge is forced either through her own ignorance or through defense council's incompetence to order the production of the information. It's unfortunate, but probably the correct decision if the judged thought that the defendant was hiding discoverable information. Thankfully there is an appeal and perhaps the appellate attorneys will be more competent or the judge will be more open receptive.

I see this as net positive.

[JRHelgeson]

While industry experts lamented the judges decision in this case, this newest revelation, that computer RAM should be turned over as part of discovery, proves that she has no concept of the issues she is addressing in her court. This provides fertile grounds for appeals as she is obviously dealing with issues she cannot even comprehend.

The fact that she has ordered the defendant to CREATE evidence (log files), in order to turn it over to the plaintiff as part of their discovery request is absurd.

Ruling makes sense

[Have Blue]

The judge didn't get the technical aspects wrong. The judge did not take technical aspects into account at all, since it's a legal decision. The finding was that the contents of a computer's memory - specifically, the persistence of a client's IP in the network stack or server software while transmitting data - was relevant to the case and it should be provided to the court. In other words, TorrentSpy's loophole of not logging anything to disk is not valid and is no different legally from creating and then deleting logfiles. Once that decision has been made, the technical aspect is someone else's problem (TorrentSpy's).

(IANAL)

the D in DRAM

[whoever57]

Not in modern DRAM. Modern DRAM is basicly a capacitor.

That's what the "D" in DRAM means: dynamic, as opposed to SRAM, which does not require refreshing and in therefore static. However, in both cases, power is stil required to continue storing the state.

Re:the D in DRAM

[josephdrivein]

I agree with you. The parent has misunderstood something, I think it should be apparent from the article he linked to. I didn't read it, this is /. :)

First of all, nowadays dynamic RAM doesn't even have a real capacitor for each bit, but it uses wires as (real small but cheap) capacitors. The capacitors are so small that when the RAM reads a bit it is destroyed, each time something is read, it has to be rewritten too. The reading circuit ensures this.
Because of leakage, they have to be refreshed thousands of times a second, or charge (and information) would be lost.

Add to all that the fact that a forensic method that tries to read very small charges on the storage nodes once the RAM is powered down, would require that the chip is open, some metalization is taken off and some really clever way to read terribly small charges is implemented _off-chip_. The wires you need to contact are something like 200nm away from each other.

I think it's not possible.

A Good Thing

[ratboy666]

I am sure that there will be a lot of "snicker" replies -- how can the magistrate be so stupid...

But this is an interesting idea. RAM holds information, specifically the IP addresses in this case.

"Sorry, we don't have the IP address available; they are never recorded". To which the reply is: "They ARE recorded. In RAM. So copy RAM".

Why this is a useful result: It means that it *could* become illegal to build a computer that has "unreadable" memory, because *that* memory may be where information needed by a court is being kept, and it needs copying.

Which means that "secure writeable storage" for DRM becomes illegal (at least on computers).

But, back to the topic, the magistrate is dead on. Of course, the RAM could simply be dumped onto a hard disks, lather, rinse, repeat. I don't think INTERPRETATION of the document was discussed!

Mandatory logging

[zerofoo]

Courts are trying force administrators of systems that do not log activities to start keeping logs.

There are many problems with this:

Technical: RAM contents are not permanently stored due to the technical nature of RAM. This judge wants to change that.....essentially storing everything that passes through RAM.

Cost: Why should the owners and operators of systems bear the cost of copyright enforcement? As a system administrator, what do I gain by spending my company's money on lots of disk and tape to keep logs for the RIAA? Why is that my responsibility?

Responsible party: If my users agree to only use my systems for legal purposes and they break that agreement, why am I required to provide anything to any third party? If they violate my TOS, I should be able to kick them off my network. The RIAA and their civil case should not involve me or my network. Their gripe is with the end user. If they need my help to pursue their case, then they don't have much of a case.

SARBOX forces companies to keep all emails and IM records as potential evidence. What's next? Recording every spoken word just in case someone needs it in court?

The burden of proof should be on the accuser - not on the accused.

-ted

Re:Mandatory logging

[RancidPickle]

Well said. Perhaps it's time to invest in Seagate and Western Digital.

If they want the RAM dump, one could just dump the binary to a 50,000-page Word document with 6-point font and hand that in. Not overly useful, but does fit with the draconian requirement to create documents of all RAM states.

And you thought Windows was slow now... just wait until you have to dump every RAM state every 64ms.

Re:invasion of privacy

[Stewie241]

don't hard drives have cache memory? Better record that too, just to be safe!

Not a new document

[SuperKendall]

Read again, the argument is that the contents of RAM are effectively a document, and the order is to retain that document instead of discard it.

Sounds reasonable to me, even if technically impractical (you can't realistically store every change to memory).

Read the judgement

[cyberianpan]

since RAM must be slowed to be recorded On page 3 it says

4) Defendants have failed to demonstrate that the preservation & production of such data is unduly burdensome, or that the other reasons they articulate justify the ongoing failure to preserve and produce such data

They failed to make that case & I doubt they could.

Whilst ephemeral, data is being captured in RAM - to maintain a session of course they've to identify the IP. It isn't really all that hard to write that data to disk. Ok the logfiles would be a few GB a day - from technical viewpoint the judge's request is reasonable.

Re:What's the problem? Ordered Recording!

[arborlaw]

Agreed. We've been here before.....

The SonicBlue / ReplayTV case in 2002 involved an order by the court to ReplayTV to create the technology to record information about subscribers for purposes of determining how much usage was violating the TOS and the law.

From the defendant's brief in that case, which makes it quite clear that the information does not exist and would involve an affirmative duty to surveil:

Federal Rule 34 Neither Requires Nor Authorizes An Order To Create Records That Do Not Exist.

Not surprisingly, Plaintiffs cite no authority for such an order. It is well settled that a party is not required to create, either in paper or electronic form, data that does not currently exist within its possession. Steil v. Humana Kansas City, Inc., 197 F.R.D. 445, 448 (D. Kan. 2000) (party "cannot be compelled to produce documents which do not exist" ). Rule 34 "only requires a party to produce documents that are already in existence." Alexander v. Federal Bureau of Investigation, 194 F.R.D. 305, 310 (D.D.C. 2000) (emphasis added). "A party is not required 'to prepare, or cause to be prepared,' new documents solely for their production." Id. Plaintiffs misunderstand Rule 34 and the law relating to the discovery of data compilations. It is true that Defendants may be required to produce both hard copy documents, and electronic data, that are stored in Defendants' own files and computers. But, with the sole exception of the limited my.ReplayTV.com information discussed below, the information sought by Plaintiffs is not "electronically stored" on Defendants' computers. It does not exist anywhere yet. It does not even exist on individual consumers' PVR hard drives, much less on Defendants' computers. And if the information is created, and a program written to log it in the future, it would exist on a consumer's personal property, not on ReplayTV's computers.

Rather, Plaintiffs are asking the Court to order Defendants first to write a program to implant in a consumer's ReplayTV unit in order to create and store the data, and then to write software to collect the data from consumers (without further notice to them) and disclose it to Plaintiffs. Neither Rule 34 nor case law obliges Defendants to take these extraordinary steps.

--originally provided by Mike Godwin in SonicBlue discussion, Cyberia-L

Re:What's the problem? Ordered Recording!

[AK Marc]

Exactly like that, except, you are told that your house could have been, is, or could be a crime scene, so you are required to take one photo of every room every, say, 10 seconds and produce them up to 7 years later if so asked. Say you have 10 rooms in your house, when you do the math that's about 220 million photographs you must take at your time and cost and produce for the court. It's no big deal, it's just a "snapshot" so that the information isn't lost over time...

RTFD

[Anonymous Coward]

You have been misinformed if you take the slashdot summary at face value.

And you have been misinformed if you RTFA.

The judge's decisions responds to most of the comments posted here, and the lawyers comments naively repeated by the author of the article.

Instead, read the decision (RTFD) that the article links to.

Although she mistakenly says websites have RAM, she definitely knows what RAM is, if you read her analysis about why the RAM should be turned over. She doesn't want the chip, she wants the ip address that temporarily pass through the website server's RAM.

Based on existing case law from other copyright cases, whatever passes through a computer's RAM is a tangible copy, if only a temporarily one. According to the rules of discovery, the defendant must produce this copy because it is within their control. It is within their control due to the fact their provider uses the a web server (Microsoft's), and this server has the capability of logging ip address that temporarily pass through the computers RAM.

So "turning over the RAM" actually means "hand over the documents that are temporarily stored in the RAM by simply turning on the logging function of the webserver." The judge is simply following existing case law and discovery procedures.

Re:What's the problem? Ordered Recording!

[Col. Blackwolf]

While I object to some of the conclusions that the court has drawn in this particular case, I am far more concerned with the broader implications of the paragraph starting line 20 of page 24, referring to the the US Wiretap Act (18 U.S.C. 2510-22). "First, the court concludes that this statute is not implicated because, as to electronic communications, it only prohibits interceptions during transmission (not while in electronic storage, i.e. RAM), and the disclosure of electronic communications intercepted during transmission. See Konop v. Hawaiian Airlines, Inc.302 F.3d 868, 878-879 (9th Cir. 2002). This is true even though storage is a necessary incident to transmission." This is an explicit writ authorizing anyone the legal right to record any and all information that passes through the RAM on their computer. I.E. if I own webserver X, I am within my legal right to log all information, or a portion thereof, that passes through my system, by virtue that it will reside, however briefly, in that system's RAM. This includes data for which my server is not the intended recipient, as it has still been electronically stored on my system. For example, I could record the addresses of all emails that route through my server. And since this recording is my property, my consequent sale of said information to interested third parties is completely legal. This also means that any gov't agency that so desires this information can acquire it via a straightforward civil information discovery request, bypassing the more stringent requirements to obtain a valid wiretap warrant. The implications of this ruling for the future of data protection and security are frightening. While I am confident that it will be overturned or at least limited in the future, the potential for abuse is mind-boggling (like most things governments seems to do these days).

And that's not essentially wiretapping how?

[Namlak]

What's next, being ordered to "log" the electrical signals on your phone line?

Re:invasion of privacy

[cbroglie]

The files are inside the computer!

Re:What's the problem? Ordered Recording!

[knowlton]

I've read recently (was it on /.?) that in order for 4th amendment protections to apply, there has to be a reasonable expectation of privacy.
When you send unencrypted bit streams over equipment that is owned by a third party, you have no reasonable expectation of privacy.

If you want to create a reasonable expectation of privacy, use a privacy envelope of some sort. E.g., PGP. Otherwise, the email you send has even less legal protection than snail mail. AS IT SHOULD BE.

Err....no.

[DeadCatX2]

Not in modern DRAM. Modern DRAM is basically [sic] a capacitor.

Sure, forgetting about the whole row and column stuff, and the sense amps...

However, due to the natural resistance of silicon there is always some leakage current leaving the capacitors.

Incorrect. Capacitors lose charge because dielectrics are not perfect insulators, and thus some current actually leaks through from one plate to the other.

This means that RAM left alone for more than a few tenths of a milisecond will lose enough voltage to drop to a logical 0

Disturbingly wrong. Most manufacturers specify that a row of DRAM must be refreshed at least every 64 milliseconds. In fact, Wikipedia cites a pdf saying that some information can be retained for up to minutes in a cell of DRAM - though you will get some bit errors.

TO prevent this, RAM is constantly refreshed- the ram chip will spend spare cycles writing its own value to itself.

Actually, the memory controller will issue a refresh command to the DRAM chip. This is probably what you were thinking about before...a row refresh must happen every 7.8 microseconds or so (depending on the RAM chip). But, that's because the refresh operation only refreshes a single row. The DRAM chip usually has an internal address counter, so you just say "refresh the next row" and the DRAM chip already knows what the "next row" is, and afterwards it increments it so the next time you issue the refresh command, it refreshes the next row. If you execute these refresh operations every 7.8 microseconds, then in 64 milliseconds you will refresh every row of memory on the DRAM chip.

Oh, and by the way, reading from any cell of DRAM will refresh the entire row that cell is on, because reading from DRAM is a destructive operation. Therefore, there's actually a row of latches at the bottom of the columns, and the values from those latches are placed back into the capacitors while the bit of interest is being shuffled out onto memory bus.

Writing to a cell also requires reading the entire row, which means that writing also refreshes that row.

Re:Err....no.

[omnivagus]

Not in modern DRAM. Modern DRAM is basicly a capacitor.

Not in modern DRAM. Modern DRAM is basically [sic] a capacitor.

You keep using that word. I do not think it means what you think it means.

Agreed - mostly

[DeadCatX2]

SRAM only consumes "large currents" (for ambiguous definitions of large) whenever it needs to switch states.

DRAM, however, consumes "large currents" every time it charges a row of capacitors. However, the large current is very brief (on the order of several ns) but happens frequently and periodically (on the order of several us).

DRAM is smaller, simpler and power hungry BECAUSE of all the refresh's required.

Er, it's power hungry because of the refreshes, but it's smaller because it's 1 capacitor and 1 transistor, as opposed to several transistors.

As far as simpler....I wouldn't go that far. SRAM is WAY simpler to interface to than DRAM, because the SRAM doesn't need an intelligent memory controller which understands how to burst large amounts of data, and how to handle the latency for the first access. Oh, yeah, and don't forget that the memory controller needs to send refresh commands periodically to the DRAM...

I feel a song coming on...

[merikari]

Ah, sorry about that, it was something completely different...

-----

FIRST JUDGE: Aye, very passable, that, very passable bit of copypasta.

SECOND JUDGE: Nothing like a nice order of Château de RAM, eh, Josiah?

THIRD JUDGE: You're right there, Obadiah.

FOURTH JUDGE: Who'd have thought thirty year ago we'd all be sittin' here with Château de RAM, eh?

FIRST JUDGE: In them days we was glad to have the price of a cup bits.

SECOND JUDGE: A cup o' all zeroes, at that.

FOURTH JUDGE: Without capacitors or electricity.

THIRD JUDGE: Or bits.

FIRST JUDGE: In a cracked cup, an' all.

FOURTH JUDGE: Oh, we never had a cup. We used to carry our RAM in a rolled up newspaper.

SECOND JUDGE: The best we could manage was to suck on a piece of damp SIMM.

THIRD JUDGE: But you know, we were happy in those days, though we were poor.

FIRST JUDGE: Because we were poor. My old Prof used to say to me, "Money doesn't buy you happiness, son".

FOURTH JUDGE: Aye, 'e was right.

FIRST JUDGE: Aye, 'e was.

FOURTH JUDGE: I was happier then and I had nothin'. We used to scavenge for bits in this tiny old hall with no ventilation for all the excess heat from the computer cluster.

SECOND JUDGE: A hall! You were lucky to work in a house! We used to have court sessions in one dark room, all twenty-six of us, no furniture, 'alf the memory modules were missing, and we were all 'uddled together in one corner for fear of stepping on one them SIMMs.

THIRD JUDGE: Eh, you were lucky to have a room! We used to have to chew wires for random bits in t' corridor!

FIRST JUDGE: Oh, we used to dream of workin' in a corridor! Would ha' been a palace to us. We used to get our RAM from an old water tank on a rubbish tip. We got woke up every morning by having a load of IP lawyers dumped all over us! House? Huh.

FOURTH JUDGE: Well, when I say 'house' it was only a hole in the ground covered by a sheet of tarpaulin, but it was a house to us.

SECOND JUDGE: We were evicted from our 'ole in the ground; we 'ad to go to the lake and see if someone had simulated a Turing machine with rocks.

THIRD JUDGE: You were lucky to have a lake! There were a hundred and fifty of us working in a computer case in t' middle o' road.

FIRST JUDGE: A tower case?

THIRD JUDGE: Aye.

FIRST JUDGE: You were lucky. We worked for three months in a mini tower in a septic tank. We used to have to get up at six in the morning, ziplock all the zeroes, eat a crust of stale bread, work pro bono, fourteen hours a day, week-in week-out, for sixpence a week, and when we got home the DOJ cronies would thrash us to sleep wi' a belt.

SECOND JUDGE: Luxury. We used to have to get out of the lake at six o'clock in the morning, clean the lake, eat a handful of 'ot gravel and simulate a Turing machine with our intestines, work twenty hour day pro bono for tuppence a month, come home, and DOJ would send people to thrash us to sleep with a broken bottle, if we were lucky!

THIRD JUDGE: Well, of course, we had it tough. We used to 'ave to get up out of pizza boz-sized case at twelve o'clock at night and lick road clean wit' tongue just in case someone had left some bits there. We only ever found two bits, a one and a half a zero, worked twenty-four hours a day pro bono for sixpence every four years, and when we got home our DOJ had already fired us and would send someone to slice us in two wit' bread knife.

FOURTH JUDGE: Right. I had to get up in the morning at ten o'clock at night half an hour before I went to bed, drink a cup of sulphuric acid, work twenty-nine hours a day for RIAA, and pay the recording industry for permission to come to work, and when we got home, Gonzales would kill us and dance about on our graves singing Hallelujah.

FIRST JUDGE: And you try and tell the young people of today that ..... they won't believe you.

ALL: They won't!

Reminds me of an old DOS product

[nurb432]

DejaView.. It would take snapshots of your ram and create a file off them so you could restore them later and umm *cough* bypass copy protection.

Cool little product.

cat /proc/kcore lpr

[tehdaemon]

cat /proc/kcore > lpr
And send the MPAA the bill for a new laser printer, toner and about a thousand reams of paper, and first class postage for shipping it to them.

Rerun this command as often as the printer finishes, (and get more ram *evil grin*)

T

is the ruling about physical RAM at all?

[siddesu]

i am kinda late to the fray, but the actual ruling doesn't seem to concern itself with the technical aspects of RAM, instead, it addressess the argument "does TorrentSpy have electronic recordings of their server logs", and, as far as read, it seems to say "yes, because data is in RAM for a while, and RAM is an electronic media built for the purpose of storage and retrieval of information, albeit short-term one, and TorrentSpy can read the data during that time".

The whole argument is there in the first place because TorrentSpy seem to allege they don't have logs because the logs are not on disk, but in RAM, which is transient and not an electronic medium.

So, to my IANAL eyes the ruling says "if you are in the US, and you have been issued a court order to store all your electronic communications, you better do so and don't come up with excuses which are lame technically."

I respectfully decline to comment on whether this ruling is good, bad or ugly.

Re:is the ruling about physical RAM at all?

[Brian Gordon]

The excuse that RAM is volatile is hardly lame, it's just the way computers are built and no amount of judicial yammering will change it.

Re:is the ruling about physical RAM at all?

[Hal_Porter]

Well, they could write them to disk then couldn't they? There's a world of difference between "we never had that data" and "we did have it we don't store it on disk. It sits in RAM for a while and then we delete it". The ruling means that deciding not to store it on disk is close to destroying evidence, which is very illegal.

Which, despite the spin and your personal feeling about torrents is not unreasonable. Let's suppose I gathered information about murders in Ram and make a conscious decision to delete it rather than storing it on disk. Should that be legal? Or should the judge have the power to force me to write the log to disk in future if someone tries to subpoena it?

Re:is the ruling about physical RAM at all?

[glesga_kiss]

No, I don't think so. But once someone subpoenas the information you have to go back to TRACE.

From a performance standpoint, that is insane. You won't be able to serve as many users if you are doing that level of logging, it's a lot of I/O traffic. Especially if it's a single log file for all client-handling threads; you are adding an artificial thread-synchronized block of code to every action. Ouch!

You could have a policy to shred day to day stuff (i.e. you're in ERROR mode).

The problem is that the judges paper analogy doesn't hold; you aren't shredding because you never had the info in the first place. Should we be logging all HTTP headers for example? The referal ID might be useful in a criminal case.

Another analogy might be my daily activies. Say I was asked by the authorities what bus I caught to town six months ago. Was it the 08:30 or the 8:45 one? I had the information at the time, but never logged it as it has no reasonable use at a later date.

Re:is the ruling about physical RAM at all?

[siddesu]

yours is a post with a lot of stuff, but in reality the matter is simple and almost non-technical.
it goeth a bit like the following synopsis:

0. MAFIAA sez in court they needz teh logs to show TS helps copyright infringement
(they want to show stuff like urls and filenames, not l33t hex dumps)
1. the judge agrees that's reasonable, asks TS logfiles.
2. TS replies: OMGLOLZ we don't keep log files and teh data isn't there anywayz
3. the MAFIAA calls expert who sez STFU, while data is in teh RAM you can copy it to a logfile
4. judge says: correctamundo, make the flow of data from RAM to log files happen, and hand in the log files
5. TS goes like: OMG our users business model privacy european lawz LOLZ again!!!!111
6. judge says: take it easy, scratch out IP addresses and deliver the logs only from your US servers

end of story, MAFIAA wins this step, TS sounds not l33t, and that is regardless of what I think of that 'intellectual proprety' stuff, of which I don't think much.

Holy crap. Wow.

[Lethyos]

You did, in fact, just positively smack the shit out of that n00b. Well done.

If you only gonna read ONE comment, read this o

[Big Nothing]

Q: Does the judge really want TorrentSpy to hand over their RAM chips?
A: No, f****** moron. The judge simply says that information that exists in RAM can be retrieved.

Q: What's this all about?
A: It goes down like this:
1. TorrentSpy has been slapped with an order to log traffic
2. TorrentSpy claims that since their servers have no hard drive (only RAM) there "are no logs"
3. Judge calls bullshit. The logs exist and can be transferred to other media. TorrentSpy must do this cause they are legally obligated to do so.

As usual, the article summary misrepresents the story. TorrentSpy claims that it can't turn over certain data because it was never logged. The judge ruled that since the data in question existed in the RAM, TorrentSpy was in possession of said data and must preserve it for discovery, i.e. start logging it. The judge in no way ruled that they must physically turn over the RAM chips.

Q: But a defendant cannot be compelled to create new documents for the plaintiff, even if the new document would just be a compilation and/or summary of other documents.
A: That's just it: the information allready exist. It just need to be stored "permanently" (read: for years instead of miliseconds).

Q: Wouldn't this mean that TorrentSpy has to change the HW configuration of their servers?
A: Yes, It basically means that using RAM-based servers without permanently logging traffic is not the legal loophole once believed.

This is not the first time that a company/organization has been ordered to change the way their system works. In the SonicBlue/ReplayTV case [2002] the court ordered ReplayTV to create the technology to record information about subscribers for purposes of determining how much of ReplayTV usage was violating and the law.

Q: Is there no way out of this? Will the MAFIAA have their way?
A: The judge doesn't say that the logs have to be stored electronically... Nor that they have to be stored chronologically or otherwise in a logical, searchable manner.

Stupid headline

[Handlarn]

This is the most stupid headline I've seen on Slashdot for as long as I've been here. The summary isn't doing much to clear things up either.

People, read the damn article! But I guess an easy chance to get your post moderated Funny is too hard to give up a lot of you. Too bad there is basically only one joke in this entire thread and it's been told about 200 times now.

Seriously to whoever posted this submit better summaries!