Stories
Slash Boxes
Comments
typodupeerror delete not in

Comments: 280 +-   Virgin Media To Trial Filesharing Monitoring In UK on Thursday November 26, @07:15PM

Posted by timothy on Thursday November 26, @07:15PM
from the deep-pocket-inspection dept.
internet
Shokaster writes "The Register reports that Virgin Media are to begin monitoring file sharing using a deep packet inspection system, CView, provided by Deltica, a BAE subsidiary. The trial will cover about 40% of customers, although those involved will not be informed. CView's deep packet inspection is the same technology that powered Phorm's advertising system. Initially Virgin Media's implementation will focus on music sharing and will inspect packets to determine whether the content is licensed or unlicensed, based on data provided by the record industry. Virgin Media emphasised that records will not be kept on individual customers and that data on the level of copyright infringement will be aggregated and anonymised."
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by Anonymous Coward on Thursday November 26, @07:19PM (#30241066)
    Deep packet inspection? All sounds like a porn operation to me.
    • by pushf popf (741049) on Thursday November 26, @07:38PM (#30241202)
      If they thought DPI was expensive, wait until they try real-time decryption
      • Vuze / Azerus already does this. Uses RC4 as the algorithm. But it should be enough to stop the virgin in it's tracks. Especially if they encode each download with a different key, like a random hash
        • Re: (Score:2, Insightful)

          And by "aggregated and anonymised", they mean they will send all the records to the record labels grouped by address. They won't even send the DSL subscribers name to the record label. Promise.

          • Re: (Score:3, Insightful)

            But unless client and server agree on a private key in advance, by offline means, a Man in the Middle can still proxy the key negotiation and access the plaintext.

              • by MichaelSmith (789609) on Thursday November 26, @10:12PM (#30242116) Homepage Journal

                Well yeah but reading up [wikipedia.org] it seems that A person in the middle may establish two distinct Diffie–Hellman key exchanges, one with Alice and the other with Bob, effectively masquerading as Alice to Bob, and vice versa, allowing the attacker to decrypt (and read or store) then re-encrypt the messages passed between them. A pre-arranged certificate could be used to exclude the man in the middle but then the client may proceed with the negotiation anyway (to get their stuff) and the cert can be comprimised if it is sent in the clear over the same link, ie, by apt-get or similar.

      • by Nerdfest (867930) on Thursday November 26, @07:50PM (#30241274)
        I've got a better idea. Have your legislators ensure they stay the hell out of your content. They aren't allowed to listen to your phone calls, wy the hhell should they be allowed to look at your data. Seriously ... if they suspect people of committing a crime, they should get a warrant.
        • by Cryacin (657549) on Thursday November 26, @07:58PM (#30241334)

          if they suspect people of committing a crime, they should get a warrant.

          But that would involve due process and presumption innocence, and well, we can't have that now. What's next? Right to a fair trial?

        • by Darkness404 (1287218) on Thursday November 26, @08:21PM (#30241482)

          They aren't allowed to listen to your phone calls, wy the hhell should they be allowed to look at your data

          Yeah, and look at how well governments followed that law http://en.wikipedia.org/wiki/NSA_warrantless_surveillance_controversy [wikipedia.org]

          Any human rights documents from any western country (UK, US, Canada, etc) are quickly becoming no more than toilet paper.

          The only way we have to stop them is to make it physically impossible for them to trample our rights. Encryption is one way we can stop this abuse of power. Laws only get us so far when "national security" is on the line.

          • by Cimexus (1355033) on Thursday November 26, @11:31PM (#30242570)

            I fully agree. The rise of surveillance of telecommunications (of whatever method) in the West is getting a bit alarming. Ubiquitous encryption will become the standard I feel. We are moving towards a word where all new software, systems and protocols that get developed, will include encryption to a greater or lesser extent.

            It started with the widespread logging and monitoring of all phone calls entering and leaving the US after 9/11 (this really irritates me as a non-American - that my calls TO America are getting logged and possibly intercepted). Since then though I feel that it is the UK that is becoming the worst offender. AU and NZ are still pretty much surveillance-free ... although that's mostly a product of them being isolated and not having suffered a direct attack, rather than them having stricter protections against this kind of thing. I'm sure if there were an attack or threat there, there would be impetus to implement similar systems to the US/UK.

            So yeah, I would urge everyone to use encryption in their daily lives as much as they can. Of course, most of us have nothing to hide in this respect, but it's really the ~principle~ of the thing that is at stake here, rather than an actual need to encrypt. If we make it technically or financially unfeasible to monitor communications en masse, then Governments will be more reluctant to do it, and will return to concentrating on tapping into only particular, suspected communications, by way of a proper warrant. Like they ~should~ be doing.

            • by Tom (822) on Friday November 27, @06:59AM (#30244540) Homepage Journal

              Of course, most of us have nothing to hide

              I hear that all the time and it's time to stop this lie by the surveillance fanatics once and for all.

              Of course we all have something to hide! It's called our private life. You have no business snooping around in it. Not if you're a cop, not it you're an ISP, not if you're god.

      • by QuantumG (50515) *

        Wouldn't using encryption be "circumventing a copyright protection mechanism" .. oh, UK, sorry.

      • Re: (Score:3, Informative)

        If they thought DPI was expensive, wait until they try real-time decryption

        Encryption can get you into trouble [theregister.co.uk] in the UK/

  • How do they know? (Score:5, Insightful)

    by Nursie (632944) on Thursday November 26, @07:19PM (#30241072) Homepage

    I have a friend who's an amateur musician and devices (his mobile phone) have started to deny him the ability to play his own music due to it being "unlicensed".

    How the hell do these clowns expect to be able to figure out what's unauthorised copying?

    • Re:How do they know? (Score:5, Interesting)

      by zonky (1153039) on Thursday November 26, @07:21PM (#30241078)
      What mobile phone make/model was this?
    • why would they bother? all they have to do is make legal threats and demand payment or they will haul you into court which will be even more expensive for you.

      people on here think they have somehow been winning this fight to control media, when they have been kidding themselfs. the fight hasn't even STARTED yet...

    • Re: (Score:3, Insightful)

      The more false-positives they measure, the more they can make the case for increasingly intrusive DPI which will inevitably include personally identifying users and meddling with their traffic if not disconnecting them.

      It's nice to see the military industrial complex involved in the music industry's problem.
    • Re: (Score:2, Informative)

      by Anonymous Coward

      Only the RIAA is allowed to distribute music there will be no other source or at least that is looking like their plan.

      I suggest a boycott during the 3rd Quarter: April 1, 2010- June 30, 2010, and 4th Quarter: July 1, 2010 - September 30, 2010
      Someone could set up a nice website, people could vote on a list of demands/consumer rights, and people could start an email/facebook campaign. A dent in the industries profits might get these people's attention.

      I for one think the Public Domain needs to be given back

      • Re: (Score:3, Informative)

        Boycotts do not work. I would think we would fingered that out after what Jefferson and Madison did in the start of the 1800's. "Free ships make free trade"
        • Re: (Score:3, Interesting)

          by jimicus (737525)

          If they can tell what files I'm sending over an encrypted VPN link, then they have some impressive technology indeed.

          At the risk of being branded a tinfoil-hat wearing nutcase, my employer used to use CIPE for a VPN between two offices. At the time I started, CIPE had already been discredited as being fundamentally insecure but nobody really thought it was going to be intercepted unless you had pissed off a government somewhere.

          Then we had a problem. SIP traffic of any description going over that VPN link didn't make it across. (Kind of important when your employer produces SIP software).

          Everything else made it fine.

            • Re:How do they know? (Score:4, Interesting)

              by TheRaven64 (641858) on Friday November 27, @10:00AM (#30245474) Homepage Journal
              You don't want to replace the Internet, just add more mesh networks near the edges. If you can route packets entirely over the mesh, the ISP never sees them. If you route some of your packets over your line and some over the line coming from a neighbour with a different ISP, then neither ISP can carry out man in the middle attacks and neither can get much useful information from traffic analysis.
  • Quick, everyone start sharing Barry Manilow songs.
  • by Ynot_82 (1023749) on Thursday November 26, @07:29PM (#30241152)

    27th May 2010

    Just 6 months after the announcement to monitor their network for illegal filesharers, Virgin Media has seen a dramatic decline in subscribers.
    90% of their top tier customers (renting 20Mb/sec) have canceled their subscriptions
    This figure is similar (82%) for their 10Mb/sec tier

    Furthermore, the cost of the controversial detection methods (Deep Packet Inspection) has meant that the company has had to increase monthly subscription costs across all tiers by 10-20%
    This has seen decline (albeit much smaller, at 47%) in their lowest tier of service

    • by Anonymous Coward on Thursday November 26, @07:33PM (#30241164)

      Only in your fantasies. Nothing will change. They'll keep the same subscriber level, and if there's any changes in level it will be due to deteriorating economic conditions.

      Face it: the average schlub doesn't give a rat's ass about the security of their internet connection from the ISP itself. In their thoughts: "Why should I? I've got nothing to hide!"

      • Re: (Score:3, Insightful)

        You’re the master of self-fulfilling prophecies aren’t you??

        Half the reason that sometimes nothing changes, is the people constantly repeating that, taking all belief of the possiblility out of people.
        That again is half the strategy to keep people from rising up.

        Because in the end, it’s all in the mind. If ten million people want to rise up, but believe they are the only ones, then it will be much more unlikely that they really do it.
        But if ten people believe that they really can change th

    • there BIG LACK of HD is killing off subscribers as well and this maybe to topper as people will give faster internet for FULL INTERNET.

  • More details here: (Score:4, Informative)

    by D-R0C (1358485) on Thursday November 26, @07:30PM (#30241154)
    "Virgin Media executive director of broadband, Jon James, told ZDNet UK on Thursday that the trial will go live "within days". He added that the use of such traffic-monitoring technology was part of its distribution deal with media company Universal." http://news.zdnet.co.uk/security/0,1000000189,39906062,00.htm [zdnet.co.uk]
    • by Anonymous Cowpat (788193) on Thursday November 26, @08:07PM (#30241400) Journal

      So now I know what their engineers have been doing instead of upgrading the upstream infrastructure so that my 10Mbit connection can provide better than 500kbit with 33% packet loss. Trebles all round.

    • by martin-boundary (547041) on Friday November 27, @01:18AM (#30243042)
      Excellent! I presume that Virgin Media have also built the infrastructure to comply with EU/UK privacy regulations?

      Such as, e.g., a facility to allow *every* broadband customer to be informed of and if they so choose to view *all* the information being gathered about themselves, and allow *any* of this data to be edited for accuracy by the customer, and allow *all* of this data to be deleted from *all* their servers if the customer decides to end the contract with Virgin at any time, etc.

      Moreover, I presume that Virgin Media have ensured that the nature of the data they do collect is technically necessary for the provision of their ISP service to each customer, and not simply a gratuitous and illegal collection of data that is requested for a completely independent purpose set out in a completely different contract with another entity, and to which the customer himself is not actually a party.

      These are bad economic times, and it would be a pity if some idle British lawyer were to look a little too closely at this announcement...

      • Re: (Score:3, Insightful)

        This is what the banks have been doing for decades. They are happily giving details of your credit card transactions to a privately owned third party company that keeps this record about you and sells digested report about you, popularly known as credit rating, to interested other parties.

        If you wish to see the information they collect about you, you have to pay money to them, and correcting wrong information about you (since it otherwise can ruin your life) is not easy or even possible either.

      • Re: (Score:3, Interesting)

        by AmiMoJo (196126)

        The Data Protection Act does allow you access to this data for a nominal £10 fee. In a month or two I'll be sending them a cheque with a request for all data held about me.

        What is not clear is how this works with anonymous data. It's still my data, even if it can no longer be associated with me.

  • by Anonymous Coward on Thursday November 26, @07:36PM (#30241194)

    Which is worse: All data being free, including data you don't personally like? Or regimes of data control?

  • by Winckle (870180) <mwinckle@nospaM.gmail.com> on Thursday November 26, @08:01PM (#30241354) Homepage

    Here's a bit of a dilemma, they crack down on filesharing, yet run a free usenet server for their customers with alt.binaries included with 5 days retention.

    Will they issue a takedown to themselves?

  • by erroneus (253617) on Thursday November 26, @08:04PM (#30241380) Homepage

    I guess I'll fill in some space down here because slashdot will not likely let me post a subject-only comment, but seriously, what more needs to be said? I can't believe they are even saying that with a straight face. Governments barely have anyone or anything to answer two when they lie to people. Businesses like Virgin media most certainly do not. The only thing that their bullshit proves is that they are aware of what the public response will be and that they are afraid of it at some level.

  • by BitterOak (537666) on Thursday November 26, @08:17PM (#30241458)
    Ok. They're monitoring their customers for illegal file sharing, even going so far as to identify whether or not the copied material has been licensed by the copyright holders. Does this not make them guilty of contributory infringement? They are providing the networks which allow users to infringe copyright. They know that infringement is taking place via their deep packets inspection, down to the level of individual acts of infringement. Then they are destroying data which can identify infringers, but they continue to provide them with networks service. How is this legal?
    • Re: (Score:3, Insightful)

      by d36 (1442889)
      because they have enough money to buy the government?
    • by Xest (935314) on Friday November 27, @05:26AM (#30244168)

      Yes, I think it's actually illegal, but for different reasons. From what I can tell this is exactly why the UK is facing legal procedings from the EU over Phorm.

      It's effectively a breach of the European Declaration of Human Rights which we are signatories to, specifically it is a clear breach of the right to privacy.

      I think realistically this will end up in European courts. It wont end up in British courts or be looked into by the police here because they are merely puppets of the Labour government here which supports this as demonstrated by the new supreme court refusing to hear McKinnon, the refusal of investigations into Phorm even though it was blatantly illegal and so on.

      Nowadays in Britain we have to rely on the European courts for any semblance of justice on these sorts of things, but on the upside they do generally rule in favour of the citizen on things like this where it is a clear breach of law. God knows where we as citizens of Britain would be if it weren't for Europe, I'd imagine it would resemble something like Germany circa 1937. In fact, there's a certain irony in that whole sentence, how times change eh?

  • Encrypt (Score:5, Insightful)

    by some_guy_88 (1306769) on Thursday November 26, @08:20PM (#30241472) Homepage

    Everything.

    • Re:Encrypt (Score:4, Funny)

      by dbIII (701233) on Thursday November 26, @09:18PM (#30241838)

      Everything.

      Ok
      cewqqwavkbqfycpligfbnoppilrsbmfDshcaswlpgjxyeuwhkz2gejdtx6wzhutcofalcwTl

      • Re: (Score:3, Insightful)

        by Toy G (533867)

        It is an evolutionary process. Browsers and http servers didn't all support HTTPS from the very beginning, but serious ones gradually accepted it as a critical part of the web infrastructure, and now you wouldn't dream to do ecommerce on HTTP.
        The same is slowly happening for other applications where secrecy and data integrity increasingly get to be seen as essential. Pretty much all serious torrent clients already support encryption, but they haven't switched off "legacy" support in their default configurat

  • misnomer (Score:5, Funny)

    by Anonymous Coward on Thursday November 26, @08:44PM (#30241642)

    Judging by their behaviour they should probably rebrand themselves Whore Media.

  • Implied (Score:3, Insightful)

    by Shadyman (939863) on Thursday November 26, @09:43PM (#30241994) Homepage
    "Virgin Media emphasised that records will not be kept on individual customers and that data on the level of copyright infringement will be aggregated and anonymised."

    For Now. Later? Who knows.
  • In Other News... (Score:5, Insightful)

    by florescent_beige (608235) on Thursday November 26, @11:07PM (#30242438) Journal

    All public and private communications of all executives of companies in the UK valued at 500 million or more will be monitored for illegal, unethical, and undesired behaviour.

    "If we had only known what certain Wall Street bankers had been up to the world could have avoided financial losses in the trillions. In a world of high speed communication and free flowing capital, the expectations of privacy have to be balanced against the interests of all stakeholders." said noted expert florescent_beige.

      • Re: (Score:3, Informative)

        by sammydee (930754)

        Most clients use encryption by default, but will accept plaintext incoming connections yes. It's fairly easy to configure your torrent client to only allow encrypted connections if you are feeling paranoid.

        Deep packet inspection does not extend to joining swarms with a modified client. At least I'd hope not...

It doesn't much signify whom one marries, for one is sure to find out next morning it was someone else. -- Will Rogers