Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
The Courts Government News Your Rights Online

Federal Judge Rules Against Reverse-engineering 601

zurab writes "A federal judge in Boston threw out a challenge to the DMCA brought by the ACLU for a Harvard Law School student. Ben Edelman decided to ask court's permission to reverse-engineer the Internet filtering software made by N2H2 in fears of being sued by the company. Of interest is a quote from the ruling: "there is no plausibly protected constitutional interest that Edelman can assert that outweighs N2H2's right to protect its copyrighted material from an invasive and destructive trespass." Full story on Yahoo."
This discussion has been archived. No new comments can be posted.

Federal Judge Rules Against Reverse-engineering

Comments Filter:
  • by Anonymous Coward on Wednesday April 09, 2003 @08:33PM (#5698062)
    and its so freaking intrusive. it once banned slashdot for "vulgar language" (how often do you see that on /.?

    btw, fp!
    • by Anonymous Coward
      I know. Those assfarmers. Like there's ever any damned bad language in this craphole.
    • by VistaBoy ( 570995 ) on Wednesday April 09, 2003 @08:38PM (#5698110)
      I never see any fucking vulgar language on Slashdot. Those cuntbags must just be fucking out of their fuck-ass mind.

      BTW, I actually am at a school that uses Bess, an N2H2 product. It banned Slashdot for being a "Message Board." I have a good mind to go there and give those networking bastards a piece of my mind.
      • by JessLeah ( 625838 ) on Wednesday April 09, 2003 @09:38PM (#5698481)
        Wait, wait, WTF? Since when are/should "message boards" be banned from schools?! Isn't the whole point of school (supposedly) to facilitate intellectual conversations.. DISCUSSIONS, which of course is what said "message boards" are for?

        So these schools using Bess/etc. are basically saying "Go to msnbc.com / aol.com / cnn.com all you want, since they're nice big corporations, but don't discuss things amongst yourselves?" What is the justification given? Or is none at all given (as is typical nowadays)?

        I am confused.

        My good friend works at an office using WebSense (which both of us now call WebSenseless). It has, in the past, blocked her from accessing many perfectly legitimate sites, including my own site-- when I was trying to use my site to send her a technical document. It was very annoying.

        All these years, and censorware still hasn't gotten better? This is pathetic...
        • by doorbot.com ( 184378 ) on Wednesday April 09, 2003 @09:54PM (#5698566) Journal
          Isn't the whole point of school (supposedly) to facilitate intellectual conversations.. DISCUSSIONS, which of course is what said "message boards" are for?

          No, primary and secondary schools are designed to shift responsibilities for children off of the parents' backs, so they have someone else to blame when their child doesn't turn out to be Superman and/or Wonderwoman.
        • There is discussion on Slashdot?? Where?? And why wasn't I told about this?
        • by NeoSkandranon ( 515696 ) on Wednesday April 09, 2003 @10:43PM (#5698790)
          You make one big assumption---that given the run of all the message boards on the internet, students will only go to the "good" ones---that is, the ones that promote discussion and whatnot.

          All I can say is, it must have been awhile since you were a student. The purpose of blocking message board sites is so kids dont dick around when they're supposed to be working, tying up what might be already scanty bandwith (my highschool had 1400 students with several labs and all teachers' computers on a 64k ISDN line.) doing things that are not at all school related.
        • by nathanh ( 1214 )
          Since when are/should "message boards" be banned from schools?! Isn't the whole point of school (supposedly) to facilitate intellectual conversations..

          No, schools are expensive day-care centres so parents can work. By keeping children occupied with mindless tedium (aka homework) schools also reduce the juvenille crime rate.

          Mod me funny, I dare you. I'm not being funny goddamnit.

        • by Anonymous Coward on Wednesday April 09, 2003 @11:26PM (#5698947)
          A couple years ago, I saw a reverse-engineered list of the keywords that Bess considered illegal. In addition to the standard seven unprintable words, there were many context-sensitive words like "breast". But the really disturbing find was "MacMillan" - a rival publishing company.

          OK, I'll admit some of the politically sensitive oversimplifications in their scientific textbooks were obscene, but not enough to ban them for.

          Tried to find the link again, but this is the closest I could come up with on short notice:
          http://danny.oz.au/freedom/censorware/ifi lter.html
          I know it's not an authoritave source, but this is slashdot.
          • by nurb432 ( 527695 )
            Guess that blows many recipe sites, I guess the 'Beef' producers lobbied for that one, cant have terrorist chicken breast recipes floating out there in cyberspace now can we..

            But in all seriousness, it shows how bad of an idea these sort of 'filters' are.. they are flawed by design, and prone to 'political' abuse.
        • by orangesquid ( 79734 ) <orangesquid AT yahoo DOT com> on Wednesday April 09, 2003 @11:39PM (#5698998) Homepage Journal
          I think one of the main points of school is to lock kids up and keep them out of (most) trouble. But anyway...

          Banning reverse engineering?!?! What's NEXT?! I bet they're going to rule against literary analysis in English! Reading too far into something would endanger the author's critical intellectual property---if we knew *how* he (or she, of course) wrote what he wrote, there would be countless knock-offs and imitators! Oh wait, there already are..... so?

          Anyway.
        • by CustomFort ( 643959 ) <MarkNO@SPAMReitblatt.com> on Wednesday April 09, 2003 @11:49PM (#5699052) Homepage Journal
          The reason my school gives for blocking Discussion sites is the idea that when we surf the internet from school, we are representing the school. By allowing us to talk on forums and boards, they are afraid we may offend someone, and that would reflect poorly on the school.

          *Tongue in Cheek*

          The reality of Bess is is that it is unquestionable. Most of my teachers aren't willing to walk over to my computer and type in a password every minutes so that I can actually see the pictures of Mussolini's dead body. (We are covering WWI). The problem lies with Bess and other such filtering software in that its database is inaccurate and beyond reproach. Bess used to allow you to submit webpages that it blocked for reviews, it would even email me telling whether or not the site was allowed. I would usually get a response within 4 days, and they would usually agree with me, that the site shouldn't be blocked. Now, when you try to submit the page, there is no option to allow you to give them your email addy (I didn't use my private one of course), and they don't even allow you submit freepages. They are blocked by default. Without notification, they could never get around to checking the site, and you would never know which way it went unless the site was magically unblocked one day.

          I don't even get the point of having a filter at a High School. Very few people are stupid enough to be surfing Pr0n in the middle of library, so what are they afraid of? I dont't knw, maybe I'm just angry because they block /. and Penny Arcade, both of which I need to live.
          Just my two bits..

          P.S. This is my first post! Yay!
          • No wonder your teacher won't move for you if you're putting Mussolini's death during WW1...

            Hint: look for the other world war :)

            Better get your timeline straight, boy! Or you may never get that password!
      • So what if your school, ISP, country (or whoever) "bans" a website? That's no big deal! I'm using anonymizer.com [anonymizer.com] and it seems to work just fine. Apparently there are others, (some free?), but this one I've had experience with and can vouch for (and no, I'm not on their payroll, nor am I getting a kickback for this post).

        FWIW, for you people with minds in the gutter, my employer's new firewall is configured in a screwy way that was preventing me from posting to Slashdot (apparently this was not intentional

    • by EngMedic ( 604629 ) on Wednesday April 09, 2003 @08:48PM (#5698181) Homepage
      yeah. my old highschool uses bess... it was a pain in the ass. it banned the homepage of the comp sci department (hosted off campus on one of the teacher's personal servers) for being "a hate webpage" that also had kiddy porn and hacking tools. it would've been a pain, if i hadn't known the admin's username, and figured out that his passwords changed monthly, but were just the president's last names, starting from washington... last i checked, incidentally, Bess/N2H2 is under litigation for selling user browsing information in breach of their own privacy policy and contract.
      • by SHEENmaster ( 581283 ) <travis&utk,edu> on Wednesday April 09, 2003 @10:16PM (#5698671) Homepage Journal
        uses a filtering "service" that's always down. The NT4 proxy servers only resolve an ip correctly two tries out of three.

        It's not too bad, because they have an 802.11b net my Zaurus and iBook can access as well as a "secret router" on 10.0.0.3 that I'm not supposed to know about.

        BTW, the NT4 proxy is sp2; I made a single URL that can crash the proxy if entered on any school computer. They really should fire the techies and let me do the job for a gym credit.
  • Simple (Score:5, Insightful)

    by mark-t ( 151149 ) <markt.nerdflat@com> on Wednesday April 09, 2003 @08:34PM (#5698071) Journal
    Reverse engineer anyways, and publish the results anonymously.

    Easy enough to do, isn't it?

    • Re:Simple (Score:3, Funny)

      by Xformer ( 595973 )
      Anonymously and in another country. No, wait... can't escape US law that way either. Damn (oops, foul language).
    • Re:Simple (Score:5, Insightful)

      by Flower ( 31351 ) on Wednesday April 09, 2003 @08:45PM (#5698161) Homepage
      And when they do find you, you are instantly labeled a hacker instead of a serious researcher.

      Anyway, my two cents. One, I'm seeing a trend that these lawsuits keep getting tossed because the issued involved aren't ripe. Two, how does a collection of blocked URLs constitute a copyrighted work?

      • Re:Simple (Score:4, Funny)

        by JimDabell ( 42870 ) on Thursday April 10, 2003 @12:55AM (#5699348) Homepage

        how does a collection of blocked URLs constitute a copyrighted work?

        An individual URL might just be a fact, but a collection of facts that's more than just a simple collation (i.e. some creativity went into creating it) can be copyrighted. See this page [lawnotes.com] for more details.

        On a side note, does anybody else find it hilarious that the USA Copyright Office gets asked "How do I protect my sighting of Elvis?" [copyright.gov] often enough for them to put it in their FAQ?

    • NO! (Score:5, Interesting)

      by Erris ( 531066 ) on Wednesday April 09, 2003 @11:02PM (#5698863) Homepage Journal
      Reverse engineer anyways, and publish the results anonymously.

      That's not good enough. Honest people should be able to do honest things in an upright manner. Honest people also demand accontablility and an anonymous list of blocked sites is worthless when the results can't be repeated elsewhere.

      This ruling is absolutly outrageous. A Federal jusdge protecting a trade secret with copyright law? It's amazing that laws designed to encourage publishing have been perverted to prevent legitmate research and the useful arts. When did copyright protection of exclusive publication by an author become a prohibiton agaist READING and ANALYZING the thing published?

      The following paragraph is a copyrighted ASCI text art diagram with a message protected by an ingenious electronic encryption method called French, available at bablefish [http]. It is intended to form a pleasing pattern of black and white when viewed by a browser. It may not, under any circumstances by coppied or otherwise dessiminated, not even oraly or by heliograph.

      Juge Richard Stearns de zone des ETATS-UNIS, ou vous avez la merde pour des cerveaux ou Yahoo vous a fait un grand mauvais service. Si vous prolongeriez la loi de copyright aux secrets commerciaux vous êtes la plupart d'homme d'UnAmerican et avoir violé les serments de votre bureau.

  • Eh? (Score:5, Funny)

    by BJH ( 11355 ) on Wednesday April 09, 2003 @08:34PM (#5698072)
    From the company's spokesman:

    I think it's pretty clear that people who want to analyze and criticize filters can use tools that do not involve decryption.

    And what exactly would those be - ESP? Divination with a forked stick? Tarot readings?
    • Re:Eh? (Score:4, Interesting)

      by rusty0101 ( 565565 ) on Wednesday April 09, 2003 @08:59PM (#5698249) Homepage Journal
      From the company's spokesman:

      I think it's pretty clear that people who want to analyze and criticize filters can use tools that do not involve decryption.

      And what exactly would those be - ESP? Divination with a forked stick? Tarot readings?


      The concept exists of a "black box" analysis. In this case you use a random number generator to come up with long string of possible URL's and feed them to the program to see which ones are blocked. You could also do a sequential search, where you feed it urls like a.com, b.com, c.com and so on, through zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz.com (or longer if you allow more than 32 characters before the .com) as well as combinations with legitimate symbols ('-', '.', and whatever else is considrered valid)

      A random walk should get you close to a comprehensive list earlier than a seqential search, though a dictionary attack may work faster, especially if you include modified dictionary entries such as s3x, 53x, sechs, and so on.

      Then again, I could be wrong. Someone might consider that to be decrypting the list.

      -Rusty
    • Re:Eh? (Score:5, Funny)

      by Soko ( 17987 ) on Wednesday April 09, 2003 @09:05PM (#5698286) Homepage
      ...In other news today, longtime Slashdot member BJH was served with a lawsuit under the provisions of the DMCA by internet filtering company N2H2. Said David Burt, company spokesperson "We have no idea how Mr. BJH deterimined that our block list is created by a Psycic divining the locaton of several Tarot cards with a forked maple stick - he had to of de-crypted or reverse engineered it in some way."

      Mr. BJH could not be reached for further comment.

      Soko
  • by sdo1 ( 213835 ) on Wednesday April 09, 2003 @08:34PM (#5698073) Journal
    This [slashdot.org] country [slashdot.org] is [slashdot.org] going [slashdot.org] to [slashdot.org] hell [slashdot.org]... quickly.

    Write to your elected representatives [house.gov]. Do it now.

    -S

    • by fliplap ( 113705 ) on Wednesday April 09, 2003 @08:48PM (#5698183) Homepage Journal
      The problem is, everyone on slashdot would rather just complain on slashdot instead of actually writing thier representative a well worded letter.

      I was actually thinking about this the other day. What about a slashdot sponsered letter writing compaign that gave people a tangible reward for writing a good letter to thier congress(wo)man.

      They could have everyone write an email about what really matter to them, any topic, preferably a technological one as thats what scores points around here. Then have them mail them to thier representative and CC a copy to contest@slashdot.org as well as post it as a comment. Say, 10 highest rated letters win a free subscription (however many page views that is). The cost would be negligable, but the impact of tons of well worded emails coming from intellegent people would have an amazing impact. So, editors, what do YOU think? --btw, the letters should be worded better than this post.

      • Great idea. I'm canadian, but I still support it :P
      • by be-fan ( 61476 ) on Wednesday April 09, 2003 @09:00PM (#5698255)
        Send letters, rather than emails. Emails are too easy to ignore. But otherwise, I think this is a great idea. You've convinced me to scrounge up a stamp. Let's Slashdot Congress!
      • by Zalgon 26 McGee ( 101431 ) on Wednesday April 09, 2003 @09:05PM (#5698283)
        The real problem is that most /.'ers would rather browse http://www.whitehouse.com [whitehouse.com] than http://www.whitehouse.gov [whitehouse.gov].
      • by tconnors ( 91126 ) on Wednesday April 09, 2003 @09:22PM (#5698390) Homepage Journal
        The problem is, everyone on slashdot would rather just complain on slashdot instead of actually writing thier representative a well worded letter.

        Actually, the problem is a lot of /.ers are international. We see daily just how fucked up the good ol' US of A is becoming, and can do nothing about it. Now, that's not so bad - I don't ever want to travel to the USA myself, let alone live there, but in the meantime, our own counties are threatening to follow in their footsteps, so that we can further our trade agreements.

        So in that way, we whinge about the USA laws, because they will eventually influence our own laws.
    • What is elected representative?
  • by Zork the Almighty ( 599344 ) on Wednesday April 09, 2003 @08:35PM (#5698076) Journal
    If this stands up, it will be a kick in the teeth to freedom. A free society depends on public disclosure and peer-review. It's sickening to see how so many laws are being aimed at those two targets these days.
    • No it's not.

      We still have a right to vote. Unfortunately last election, our popular vote (the people) was ignored by the Governer of Florida, the confusion of the divits, and the amount of time they wasted on investigating it drew out the talley of the electorial past the cutoff date.

      Because of Florida has more electorial votes, when they swayed towards Bush it was enough (barely) for him to win the presidency.

      • voting is the least important part of a democracy on this scale.
      • While I certainly agree that the last presidential election had problems, your analysis of the problems could use a little help.

        Our popular vote is deliberately irrelevant for the presidential election; this is to prevent a few populous states from running off with the election. Hypothetical situation: the electoral college is thrown out, and two candidates are running for the popular vote in an election. Candidate A has run a very tightly targetted (read: lots of gifts and pork to specific locations) ca
    • A free society depends on public disclosure and peer-review.
      What society are you living in? No society depends on disclosure or peer review of trade secrets. Every company is entitled to keep trade secrets. It either that or they must patent their inventions. Patents require disclosure. So take your pick.
      • by the gnat ( 153162 ) on Wednesday April 09, 2003 @09:21PM (#5698388)
        I would have said something different from the parent poster: scientific and technical progress depends on public disclosure and peer review. It also depends on the freedom to investigate a problem without interference from the government or companies (as long as no one gets hurt!).
        • ... scientific and technical progress depends on public disclosure and peer review
          Agreed, but that's got nothing to do with this story. Reverse engineering a company's software or protocols isn't scientific nor does it advance science.
          • by nhavar ( 115351 ) on Wednesday April 09, 2003 @10:22PM (#5698696) Homepage
            Let us think about that for a moment. Suppose that you want to show the success or failure of a product who's maker claims the extraordinary. Back in the good old days you'd go to the store buy the product, test it out, take it apart and find out how it ticks. Most of the time you'd find out that the actual features were at a minimum technically misleading. At the end of your little test you'd post your results out to the web or tell your buddies or let other professionals know.

            Now you can't own the product. It's not yours. Not only is it not yours but you can't tinker with it. Tinkering with it is illegal. If the manufacturer says it's the safest product ever devised and you suspect that it's full of holes you aren't allowed to look. If they say it has technology developed by NASA and you suspect code looted from a GPL'd product - you can't check - it's illegal.

            If I'm doing a term paper on the effectiveness and accuracy of "filters" and I can't test the product, or publish my findings, how do I progress. When someone else is doing a study on the long term effects of filtering (i.e. what knowledge was lost/missed due to improper filtering) how can one do so without looking at how and what the filters filtered.

            Look at some EULA's lately. One EULA I got a couple of years ago said that "reviews can only be published after the written consent of 'COMPANYX'. COMPANYX reserves the right to sole editorship of any published reviews of it's products." This meant that ANY review that you saw on the web or in a magazine they effectively wrote. The problem was trying to find any real data on the product - every review was glowing, no problems, no benchmarks, and no real information.

            At the end of the day the product was a piece of crap. But the only way you could find out it was a piece of crap was by purchasing a license at 700+ per seat and doing your own testing. Which the company assured wouldn't be accurate without having a "production" environment to test against.

            More and more companies are hiding behind their EULA's, patent law, trademark law, copyright law, and so called "trade secrets" to hide the fact that their products are not of the quality nor even contain the feature sets that they advertise. And the judges and the politicians give them more and more room to maneuver every day. Filtering companies claim "Advanced Artificial Intelligence" and "Intelligent Algorithms" and we can't tell that they aren't just using a handcompiled blacklist updated regularly. And these are the companies that the politicians want EVERY LIBRARY and EVERY SCHOOL SYSTEM to use for filtering. I don't reallistically think that the government is going to make the effort to keep these vendors honest so I think WE should have the ability to do so. The only way to do that is through some ability to reverse engineer their products.
      • Every company is entitled to keep trade secrets.

        Except that when they sell those products in a retail marketplace, they no longer can reasonably expect to maintain any secrets those products may contain, especially in light of the fact that there is no contract binding the customer to keep those secrets. Companies examine their competitors' products all the time. You think Sony just sits there contemplating its navel? No, they're out there buying their competitors' products, tearing them apart, and u

      • Every company is entitled to keep trade secrets. It either that or they must patent their inventions. Patents require disclosure. So take your pick.

        Of course a company is entitled to keep their trade secrets secret, if they can. What's at issue is: Should they be allowed to finesse the government into making it illegal for anyone else to discover those secrets via reverse engineering?

        Copyright was never meant to be a way to prevent people from learning secrets. It was meant to prevent people from re

      • why make a choice? (Score:5, Insightful)

        by Erris ( 531066 ) on Wednesday April 09, 2003 @11:17PM (#5698915) Homepage Journal

        Every company is entitled to keep trade secrets. It either that or they must patent their inventions. Patents require disclosure.

        Yes patents require disclosure in return for Federal protection of the exlusive use of the thing described. They are very expensive for a company and they give away all your hard work so that others can use it.

        Now, thanks to the DMCA, you don't have to chose. Neat eh? You can have your trade secrets published publically in an encrypted form and the US Government will make sure others don't tell anyone about how it works even when they are bright enough to figure it out. They will protect your feble trade secrets from "invasion"! This is really cool, now no one has to tell anyone anything AND be protected by the government. What a great trade! I pay taxes which are used to keep me from understanding the things I own.

        Well, I used to own things. Now that I can't do what I want with them or share what I do with my friends, I think some of my things belong to the people who made it. Just imagine this being applied to software! Oh wait, this is software! Really really neat. If I install that program on my computer so that I'm not tempted to look at things someone else thinks are nasty, I'm not only giving up my right to read, I'm giving up ownership of my computer! That's just unbelievable. Next thing you know, you won't be able to share what you know about BIOS [slashdot.org]. Well, it's good that other people are willing to be responsible for the things I want to use. That way I don't have to worry when they break [slashdot.org]. Someone will always take care of me.

      • Every company is entitled to keep trade secrets.

        As long as they don't publish or make them generally available - then the law doesn't (or shouldn't) protect you if someone out there discovers the secret and tells the world about it.

        It is not illegal to appropriate someone elses trade secrets, it is only illegal if you misappropriate the trade secret.

        To quote:

        "Misappropriation " means: (i) acquisition of a trade secret of another by a person who knows or has reason to know that the trade secret was acq
  • by Rooked_One ( 591287 ) on Wednesday April 09, 2003 @08:36PM (#5698082) Journal
    what about "informed engineering"?

    You can write the "Hello World" program a million different ways - so can you write a program to do the same thing that one program does if you do it from scratch? Think back to your programming classes - the professor gave you a task, you did it, but the chances of it being exactly the same as the person's sitting next to you was nill to none unless you were just copying their work.

  • by mcdrewski42 ( 623680 ) on Wednesday April 09, 2003 @08:36PM (#5698084)

    "We think that researchers and other people who want to learn about filters already have means for doing that," Burt said. "I think it's pretty clear that people who want to analyze and criticize filters can use tools that do not involve decryption."


    Surely this ruling prohibits these 'tools' also! Reverse Engineering is a broad brush encompassing everything from black-box analysis to black-hat decryption.

    I'd be interested in seeing the 'tools' suggested by the defense as they must clearly not be covered under the DMCA. Would an NP complete brute force approach be considered a violation under the DMCA or simply 'fair use'?
    • by etymxris ( 121288 ) on Wednesday April 09, 2003 @09:04PM (#5698276)
      Surely this ruling prohibits these 'tools' also! Reverse Engineering is a broad brush encompassing everything from black-box analysis to black-hat decryption.
      Exactly. Just get a dump of all domain from a name server, or create your own nameserver. Once you have all the possible domain names, create a host file that maps them all to the localhost (127.0.0.1). Write an automated client and server to run through all the domain names, seeing which ones can be reached and which cannot. Very simple, and should not be more than two weeks worth of work. Decryption not needed at all.
  • Oh great. (Score:3, Funny)

    by AltGrendel ( 175092 ) <ag-slashdot@eGAUSSxit0.us minus math_god> on Wednesday April 09, 2003 @08:36PM (#5698093) Homepage
    Next thing you know they'll be telling us we can't listen to our mp3 collec...

    ...oh..umm...

    Too late, huh?

  • Stallman wrote a story about this a long time ago. You'll see SoftIce sold to state licensed programmers only :-(
  • If a product is really doing what it says it's doing? If it has an accurate method for filtering out what is pornography from what isn't? If the people writing the program used proper definitions of pornography when deciding what should be filtered? What the court has done is grant this company impermeability to review or criticism.
  • Here is my beef. (Score:5, Interesting)

    by st0rmcold ( 614019 ) on Wednesday April 09, 2003 @08:37PM (#5698104) Homepage

    There is a serious problem, maybe it's not with n2h2, but the fact that governement is using software to protect it's citizens completly blind. Sure it sounds all peachy, but cmon, if you're gonna block people off, make sure you know what is being blocked, don't give a company like n2h2 the playground.

    There are plenty of open source alternatives anyway, where you can manually control the blocked list, who is doing for the "consulting" for the governement, most likely someone who wants to keep his job. (prolonging the problem brings in more money)

    This is bad both ways, gov wants to use proprietary over open source, and gov dosen't care that they can't control which sites are blocked and which aren't.

    To be honest, that list should be public to the community, and sites should be debated by a community coucil for their library, to decide which should be allowed by standards in the area, no main entity is the know it all genie of what is right for everyone.
    • ...but the fact that governement is using software to protect it's citizens completly blind...don't give a company like n2h2 the playground.

      We use N2H2 here at a public school. If something is being blocked without merit, I manually put it into another filter that is unblocked. How is that giving N2H2 the power to censor the internet? Am I one of those evil people in the government that is keeping information from the people?

      Initially, the pricipals from all the schools in our district came up with a

    • But reading files are now illegal!

      If your office has all their documents in excell and word how can openoffice work if its illegal to read these file formats. After all Microsoft lawyers can now use this case to equal reverse engineering= tresspasing.

      Sigh.

      SCO can now sue Linus and redhat as well. They reversed Unix to make Linux unix compatible in regards to SysV. Now Its payback.

  • Already Exempt (Score:5, Informative)

    by rgmoore ( 133276 ) <glandauer@charter.net> on Wednesday April 09, 2003 @08:38PM (#5698109) Homepage

    While the judge's reasoning in this case appears to be wrong, the outcome of the his decision is correct. Part of the anti-circumvention clause states that the Copyright Office was to hold hearings to decide on specific classes of work that should be exempt. They only picked two, which were:

    1. Literary works, including computer programs and databases, protected by access control mechanisms that fail to permit access because of malfunction, damage or obsolescence.
    2. Compilations consisting of lists of websites blocked by filtering software applications

    In other words, what the plaintiff wanted to do is not illegal, so he has no standing to challenge the law. You can read about it here [copyright.gov]. FWIW, that may not be true for long. The Copyright Office is holding another round of hearings [copyright.gov], and one of the scheduled topics is whether this exemption should be continued.

  • um ... (Score:5, Informative)

    by bryanp ( 160522 ) on Wednesday April 09, 2003 @08:39PM (#5698115)
    Did the submitter read the article?

    N2H2 claimed that providing such information to Edelman would compromise trade secrets, and that Edelman had no legal standing to be granted such permission because there was no imminent threat he would be sued.

    Maybe they should have picked a more suitable case to file their lawsuit?
    • Re:um ... (Score:2, Insightful)

      After reading that it would seem that by default, he can go ahead and decrypt the software. But in reality, he'd be under fire from the lawyers as soon as it was discussed publically.

      It's sad that he was denied permission, after all how many hackers acually take the time and trouble to request permission before a judge? He should have gotten permission for the effort!
  • The encrypted protocol? I have it here,
    and I can post it on Slashdot right now,
    right after I answer the knock at the door...

    Cheers, Joel

  • 2 big problems.. (Score:4, Insightful)

    by MrLint ( 519792 ) on Wednesday April 09, 2003 @08:42PM (#5698138) Journal
    he first one relates to the article "Edelman had asked a Seattle company called N2H2 for a list of sites its software blocks, but was rebuffed."

    Now supposedly the judge says that this list of blocked sites is copyrighted. Excuse me but I'm totally baffled as to how a 3rd party company has copyright on a list that contains domain names that belong to a 4th party. I really need someone to explain this. Does merely making a list of otherwise publicly available information make it copyrightable? Does the mere listing make it something new and special?

    The second big problem here seem to go against (IIRC) previous case law on reverse engineering. If this ruling stands you might as well kiss RE good bye. Every company is the US is gonna whine DMCA and "invasive and destructive trespass".

    Why do I hear a huge sucking sound?
    • Re:2 big problems.. (Score:2, Informative)

      by jerdenn ( 86993 )
      Does merely making a list of otherwise publicly available information make it copyrightable? Does the mere listing make it something new and special?

      In short, yes. IIRC, telephone directories are the common example of this.

      -jerdenn

      • Re:2 big problems.. (Score:4, Informative)

        by Jerf ( 17166 ) on Wednesday April 09, 2003 @09:42PM (#5698504) Journal
        Ironically, you picked the one example where it has been established that the collection is not copyrightable.

        prizog in a sibling post posted a link to the case that determined that, so I won't bother, but it's worth pointing out that to the best of my knowlege, the phone book, considered as a list of names and phone numbers, is the only thing to ever fail the creativity criterion, so jerdenn's post is otherwise correct.

        Also note this does not mean "the phone book" is not under copyright; the part that has advertisements would probably be considered a creative work for the layout, and of course the advertisements themselves are copyrighted. All that was found to not be protected was the residential names and numbers, in alphabetical order.
    • Sure, you can take publicly available data, stuff it in a database, and then claim copyright on your collection of that data. Lexis-Nexis does it with case law. Roxio does it with the CDDB data, and there are myriad other examples. It's right up there with the fact that you can't copyright the look of a font, but you can copyright your mathematical description (e.g. the vectors) that make up your version of that font. It's also akin to not being able to copyright most classical music (Beethoven, Mozart, e
    • I'm a little bit confused on this as well.

      First, I think the 'copyright' here is actually not too far off the base from Google's PageRank technology.

      • They use some algorithm to sort web sites (into rankings for Google, and into blocked or not-blocked for this case).
      • They then both base their entire service around the effectiveness of this algorithm.

      I think the company's fears (which at least makes sense, even if they are ridiculous) that if they gave a complete list of their blocked sites, their algorit

  • by eyegone ( 644831 ) on Wednesday April 09, 2003 @08:44PM (#5698151)
    The United States has imposed martial law in Baghdad. Rape and murder will be tolerated, but anyone who violates a copyright will be shot on sight.

  • The best thing that can happen now is for this case to go to the Supreme Court, where it could get national publicity. This is obviously a ridiculous decision simply because it precludes fair use of a product. I mean, what's next? Getting arrested for reverse-engineering the recipe for Krispy Kreme donuts and selling them as my own? You can't have it both ways.

    More specifically as regards N2H2, if the inherent security of an application can be compromised by reverse-engineering, then it isn't truly s
  • Poor test of DMCA (Score:3, Insightful)

    by Anonymous Coward on Wednesday April 09, 2003 @08:44PM (#5698155)
    This case was a poor choice for the ACLU to cahllenge the DMCA on. Edelman was clearly trying to grind his ax against a web site filtering company. The ACLU needs to find a single issue case to pursue. I think the guy who is being sent to jail for selling XBox mod chips would be a good case to challenge the DMCA on.

    People like Edelman need to realize that the filtering companies are doing nothing but building products to meet a demand in the market place. If they are actually concered about cencorship, they need to focus on regulating the implementation of these products by public organizations. As for businesses, they are free to censor all they want.
  • by quantaman ( 517394 ) on Wednesday April 09, 2003 @08:44PM (#5698158)
    there is no plausibly protected constitutional interest that Edelman can assert that outweighs N2H2's right to protect its copyrighted material from an invasive and destructive trespass.

    no constitutional interest eh?

    Edelman had asked a Seattle company called N2H2 for a list of sites its software blocks, but was rebuffed. ...

    "It's highly desirable that these products are accurate, that when they say they're blocking pornography, they're really blocking pornography, not people running for Congress who talk about the evils of pornography," he said Wednesday. "Yet the research to date indicates they make a lot of mistakes."


    Hrm... I'm not completely familiar with the American constitution but I was under the impression that Freedom of speech and by implication the right to discover what speech you were being denied access to would outweigh the right to protect copyrighted material. Oh and BTW how does finding the list constitute an invasive and destructive trespass.? Yes it could hurt them if competitors used their list in their own products (after all the accuracy of such a list would be the essential element of their system) but I hardly feel it would be destructive in any way. Is the judge just refering to economic damage or is there some other potentiaal cause for damage?
    • Oh and BTW how does finding the list constitute an invasive and destructive trespass.?

      The whole concept of copyrights (as well as patents) was invented so that people would not keep their works secret. It was invented solely to encourage people to publish their work.

      Obviously, when the U.S. Constititution was written, nobody expected or imagined that any copyrighted work could be obfuscated or encrypted. The technology didn't exist at the time. Copyright was invented to encourage the publication of pl

  • by cspen001 ( 664955 )
    I'll leave this to the lawyers, but consider this. If reverse engineering is not a valid means to an end, where does this leave any preexisting incidents? Does IBM now have a valid case against anybody and everybody using the bios that was reverse engineered from the original IBM PC? Or maybe I'm off base, can somebody shed some insight?
  • by Kenrod ( 188428 ) on Wednesday April 09, 2003 @08:48PM (#5698188)

    Since when do people get to use the court as a pre-emptive strike against prosecution from future actions? If cases like this were allowed, the courts would be full of nothing but cases of people seeking legal protection for their future acts. The ACLU is just making shit up again, as usual.

    If this guy had any balls, he would violate the DMCA in a public forum, and then dare someone to charge/sue him.

  • My school employs N2H2's filtering software. I find it to be rather intrusive and annoying when I'm researching (or simply surfing the internet). In N2H2's defense, writing an intelligent filter that will not make any mistakes is close to impossible. I mean - think of what you're asking! A filter that will make near-human decisions based on a site's content/url... I'd like to see you write one. It would be impossible to manually screen each and every page on the internet each and every time they were u
  • Why aren't we attacking the organizations that use this filtering software instead of attacking the program itself? Wouldn't finding ONE site that shouldn't be filtered be good enough to prove that illegal censorship is in effect?

    They way I see it there are only two ways about it. Either the organization can filter whatever they want because it's their own service and they aren't bound by law to make that service public, or they can only filter what's legal to filter... find one thing that's not, and yo
    • The problem is that in organizations that use Internet filters (yes, even schools), they can legally control everything that goes across their intranets. They have the final say in what is allowed and what isn't because they're the ones paying the internet bills. In the case of the school, it is completely legal to block sites even if they don't breech the guidelines - I remember reading somewhere that while in public schools, the first amendment is not guaranteed. Teachers that advocate going to church
  • They give us the illusion of freedom by never actually showing us boundaries until we hit them. Just like all-you-can-eat joints make their selection look bigger with mirrored walls.
  • by ajakk ( 29927 ) on Wednesday April 09, 2003 @09:02PM (#5698267) Homepage
    Am I the only one who actually read the Judge's VERY CORRECT opinion? The case was being brought under Declaratory Judgement, ie. I am suing N2H2 because they are about to sue me. The Judge ruled that there was not any proof that N2H2 was about to sue, so the case was thrown out. This ruling had nothing to due with the validity of the DMCA or the scope of reverse engineering exception.
  • DMCA Allows This (Score:4, Insightful)

    by waldoj ( 8229 ) <waldo@NosPAM.jaquith.org> on Wednesday April 09, 2003 @09:22PM (#5698391) Homepage Journal
    I don't see the problem here. (I'm not denying that there is one -- I just don't see it.) The DMCA has been modified to allow exactly this [cryptome.org]:
    "Certain software products, often known as ``filtering software'' or ``blocking software,'' restrict users from visiting certain internet websites. [...] Critics charge that some filtering programs unfairly block sites that do not contain undesirable material and therefore should not be filtered. [...] Several commenters assert that manufacturers of filtering software encrypt the lists naming the targeted sites and that they are not made available to others, including the operators of the targeted sites themselves. R56. These commenters assert that they have no alternative but to decrypt the encrypted lists in order to learn what websites are included in those lists. [...] Such acts of decryption would appear to violate 1201(a)(1) if it took effect without an exemption for these activities. [...] The case has been made for an exemption for compilations consisting of lists of websites blocked by filtering software applications."
    Although some disagree [advogato.org], I think that this was the great victory of the CPHack case [robinlionheart.com].

    -Waldo Jaquith
  • by the eric conspiracy ( 20178 ) on Wednesday April 09, 2003 @09:23PM (#5698397)
    The problem with this is clearly that companies are now using the DMCA to protect trade secrets. This sort of strengthening of the ability of companies to keep technology secret has the potential to have very dire consequences to innovation. Why wouldn't the next step be for Microsoft to use DMCA to squash reverse engineering of a file format or network protocol?

    While many /. readers dislike patents, at least with this as the primary mechanism to protect IP you have time limits, disclosure of the technology and some sort of review to determine if the technology is worthy of a protected status. Patents have to be greatly preferred over the DMCA.

  • by graybeard ( 114823 ) on Wednesday April 09, 2003 @09:33PM (#5698457)
    Read the court documents here [harvard.edu]. Edelman asked the court to permit him to a) ignore the license which bars reverse engineering, and b) ignore N2H2's copyright by publishing the web sites he discovered. The judge noted that Edelman hasn't actually done anything yet, and declared that the court is not in the business of handing out a "get out of jail free" card in case he ever does his research, and N2H2 seeks relief.
  • by Adam J. Richter ( 17693 ) on Wednesday April 09, 2003 @09:48PM (#5698542)
    As I try to do with most bad news in the yro.slashdot.org, I try to learn a little more about the specific people or person who seems to be chiseling at our freedom. This time, I came across an interesting link [geocities.com] about the connection between Judge Richard Stearns (who ruled in this case) and former president Bill Clinton.

    I don't buy the CIA connection theory, nor would I necessarily consider it to be a bad thing if it were true. It's just the connection with former president Bill Clinton that I find helpful in looking into who Judge Richard Stearns is.

  • by StarTux ( 230379 ) on Wednesday April 09, 2003 @11:57PM (#5699104) Journal
    As they may get some form of Democracy....Its sad that whilst we fight for "Freedom" in other countries the US internally is becoming more like the monster it is trying to fight.

    StarTux
  • by Thalia ( 42305 ) on Wednesday April 09, 2003 @11:58PM (#5699107)
    The Court actually simply decided that there was no case in controversy. Edelman sued, before he did anything for a declaratory judgement giving him permission to reverse engineer. The court said they wouldn't decide the case, because it's not sure that N2H2 would sue, or that Edelman would do anything. The only time a court will make a decision if nothing has happened yet (like here, about future potential lawsuits) is if a fundamental right is at question. While copyright Fair Use is important, it is clearly not a fundamental right. So, chill. And wait for someone to actually be sued under the DMCA for reverse engineering for research purposes. If the Court then holds that there is no right to reverse engineer anymore (in spite of Sega v. Accolade [eff.org].

    Thalia
  • by kevinank ( 87560 ) on Thursday April 10, 2003 @12:21AM (#5699205) Homepage
    If it were either invasive or destructive I'd have more respect for this Judge and his ruling. Despite arguments to the contrary, altering the flow of bits through a computer that you own doesn't invade anyone, and the notion that bits can be destroyed is laughable. The Judge needs to reissue his ruling without resorting to terms don't mean squat in the virtual world.
  • by werdna ( 39029 ) on Thursday April 10, 2003 @12:29AM (#5699243) Journal
    It is so important in these uncertain times that we focus our vitreol on case where there is actual legislative or judicial overreaching.

    Read the judge's opinion [harvard.edu] before leaping to conclusions. This is NOT a case that was decided on the merits of an underying DMCA claim.

    The plaintiff in this case was not N2H2, but rather the fellow who wanted to do his reverse engineering. He sued under a theory of equity, seeking what is called a declaratory judgment. Before even reaching the question about whether the plaintiff is entitled to act, the Court must first address whether or not it has jurisdiction.

    This isn't a light issue -- the Federal Courts only have jurisdiction over ACTUAL "cases and controversies." This is a constitutional limitation. The federal judiciary does not offer what is called "advisory" opinions -- ever.

    Here, without touching on the DMCA issue at any level, the Court simply ruled that our erstwhile declaratory judgment plaintiff didn't have the standing to drag D2H2 to court. I agree with others here that the reasoning for no standing was not the Court's strongest argument, but in view of the Copyright Office excemption, this case just doesn't hold water on the standing question.
  • by Quila ( 201335 ) on Thursday April 10, 2003 @04:17AM (#5699902)
    He should have started writing a program whose purpose was to clean-up N2H2's list, finding blocked sites that are no longer operating, so that he could send a list of dead sites to N2H2 in order to lighten their list.

    Of course, to do this his program needs to interoperate with N2H2's software. Hello DMCA exception:

    `(f) REVERSE ENGINEERING- (1) Notwithstanding the provisions of subsection (a)(1)(A), a person who has lawfully obtained the right to use a copy of a computer program may circumvent a technological measure that effectively controls access to a particular portion of that program for the sole purpose of identifying and analyzing those elements of the program that are necessary to achieve interoperability of an independently created computer program with other programs, and that have not previously been readily available to the person engaging in the circumvention, to the extent any such acts of identification and analysis do not constitute infringement under this title.
    In addition to its main function, the program also happens to identify sites that shouldn't have been blocked.
  • by Craig Maloney ( 1104 ) on Thursday April 10, 2003 @07:22AM (#5700361) Homepage
    The DMCA is continually pounding more nails in the coffin of American ingenuity and relevance in the high-tech sector. Until America wakes up and realizes that the proper way to grow both business and society is without laws granting broad protection for "intellectual property". America is already falling behind in the technical arena to other countries with more permissive laws about reverse engineering. Companies should be held to the same scrutiny that research is held to in matters of security, which means full access to the source and algorithms. As a company I would welcome such peer review. Copyrights should be enough to prevent my competitors from "stealing" my secrets. I would also be wary of using any company's products that actively prevents people from putting my product through such peer reviews.
  • by liquidsin ( 398151 ) on Thursday April 10, 2003 @08:24AM (#5700835) Homepage
    Isn't copyright law intended to protect *published* works? If I made my own internet filter software (why would I want to? I don't know...) and my banned list ended up the same as theirs, could they nail me for copyright infringement? Isn't this more of a trade secret than a copyright?

  • by Compulawyer ( 318018 ) on Thursday April 10, 2003 @08:25AM (#5700843)
    This story is completely misleading about the actual ruling. The fact that the quote "there is no plausibly protected constitutional interest that Edelman can assert that outweighs N2H2's right to protect its copyrighted material from an invasive and destructive trespass" is taken out of context makes it worse.

    This ruling does not even reach the merits of the DMCA or reverse engineering. It is concerned with a legal doctrine called standing. The law of standing in Federal Courts means that you must be a proper person to bring a claim. Article III of the US Constitution requires that there be an ACTUAL "case or controversy" for a court to hear. The US federal courts decide cases. The courts do NOT give advisory opinions - e.g., if you do this you will (not) be breaking the law.

    The plaintiff here was a Harvard Law Student who asked the court to declare that IF he reverse-engineered the software THEN he would not be breaking the law - essentially asking for advice that the federal courts will not give.

    The federal Declaratory Judgment Act allows federal courts to "declare" the rights of the parties, but that is different from giving advice. There still must be an actual case or controversy. To show that, the plaintiff must show that he has a "reasonable apprehension" of being sued. Usually that is done by showing the court some communication between the parties in which one party has either explicitly threatened a lawsuit or because of the relationship between the parties it is obvious that a suit is coming. Here, the law student could not show that, so he lacks standing to bring this suit.

    If you doubt the correctness of my statements, look to the key part of Judge Stearns's quote: "there is no plausibly protected constitutional interest that Edelman [the plaintiff law student] can assert that outweighs N2H2's right to protect its copyrighted material...." He can't assert the rights he is trying to assert. In other words, you aren't the right person to bring this claim, you have no reasonable apprehension of actually being sued by these guys, you are merely asking for advice, we don't do that here, get out of my court but feel free to come back if you actually go ahead and reverse-engineer and you are threatened with a lawsuit.

"Marriage is low down, but you spend the rest of your life paying for it." -- Baskins

Working...