May 07, 2007

You, Too, Can Own an Integer

Why should entertainment cartels have all the fun? Thanks to Ed Felten, now you can stake your claim on your very own 128-bit integer and, by virtue of the formidable legal power of the Digital Millenium Copyright Act, be able to bring legal sanction against anyone else who quotes it.

Quoth Felten:

Here’s how we do it. First, we generate a fresh pseudorandom integer, just for you. Then we use your integer to encrypt a copyrighted haiku, thereby transforming your integer into a circumvention device capable of decrypting the haiku without your permission. We then give you all of our rights to decrypt the haiku using your integer. The DMCA does the rest.

My integer is 5F ED 45 95 25 13 F7 71 17 02 7D 02 BA 7B BC DE. Use it at your peril.

Posted by abostick at May 7, 2007 08:19 PM
Comments

I still don't get this reductio ad absurdum attack of DCMA. It's bad that you might be able to invoke DMCA against someone who quotes your integer with added published instructions on how to use it as a decryption key.

I'm not aware of any DMCA enthusiasts who've had the gall to send takedown notices to someone who publishes *only* the integer -- without contextual instructions on how to use it as a copyright circumvention device. In the Digg.com incident, wasn't the number being repeatedly reposted in the same thread that described the use you could put it to?

I keep thinking that protests against DMCA should be directed against the use of encryption to defeat reasonable and legal duplication of copyrighted material. As a nonlawyer, who's read some of the takedown notices and EFF editorializing, I still don't get that someone could successfully use DMCA to claim ownership of an integer string. For me, mocking that fantasy scenario muddies the water for protests against the real heinousness of DMCA. Maybe I 'm just too dense to realize that it's all tongue in cheek.

The courts will eventually test how much accompanying "context" is required to enforce a takedown notice against a published encryption key. But right now, I believe they'd need to establish there's *some* context other than the coincidental identity of the integer string.

The universal applicability of the HD-DVD key is confusing the issue. I might be mistaken, but I don't think (for instance) that Microsoft could use DMCA to take down a website whose homepage title is a Windows registration key *unless the site specifies that that's what the title is.*

If every software application in the world used the same (supposedly secret) registration key, you'd get the same kind of excitement about people "publishing" it. But, in my understanding of the (bad, should be revoked) law, the software publishers couldn't issue successful takedown notices unless the named websites also specified that the integer can be used to activate the software.

For your copyrighted Haiku key, the website you try to take down would have to contain instructions on using the integer to decrypt the Haiku. This isn't exactly equivalent to a court of law ruling that you own the integer. But it's bad enough -- in the context of the nuisance power given to corporations with deep pockets to harrass anyone "suspected" of "publishing" a "circumvention device."

But the RIAA is already harrassing college students *without* encryption keys and "circumvention devices."

Posted by: Lenny Bailes at May 8, 2007 07:47 PM

The language used by AACS-LA's attack-dog lawyers in their takedown letters is that the proscribed information is "a technology, product, service, device, component, or part thereof that is primarily designed, produced, or marketed for the purpose of circumventing the technological protection measures afforded by AACS." (Emphasis added.)

The 09F9 decryption key is certainly a component or part of a technology used to circumvent the technological protection measures afforded by AACS.

Digg is not a threaded discussion group; Digg is a social networking site that votes on the popularity of submitted pages. What happened was that Digg users created many places on the Web and gave many, many Diggs (votes) to sites that provided the number alone, much faster than Digg's admins could remove the entries for those Web pages from Digg's database.

As far as I can tell, the AACS-LA has indeed sent takedown notices to publishers of the 09F9 key. The absurdity of this is what prompted the outcry and the rapid spawning of 09F9 pages.

The whole sordid story is told very well at Ed Felten's blog.

Posted by: Alan Bostick at May 9, 2007 09:24 PM

Can you show me a link to a takedown notice on a site that publishes the encryption key without labeling it or an explaining what to do with it?

I went through the takedown notice links I saw posted on BoingBoing and at the EFF site. The targeted websites in the notices I saw all published context that might establish the integer string as a "component" of a circumvention device, as prohibited in the (bad, should be revoked) DMCA.

What I don't believe (yet) is that any product vendor has had the nerve to issue a takedown notice against a site that publishes an integer string without some surrounding context that labels it (or explains how to use it).

What I saw on the Digg site was people posting the 09 key in comments on the original news story. The other thing (Digg users forcing URL links to the integer string to the top of the Digg site) is something I wasn't aware of.

The argument that Digg provided "context" associating those URL links with a "circumvention device" would be a lot weaker than an argument that they did this by publishing the integer string with associated context on a single website.

I also don't believe a takedown notice against a site that publishes only the integer string would be honored by any court in the United States. But I'm willing to concede that I might be naive about the probability of that horror movie becoming reality. The EFF, BoingBoing, and Ed Felten report the opinion that the DMCA can't be used against a site that *links* to a "circumvention device."

It still seems a bit of a stretch, to me, to be arguing that DMCA is absurd because it allows copyrights to be taken out on integer strings. I'd rather argue that DMCA is stupid and not in the public interest because it meddles with the fundamental property rights of consumers.

Posted by: Lenny Bailes at May 12, 2007 09:27 PM
Search

Sign up to play at PokerStars now!
Recent Entries
I Always Cry at Superhero Movies
Thomas M. Disch 1940-2008
2008 World Series of Poker Diary — Days Thirteen and Fourteen
2008 World Series of Poker Diary — Days Eleven and Twelve
2008 World Series of Poker Diary — Days Nine and Ten
Novelty Candy with a Kinky Bent
2008 World Series of Poker Diary — Day Eight
2008 World Series of Poker Diary — Day Seven
2008 World Series of Poker Diary — Day Six
2008 World Series of Poker Diary — Day Five
Recent Comments
Lenny Bailes to You, Too, Can Own an Integer
Alan Bostick to You, Too, Can Own an Integer
Lenny Bailes to You, Too, Can Own an Integer
Archives
By Month
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
November 2006
September 2006
August 2006
July 2006
April 2006
March 2006
February 2006
December 2005
November 2005
October 2005
September 2005
May 2005
April 2005
March 2005
February 2005
January 2005
December 2004
November 2004
October 2004
September 2004
August 2004
July 2004
June 2004
May 2004
April 2004
March 2004
February 2004
January 2004
December 2003
November 2003
October 2003
September 2003
August 2003
July 2003
June 2003
May 2003
April 2003
March 2003
February 2003

By Category
Blogosphere
Creativity
Dreams
Fiction
Iraq
Life
Main
News & Events
Poetry
Poker
Politics
Spirituality
Theater
Torture
Videos

Master Archive List
Email
Alan Bostick

Syndicate this site (XML)
Creative Commons License
This weblog is licensed under a Creative Commons License.
Powered by
Movable Type 2.63