Slashdot Mirror
Internal Emails of An RIAA Attack Dog Leaked
qubezz writes "The company MediaDefender works with the RIAA and MPAA against piracy, setting up fake torrents and trackers and disrupting p2p traffic. Previously, the TorrentFreak site accused them of setting up a fake internet video download site designed to catch and bust users. MediaDefender denied the entrapment charges. Now 700MB of MediaDefender's internal emails from the last 6 months have been leaked onto BitTorrent trackers. The emails detail their entire plan, including how they intended to distance themselves from the fake company they set up and future strategies. Other pieces of company information were included in the emails such as logins and passwords, wage negotiations, and numerous other aspect of their internal business."
http://thepiratebay.org/search/mediadefender
http://torrents.thepiratebay.org/3806944/MediaDefender.Mail.200612.200709-MDD.3806944.TPB.torrent
enjoy !
Generally speaking, entrapment only applies to law enforcement and the government. RIAA still isn't there yet, thankfully. OTOH, a good lawyer could probably spin it as morally equivalent in principle for a jury.
It is big. But I doubt there will be any sensible outcome. What will likely happen is that this will be talked about for a couple of days, soon enough some other story will come along, and people will forget all about it.
If you read the emails, apparently utorrent is their favourite torrent client, since it allows them to 'interdict' torrents, whatever that means. Whatever they're up to, that surely warrants a campaign to boycott the client in favour of free software torrent clients where these sorts of deficiencies can at least be fixed by anyone who cares.
Oh, and the rumors of them being behind the spyware-encrusted ziptorrent were false; that one seems to have been MediaSentry's doing.
nothing can cover it up
Read radical news here
You can't be entrapped in civil court. Entrapment is a statutory creation of criminal law. (Sorrells v. United States, although later supreme court precedent leads us to believe that rather than the statutory creation theory, they are moving more towards dealing with entrapment in a supervisory sense.)
"It is possible to commit no errors and still lose. That is not a weakness. That is life." -Peak Performance
Regular people (like you or me or, in the court's eyes, the RIAA) can't commit entrapment. It's a police-only crime.
Ok, normally I don't like the DMCA, but PLEASE , come on Media Defender, do DMCA this. Pretty please, with sugar on the top... you know you want to... I mean you have to beat your own incompetence somehow...
If it is a long hair working as a code grunt/sysadmin in their it lot, may god make his/her hair glitter with sunshine and rustle in gentle, warm winds.
Read radical news here
I can't stop laughing. Oh hoh... my stomach. LOL
Just disrupt the deflector shield with a tachyon burst.
I really hope Warner reads this gold.
As people have said, entrapment only applies to law enforcement types.
In the civil arena, I believe unclean hands would be more applicable, especially if you can trace Media Defender back to the RIAA via contracts and such.
I imagine that a clever lawyer could point out that they're attempting to sue over a transaction of which they were an active part. If I give you something outright, it would likely be impossible for me to sue to get compensation later. If I give it to you while wearing a disguise, I'm not sure that principle doesn't apply.
A -really- clever lawyer could point out that since the RIAA has been documented as giving their stuff away, that anyone downloading from anywhere might have a reasonable belief that it was coming from the "authorized" source in disguise. I don't know that it would fly, but seems like there'd be a non-zero chance of diluting RIAA's argument in the entire body of cases.
On a side note, seems like this would give the artists cause to sue the RIAA, for distributing their work in a manner that's likely not covered by their contract (though with artist contracts in RIAA member companies, who knows--maybe they have the right to give it all away for free.)
Hello, my name is %20 and I collect interdicting spoofing noise files created by entities like Overpeer and MediaDefender. They are important 'art' objects which are in dire need of preservation. I had thought the methods and products died out when Overpeer went kaputz, but there are several e-mails in this collection which revive my search and preservation of these outstanding works of questionable merit. So if you happen to get a files from these folks which seems a little off, read this blog: http://noneinc.com/RIAAEM/RIAABlog.html and we'll host them for everyone to enjoy.
TIA!
%20
If they hadn't set up the website, this specific "crime" COULDN'T have happened.
Think about what you said, with respect to, for example, VICE squads:
"Would Joe have been busted for possession of marijuana if the cop didn't sell it to him? In all probability he would have; it would just have happened elsewhere."
This is incorrect. It would NOT have happened; he MIGHT have been busted for possession of OTHER marijuana sold by someone else. On the other hand, he might not.
All of this is moot anyway, as you can't be entrapped in civil court. If they passed federal charges (under the DMCA), then an entrapment suit might possibly be in order if those entrapping were operating "above the law". Otherwise, either THEY were committing a crime by distributing the content, or those downloading weren't committing a crime as they would have been given legal permission to download the data. The worst thing they could be asked to do if those distributing the data didn't have permission to do so would be to remove their copy from their computer by the court. Of course, in most sane countries, possession of copywritten data isn't a crime, infringement, or anything similar; only distribution is. All you can be sued for is breach of contract in civil court (assuming there was some sort of contract).
I wonder if Ray Beckerman (NYCL) would be able to use this? He's been trying to get discovery about what MediaDefender is up to from the RIAA for ages, last I heard, and hasn't gotten jack. Considering they're now open to all, I wonder if they could be used in court?
After all, you may remember how MediaDefender paid someone to hack into TorrentSpy's email. I'd call this turn-about...
From: Randy Saaf .edu filtering
.edu IP addresses on p2p have gone down.
.edu filtering
Sent: Wed 11-Apr-07 21:24
To: Jay Mairs; Ben Grodsky; Ty Heath; Ivan Kwok; Ben Ebert
Subject: Fw:
Team
Universal is curiouse if we have any historical data over the last 3 months that show whether
They want to see if their lawsuits are getting students to stop using p2p (take a moment to laugh to yourself).
Let me know if anyone has any ideas.
R
--- Original Message ---
From: Benjamin, David
To: Randy Saaf
Sent: Wed Apr 11 18:11:50 2007
Subject:
How are you doing with this?
Thanks
db
I'm glad you pointed that out. If this company, acting as an agent for the plaintiff (a movie company, for example), participated in the distribution of this content via P2P, then that constitutes a tacit approval of P2P distribution of the content by the plaintiff, thus making any further P2P distribution of that content potentially authorized by the copyright holder, and thus not a copyright violation.
Further, even if the person did not actually get it directly from an agent of the copyright holder, the rights holder distributing in such a way that causes it to be automatically redistributed by anyone who receives it (P2P) could constitute deliberate abandonment of the copyright (at least for the purposes of personal, noncommercial use) by the copyright holder.
I'm not saying that argument would necessarily hold up in court, but if I were in charge of a media company, I would not be doing anything nearly this stupid and reckless.
Check out my sci-fi/humor trilogy at PatriotsBooks.
dev-salaries-18june2007.xls
Sergio A. Alvarez 2,916.67 $70,000.00
Linus Aranha 2,708.33 $65,000.00
Dylan C Douglas 2,916.67 $70,000.00
Benjamin Ebert 3,541.67 $85,000.00
Norman T Heath 4,791.67 $115,000.08
Sujay S. Jaju 2,708.33 $65,000.00
Andrew H. Kim 2,291.67 $55,000.00
Ivan Y Kwok 4,166.67 $100,000.00
Jed Z. Levin 2,291.67 $55,000.00
Gerald E. Rode 2,291.67 $55,000.00
Sheetalkumar Shah 2,708.33 $65,000.00
Nainesh N. Solanki 2,708.33 $65,000.00
Daeyoung Song 2,375.00 $57,000.00
Jeffrey W. Wang 2,375.00 $57,000.00
You were saying?
"Evil" is an exaggeration. This dislike of closed-source comes from the fact that many here instinctively realize that information, such as computer programs, some forms of art, thoughts in people heads, large integer numbers etc, do not fall under the simplistic, inane attempts to mis-apply an economic model of a "market" to things which do not have the required attributes to become "private property" and thus are not subject to "trade".
This does not mean that we believe that artists and software developers have to go hungry, but it does mean that the method by which various misguided businessmen (usually the middle-men peddling the art/science and not creating it themselves) expect to make their living is fatally flawed (primarilly because it was constructed by businessmen for businessmen, with no regards to anything else) and, in order to be "successful", demands positively immoral and dangerous to society activities, such as attempts at truly totalitarian measures in efforts to control the flow of information in society.
As more and more people realize this, it is my hope that some time in the future this idiotic "copyright" regime will be replaced with something that actually reflects the nature of the information and the needs of the society.
My personal favourite for art, for example, is a modernized "patronage" system, with direct transfer of donations by patrons of art to artists themselves. Sicence is, as it should, funded by academia and as soon as the for-profit scientific journals are dispised of (efforts in this direction are under way) it will be free from this nonsense. Performance arts have no problem whatsoever since the performers are expecting payment for their labour at the gate. Etc and so on.
It is quite possible however that a better model exists. If so I am sure someone will come up with it. Whatever it is, the notions of "copyrights" and "patents" as they stand are ... well ... patent absurdities! And what we see is simple human reaction to that undeniable fact, particularly among the younger generation whose indoctrination in these mattters is not yet effective.
In additional to only applying to agents of law enforcement or those acting as such, entrapment also only applies to making you commit a crime that you wouldn't otherwise make. So unless either the old or the new company did that, it wouldn't be entrapment. And if there was entrapment, it wouldn't have anything to do with their secret change.
Live today, because you never know what tomorrow brings
Keep reading. He posits that the existence of honeypots lends credibility to the argument that *ANY* download *MIGHT* be coming from a legitimate source. We know the RIAA is distributing songs via P2P, and we know they are disguising themselves, so why can't we assume that the guy sending us music right now is really the RIAA in disguise, making it legal?
From ARSTechnica article in the "News" section of Mediadefender.com - http://www.mediadefender.com/news/20070318_ARSTechnica.pdf)
Four main methods
Decoying. This, in a nutshell, is the serving of fake files that are generally empty or contain a trailer. The goal is to make legitimate content a needle in a haystack, so MediaDefender works hard to ensure that its copies of files show up in the top ten spots when certain keywords are searched for. Everything about the file is tailored to look like the work of pirates, from the file size (movies are often compressed enough to fit on a CD) to the naming conventions to the pirate scene tag. With massive bandwidth and plenty of servers, the company has little trouble in getting these decoy files to appear at the top of search results, but decoying has a down side: the bandwidth. Because MediaDefender actually serves these large but bogus files, it incurs a significant bandwidth bill by using this technique.
Spoofing. Spoofing sends searchers down dead ends. MediaDefender coders have written their own software that interacts with the various P2P protocols and sends bogus returns to search requests, usually directing people to nonexistent locations. Because most people only look at the top five search results, MediaDefender tries to frustrate their first attempts to download a file in hopes that they will just give up.
Interdiction. While the first two techniques try to prevent searchers from locating files, interdiction prevents distributors from serving them. The tool is generally used when media is leaked or newly released; the goal is to slow its spread in those crucial first days. MediaDefender servers attempt to create constant connections to the files in question, saturating the provider's upstream bandwidth and preventing anyone else from grabbing the data.
Swarming. Though he acknowledges the BitTorrent networks can be hard to disrupt, Lee points out that MediaDefender can use "swarming" to make life more difficult for users trying to download copyrighted content. BitTorrent works by using a hash file to reassemble a file from many pieces, each of which may have been downloaded from a different user. MediaDefender simply serves up its chunks of these files, but instead of providing the proper data, its chunks contain static or nothing at all. When the file is eventually reassembled by the user, it may contain clicks, silent spaces, or odd skips. This can make the viewing/listening experience less pleasurable, but it's most effective with software downloads since even small errors can prevent programs from running.
A lot of comments here seem to be talking about what might happen to whatever MediaDefender employee leaked the email and soforth. This info suggests that it's not actually a renegade employee at all, just a stupid one who's gmail account got cracked.
okay, so Mr. Maris wasn't the sharpest tool in the shed in forwarding the stuff to a gmail account.
However... assume the the group/person releasing this did at least have a gmail e-mail address for this guy, he still wouldn't have the password.
Now, it's not a very strong password - it can certainly be cracked easily by a dictionary or even a brute force attack.
But if either of those methods are what were used - then what's up with Google apparently not stopping this in one way or another? E.g. maximum of N login attempts in a given time, notifying the rightful account holder of the attempts, etc.?
I see a .mbox file... how do I open it?
If the emails were obtained by hacking somebody's GMail account -- as seems to be the case given the comments on the torrent file -- then they were obtained illegally. The RIAA's lawyers would immediately cry "illegal search."
IANAL, so I'd like to hear from somebody with real law experience either confirming or denying this, but that's my gut feeling.
Somewhere along the way, or maybe it has been this way the whole time, people started using laws as ethics. Most people seem to think that if something is illegal then it must be wrong and if it's not illegal then it's probably fine.
I don't think anyone here is jumping for joy that a gmail account got hacked. Instead I see a bunch of people jumping for joy because a company that is seeming violating the law might actually have to suffer for its actions.
I think what happened here is for the greater good. Sometimes breaking the law draws attention to a problem few realized existed.
Quite succinctly put. Specifically with regard to music, I find major fault with those who seem so up in arms about artists losing money due to p2p or torrent sites. Being a musician, I understand quite well that true artists do not create their music for money. Those who do are not musicians, they are simply business people hijacking an art form for personal profit. If we did away with copyright, and instituted a system such as the one you have mentioned, music would not disappear. Rather, as an art form it would become confined to those who love it for what it is.
Creating music is not a chore. It is something done out of necessity, more often than not. I liken it to an addiction, complete with withdrawal symptoms if neglected. In short, if a system like yours was implemented, music would not cease to exist. On the contrary, the trash would be weeded out and we would all be better off for it.
"We may face a scorched and lifeless earth, but they're accountable to their shareholders first."
I like this one. It seems the record companies try to get marketing data from illegal p2p downloads. ---------- Subject: Nicole Scherzinger Date: Fri, 24 Aug 2007 15:14:31 -0700 Nicole from pussy cat dolls has a single called "whatever u like". It's not selling well on itunes or playing that great on radio. A song called "Baby Love" just leaked (I don't know how long ago). Interscope wants to know if Baby Love is picking up steam on p2p. They need to make a decision by early next week on whether they should switch to this song as the single. Please get me a score comparison on Monday for these two tracks. Also, please put beyonces, fergie, gwen, and nelly furtado singles as comparisons.
Ive Converted the emails into HTML (With attachments)
http://jrwr.hopto.org/
WulframII - Free Online Mutiplayer 3D Tank Shooting Game