Slashdot Mirror


Apple Now Relaying All FaceTime Calls Due To Lost Patent Dispute

Em Adespoton writes "Before the VirnetX case, nearly all FaceTime calls were done through a system of direct communication. Essentially, Apple would verify that both parties had valid FaceTime accounts and then allow their two devices to speak directly to each other over the Internet, without any intermediary or 'relay' servers. However, a small number of calls—5 to 10 percent, according to an Apple engineer who testified at trial—were routed through 'relay servers.' At the August 15 hearing, a VirnetX lawyer stated that Apple had logged 'over half a million calls' complaining about the quality of FaceTime [since disabling direct connections]."

50 of 179 comments (clear)

  1. uhuh sure by Joining+Yet+Again · · Score: 5, Interesting

    Nothing to do with ability to intercept.

    1. Re:uhuh sure by Anonymous Coward · · Score: 5, Funny

      Your thought crime has been logged.

      NSA bot #43386

    2. Re:uhuh sure by Anonymous Coward · · Score: 3, Funny

      Your sarcastic comment regarding civil liberties has been logged.

      NSA bot bot #43387.

    3. Re:uhuh sure by Anonymous Coward · · Score: 5, Funny

      Two-party communication regarding civil liberties detected. This conspiracy has been flagged for follow-up.
       
      NSA bot bot #43385.

    4. Re:uhuh sure by kthreadd · · Score: 2

      There will always be a possibility of intercept as long as Apple keeps the source code secre and prevents you from rebuilding and installing the software on the mobile computer. You would have to use free software on hardware controlled by you in order to avoid it.

    5. Re: uhuh sure by Anonymous Coward · · Score: 2, Funny

      Unauthorized loggning registered. Sending drones to location of target IP: 127.0.0.1

    6. Re: uhuh sure by 0123456 · · Score: 4, Insightful

      US intel is not "stupid" except when talking to Congress, which is.

      This is the same 'US intel' which missed the collapse of the USSR, 9/11, the Boston Bombers, and were totally sure Saddam Hussein had WMDs, right, not another 'US intel' that's actually competent?

      As for original comment, intercepting calls is vastly easier when they go to a central server and they have direct access to the decrypted data than when they go peer to peer with encryption.

    7. Re:uhuh sure by bmo · · Score: 4, Interesting

      This is marked troll, but consider that Skype has been taken from a distributed system to a system with a central server farm in Redmond.

      Totally more inefficient for users (relaying makes Skype suck more), but much more efficient for TLAs.

      And considering recent events (and events over the past 20 years, really) it's common sense.

      --
      BMO

    8. Re:uhuh sure by icebike · · Score: 4, Insightful

      Nothing to do with ability to intercept.

      Wait, why was parent marked troll?

      In the case of Skype the very FIRST thing Microsoft did (was forced to do) was bring all call routing back through their own servers

      How do you know the patent troll in this case wasn't funded by the NSA to force the very same thing on Apple? By forcing Apple to route all sessions through their already compromised data centers, the ability for the government to monitor the calls is restored, and Apple doesn't have to admit anything. Apple already appears on the leaked Prism source chart. So forcing all facetime sessions to go through already compromised data centers would be a high priority for the NSA.

      I don't think you can dismiss out of hand the possibility that this was a planned outcome.

      --
      Sig Battery depleted. Reverting to safe mode.
    9. Re: uhuh sure by icebike · · Score: 3, Insightful

      US intel is not "stupid" except when talking to Congress, which is.

      This is the same 'US intel' which missed the collapse of the USSR, 9/11, the Boston Bombers, and were totally sure Saddam Hussein had WMDs, right, not another 'US intel' that's actually competent?

      As for original comment, intercepting calls is vastly easier when they go to a central server and they have direct access to the decrypted data than when they go peer to peer with encryption.

      The collapse of the USSR was well known in the press ahead of time. I remember reading predictions a couple months in advance.

      The NSA knew about 9/11, they were monitoring those guys, but nobody was listening to them seriously in those days. That's the date they started being taken seriously.

      Boston Marathon: I bet they knew something was up with those guys as well, although a quiet plot between brothers is pretty hard to intercept.

      --
      Sig Battery depleted. Reverting to safe mode.
    10. Re:uhuh sure by smash · · Score: 2

      Also, you'd need your own internet.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
    11. Re:uhuh sure by Anonymous Coward · · Score: 2, Funny

      nope.. the two bots are working together to protect us from the terrible secret of space.

    12. Re: uhuh sure by Anonymous Coward · · Score: 3, Insightful

      "Boston Marathon: I bet they knew something was up with those guys as well, although a quiet plot between brothers is pretty hard to intercept."

      Well, the Russian authorities warned the US about them.

    13. Re: uhuh sure by Anonymous Coward · · Score: 4, Insightful

      It's a good thing our government doesn't waste resources checking all of them out instead of high priority tasks like groping airline passengers and busting pot dispensaries.

    14. Re:uhuh sure by Anonymous Coward · · Score: 2, Insightful

      Skype was moved to centralized servers so they could survive the new era of communications: mobile devices. It was impossible to do Skype on mobile devices without centralized servers because the P2P communications would eat your battery AND your data bill. I'm sure this helps with interception as well, but it wasn't he main intention. This is discussed in detail by a former Skype engineer here:

      http://www.listbox.com/member/archive/247/2013/06/sort/time_rev/page/1/entry/6:271/20130623090855:0B714E0A-DC06-11E2-9F35-8CD4CCA160A2/

    15. Re:uhuh sure by icebike · · Score: 2
      --
      Sig Battery depleted. Reverting to safe mode.
    16. Re: uhuh sure by Mr.+Slippery · · Score: 5, Insightful

      Your mainstream press at work again...

      ...and so you link to the Washington Times, and completely destroy any credibility you might have had.

      Two problems. One, the mainstream press did cover the story. Two, old rocket engines and old chemical weapons shells in dumps and scrapyards tell us only that Iraq used to have WMD --- never a contentious point.

      The conclusion that Iraq had no WMD at the time of the American attack isn't some liberal media (ha!) conspiracy, it's the conclusion of the gorram CIA.

      Bush lied, and the Fox "News" set continues to lie, about Iraq.

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
    17. Re: uhuh sure by cheater512 · · Score: 2

      That goddamn mainstream press.....wait hang on you linked to 2 of them!

  2. Something I noted... by bogaboga · · Score: 2, Insightful

    Well, I noted that some "patent expert" didn't report this at all, despite being one who is self proclaimed as following and reporting on patent issues. I am sure if this involved Google/Motorola or Android, this "expert" would have lots to report on the issue. I will abbreviate his name as FM. Is there a trend?

    1. Re:Something I noted... by Thantik · · Score: 2

      Nobody really cites him anymore as a legitimate resource ever since he was outed as an Oracle paid shill. His focus isn't so much on praising Apple as much as it is shining negative light on Google. Seeing as this has basically nothing to do with Google, he likely simply didn't have anything to say, because he's not getting paid to say it.

    2. Re:Something I noted... by marcosdumay · · Score: 3, Interesting

      Look at the proceedings of the Oracle x Google case about the Java patents. Oracle listed him as a paid source.

    3. Re:Something I noted... by Stumbles · · Score: 3, Interesting
      He is a shill because for a very very long time he bashed many companies along with PJ over at Groklaw while PRETENDING to be "fair and balanced", etc , etc. Anyone with a modicum of comprehension skills could easily tell from his writings he was being paid, yet for the longest time he denied such a thing. In others words just to be clear: he was lying out his ass about his motivations. Then again there wasn't a single bit of his "legal" analysis that prove to be correct or true. Which no doubt is why he had a bone to pick with PJ because she would shred his analysis and to boot she was right. So no he isn't a shill because he is paid by Oracle, he is one for hiding it and then when it became clear he needed to, owned up to it.

      If you haven't seen any evidence, then you have not actually done any looking.

      Anyway, I cannot see why anyone would put any stock in anything he has to say.

      --
      My karma is not a Chameleon.
    4. Re:Something I noted... by MightyMartian · · Score: 2

      Of course the guy is a shill. He was being paid by Oracle to write pro-Oracle commentary. Worse, it's not even the first time he did it. Remember all the nonsense he posted on the SCO vs. Linux battles? The guy is a dishonorable piece of shit.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
  3. What patent? by loufoque · · Score: 4, Interesting

    What is the patent involved here? Establishing a connection between two entities on an IP network? NAT traversal techniques? Usage of Interactive Connectivity Establishment protocols?

    1. Re:What patent? by girlintraining · · Score: 5, Insightful

      What is the patent involved here? Establishing a connection between two entities on an IP network? NAT traversal techniques? Usage of Interactive Connectivity Establishment protocols?

      Better question: Who cares? The patent system is so hopelessly corrupt it might as well be "Company A wants to extort money from Company B"... and so, a patent is produced, that is vaguely worded and could possibly cover something vaguely related to what Company B does. And then it's elephant mating season, with its attendant judges, teams of lawyers, reporters, etc. ...

      I gave up long ago trying to keep up with the news on these things -- is the patent valid? Isn't it? What legal process will happen now? Aww fuck it. You know what; Corporations are like children. They don't play well with others and really need their ass paddled to learn some discipline. Unfortunately, Uncle is drunk off his ass ranting about the war and not watching the kids...

      --
      #fuckbeta #iamslashdot #dicemustdie
    2. Re:What patent? by teg · · Score: 5, Informative

      What is the patent involved here? Establishing a connection between two entities on an IP network? NAT traversal techniques? Usage of Interactive Connectivity Establishment protocols?

      Following links in the article will eventually get you to an article listing the patents.

    3. Re:What patent? by loufoque · · Score: 4, Insightful

      The technology to establish a connection between two peers for voice or video communication is standardized, in particular by the IETF, and implemented by many vendors.
      If there is a patent on that technology, that would put into question hundreds if not thousands of products worldwide.

    4. Re:What patent? by citizenr · · Score: 2

      What is the patent involved here? Establishing a connection between two entities on an IP network? NAT traversal techniques? Usage of Interactive Connectivity Establishment protocols?

      No, its "telephony .. over the internet, on a COMPUTER!!1 or smartphone!777"

      --
      Who logs in to gdm? Not I, said the duck.
    5. Re:What patent? by Technician · · Score: 2

      SIP is another standard for VOIP. It works with off the shelf hardware from many vendors as well as softphones.

      --
      The truth shall set you free!
  4. SIP by Gocho · · Score: 2

    How is this different from canreinvite=yes/no in Asterisk? Doesn't SIP allow for the same thing?

  5. Re:Digital LMR radio systems by AHuxley · · Score: 2

    It can just be told to experts in terms of the costs. A huge loop out via a huge US telco can be very a cheap way to get back into a region for that data use without paying full price two regional telcos direct.

    --
    Domestic spying is now "Benign Information Gathering"
  6. Re:Digital LMR radio systems by queazocotal · · Score: 2

    Sarbones-oxley - and similar laws can mean that you are required to log buisness transactions.

  7. Patents, opening it will not fix the patents by bussdriver · · Score: 2

    patents need to be stopped.

  8. Re: Obvious patents and patent trolls by JWW · · Score: 4, Insightful

    What? I am eagerly awaiting VirnetX's release of it fabulous point to point video communications software. I mean its sure to be released soon right, right?!

  9. Ongoing? by Theaetetus · · Score: 2

    Both sides in the litigation admit that if Apple routes its FaceTime calls through relay servers, it will avoid infringing the VirnetX patents. Once Apple was found to be infringing—and realized it could end up paying an ongoing royalty for using FaceTime—the company redesigned the system so that all FaceTime calls would rely on relay servers. Lease believes the switch happened in April.

    So, from that, it appears that Apple infringed up until April, but no longer does.

    Meanwhile, Apple has handed over its customer service logs from April through mid-August to VirnetX's attorneys. At the August 15 hearing, a VirnetX lawyer stated that Apple had logged "over half a million calls" complaining about the quality of FaceTime, according to Lease.

    If that's accurate, the data will bolster VirnetX's arguments that its patents are technologically significant, hard to work around, and deserve a high royalty rate.

    And if the customers are complaining because it currently uses the sucky work-around, then that also indicates that Apple stopped infringing in April.

    The judge and lawyers present at the hearing didn't discuss numbers regarding what a reasonable ongoing royalty might be, but VirnetX is asking for royalty payments of more than $700 million for the ongoing use of FaceTime, according to Lease.

    ... so why would there be ongoing royalties? If you stop using someone's patented improvement and return to using the previous, public domain system, you shouldn't have to keep paying them royalties. This would be like if someone patented a better mousetrap, and then when you stopped using it, they also wanted you to pay a royalty for owning a cat.

  10. Re:Obvious patents and patent trolls by jbolden · · Score: 2

    There are many problems that have obvious solutions no matter who does the research. Some solutions are inevitable. They aren't supposed to be patented.

    Inevitable discovery is a defense, a way of overturning a patent. But people often overestimate what's inevitable. Many good ideas aren't discovered for generations even though all the pieces were in place.

  11. The disaster of allowing software patents by Morgaine · · Score: 4, Insightful

    The patents in question describe nothing more than perfectly normal combinations of Internet services that any software engineer who knows basic networking would be expected to create as a matter of course. Combining such services into higher protocols is simply algorithmic construction in network programming.

    This patent suit illustrates well the chilling effect that software patents have on our ability to use computers and the Internet to best effect. When you allow software algorithms to be locked away in patents, the ability of engineers to use computers and networks as an enabling technology decreases dramatically, to the extreme detriment of our ability to improve our systems.

    Each new software patent just adds further bars to the prison. If this disease isn't stopped soon, the profession is going to be worthless except as a feeding pit for lawyers.

    --
    "The question of whether machines can think is no more interesting than [] whether submarines can swim" - Dijkstra
    1. Re:The disaster of allowing software patents by gutnor · · Score: 5, Insightful

      When you allow software algorithms to be locked away in patents

      Actually that is not the biggest problem. That would be fair enough if those algorithm required years of R&D. What we are talking about here is stuff that is normal everyday problem to solving for the engineer in charge of developing the feature.

      Patent are supposed to expose secrets in exchange for a temporary monopol. However, if nobody look at the patents to find those secrets and yet manage to reinvent them, what exactly is the value of those patent ? If you have a patent system where people need to search for the patent to license after they have made their product, your patent system is broken at a fundamental level.

  12. Re:Lost a lawsuit? by fahrbot-bot · · Score: 3, Interesting

    "Just ask Obama to overturn the ruling." Requesting the legislative branches not to allocate resources for enforcement is more the current administrations' style.

    To be fair, that's easier than trying to get the Legislative Branch to *actually* do something (about anything). According to Slate the 113th Congress has passed only 15 bills this year for Obama to sign while "... more than 4,000 bills have been referred to committee this year, where most will die of starvation."

    For comparison's sake, George W. Bush signed 13 bills into law on today's date alone [July 12] in 2005—with a Republican majority in both houses, mind you—but seven of those bills were sponsored by Democrats!

    Of course, we only have ourselves to blame for voting all these weasels into office...

    --
    It must have been something you assimilated. . . .
  13. Re:Obvious patents and patent trolls by mc6809e · · Score: 3, Insightful

    Inevitable discovery is a defense, a way of overturning a patent. But people often overestimate what's inevitable. Many good ideas aren't discovered for generations even though all the pieces were in place.

    I've got nothing against patenting good ideas, but the techniques described in the patents involved seem inevitable to me.

    But then again juries don't usually include computer engineers so everything computer seems like magic to them.

  14. Re:Does this affect people in other countries? by PPH · · Score: 3, Insightful

    Time to open an office in Dublin and move the operations.

    --
    Have gnu, will travel.
  15. Where is the innovation? by Skapare · · Score: 4, Insightful

    Making direct connection between nodes is so fucking obvious. Any kind of service that would benefit from it, the designers would just do it. A patent that covers that in general adds nothing. A patent with some kind of innovative idea in this area might be possible for ways to improve direct communications. But such an innovative patent would not cover the obvious aspect of direct communication.

    The problem is not the patent trolls that exploit bugs in the patent system to their own unjustified financial gain. Instead, the problem is the USPTO that issues patents for obvious ideas just because they were able to find someone in their office that could not think up the idea, which appears to be more than 99% of patent applications. This is where the fix needs to happen. Patents must pass the innovation test and USPTO is not even aware how to do this test.

    --
    now we need to go OSS in diesel cars
    1. Re:Where is the innovation? by NoKaOi · · Score: 2

      I can see hoe maybe there are special techniques and such for people w/ firewalls or NAT or other such things, but for most of the world's internet users, I dont see how that would be a problem? Cant they just use the relay servers in cases where they WOULD have to bypass/punch a NAT?

      Because a massive majority of end-users on home "broadband" connections (at least in the US, where Apple lives) use NAT. Without supporting it you're not supporting your target market. If you're using Facetime on an iDevice, chances are you're using it over home WiFi, so you can pretty much figure that means such a huge majority of the Facetime calls are made with at least one user behind a NAT that it would be pointless to do what you're talking about.

    2. Re:Where is the innovation? by Zaelath · · Score: 2

      Most devices are quite capable of being directly connected to the net safely.

      What the hell are you basing that assertion on? Or is there some weasel in the combination of "capable" and "safely" that I'm not getting?

    3. Re:Where is the innovation? by FireFury03 · · Score: 2

      I'd think the obvious solution to how to map port numbers for NAT would be to map each host/port pair to a single random external port, regardless of the address it's sending/receiving to/from. That way you have just one lookup table for the mapping each way. IF the NAT router does that, then all you do is connect to a common server, which notes your external IP address/port and passes that on to the other party (and vice versa).

      This is a misunderstanding of how a lot of NATs work.

      A connection is identified by a tuple of (protocol, source IP, source port, destination IP, destination port). The source IP and source port are going to be rewritten by the NAT. The NAT will maintain a table of connections, which will map:

      (protocol, original source IP, original source port, destination IP, destination port) <-> (protocol, translated source IP, translated source port, destination IP, destination port)

      The "translated source IP" is always going to get rewritten to the router's external address (* this is not entirely true - see below), so that bit is relatively easy - you can poke an external server and that can pass on the "translated source IP" to the peer.

      The "translated source port" is arbitrary - the NAT may decide to leave it as it is, or it can pick any port it wants. And there doesn't have to be any correllation at all between any two connections. I.e. if you connect to host A, destination port B with original source port C, and then connect to host Y, destination port Z with original source port C, there is no guarantee the translated source port will be the same in both cases. So you can't just poke an external server and have it pass on the translated source port to your peer, because the translated source port you're going to use when talking to the peer could be different.

      In practice, many NATs try to avoid changing the source port at all unless there is some other connection identified with the same (protocol, translated source IP, translated source port, destination IP, destination port) - then it has to change the source port. This means that you end up with things mostly working, and then randomly breaking for no apparent reason (i.e. when another machine on the network is trying to connect to the same host and has happened to pick the same ports). You can mitigate this to some extent by trying to randomise ports and addresses as much as possible, but its never going to completely go away, and furthermore there is no guarantee that the NAT will even try to keep the port the same.

      (* routers can have multiple public IP addresses, so there's also no guarantee that they will always give you the same translated source IP either. Although this is rarer).

      I guess this wouldn't be such a problem if there was a standardised way of doing NAT... but there isn't - there are a variety of systems employed in the real-world, and to have a robust solution you have to be able to cope with all of them. Anyway, most of this is covered by the STUN protocol, which is a method of trying to determine all of the information you need to tunnel through a NAT; and the STUN RFC specifically says it is a best effort attempt and can't be made reliable.

      You'd still need to get through the firewall if the router is doing stateful blocking (which is easy to get around - there ought to be a connect_to low level call to do that, but easy enough to do a listen/connect on both sides).

      Actually, stateful firewalls are pretty much a doddle to tunnel through - you essentially do exactly the same as you would for NAT, but it completely eliminates all the guesswork since you know that the addresses aren't going to change arbitrarilly. This is why peer-to-peer stuff over IPv6 works well, even when you have stateful firewalls - you just need an unfirewalled server somewhere to mediate the transaction between the peers, and you don't need to be concerned with anything in the middle modifying the traffic in ill-defin

  16. Re:Does this affect people in other countries? by foniksonik · · Score: 2

    Akamai has several streaming media solutions. One example http://www.akamai.com/html/solutions/sola-vision.html

    --
    A fool throws a stone into a well and a thousand sages can not remove it.
  17. Virnet's licensing statement by kfsone · · Score: 2

    Emphasis mine:

    "Customers who want to develop their own implementation of the VirnetX patented techniques for supporting secure domain names, or other techniques that are covered by our patent portfolio for establishing secure communication links, will need to purchase a patent license."

    Hard not to notice the lack of links for say, SDK documentation, samples, registration -- just a statement that you can email them to ask. There are no demos. Also, they have crawling disabled. So I can't, for example, use webarchive to tell how long they have actually been on the web.

    --
    -- A change is as good as a reboot.
  18. WTF? by viperidaenz · · Score: 2

    That's exactly how SIP based VOIP phones have always worked. The routing information is passed over SIP and the voice connection is free to be routed over a different path, or directly.

    I'd read TFA but I can't be bothered. Other comments here mention the patents being filed in 2002/2003. The SIP RFC was filed in mid 2002. Maybe I should be on the lookout for new RFCs and file patents for every one of them that looks interesting.

  19. Re:Obvious patents and patent trolls by grahamwest · · Score: 4, Informative

    Here are a couple of the patents Apple was found to have infringed. They actually look non-obvious to me. Basically they're about running a special DNS proxy server that catches non-standard requests, checks credentials in some fashion, and either sets up a just-in-time VPN, passes them through to a normal DNS server, or returns an error. They also don't seem to be a troll company; it looks like this work was done as a government contract.

    I didn't look for any details on how Facetime peer-to-peer worked so I don't know if the ruling is correct and generally I consider software non-patentable (copyright and trade secret should be enough) but this is not what I'd call a meritless patent troll case.

    http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d=PALL&p=1&u=%252Fnetahtml%252FPTO%252Fsrchnum.htm&r=1&f=G&l=50&s1=6502135.PN.&OS=PN/6502135&RS=PN/6502135
    http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d=PALL&p=1&u=%252Fnetahtml%252FPTO%252Fsrchnum.htm&r=1&f=G&l=50&s1=7418504.PN.&OS=PN/7418504&RS=PN/7418504

    --
    Graham
  20. Re: Obvious patents and patent trolls by LinuxIsGarbage · · Score: 2

    Is there more to it than UPNP port opening?

    I imagine it's UDP hole punching: http://en.wikipedia.org/wiki/UDP_hole_punching