Slashdot Mirror


Feds Say Hacking DRM To Fix Your Electronics Is Legal (vice.com)

An anonymous reader quotes a report from Motherboard: The Librarian of Congress and U.S. Copyright Office just proposed new rules that will give consumers and independent repair experts wide latitude to legally hack embedded software on their devices in order to repair or maintain them. This exemption to copyright law will apply to smartphones, tractors, cars, smart home appliances, and many other devices. The move is a landmark win for the "right to repair" movement; essentially, the federal government has ruled that consumers and repair professionals have the right to legally hack the firmware of "lawfully acquired" devices for the "maintenance" and "repair" of that device. Previously, it was legal to hack tractor firmware for the purposes of repair; it is now legal to hack many consumer electronics.

Specifically, it allows breaking digital rights management (DRM) and embedded software locks for "the maintenance of a device or system in order to make it work in accordance with its original specifications" or for "the repair of a device or system to a state of working in accordance with its original specifications." New copyright rules are released once every three years by the U.S. Copyright Office and are officially put into place by the Librarian of Congress. These are considered "exemptions" to section 1201 of U.S. copyright law, and makes DRM circumvention legal in certain specific cases. The new repair exemption is broad, applies to a wide variety of devices (an exemption in 2015 applied only to tractors and farm equipment, for example), and makes clear that the federal government believes you should be legally allowed to fix the things you own.

31 of 124 comments (clear)

  1. Fix, not upgrade by olsmeister · · Score: 4, Interesting

    Notice the phrase "original specifications".

    1. Re:Fix, not upgrade by Anonymous Coward · · Score: 2, Interesting

      Notice the phrase "original specifications".

      And if the original specifications include a bug in the software, isn't fixing it an upgrade?

    2. Re:Fix, not upgrade by Tinsoldier314 · · Score: 4, Insightful

      Notice the phrase "original specifications".

      And if the original specifications include a bug in the software, isn't fixing it an upgrade?

      A bug in the software isn't fundamental to the advertised value of the good. A tractor isn't advertised as, "60 HP diesel with bugs in the onboard software!".

    3. Re:Fix, not upgrade by rtkluttz · · Score: 4, Interesting

      At least original specifications leaves room for argument. Many devices are general purpose computing devices. Just because they may be sold with software that cripples the capability of the hardware, it can be argued that the original specification of the HARDWARE is to have a feature enabled... or even that the original specification of the HARDWARE is that of a general purpose computing device where the only limitations are the imagination of the person writing the software. This is the first step in a foothold for enshrining that hardware and software are two separate things.

      --
      Digital is, by definition, imperfect. Analog is the way to go.
    4. Re:Fix, not upgrade by omnichad · · Score: 4, Interesting

      Oh, good. I have a stack of DVDs where the advertised purpose is to have a license to watch a movie. Format shifting it is just correcting an implementation bug.

    5. Re:Fix, not upgrade by bobbied · · Score: 4, Interesting

      Notice the phrase "original specifications".

      Yea that caught my attention. I'm sure the question is about intent.

      IF you are trying to fix something that's broken, but not modify the way the overall item works, then you are allowed to reverse engineer DRM protections. So, in the case of a motor vehicle, you can modify the drive train controller to use a non-manufacturer specified sensor as long as you don't change how the vehicle operates. So no emissions changes, no changes in performance, just swapping out sensors or parts to repair the overall device? Have at it. Replacing parts with cheaper non-manufacturer specific parts? You are free to do this.

      What isn't as clear is reverse engineering a router's boot loader and firmware so you can run your own private firmware that does something different, has a different user interface or allows you to modify the radio power output outside of manufacturer specs. That may not be allowed.

      Modify your I-phone's firmware so that third party digitizer works (allowed).

      Modify your VW's Engine Controls so it passes emissions testing, but reverts to better economy higher emissions settings when driven.. (Not allowed)

      Reverse Engineer your car's CAN buss data to add a new entertainment device that can interact with the rest of the vehicle? (Not allowed)

      Bypass DRM controls on your consumer entertainment device so you can repair it with cheaper readily available parts? (Allowed)

      Bypass DRM controls on the device to get the HDMI to connect but allow you access to the raw unencrypted data? (Not allowed)

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    6. Re: Fix, not upgrade by Anonymous Coward · · Score: 2

      You obviously know virtually nothing about modern tractors. Wise up before you speak up.

    7. Re:Fix, not upgrade by AlwinBarni · · Score: 2

      Exactly, how is it with making archive copies of owned DVDs now - honestly asking?

    8. Re:Fix, not upgrade by Lothsahn · · Score: 3, Insightful

      Thankfully, the Copyright Office has already provided an exemption for motor vehicle repair (including modifications) [1].

      This is important because manufacturers are starting to install DRM into their cars. For instance, I drive a Nissan Leaf and the battery is software locked to the car. Replacing the car requires that the person involved pair the new battery to the car. And given the technology advances in batteries in the last 10 years, you're going to want to install a bigger battery than the car originally shipped with. Theoretically, a larger capacity battery is not "original specifications."

      Similarly, you are allowed to reverse the CAN bus to add a new entertainment device, and there's no copyright violation to modify the emissions control software either. Both are allowed under the previous ruling. That said, you probably are breaking some EPA law if you violate the emissions settings as described.

      Sources:
      [1] https://ifixit.org/blog/8510/c...

      --
      -=Lothsahn=-
    9. Re:Fix, not upgrade by Lothsahn · · Score: 2

      Actually, it's more complicated. That exemption quoted in the article expired this year and this new law supercedes it.

      Thankfully, the original specification language is not present in the car section (see section 1):
      Accordingly, the Acting Register recommends that the Librarian adopt the following exemptions:
      (1) Computer programs that are contained in and control the functioning of a lawfully acquired motorized land vehicle such as a personal automobile, commercial vehicle or mechanized agricultural vehicle, except for programs accessed through a separate subscription service, when circumvention is a necessary step to allow the diagnosis, repair or lawful modification of a vehicle function, where such circumvention does not constitute a violation of applicable law, including without limitation regulations promulgated by the Department of Transportation or the Environmental Protection Agency, and is not accomplished for the purpose of gaining unauthorized access to other copyrighted works.
      (2) Computer programs that are contained in and control the functioning of a lawfully acquired smartphone or home appliance or home system, such as a refrigerator, thermostat, HVAC or electrical system, when circumvention is a necessary step to allow the diagnosis, maintenance or repair of such a device or system, and is not accomplished for the purpose of gaining access to other copyrighted works. For purposes of this paragraph (b)(10):
      (i) The “maintenance” of a device or system is the servicing of the device or system in order to make it work in accordance with its original specifications and any changes to those specifications authorized for that device or system; and
      (ii) The “repair” of a device or system is the restoring of the device or system to the state of working in accordance with its original specifications and any changes to those specifications authorized for that device or system.


      The fact that a librarian needs to provide exemptions to keep the DMCA DRM restrictions reasonable implies that we really should fix the DMCA.

      Source:
      https://s3.amazonaws.com/publi...

      --
      -=Lothsahn=-
    10. Re:Fix, not upgrade by sconeu · · Score: 3, Insightful

      I'd argue this allows the user to restore the "Third Party OS" to the PS3. That WAS part of of the original specification.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    11. Re:Fix, not upgrade by r1348 · · Score: 4, Insightful

      Just do it, seriously. As long as you don't post a torrent somewhere, nobody's gonna bother you.

    12. Re:Fix, not upgrade by omnichad · · Score: 2

      I don't rip with Handbrake. I use MakeMKV. But then I re-encode the video stream with Handbrake.

  2. WOW, What's this mean for the PS3 by wildchild07770 · · Score: 2

    Since the whole debacle there supposedly started over removal of the third party OS option, which was an original feature they took away. Wouldn't this technically allow anything to be cracked if an "update" removed any functionality? I like it, just seems like this is HUGE.

    1. Re:WOW, What's this mean for the PS3 by Bert64 · · Score: 4, Interesting

      And the linux feature was originally added to the ps3 so sony could claim it was a general purpose computer and not a single purpose games console, in order to circumvent restrictions in place somewhere...

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  3. Still rather bastardized... by blahplusplus · · Score: 3, Informative

    ... you can bet companies will still fight tooth and nail to get around this shit. Just like now game companies can take advantage of mass public ignorance and high speed internet to legally reclassify all new games as "services". Just as with the new Assasins creed because they control the software from the point of production and their customers are 100's of miles away.

    https://www.dailydot.com/layer...

    1. Re:Still rather bastardized... by Darinbob · · Score: 3, Insightful

      Of course. At the moment most DRM is intended as a means to restrict customers from exercising their legal rights to use the product - eliminating fair use, forbidding resale, forbidding time shifting, etc. This is the primary difference between DRM and copy protection.

  4. does this apply to manuals & repair tools as w by Joe_Dragon · · Score: 2

    does this apply to manuals and repair tools as well?

    As apple can say that some repair (MANUALS / schematics) are DRM locked.

    also with cars / tractors same with the software that you need to run on a different system.

    also the original specifications makes it so they can SAY repair parts / tools / manuals are DEALER ONLY! or even the device in the first place is DEALER ONLY repair.

  5. How about video games? by rsilvergun · · Score: 3, Interesting

    lots of games don't work anymore because of DRM. Especially multiplayer games.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
    1. Re:How about video games? by dissy · · Score: 4, Informative

      The final ruling document isn't due to publish until tomorrow, but here is the 2018 exemptions ruling:
      (PDF warning)

      https://s3.amazonaws.com/public-inspection.federalregister.gov/2018-23241.pdf

      Scroll down to page 19

      #8 Video games requiring server communication - for continued individual play and
      preservation of games by libraries, archives, and museums

      applies to discontinued game servers

      Page 52 has some other limited uses of stripping drm on games specifically for preservation by a limited class.
      Likely won't apply to you and I, but would to the internet archive for instance.

      Basically pages 15-20 detail the various software exemptions but not games related.

    2. Re:How about video games? by dissy · · Score: 2

      Basically pages 15-20 detail the various software exemptions but not games related.

      Well, a game is a software

      I didn't say games can't be software, I said the other software entries are not games related :P

      #3. Computer programs - "unlocking" of cellphones, tablets, mobile hotspots, or wearable devices
      #4. Computer programs - "jailbreaking" of smartphones, smart TVs, tablets, or other all-purpose mobile computing devices
      #5. Computer programs - diagnosis, repair, and lawful modification of motorized land vehicles
      #6. Computer programs - security research
      #7. Computer programs - 3D printers

      While I would fully expect some slashdot reader out there has or is attempting to get Doom 3 installed on their cars ECU to control cylinder firing timings, most of these new items do in fact mention the "to make it work in accordance with its original specifications" bit or similar.

      I'm not sure what a judge would think of someone making such a claim. All I do know is I wish I could be there when they tried :P

  6. Re:What about those CA right-to-repair laws? by evanh · · Score: 2
  7. Re:What about violating patents? by es330td · · Score: 3, Insightful

    isn't there a good chance you'll be illegally using somebody's patent somewhere (especially if you are a third party, ie repair company)

    IANAL but it seems that if a person originally had a right to use a copy of the original software/firmware then even if modified the remaining original software still carries that license. A person could not then transfer it elsewhere but if Device A could use software modules B, C & D then device A could still continue using modules B & D even if C was modified or replaced.

  8. Probably depends on the advertising by raymorris · · Score: 2

    Courts rule in the specific facts of individual cases, and we can only predict what the ruling might be. Having said that:

    If you distribute it for that legitimate, lawful purpose, and all of your messaging (marketing etc) points to a lawful purpose, you'd probably be fine.

    On the other hand, if you have a web site where you advertise "steal Hollywood movies", your internal emails talk about paying people to use the tool for unlawful purposes, you make millions of dollars from people using it unlawfully, and you get a custom license plate that says "guilty", you're probably going to have a bad time in court.

  9. Only if it's bug-compatible with IE by raymorris · · Score: 2

    Normally, the specifications for how the software should behave wouldn't specify that it should be buggy.

    A notable exception is several software products were designed to be compatible with / emulate Internet Explorer, specifically including emulating some of its more important bugs.

    There may be decisions made in which the designers chose something they thought was good. You think it's bad, so you call it a bug. "Fixing" (changing) that probably wouldn't be restoring it to its original specification, though if there is a written standard such as http it could be argued that the standard is rhe specification for how an http client or server should behave.

  10. Re:Library of congress by aitikin · · Score: 2

    1870 when the Librarian of Congress centralized copyright functions and then the Copyright Office became its own department in 1897. As for the frequency of these interpretations, section 1201 of the DMCA provides for exemption petitions to be heard. A little more detailed link on the original story.

    --
    "Don't meddle in the affairs of a patent dragon, for thou art tasty and good with ketchup." ~ohcrapitssteve
  11. Re:"orginal specifications" by magzteel · · Score: 3, Insightful

    Limiting to "original specifications" is a major loophole and could be used to block performance improvements (in both vehicles and electronics) or ability to work with new formats of content or peripherals (the latter also applies to vehicles [I'm thinking of attachments to tractors, but it applies more generally as well] as well as electronics).

    I think the intent is to prevent unlocking features that require an additional charge to the vendor.

    I suppose it could also apply to something like an engine ECU re-flash that alters performance. That one is thorny because those changes can increase emissions too, which could be illegal. Poorly done ECU tuning can also damage the engine.

  12. Includes tractors sorry John Deere by Anonymous Coward · · Score: 2, Interesting

    A win for farmers who were very upset with Deere not allowing owners of their tractors to service them. Something many farmers do on a regular basis. I think anyone should have a right to use whomever to repair their products.

  13. Re: What about violating patents? by bobbied · · Score: 4, Informative

    No, technically a patent violation claim can be made any time you make, use, sell, or offer to sell the product without the patent holder's permission (often in the form of an authorization or license).

    True, but if you don't cause the patent holder any verifiable financial damages what can they sue you for? If you are just using it personally, from a device you built yourself, how does that damage them? You didn't buy the device from a licensed manufacturer and denied them the royalties?

    Civil law is pretty clear, actual damages is all you get to collect. Punitive damages are only for outrageous behavior, which if you where only using the patent for personal use, is unlikely to be considered outrageous.

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  14. Re: What about violating patents? by aitikin · · Score: 2

    No, technically a patent violation claim can be made any time you make, use, sell, or offer to sell the product without the patent holder's permission (often in the form of an authorization or license).

    True, but if you don't cause the patent holder any verifiable financial damages what can they sue you for? If you are just using it personally, from a device you built yourself, how does that damage them?

    Technically, punitive damages are easily obtain in patent court thanks to Halo Electronics v. Pulse Electronics. I doubt it would happen, but legally speaking, it's a possibility.

    --
    "Don't meddle in the affairs of a patent dragon, for thou art tasty and good with ketchup." ~ohcrapitssteve
  15. Re: What about violating patents? by dannydawg5 · · Score: 2

    You caused them damage because by repairing the old device, you did not have to buy a replacement product. In short, you saving yourself money causes financial damage.

    If you think that argument is utter nonsense, I invite you to take a look at this 1942 Supreme Court case:
    https://en.wikipedia.org/wiki/...

    TLDR: A farmer grew his own wheat on his own farm to feed to his animals. U.S. sued him for dodging wheat growing limits. Farmer argued that the wheat was not bought nor sold and is thus not interstate commerce. The Court said by growing his own food, he was doing economic damage because he was no longer required to buy and thus is effecting interstate commerce. Farmer lost.