Slashdot Mirror


How To Frame a Printer For Copyright Infringement

An anonymous reader writes "Have you ever wondered what it takes to get 'caught' for copyright infringement on the Internet? Surprisingly, actual infringement is not required. The New York Times reports that researchers from the computer science department at the University of Washington have just released a study that examines how enforcement agencies monitor P2P networks and what it takes to receive a complaint today. Without downloading or sharing a single file, their study attracted more than 400 copyright infringement complaints. Even more disturbing is their discovery that illegal P2P participation can be easily spoofed; the researchers managed to frame innocent desktop machines and even several university printers, all of which received bogus complaints."

45 of 325 comments (clear)

  1. Glad it's in a reputable media source by pwnies · · Score: 5, Insightful

    While entirely laughable, I'm glad this story is in the New York Times. Getting the Spanish Inquisition-esque ways of the these enforcement agencies out into the media is going to be one of the few ways to make it stop. Hopefully people (meaning the general public, and not just us here on /.) will soon realize just how ludicrous these methods are.

    1. Re:Glad it's in a reputable media source by Tom90deg · · Score: 5, Funny

      Nobody expects the Spanish Inquisition!

    2. Re:Glad it's in a reputable media source by TheRedSeven · · Score: 5, Interesting

      Yes, but will this sort of study ever make it to trial in any shape or form that is likely to put the kibosh on the MAFIAAs strongarm tactics?

      Unless the little guys can pony up the cash to get these guys as expert witnesses, the MAFIAA will simply commission their own, contradictory study in order to discredit this one.

      I hope at some point (and some point SOON) we get a critical mass of people and evidence against the big industry players so that they'll stop this crap. I don't think it'll happen though--there's just too many dollars at stake for them to give up.

    3. Re:Glad it's in a reputable media source by Mephistro · · Score: 5, Funny

      I'm a spanish Inquisitor, you insensitive clod!

    4. Re:Glad it's in a reputable media source by Eudial · · Score: 5, Funny

      Nobody expects the Spanish Inquisition! Our three weapons are fear, surprise, and ruthless efficiency. And bogus copyright claims. Our four, ... no. Amongst our weaponry are such diverse elements as: fear, surprise, ruthless efficiency, and bogus copyright claims. ... I'll come in again.
      --
      GAAH! MY PRINTER IS ON FIRE!!! PUT IT OUT! PUT IT OUT!
    5. Re:Glad it's in a reputable media source by Hyppy · · Score: 5, Informative

      Somewhat offtopic, but related to your post. The EFF maintains a mailing list for technologists who would be willing to assist as witnesses or in other ways for cases such as this. When an attorney needs an expert witness for, say, a defense case against the RIAA, the EFF happily forwards it to this list. http://www.eff.org/about/opportunities/volunteer

    6. Re:Glad it's in a reputable media source by liegeofmelkor · · Score: 5, Insightful

      I think there is another reason to be glad that is more important than being in the media, IMHO. An NSF grant-backed publication from a large research institution will carry some weight in court.

      IP address spoofing has been invoked by the defense in previous lawsuits to attack the prosecution's investigation methods, however, this assertion has always had to be provided by an expert witness. A scholarly publication backed by the U of W and the NSF will bolster this point. It might even stick with a jury (who knows). Anyway, this will come in handy in the courtroom, I think.

    7. Re:Glad it's in a reputable media source by PhreakOfTime · · Score: 4, Interesting

      The other favored method these days seems to be sending out non-sensical Cease and Desist Letters claiming all sorts of things, including copyright infringement, and CRIMINAL charges because someone has a domain that you want.

      Caton Commercial engages in this, and seems to find this practice acceptable.

    8. Re:Glad it's in a reputable media source by DoofusOfDeath · · Score: 5, Funny

      Nobody expects the Spanish Inquisition!

      Ha HAH! The Spanish Inquisition never expected a Hewlett Packard !

    9. Re:Glad it's in a reputable media source by MobileTatsu-NJG · · Score: 4, Funny

      I'm a spanish Inquisitor, you insensitive clod! Insensitive? He made that joke expecting you to not show up!
      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    10. Re:Glad it's in a reputable media source by greed · · Score: 5, Funny

      "You are accused of heresy, in thought, word and deed! How do you plead?"

      PC LOAD LETTER

    11. Re:Glad it's in a reputable media source by HTTP+Error+403+403.9 · · Score: 4, Funny

      Only old people expect the Korean inquisition.

      --
      I'm not a Troll, it's reverse psychology.
    12. Re:Glad it's in a reputable media source by nbowman · · Score: 5, Funny

      PC Load letter, what the fuck does that mean?!

    13. Re:Glad it's in a reputable media source by anexkahn · · Score: 4, Funny

      someone should start spoofing MPAA machines of sharing music and RIAA machines of sharing movies...that should make for some fireworks!

      --
      Curious about Storage and Virtualization? Check out
  2. PC LOAD MUSIC by GigaHurtsMyRobot · · Score: 4, Funny

    Maybe now my employer will have to take down that LaserJet IIIp and upgrade to a newer model.

    1. Re:PC LOAD MUSIC by Anonymous Coward · · Score: 5, Funny

      PC Load Music?

      WTF does that mean?

    2. Re:PC LOAD MUSIC by omeomi · · Score: 5, Insightful

      whoosh!

    3. Re:PC LOAD MUSIC by Anonymous Coward · · Score: 4, Informative

      From God^H^H^HWikipedia:

      The term was popularized by the comedy cult film Office Space. Michael Bolton (David Herman), one of the three main characters, reads the error message from the LCD status display on a fax machine, after which he asks, "'PC Load Letter'? What the fuck does that mean?"

  3. Sweet! by Hankapobe · · Score: 4, Funny
    An inanimate object could also get the blame. The researchers rigged the software agents to implicate three laserjet printers, which were then accused in takedown letters by the M.P.A.A. of downloading copies of âoeIron Manâ and the latest Indiana Jones film.

    1. Download movies and sell them
    2. pin it on cop's printer
    3. in the meantime while they're arresting the printer
    4. Profit!
    1. Re:Sweet! by McFly69 · · Score: 5, Interesting

      1. Download movies 2. Pin it on RIAA's website IP address (76.74.24.143) 3. Let the cops arrest RIAA 4. Peace and Quiet 5. Profit! But seriously... if you can spoof using any IP address (Printer, Website, etc), then everyone can claim it was not them downloading anything and there is not sure way to prove it. Just food for Thought.

      --



      NO! NO! Please don't mod me, I'm too young to die a troll. *click* Oh the pain, the pain...
    2. Re:Sweet! by mysidia · · Score: 5, Informative

      Sorry, I have to debunk the theory that it is only technically possible to spoof a source address on your local subnet, it's just not true.

      First of all, you can send people in your local subnet messages with any fake outside source IP you want, and there are various techniques to convince your local subnet's router to send _you_ the response traffic instead of the rightful recipient, so you can have full socket connectivity in both directions.

      (I.E. ICMP redirect packets sent to the default gateway, static routes, etc)

      Also, there are methods to spoof source IPs outside your subnet, even when sending to destinations outside your subnet, unless your provider is specifically using techniques to block spoofed traffic (which possibly, some are now).

      If you can guess the right sequence numbers and port numbers (very hard), then you can even inject data into someone else's live TCP connection, or just force that connection to close (by sending a RST)

      Use of technologies such as SSL or TLS protect against sending unauthorized commands or allowing corrupt data to be transmitted, but don't protect against a third party forcibly closing the connection.

      Spoofing outside the subnet is just extremely difficult, and fairly improbable for targets utilizing modern TCP stacks -- but theoretically possible; IRC networks used to have problems with script kiddies generating spoofed clone floods.

      (This tactic was thwarted by taking advantage of the fact that spoofed users could effectively SEND spoofed traffic but not RECEIVE messages, so a CAPTCHA-style feature called "nospoof" was introduced into the connection process.)

      Receiving traffic in both directions over a spoofed connection is also possible, but hard, I.E. requires hijacking the legitimate equipment's IP, and fooling network equipment into sending traffic to the wrong place (the spoofer's computer).

      I'm not saying it's easy, safe, invisible, non-destructive, or you won't easily get caught, but I must say that such spoofing is 100% possible.

  4. Wow .... by gstoddart · · Score: 5, Funny

    So, will we have a variant on the Chewbacca defense?

    "Why would a printer, an inanimate object with no reproductive organs, be downloading pornography? It doesn't fit ... if the toner cartridge won't fit, you must acquit."

    Seriously though, it's good to see some credible research demonstrating that the methods that are used to identify file-sharers are completely arbitrary and can't be demonstrated to be valid.

    It would be nice to finally have enough evidence that Judges could basically say "Well, this methodology has been dis-credited, you need actual evidence."

    Now, if you excuse me, I'm going to try to devise a way to make it look like our printer has been downloading Will Farrel movies and films with Natalie Portman. :-P

    Cheers

    --
    Lost at C:>. Found at C.
    1. Re:Wow .... by OglinTatas · · Score: 5, Funny

      Why would a printer, an inanimate object with no reproductive organs... In other news, printers now have reproductive organs
  5. Sweet! by Layer+3+Ninja · · Score: 5, Funny

    Time to exact my revenge on that stupid Lexmark E240 of the 5th floor.

    --
    Power corrupts. Absolute power...is even more fun.
  6. If the right people get framed... by the_womble · · Score: 4, Interesting

    ....it might change things. Legislators in the US and EU, for example.

  7. Re:As I said by KevinKnSC · · Score: 5, Funny

    I don't see how what you wear while speculating is relevant.

  8. Clippy helps me steal by DeadDecoy · · Score: 5, Funny

    Clippy: Looks like you're making a letter. Would you like help?
    Clippy: Looks like your letter is finished. Would you like me to print it?
    Clippy: Looks like you're infringing on a copyright. Would you like me to call you a lawyer?
    * Throws computer out window *

  9. Ridiculous! by saterdaies · · Score: 5, Funny

    This is completely ridiculous and I'm sure any judge would see a printer downloading copyrighted songs as completely silly.

    So, anyone wanna help me get NetBSD on my Epson?

    1. Re:Ridiculous! by myxiplx · · Score: 4, Insightful

      This is slashdot... home of geeks... think outside the box a little, then re-read the parent post.

  10. Too flimsy by Endo13 · · Score: 5, Insightful

    While I'm all for anything and everything that helps bring down the MAFIAA, sadly the case in this article is very weak. It only points out two things, both of which are already commonly known by almost everyone in IT.

    1. IP addresses can be spoofed.
    2. IP addresses assigned by DHCP will not always be assigned to the same MAC address.

    Then there's a lot of hand-waving and implications that there's also all kind of other likely flaws in the methods used to find out who's participating in file-sharing.

    The worst part of it though is how they throw in the whole thing of "we weren't actually downloading or sharing anything". No, they were just connecting to the tracker. And of course, everyone knows "pirates" commonly connect to torrent trackers to do nothing.

    This bothers because if anyone were to point out how weak this case is in main-stream media, it could end up doing more harm than good.

    We need some heavy ammo to shut them down, and I'm afraid this is not it.

    --
    There is no -1 Disagree mod. Slashdot.org/faq defines mod options. USE IT.
    1. Re:Too flimsy by gstoddart · · Score: 5, Insightful

      The worst part of it though is how they throw in the whole thing of "we weren't actually downloading or sharing anything". No, they were just connecting to the tracker. And of course, everyone knows "pirates" commonly connect to torrent trackers to do nothing.

      Well, it does two things.

      First, it shows that you can get a subpoena for not actually doing anything illegal. Presumably, connecting to a tracker isn't illegal.

      Second, it begins to dispel the myths that the content holders have perpetuated about how they actually gather their evidence and if the collection methodology is valid.

      I think actual University research which is covered by the NYT might be an awful good start. It's by no means everything that needs to happen, but starting to establish that their data collection is faulty is better than nothing.

      Cheers
      --
      Lost at C:>. Found at C.
    2. Re:Too flimsy by link-error · · Score: 5, Insightful

      The worst part of it though is how they throw in the whole thing of "we weren't actually downloading or sharing anything". No, they were just connecting to the tracker. And of course, everyone knows "pirates" commonly connect to torrent trackers to do nothing. Actually, that is the worst part.. they are sending out take-down notices/suing people that didn't download anything..
          Remember, innocent until proven guilty. They aren't even trying to actually determine this.
      --
      -Unresolved symbol? Byte me!
    3. Re:Too flimsy by Bryansix · · Score: 5, Insightful

      Maybe you missed the part where they framed the printer? The point is they just connected to a tracker but in real life what is more likely is that the guy in the dorm next to me is actually downloading the film that he didn't pay for but he pins it on me who wasn't involved in doing any copyright infringing at all. THAT IS THE POINT. Too many cases get brought up that are accusing the WRONG PERSON of doing the infringing.

    4. Re:Too flimsy by s.bots · · Score: 5, Insightful

      It only points out two things, both of which are already commonly known by almost everyone in IT. And that's why this is relevant. Because it is not common knowledge outside the IT field, and it makes an appearance in the New York Times. The article could be more in-depth, or provide more conclusive evidence I agree, but getting the facts out there to the average (NYT reading) Joe is a good first step.

      The worst part of it though is how they throw in the whole thing of "we weren't actually downloading or sharing anything". No, they were just connecting to the tracker. And of course, everyone knows "pirates" commonly connect to torrent trackers to do nothing. True, pirates don't connect to a tracker to observe, but the point being made is that an entity that was only observing (not doing anything illegal or warranting a takedown notice) is being pinned as a pirate.
  11. Re:And? by Idbar · · Score: 4, Funny

    More important, do they have to be defended by lawyers, or can the fax machine do the job?

  12. Re:And? by powerlord · · Score: 5, Funny

    I'm not sure, but I hear the PBX is looking to consolidate things into a Class Action.

    --
    This space for rent. All reasonable inquiries will be entertained at proprietors discretion.
  13. Re:iron man url and tracker by PopeRatzo · · Score: 4, Funny

    (just kidding, I'll wait for it to be released on dvd first)
    How quaint!

    --
    You are welcome on my lawn.
  14. Re:And? by EMeta · · Score: 4, Funny

    Just the fax, ma'am. Just the fax.

  15. Re:Too flimsy...not really by Fallen+Kell · · Score: 5, Interesting

    Yes, anyone in IT understands these issues. But the fact remains that no one in IT is being listened to when they are calling this same information proof of infringement. This study is to show that their "proof" which is being used in these same cases is as worthless as all the IT people have said it was from the beginning, and that the checks the **AA investigators are using to confirm that they are not accusing the wrong people are as worthless as well in terms of verifying/screening false positives. This study shows for a FACT that false positives are occurring and occurring ALL THE TIME.

    --
    We were all warned a long time ago that MS products sucked, remember the Magic 8 Ball said, "Outlook not so good"
  16. Re:Big surprise! by d34thm0nk3y · · Score: 4, Insightful

    If I go outside every night wearing overalls covered in blood stains, dig holes in my front yard, and bury body sized bundles wrapped in garbage bags every night for a couple of weeks, I'll probably be investigated for murder.

    You would be investigated, but if the only evidence presented at the case was the odd behavior you would be found not-guilty. The MPAA/RIAA use the odd behavior as not only the probable cause to investigate but also as the evidence to prosecute.

  17. Re:Is this safe? by gstoddart · · Score: 4, Insightful

    What's to prevent the RIAA from having fake "experts" volunteer to do this, only to offer easily-refuted arguments in court?

    What? Conspire to subvert the legal system, and come close to perjury? I say, bring it on and let the jail terms fly.

    Presumably, the EFF would vet their people, but I should think intentionally doing what you suggest might get you some kind of sanctions.

    Then again, your cynicism might not be completely unfounded. Which, is a depressing thought.

    Cheers
    --
    Lost at C:>. Found at C.
  18. You're on to something there by Weaselmancer · · Score: 4, Interesting

    Apparently since a DDOS is a legal move in this game (if you'll recall the MediaDefender fiasco recently), maybe we could use this technique and flood P2P space with false positives.

    I'll bet once every single judge in the USA gets a "Cease and Desist" letter they'll eventually see that the RIAA's tactics aren't valid.

    --
    Weaselmancer
    rediculous.
  19. Re:Simply send this message to the printer: by Actually,+I+do+RTFA · · Score: 4, Funny

    What the hell does that mean?

    Networked printer needs paper, badly.

    --
    Your ad here. Ask me how!
  20. Easier Way to Frame someone by Thergrim · · Score: 4, Insightful

    A much easier way to frame someone for infringement. You will need; -the IP address of the target -a copy of what an infringement letter looks like (find them on the Internet) -software to alter or create a fake infringement letter Using the target's IP address, look up their ISP's snailmail address. Fake up your Infringement letter. Mail it to the ISP. Do this 3 to 5 times and your target will get booted from their ISP. ISP's do not check the validity of these letters.

  21. Case 08OV003345 by Mateorabi · · Score: 4, Funny
    I liked Case # 08OV003345:

    CVS PHARMACY STORE 6 24 8 402 130 08OV003345 0 SALE OF EXPIRED BABY 1-7 Arraignment
    I mean what gall they have to sell expired babies to their customers!
    --
    "You saved 1968." - Ms. Valerie Pringle to the crew of Apollo 8