Slashdot Mirror
Sony, Universal and Fox Caught Pirating Through BitTorrent
New submitter Bad_Feeling sends in a followup to the story we discussed on Monday about a new site that scanned a few popular torrent trackers and linked torrents to IP addresses. The folks at TorrentFreak decided to check IP addresses belonging to major companies in the entertainment industry and published lists of pirated files from several, including Fox, Sony, and NBC Universal. Of course, they used the information to make a slightly different point than the industry usually does:
"By highlighting the above our intention is not to get anyone into trouble, and for that reason we masked out the end of the IP addresses to avoid a witch hunt. An IP address is not a person, IP addresses can be shared among many people, and anyone can be behind a keyboard at any given time."
So surely the companies are distributing the movies to everyone. As they are the rights holder, it should be legal to download it?
So their point is if IPs change, and it is hard to figure out who broke the law, law enforcement might as well just give up?
I'm all for sharing of information and media freely. Hell! I pirate the shit out of everything, but this is the worst argument for it I have ever heard.
The argument is equivalent to: A murderer used many cars during his escape, since it is hard to pinpoint which one is his we should give up.
...out of existence!!!
These posts express my own personal views, not those of my employer
Didn't we discuss to death that the site www.youhavedownloaded.com was a hoax? I mean we're talking about a site that says "Don't take it seriously" at the bottom of every page. Also apparently I've downloaded a single episode of some series I've never heard of (mid-season mind you), and my IP has been static for about 8 years now.
Just like a cop watching kiddie porn at the 'evidence room'.
Maybe they downloaded stuff just to see if it was really their content or not =P
Haha... my captcha is "denial"
...that if a property is doing sluggishly the PR arms of the studios put it out on the 'net to try to raise buzz. The irony is that then the legal arms of these same companies go after those very people the other side of their company want to resuscitate their ailing properties by word-of-mouth.
It's cynical, hypocritical and just downright fucked up.
By highlighting the above our intention is not to get anyone into trouble . . .
This quote is not from Hollywood studios but the author of the article on torrentfreak. This is somewhat of a non-story. It is possible that an employee of a studio is downloading via torrents without permission. After all, how many people do you know use their work networks to download pirated content. Their companies most likely do not approve of such actions. This is only a story if a high-ranking employee is pirating. If the downloading was authorized, what was the purpose? If someone from the legal/copyright department is doing so to verify that their content is on the internet, that's well within the scope of their jobs.
Well, there's spam egg sausage and spam, that's not got much spam in it.
It did nothing. Figuring out the last octet shouldn't be too difficult.
FTA:
"In a response Buma/Stemra issued a press release stating that their IP-addresses were spoofed. A very unlikely scenario, but one that will be welcomed by BitTorrent pirates worldwide. In fact, they’d encourage Sony, Universal and Fox to say something similar. After all, if it’s so easy to spoof an IP-address, then accused file-sharers can use this same defense against copyright holders."
This is quite a smart move. Getting these big organisations to explain this away will only add credence to the valid reasons that the public should be able to use to protect themselves. It doesn't matter what your personal opinion is on the morals of the situation the plain fact is an IP is not a person and the clearer this is made to the judges the better. Of course there is a the chance that the IPs were added manually by the guys who set the project up, they already admitted that there is still test data in there (do a check for 192.168.*.*) so it's far from perfect.
Come on. Mega corporations in the entertainment business with tens of thousands of employees, mostly in their twenties and thirties have some employees who are illegally downloading from sites that haven't yet made the IT firewall blacklist. Wow! Stop the presses!
Those major could have asked some of their employees to test if there was some of their own movies being pirated, acting like pirates for a few moments...
how many people do you know use their work networks to download pirated content
None, actually. That's a really stupid thing to do... The only thing worse than being slapped with a 100k fine for downloading some music is also getting fired over it.
-- Let us endeavor so to live that when we pass even the undertaker shall be sorry. -- M. Twain
Actually it's pretty much a story if it's low-level employees doing it.
Come on! the MPAA and RIAA are always trying to get ISPs to police their customers and make sure nobody is using their connection to pirate stuff.
But then they can't even block their own freaking employees from going to torrents and pirating copyrighted works?
I mean, it should be easier to control employees than customers, no? So this makes the point of the ISPs that have long said that they can't monitor their customers and make sure they don't pirate.
As they are the rights holder, it should be legal to download it?
http://www.kilasan.info
http://www.staen.info
http://www.proformelliptic.com
If I write a book and I reserve all rights, I can copy my own book if I wanted to, right?
I'm not sure why this would have the headline as "Busted!" outside of the fact that they were seen downloading a movie that was already theirs.
We don't live in Shouldland.
I did a search on some IP addresses assigned to overseas US military facilities. Let's just say it turns out US soldiers like transsexuals and big girls. And possibly big transsexual girls.
Check out my world simulator thingy.
I call bullshit on the disclaimer."IP addresses can be shared among many people, and anyone can be behind a keyboard at any given time."
The MPAA and RIAA don't care about that, and they have gone after individuals non-stop dispite that posibility. The courts have just gone along with it as well, so...It IS our intention to get those intities into trouble. Turn about is fair play.
And they gave it to people under no constraints.
Therefore those people have a legal right to redistribute it.
Unless FOX et al shared IP they didn't own...
"SEXY TIME social network Badoo has become the world's fourth-largest with over 132 million members worldwide and over 1 million in the UK. According to the Telegraph, Badoo is the 'Facebook for sex' but is also widely used as an ordinary social network. Apparently, a third of its British users admitted in a recent survey that they had "met someone for sex" through the web site. [...] Badoo is based in London and owned by a Russian entrepreneur called Andrey Andreev. It takes in about $100m a year in revenues."
http://www.theinquirer.net/inquirer/news/2132141/sex-social-network-fourth-largest
How do the pr0n sites make their $$$? Blackmail?
Quick pass PROTECTIP or SOPA and then we can catch these companies pirating content then shut them down for a felony pirating offense since Company=Person=IP address.
Well, I haven't heard anyone admit to it but receiving C&D letters was the reason filtering was turned on at a previous employer of mine. And there was no witch hunt tone, just a "This is what we're doing, this is why we're doing it, please remember that what you do on the company network can be tracked back to us and reflect poorly on the company." Never heard of anyone getting punished for it, then again I of course didn't have access to anyone's HR files. That said, I don't live in the US...
Live today, because you never know what tomorrow brings
It is possible that an employee of a studio is downloading via torrents without permission.
I'm flabbergasted that this is actually possible, unless the employee in question is privileged in particular ways, such as by being a network administrator.
After all, how many people do you know use their work networks to download pirated content.
None. Those who use torrents do so at home.
Reputable companies which are large enough to have an IT department will have strict enforcement of many network policies, especially those which are related to commercial risk. Where I work, everything other than ports 80 and 443 must be opened on a per-node and per destination basis. If you need ftp or ssh, you have to state the specific need and how it relates to the business. Also, even ports 80 and 443 are heavily filtered so that social media sites (youtube, facebook, etc.), name redirection sites (dyndns and its ilk), file lockers (megaupload, etc.), webmail (gmail, hotmail, etc.) and all sites hosting questionable activities are blocked. I suspect running a client for IRC or BitTorrent would get you nowhere. There are probably some ways around this, but looking for them would be stupid and might set off career-threatening alarm bells.
Those who can make you believe absurdities can make you commit atrocities. - Voltaire
Good points! But I think I remember the general consensus on /. when a normal human gets accused of pirating is that IP addresses don't prove anything. Hopefully someone can catch them in the act and give this story the proof it deserves.
If they're from the studios, they own the copyright to the properties so they have the legal right to download them. Sure, people make the argument that if they're on a BT tracker they're "distributing" the file so they're giving everyone else the legal right to download it, but that's not how IP law works. Besides, they'll say they were only downloading them to support their enforcement actions against other downloaders.
It's better to vote for what you want and not get it than to vote for what you don't want and get it.
- E. Debs
They did NOT claim all rights reserved and the mechanism of a torrent is to give rights to redistribute.
Without an explicit agreement to the contrary, all torrent downloaders and their subsequents have a right to distribute too.
This is almost certainly the case.
It's not necessarily a low-level employee, though. A high-level person at Sony Pictures has been caught torrenting before. Their people investigated. Actions were taken.
It is possible that an employee of a studio is downloading via torrents without permission
Well yes, naturally. The thing is these companies are the same ones telling courts that an IP address connected to a swarm constitutes positive identification and proof of guilt for whoever the IP address was assigned to at the time.
If someone from the legal/copyright department is doing so to verify that their content is on the internet, that's well within the scope of their jobs.
Again, true. And more evidence that an IP address does not equal proof of infringement.
They deserve to squirm on the hook for this one. Totally a newsworthy story.
It is possible that an employee of a studio is downloading via torrents without permission.
Indeed, one of the people with whom we pass around "The Hard Drive" is an IP lawyer for one of the big media companies.
W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
Well, actually, in a corporate environment, that is almost always false and in every single corporate behavior policy involving computer and network access I have ever seen it has stated that one is responsible for anything done under one's ID and from one's computer if one is logged into one's computer.
Also, I wonder if the IP addresses are for an open guest internet connection, something several companies I have worked for have had.
There is no "-1 offended" or "-1 you don't agree with me" mod options for a reason.
Haha, I checked it out and found that it fakes results when you hit the homepage. It showed some British-looking women for the IP of an area with no women like that (the closest IRL version of the "women in Low Earth Orbit!" experiment). Also it allows you to sign in with Facebook credentials. What could possibly go wrong?
"When information is power, privacy is freedom" - Jah-Wren Ryel
haha, Now that's funny!
http://www.LiveQuranRadio.com
http://www.AllahsWord.com
In a response Buma/Stemra issued a press release stating that their IP-addresses were spoofed.
A spoofed IP address does not receive return packets unless you hijack the address or PAT the specific traffic on the router/firewall responsible for the address. I doubt Buma/Stemra had an outage long enough for someone to snag some files. If someone malicious owns their router/firewall there would be more mischief than this.
Having to work for a living is the root of all evil.
I went to that site from my home and found that it had some 20 character Captcha needed to access, that never worked. I was dumb enough to try several times before realizing I was getting it right every time and I was being trolled. Then I started Wireshark, and watched a flood of port scanning coming in from Facebook IP addresses. It went on for about a half hour and tapered off. I have never downloaded anything illegal and would never knowingly do so. I also have never visited Facebook, or had an account there or on any other form of social media, and never will. I have no idea WTF that youhavedownloaded.com site is, but I sure am learning my lesson about what not to click on. Assholes.
Fortunately people never do anything stupid.
Dilbert RSS feed
But I think I remember the general consensus on /. when a normal human gets accused of pirating is that IP addresses don't prove anything.
No. The consensus is that IP addresses don't prove that a particular person downloaded something. But it can definitively prove that it was done by a machine in a particular network, which in this case is the network of those RIAA members. Nobody is claiming a specific employee has downloaded them.
Dilbert RSS feed
Hahahahaha!
Sucks to be you. Unless of course, you're in the Nazi IT department. Then you get to ruin someone's career because they tried to load Facebook.
Maybe thats the whole point of this exercise. Getting the companies to admit that IP address alone don't prove anything, so courts can tell them to back off when they show up with this "evidence".
There is no such agreement with BitTorrent.
I'm in Hong Kong, and when I checked Badoo, it showed a map of Hong Kong, and then a dozen mugshots of people (male and female) supposedly looking for "friends" there. Most white, one or two black, not one Chinese. So, complete fake and bullshit.
Opentracker spews out random IPs, scanning them means nothing.
Good grief, are you really that dumb? Presumption of innocence means you are not guilty until proven otherwise (ie at trial). It does NOT refer to what the police do or who they consider guilty (a suspect).
Answering your question? Yes, he is.
Shit like this is why you see memes spring out of places like 4chan. An apt, pejorative nickname that describes the behavior of an internet denizen. A good example could be the "White Knight." "Troll" is so well known and obvious that the metaphor contained therein is completely dead; it quite literally means "asshole on the internet who derives increasing satisfaction from the emotional degree of a response solicited by provoking others."
I suggest we coin a new one for "asshole who takes three sentences of legal concepts, refuses to understand them, points out contradictions that hold only against that ignorance, and then proceeds to rally support from those with just as much or more ignorance (...to be fair, those people are usually called 'sheep')."
I would propose "iANALyst," but so many people fail so damn hard at finding either shift key, that the integrated puns would likely be lost in propagation. Regarding the shift-key location failure, Slashdot is thankfully the exception, rather than the rule.
Boot Windows, Linux, and ESX over the network for free.
Fox, Sony, and Universal probably aren't using Torrent to download movies illegally. Their purpose in using Torrent to download would be to see who their peers are - i.e. the OTHER people who are downloading illegally. Then they send warnings to those users thru their ISPs.
They could have been looking for IP addresses to send DMCA notices to.
Well then at the very least this highlights that the studios need to clean their own house before they start witch hunts elsewhere. Why they wouldn't have blocked such sites/software is baffling - it's clearly a huge PR loss in the making when they're desperately trying to win the PR war in the eyes of a largely indifferent public. There are also all kinds of laws about agency and when one is acting as an agent of one's company which it's easy to fall foul of.
That's the whole point of this story - that by their own rules these IPs show they are downloading when we all know it's not that clear cut. As someone who doesn't download from these sites but who relies on net access for a living, it's a real concern to me that big media can basically extort money from people with nothing more than a number on a piece of paper and a threat of court hassle, but it's even more of a worry when we see ridiculous "three strikes" laws starting to appear which can ruin a career with what amounts to zero real evidence.
So, if you are working in WallMart, is it normal to eat anything and everything for free?
If the use by date is expired, then eat away; however, don't try it with something they are trying to sell.
If one is working in a media company with a DS3 connection, then maybe someone downloads when the boss is not looking. I would look for back room rogues first.
Yeah, no kidding. My cable modem is way faster than my employer's measly little 10 Mbit link!
Chelloveck
I give up on debugging. From now on, SIGSEGV is a feature.
Hmmm...
Well if they generate enough traffic they can "prove" that those pirate bastards are stealing all their films, so the whole internet has to be locked up. This smells funny...
Um, not quite. It may prove that the connection went through my router, but it can't tell you which machine. But at least they can be sure it's my router...because I've never heard of anyone spoofing an IP address before...oh wait. Well, I'm sure it tells you something but I don't know what, if anything, it 'definitely proves'.
If you need ftp or ssh, you have to state the specific need and how it relates to the business.
How long do these requests take to process?
Also, even ports 80 and 443 are heavily filtered so that social media sites (youtube, facebook, etc.), name redirection sites (dyndns and its ilk), file lockers (megaupload, etc.), webmail (gmail, hotmail, etc.) and all sites hosting questionable activities are blocked.
If YouTube is blocked, how long does a request to view a video published by one of the company's suppliers take? If Facebook is blocked, how long does a request by the company's marketing department to update the company's official Facebook page take? If webmail is blocked, how long does a request to connect each employee to the company's Google Apps server take?
how many people do you know use their work networks to download pirated content.
I did. I downloaded a copy of Ubuntu at work, and when Dell was still selling "N series" desktops, my boss ordered a PC with Ubuntu from dell.com to use as a development workstation. Raenex has discovered a technicality of how GPLv2 defines a "work based on the Program", which when combined with GPLv2's vagueness on what constitutes "mere aggregation" makes any Linux distribution including proprietary software a copyright infringement. He bases this analysis on the text of the license, not any non-binding FAQ. Furthermore, Ubuntu includes the video game Quadrapassel, which according to Henk Rogers and Alexey Pajitnov of The Tetris Company is an infringing copy of Tetris.
NAT and wifi are two reasons that it could be anyone in the area or household
Within the household, the head of household is under contract with the ISP not to allow any copyright infringement to happen over the ISP's wire. Within the area, the head of household is under contract with the ISP to use WPA2 with a strong password.
The real reason that they are downloading a torrent is to verify that they are illegal content so that they can send out those nasty letters to people. Just like you can't use an IP address as a person, you can't say that a filename is a movie or song. You need to know that a person is really sharing something that is in fact illegal.
as long as the person at the company is downloading the items on the behalf of the company who is the copyright holder
But has any evidence come to light that, say, Warner Bros. employees have permission from Universal?
First I tried with a proxy ID, nothing came up... So it was obviously not reading my cookies. Then I tried with my IP and nothing came up... But then again, I only torrent as a last resort (i use a private encrypted service for most things) and by last resort I mean "so obscure that it is not mainstream" and thus... nothing shows up.
There Can Be Only One...
So, if a private citizen were to site this as a defense in legal procedings ...?
"By highlighting the above our intention is not to get anyone into trouble, and for that reason we masked out the end of the IP addresses to avoid a witch hunt. An IP address is not a person, IP addresses can be shared among many people, and anyone can be behind a keyboard at any given time."
There is nothing to FEAR but NOTHING itself; and I fear there is a whole lot of nothing going on. --scorpivs
Actually no, IP addresses do necessarily prove that either.
There is no requirement that an IP address cannot change from one machine to another, DHCP is freely allowed to do this, except where IPs have been set staticly. The best an IP proves is what IP was involved. *IF* you have the time and the associated MAC at that time, you start to get provable. Even then there are exceptions.
CAPTACHA: embezzle
I frequently and am currently contracting for Warner Bros. I bring in my own laptop and connect to the internet after receiving a WB owned IP Address via dhcp. I certainly have in the past forgotten that my bit torrent client was running. I am not the only one. Many Thousands of people work at theses companies and people like to download torrents. You can find conspiracies anywhere if you set out to find them; often it's just stupid people like me doing stupid things.
Violating a TOS of the ISP subjects them to penalties spelled out there, but only to the ISP. This is pretty much going to be limited to termination of service. Agreeing with Cox to not download copyrighted material does not mean accepting legal liability to all copyright holders worldwide.
We are more relaxed where I am at, but there are still provisions to mitigate commercial risk.
FTP is banned without a waver.
SFTP is allowed but you must log in to a proxy for it i.e:
to get to ftp.example.com :
ftp open proxy.core.com
username is user@ftp.example.com
password is your password at ftp.example.com
This does two things:
it gives the proxy server your username and password, which dissuades most people from using it as there is no guarantee that IT won't capture that data, and second the proxy logs the machine account that connected to the proxy server and the username that logged into that account.
We allow "reasonable personal use" of the internet at the office, so Facebook and such are fine at breaks/lunch/whatever. Proxy bypass sites SSH tunnels, etc. are blocked and while there are ways around that as you noted bypassing the procedures raise alarms.
I regularly hit proxy blocks in my line of work and my boss gets summary e-mails once a quarter about my hits. He ignores them because one of my jobs is security hardening, so going to blackhat and greyhat sites is part of my job.
-nB
whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
Within the area, the head of household is under contract with the ISP to use WPA2 with a strong password.
Ah, so that's why my Verizon FIOS router straight from my ISP came pre-programmed with a WEP key...
:(){
We do that here too.
32 gig thumb drive sneakernet token ring is our carrier media of choice.
Of course we learned from the mistakes of others like the app team the re-purposed an old staging server to be an MP3 filer...
things went sub optimally for them.
whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
My contract says *nothing* of the sort.
It has some vague language about not sharing internet service with neighbors, but only to the extent that making my SSID name private_whatever is good enough.
The router they provided me even has the ability to create a guest WiFi network that can use my internet but not access my LAN, to me that looks as if they expect some level of sharing of my connection.
Now, that is not to say it wouldn't be prudent to use WPA2, just that it is not required.
-nB
whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
Within the household where I live and with my ISP [...]
Fixed that for you. My TOS doesn't look even remotely like that, and I'm running open (but mostly firewalled) WiFi for any of my neighbors who need it - and with the knowledge and assent of my ISP's owner. Don't generalize your own contractual situation.
Dewey, what part of this looks like authorities should be involved?
My contract says *nothing* of the sort.
Yet. I'd guess after a few lawsuits, ISPs will probably scramble to add that to the standard TOS.
The router they provided me even has the ability to create a guest WiFi network that can use my internet but not access my LAN, to me that looks as if they expect some level of sharing of my connection.
I'd guess after a few lawsuits, ISPs will start expecting the customer to restrict access to the guest network, handing the password out only to specific trusted friends and relatives, not to leave it open to the world.
My TOS doesn't look even remotely like that
This is true, I grant, but will remain true only until the first monthly bill after some ISP gets sued.
Agreeing with Cox to not download copyrighted material does not mean accepting legal liability to all copyright holders worldwide.
It does if said copyright owner sues Cox and the indemnity clause gives Cox the right to go after a customer to pay any legal fees and/or damages awarded to a plaintiff that sues Cox over that customer's behavior.
That's a pretty questionable claim you're making there. At one company I worked at years ago, there was a guy who not only downloaded porn while at work, but he printed some pictures out on the company printer. Conclusion: People do stupid things at work.
If you need ftp or ssh, you have to state the specific need and how it relates to the business.
How long do these requests take to process?
No idea what the statistical distribution of lag times is. For the few I've needed (ssh or remote desktop to client sites where we're running process experiments), I was able to open a connection within 30 minutes to 3 hours of requesting it.
Also, even ports 80 and 443 are heavily filtered so that social media sites (youtube, facebook, etc.), name redirection sites (dyndns and its ilk), file lockers (megaupload, etc.), webmail (gmail, hotmail, etc.) and all sites hosting questionable activities are blocked.
If YouTube is blocked, how long does a request to view a video published by one of the company's suppliers take?
Something important from a supplier posted on Youtube??? Pardon my laughter, but this probably never happens. If a supplier has a public video which it's important for us to see, they would put it on their own web site. If it's less than 50MB, they can just email it to us.
If Facebook is blocked, how long does a request by the company's marketing department to update the company's official Facebook page take?
We have a corporate presence on Facebook, so there are some marketing-communications groups with permanent access. The remaining 100,000 employees don't need to use Facebook for work purposes.
If webmail is blocked, how long does a request to connect each employee to the company's Google Apps server take?
Webmail is blocked because the company has its own extensive email infrastructure and all email is logged for SarBox compliance (among several important reasons). Use of Gmail or other Google Apps (or anything similar) for company purposes is explicitly forbidden. All company-related email must use the official infrastructure.
This all sounds like control-freakery, but it appears to be part of a system that works. We design and make high tech products, but targeted at different industry segments rather than at consumers. The company is doing quite nicely, with good financial results even in the "recession". Bonuses in 2011 are up on 2010, which were well up on 2009, which were up a bit on 2008. And projections for 2012 are fairly decent also.
Those who can make you believe absurdities can make you commit atrocities. - Voltaire
If a supplier has a public video which it's important for us to see, they would put it on their own web site.
And deal with frustrated viewers who get "this web browser doesn't support this codec or this plug-in" messages. What solution do you recommend for publishing videos on one's own web site that automatically transcodes to MP4 in a Flash wrapper, MP4 in HTML5, and WebM in HTML5, at multiple resolutions (240p, 360p, 480p, and 720p), such that preparing the video for public viewing is no harder than uploading to YouTube?
Webmail is blocked because the company has its own extensive email infrastructure
I was just confused by a few Slashdot stories over the past year about the pros and cons of outsourcing "extensive email infrastructure" to Google.
What do employees where you work do on break? Does the company make available, as a perk, PCs in the break room whose web access is not quite as locked down?
We design and make high tech products, but targeted at different industry segments rather than at consumers.
Then perhaps my perspective has been skewed by developing and hosting online shopping cart software as a service. Our first major client is a hobby shop selling R/C cars, model trains, and the like, and occasionally, as part of educating myself about the client's needs, I've had to watch public videos published by the manufacturers of the products that the hobby shop sells.
Then don't move to New Zealand. Our law states that an IP is proof.
like that stuff can't be faked...no one has really said that the site is 100% verified to be accurate, etc, etc.
Not completely true. Vivid Wireless (Australia) controls the WiFi WPA key and won't allow you to change it. How can I guarantee legal usage of my service when I have no control over the security & access? I can't so I suspect a lawsuit against any Vivid Wireless customers will fail and be redirected Vivid's way.
I'm sure Vivid isn't the only ISP to do this.
Then the ISP can sue for breach of contract. But they're not the party typically
doing the suing, are they?
Then the ISP can sue for breach of contract. But they're not the party typically doing the suing, are they?
That can change very quickly. At one time, the record industry wasn't suing members of the general public.
I think the biggest issue you're struggling with is that a corporate environment is much, much more different than that of a small business. I work for a building consulting firm with very similar policies[the exceptions being Twitter, Facebook, and Hotmail] and a certain level of standards. In my industry, you wouldn't dream of sending a client/consulting firm/co-worker work related material on YouTube; not only are you opening up your company's business transactions and projects[many of which are confidential] to the public eye, but it's YouTube; it's simply not professional.
Lunch breaks are usually spent eating, working, or people go out; why would you want to spend another hour sitting behind a computer when that's largely what you do for a career? It's really not as stifling as it sounds; I'm paid to work, not to aimlessly browse the internet.
But this is the corporate mindset, since you're working with small businesses and clients, YouTube is a little more understandable.