Slashdot Mirror
Judge Excludes 3 "John Does" From RIAA Subpoena
NewYorkCountryLawyer writes "In one of the RIAA's 'John Doe' cases targeting Boston University students, after the University wrote to the Court saying that it could not identify three of the John Does 'to a reasonable degree of technical certainty,' Judge Nancy Gertner deemed the University's letter a 'motion to quash,' and granted it, quashing the subpoena as to those defendants. In the very brief docket entry (PDF) containing her decision, she noted that 'compliance with the subpoena as to the IP addresses represented by these Defendants would expose innocent parties to intrusive discovery.' There is an important lesson to be learned from this ruling: if the IT departments of the colleges and universities targeted by the RIAA would be honest, and explain to the Courts the problems with the identification and other technical issues, there is a good chance the subpoenas will be vacated. Certainly, there is now a judicial precedent for that principle. One commentator asks whether this holding 'represents the death knell to some, if not all, of the RIAA's efforts to use American university staff as copyright cops.'"
...a new law requiring better IP tracking built into all new routers and laptops.
No sig today...
When file sharing your music and movies, use public wifi points to crush any lawsuit potential from the RIAA!
Most of my neighbours have wireless.
I could crack into them in minutes and download.
Are they supposed to be security experts now?
What about when WPA gets cracked? even the ones with a little knowhow will be open for a time.
If someone breaks into your house and commits mail fraud while you're away are you guilty because your door wasn't strong enough to keep them out?
"accessory to their infringement" is bullshit
The suddenoutbreakofcommonsense shown on this small scale is coming too late, I fear. Because even now, ISPs are caving to big media. Phorm worms its way through many UK ISPs, apparently undiminished. A consortium of service providers have agreed to keep tabs on the situation for the record insdustry, amongst others, and send out warning letters to infringers. Usenet has been all but dropped from the roster of ISP services.
Unlike the naysayers, I always believed that the internet would remain free. After all, ISPs have always been protected as carriers, just like the postal service - and the postal service is not subject to search and seizure without due process. Nobody can open my private mail (unless it crosses borders) and check for pirated DVDs, without a really good reason to suspect that I'm pirating DVDs.
But I was wrong, and stupid, and for once in my damn life, too optimistic.
Because for every smart call like the one above, there are ten stories of companies we need to be able to trust voluntarily caving to pressure. It's too damn late.
In 2001, my alma mater had 2 45mbps lines for the university and they were consistently hammered by the students doing file sharing. It got to the point that some people in the CS department joked that banging out packets across tin-cans-on-strings would be faster than using the campus network when classes were generally over for the day.
Then, the university instituted packet shapers across the network and it got usable again. Usable to the point where I didn't feel like I was on a 14.4k modem again.
If you want to bootleg content, then pay for your own connection.
The RIAA could demand some draconian cerberos system, but I doubt that rendering large campus networks unusable will garner them any support from the already annoyed campus IT admins. Anyway, much like the AV companies vs virus-writers, this battle is an entirely defensive one.
It's nice to see something logical leaking out of the judicial system, however.
An internal system operation returned the error "The operation completed successfully.".
Isn't every one of these stories tagged as being the death knell for the RIAA? Don't get me wrong, I'm always glad to see the RIAA losing in these types of cases, but 'death knell for the RIAA' is getting to be 'Year for Linux on the Desktop'.
I will shred my adversaries. Pull their eyes out just enough to turn them towards their mewing, mutilated faces. Illyria
Isn't that what I'm did by paying the obscene "technology fee"? What ELSE is that 1224$ going toward?
Is it hookers? Hookers and blow? You can tell me the truth. I won't be half as mad if you tell me it's hookers and blow.
You bring up something that I think about somewhat often.
On the one hand, the Internet is incredibly useful and provides so much information and entertainment which I believe everyone SHOULD be able to access. It would be a huge loss to society, imo, for people lose this.
On the other hand, computers are complex. Networks are a complex part of computers. Security is a yet more complex part of computer networks. These are things that people spend years learning about and are constantly learning more about, yet here we are encouraging average, untrained people to stick computers which they are basically system administrators for on the largest, most complex, and hardest to secure network in the world? How much sense does that make?
I work at a U, and they charge the students, faculty, staff, departments, and everything else that has any money, an obscene amount of money for a network connection. Students ARE paying, and barely getting their money's worth, even when file sharing.
They were right - the revolution did not get televised. It was posted on YouTube instead. All in 120 characters. SLOOSH!
Of course, it would be so very socially awkward to point out that virtually all policies slashdot have supported so far amount to in effect a regressive wealth transfer from the poor to the wealthy, where the poor who are for whatever reason unable to use a p2p service and thus purchase CDs subsidize the entertainment of those who otherwise generally can afford it. Oh no. Pointing out such things is just not cool.
Policing the network requires a mindset which assumes the students will do bad things and the administration is determined to catch and punish accused systems perpetrators.
Managing the network, as your example shows, is the proper implementation of policies and configurations which allow the University community to effectively perform their work.
Managing the network is more effective and provides a more collegial atmosphere.
In my CS Department, all the information which could be used by the RIAA to track student usage of systems is NOT logged. Attempts to obtain unauthorized access are logged; but not successful authorized access. [All you security types can take your immediate objections and stuff them in your policy orifice.]
If we're required to do blocking and monitoring, the BU defense won't hold, because we'll have the data.
I wonder what kind of ridiculous fine structure or penalties there will be for not logging what you monitor?
How about a well documented disk failure event on the file system containing all the logs? "Sorry, Your Honor, we logged everything, and then the disk failed."
Are we going to be legislated into complete backup strategies? I doubt it.
I think the Senate/Obama stance is that bad business models can be allowed to fail (See GM, Ford, Chryseler). It that holds true, the business model of the RIAA/Big 4, which was a sinking ship before Sep08, will certainly have some scrutiny before legislation. Couple that with overwhelming projections of a poor buying season, and I can't see how the RIAA has much of a leg to stand on here.
Why don't you get your facts straight?
Ray Beckerman +5 Insightful
I think the problem here is poor definition of "left" vs. "right."
Ask a question pertaining to abortion, and most of the answers here are "anything goes," which sounds left-wing. Ask a question about the economy, and the answers are more "government isn't your sugar daddy," which sounds right-wing.
I think the most common /. viewpoint is best described as "libertarian," which can be summed up as "leave us alone and don't tell us what to do."
How do IPs not specify identity?
They just don't.
Sure, you can build a system with multiple paths of registration and logging and authentication, but a majority of those processes can be spoofed or socially engineered.
If you came up to me with a subpoena asking who had IP address 192.168.1.X on this day at this time, even if I still had the logs on my DHCP server, it would take a significant amount of forensics (IE, an audit of every laptop my friends or neighbors own) to determine who the culprit was.
Boot Windows, Linux, and ESX over the network for free.
Actually the correct permalink to the story is here. Sorry about that.
Ray Beckerman +5 Insightful