Slashdot Mirror


Cryptome in Hot Water Again

garg0yle writes to tell us that Cryptome appears to have stepped in it again with a recent leaked document concerning Microsoft's "Global Criminal Compliance Handbook." "Microsoft has demanded that Cryptome take down the guide — on the grounds that it constitutes a 'copyrighted [work] published by Microsoft.' Yesterday, at 5pm, Cryptome editor John Young received a notice from his site’s host, Network Solutions, bearing a stiff ultimatum: citing the Digital Millennium Copyright Act (DMCA), Network Solutions told him that unless he takes the 'copyrighted material' down, they will 'disable [his] website' on Thursday, February 25, 2010. So far, Young refuses to budge." In a gesture of goodwill, Wikileaks has offered to host Cryptome via their twitter feed.

26 of 241 comments (clear)

  1. Already gone? by tomalpha · · Score: 5, Informative

    Looks like DNS has already gone...

    Searching for cryptome.org. A record at G.ROOT-SERVERS.NET. [192.112.36.4] ...took 31 ms
    Searching for cryptome.org. A record at D0.ORG.AFILIAS-NST.org. [199.19.57.1] ...took 9 ms

    Nameserver D0.ORG.AFILIAS-NST.org. reports: No such host cryptome.org

    1. Re:Already gone? by Eristone · · Score: 3, Informative

      According to the take down notice and response from Network Solutions, they do this for 10-14 days because cryptome.org refuses to take down the "offending" document. If there's no legal response to the DMCA Counterclaim from Microsoft (response being the filing of litigation) in the next 14 days, cryptome.org will be released back into the wild.

    2. Re:Already gone? by Anonymous Coward · · Score: 5, Informative

      The document is already available via wikileaks.

    3. Re:Already gone? by yenne · · Score: 3, Informative

      Young says there is a “NetSol ‘Legal Lock’ on the domain name to prevent it being transferred to another ISP until the “dispute” is settled; All Cryptome pages other than the home page now generate a 404 message.”

      It astonishes me that anyone still uses Network Solutions. Their extensive list of blocks for transferring domain services (read: anytime you'd actually want to, you're prevented) is mind-boggling.

      I had several domains with them back when they were the only game in town, and every transfer has been a nightmare that usually involves paying for another year of service before a transfer is approved.

    4. Re:Already gone? by HeronBlademaster · · Score: 3, Informative

      and every transfer has been a nightmare that usually involves paying for another year of service before a transfer is approved.

      GoDaddy does that, but they treat it like an early renewal; that is, they take the existing expiration date, and add a year to it. So technically you're paying when you do the transfer, but you're also adding a year to the expiration date, so really you're just paying ahead of time.

      Could that have been the case?

      Or... did you mean Network Solutions charged you to let you transfer the domain away from them? Because that would be utterly absurd.

    5. Re:Already gone? by dgatwood · · Score: 5, Informative

      It astonishes me that anyone still uses Network Solutions. Their extensive list of blocks for transferring domain services (read: anytime you'd actually want to, you're prevented) is mind-boggling.

      Agreed. It astonishes me even more, however, that an organization like this would do so, and doubly so that anyone in their right minds doing anything more than a personal vanity site would use the same provider for both hosting and domain name registration. That's just asking for a hard-to-fix DMCA shutdown of the site, loss of the site due to the ISP going bankrupt, loss of the domain due to any number of billing disagreements with the ISP that are unrelated to the domain name registration, etc.

      AFAIK, the DMCA does *not* provide for locking the domain registration of a claimed-infringing site, only providing for the takedown of the content. However, if your ISP decides it is easier to kill your DNS and lock the domain to prevent transferring it than to muck with your server account, you're stuck. Why? Because you are using the same provider for hosting and (massively overpriced) domain name registration. Don't DO that.

      If I were one of these folks, I'd register my domain in a neutral country. For example, you can register .com domains with Gandi.net in France or with NameForName in Russia, or... well, here's a list of ICANN-accredited registrars, most of which support the .com registry. Find one in a country that has as few ACTA-like agreements with the U.S. as possible. Even with the exchange rates as bad as they are, those two I mentioned still charge less than half what NetSol charges for a domain name, with the added security of making it much harder to attack the domain itself with a mere DMCA takedown notice.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

  2. Ballsy by MonsterTrimble · · Score: 3, Interesting

    For Wikileaks to offer to host Cryptome - especially with thei recent troubles.

    Really, what we need here is a torrent feed with all the latest stuff.

    --
    I call it 'The Aristocrats'
    1. Re:Ballsy by Darkness404 · · Score: 5, Insightful

      Really, what we need here is a torrent feed with all the latest stuff.

      The thing is, you still need a reliable person to go through it. That is what WikiLeaks was doing before they started begging for money for the past 3 months. There is still always the weak link, and that is the humans need to verify the leaks. Torrents may solve the distribution problem, but lacks absolute security and anonymity.

      --
      Taxation is legalized theft, no more, no less.
  3. Wikileaks mirror by TheSHAD0W · · Score: 4, Informative

    Wikileaks may not be mirroring Cryptome.org in its entirety yet, but they are hosting the "offending" material. Download and redistribute!

  4. Mirror and Donation Link Here by chill · · Score: 4, Informative

    http://cryptomeorg.siteprotect.net/

    $25 will get you 2 DVDs with 54,000+ articles, spanning June 1996 to February 2010, mailed anywhere in the world.

    --
    Learning HOW to think is more important than learning WHAT to think.
  5. Re:Down already by Monkeedude1212 · · Score: 4, Interesting

    Yeah Network Solutions took them down after Young's counter-response. Wikileaks is hosting it now.

    Basically the issue is that Microsoft has a handguide to do some pretty questionable stuff (IP Extraction is mentioned). They can keep it protected from being publicly viewable by putting a copyright on it. Young says that Copyright was not meant for hiding secrets. I agree.

  6. new mirror by TheSHAD0W · · Score: 4, Informative

    A mirror of the site is now up, with partial content available and the rest being transferred.

  7. The smaller they are the easier they fall by Adrian+Lopez · · Score: 5, Insightful

    I wonder what this says about the degree of power different entities have when they choose to resist DMCA requests. Would Google's upstream provider(s) ever dare to take Google offline should Google decide not to comply with a particular DMCA request like Cryptome's provider has done? I suspect not. There must be an advantage to being a big player on the Internet, and a clear disadvantage under the DMCA to being as small as Cryptome. It's easier to be bullied when you're Cryptome, which somehow makes the DMCA seem even worse than I once thought it was.

    --
    "In prison you just have to shut your eyes and take it. Here you have to shut your eyes and give it."
  8. Confirmed. by headkase · · Score: 3, Funny

    Whatever is in that document, thank you Microsoft for 100% confirming it is what you said. Now, http has heads. You *can* cut them off. Where there is a disconnect between morality and law however is called corruption and that needs to be measured in each case: anyone care to measure here? So, you can cut off all the http heads. What good will that do you? You think Cryptome doesn't have contacts? Doesn't have people who are in the know and know what they are looking for? Microsoft just gave them some free advertising that they have it. Everyone who wants it already does have it by now. And in a shortish while after some corrupt wrangling the http head will come back up and start serving again until the next grand advertisement occurs. But always, occuring in parallel to all this are the things without heads: it will take a great deal more corruption in law to silence those.

    --
    Shh.
  9. Wikileaks by Arancaytar · · Score: 4, Funny

    In a gesture of goodwill Wikileaks has offered to host Cryptome via their twitter feed.

    That's nice of them, but honestly I'd like it if they started hosting their own site again, too.

  10. Hosting via Twitter by dangitman · · Score: 5, Funny

    Wikileaks has offered to host Cryptome via their twitter feed.

    This Twitter stuff is getting out of control. First it starts as 140 character messages, now they're hosting entire websites with it.

    --
    ... and then they built the supercollider.
  11. Twitter hosting by Homburg · · Score: 4, Funny

    Wikileaks has offered to host Cryptome via their twitter feed.

    Hosting 140 characters at a time?

  12. But it *is* copyrighted, right? by SOdhner · · Score: 5, Insightful

    I just want to make sure I fully understand the situation. This is something written by MS and being hosted in its entirety by someone else without permission, right? So their claim is legally correct and everything, isn't it? I'm not saying I like Microsoft but I just want to be clear on the details which seem to imply that whether or not this is a *nice* thing to do it at least fits the standards for a DMCA notice. Please correct me if I've misunderstood.

    1. Re:But it *is* copyrighted, right? by TubeSteak · · Score: 4, Informative

      I just want to make sure I fully understand the situation. This is something written by MS and being hosted in its entirety by someone else without permission, right? So their claim is legally correct and everything, isn't it?

      Written by MS: Yes
      Hosted by someone else w/o permission: Yes
      Legally correct claim: ???

      The newsworthiness of the document makes for a very strong defense against any copyright claim and that's the rebuttal Cryptome made in the DMCA reply.

      --
      [Fuck Beta]
      o0t!
    2. Re:But it *is* copyrighted, right? by qubezz · · Score: 3, Informative

      The document is mainly facts. Facts themselves can't be copyrighted (if they could, you wouldn't be able to learn the scores of sporting events without paying). As such, it would be possible to create a new work containing all of the facts that are available in this document and publish that. Attempts to take down your work would be very easy to defend against. In truth, showing that a new document created using only facts that are now public is very similar to the original work, one could make an argument that a copyright claim is of little merit.

      Such a document could look like this:

      Microsoft has online services that retain data on user's connections and the contents of their communications, and that data is available to law enforcement.

      Increasing quantities of information will be disclosed depending on whether law enforcement provides Microsoft with a subpoena, court order, or search warrant. This information appears to be available through a handy web interface to the agency requesting the information. Microsoft doesn't clearly state the procedure or availability for non-law enforcement agencies (such as those bringing civil suit) to receive their retained information through court actions.

      For Email services (hotmail, msn, live), information retained by Microsoft (and the legal instrument to receive it):

      • Registration contact info and IP address used to register (available by subpoena)
      • IP access logs, usage logs, billing information (only subpoena needed)
      • Full message contents of emails over 180 days old (only subpoena needed)
      • Address book, contact list, internet usage logs, email headers (available by court order)
      • Complete disclosure of all contents of all emails including email contents less than 180 days old (search warrant required)

      Duration and scope of retention of email information by Microsoft:

      • Registration details and IP address used to register: retained for entire life of account,
      • Emails (headers and contents) - any currently stored on servers (no detail given about retention of deleted emails)
      • Windows Live ID (used to log in) - last 10 connections, IP addresses used, and all sites accessed with that ID

      Similar information is retained for instant messaging, windows live spaces, msn groups, windows live domain administrator, online file storage services, and even the xbox live service, although this author is to lazy to detail them.

      Notice: The above work (30 minutes of artistic time needed), is protected under copyright of this poster, even though no notice of Copyright is required after 1989, and even though this work is entirely a list of facts regarding how Microsoft retains data and discloses it to authorities.

  13. Re:Move on...nothing to see here... by Anonymous Coward · · Score: 3, Interesting

    Having just skimmed the doc, I don't see why anyone would care. The information available to law enforcement is actually less than I had expected.

    Actually, I suspect that Microsoft are flat-out lying. There was a murder case in Toronto, Canada where a teenage girl persuaded her boyfriend to murder another girl:

    http://www.cbc.ca/canada/toronto/story/2009/03/13/rengel-trial.html
    http://www.thestar.com/article/596268

    Much of the evidence was in MSN chat logs between the girl and her boyfriend. This Microsoft document claims on page 13 that "Microsoft does not log the content of communications between users".

    So if it isn't logged, where did all this evidence come from?

  14. Re:Move on...nothing to see here... by Predius · · Score: 4, Informative

    Local logs on their machines? MSN may not log at the main server, but many clients certainly log locally.

  15. Re:Network Solutions as Judge, Jury, and Execution by urulokion · · Score: 5, Insightful

    Its appalling, and an abuse of the DCMA takedown notices in every aspect. The takedown procedures are in place to provide a legal safe harbor for the company hosting the content.. The takedown notice is to allow the contested content to be removed to minimize any damage. The takedown period in which the the content is removed it allow time for the copyright to get to court to get a temporary restraining order to keep the content offline. The Counter-Notice allows the person who put up the content to get it back online if they believe they are in the right.

    Network Solutions is NOT the hosting company. It's merely a DNS registrar. NetSol has no legal liability what soever. They went WAY beyond what is legally required. The DCMA required only the contested content be removed in any case. Network Solutions removing access to entire web site is very troubling. And it may even have opened them up to a lawsuit themselves.

  16. Actually somewhat reassuring by slimjim8094 · · Score: 4, Informative

    I just read the document and it's really kinda reassuring. They lay out exactly what they require in order to disclose exactly what information, and they don't say anything without a subpoena (gets you name/address/email older than 180 days). Anything more interesting than that requires a court order (for address book/friend list/email to-from) or a search warrant (new email).

    Plus, they detail exactly what they do and don't keep - for example, they don't have messenger logs.

    Frankly, I thought they had more info than that. They really keep very little info aside from what they need to actually deliver the service.

    YMMV due to the Patriot act, etc - but I don't see why MSFT would lie in a confidential document

    --
    I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
  17. Re:Network Solutions as Judge, Jury, and Execution by erroneus · · Score: 4, Interesting

    If you read the article, you would know that they did file a counter-notice.

    Network Solutions not only took their site down, but locked the domain to prevent it from coming up somewhere else. This is an extremely aggressive move and one I suspect violates their own terms and conditions and may be actionable under the law.

  18. Re:Didn't think this is how the DMCA works by 2short · · Score: 4, Informative


    The provider must take down the content within a certain time of receiving a notice. After they receive a counter-notice, the content stays down for 10-14 days, during which the original notifier must file a lawsuit. If they don't, the content goes back up.

    Before taking anything down Network Solutions suggested that Cryptome file a counter notice, and pointed out to them how to do it. They pointed out that if Cryptome took down the one file for the 10-14 days, they would not have to take down the rest of the site. Cryptome sent a counter notice which specifically indicated they would not be taking down the file. Upon receipt, Network Solutions took down the site, as they clearly explained they would be required to by law.

    I'm not much of a fan of Network Solutions generally, but in this situation, they are not the bad guy. They are impartially following the law. Their letter even goes so far as to helpfully lay out Cryptomes choices. Cryptome made their choice to stand on principle and force the system to shut the whole site down. I assume Cryptome figured the resulting publicity would do more for their fight than taking down the file and keeping their site up, and I also assume they are right.