5 ms·

I didn't realise people bothered to put up fake websites. I thought a plausible-looking DMCA notification was sufficient to get a provider to take something dow

I didn't realise people bothered to put up fake websites. I thought a plausible-looking DMCA notification was sufficient to get a provider to take something down.

strogonoff 7y ago
If it were so easy and cheap as many comments on this page imply, why aren’t we seeing this often used against large well-known businesses in bad faith? E.g., someone creates a puny single-person LLC, and files DMCA notices against New York Times, Amazon blog posts, Apple press releases, et cetera. According to claims I see here, the content will have to be down for 10-14 days regardless of how quickly the counter-claim succeeds, which if used at the right moment could cause significant damage to the target/substantial profit to the attacker. If this was happening, I’m sure the regulation would be fixed promptly with powerful lobbying from the aforementioned big players—perhaps by imposing a fee for issuing DMCA takedowns, increasing legal cost of a successful counter-claim, etc. Such cases would’ve definitely be noticeable to the public, so I can only assume that they don’t happen because either (A) no one have thought of it yet, or (B) there’s some non-obvious cost to DMCA takedowns or successful counter-claims. EDIT: Removed shady source for DMCA counter-claim info.
- joe_the_user 7y ago
  If it were so easy and cheap as many comments on this page imply, why aren’t we seeing this often used against large well-known businesses in bad faith? Because medium sized companies know not to mess with large companies but don't care about small companies?
  - strogonoff 7y ago
    You wrote “not to mess with large companies”. What are the consequences of issuing a DMCA notice against content published by a large company?
    - incompatible 7y ago
      They probably just send you a counter claim without bothering to take anything down. Perhaps also a nasty note from their lawyers?
      - strogonoff 7y ago
        Wouldn’t it put them in violation of a federal law? If they send a counter-claim without taking the content down, can’t they be sued for DMCA non-compliance? The law appears to mandate immediate takedown for certain period of time regardless of counter-claim status. Playing devil’s advocate here, and may obviously be missing some points of the regulation.
        incompatible 7y ago
        I don't know about this. There's a difference between taking down supposed infringements from your users (or "subscribers") and your own material put on your own site by your own employees. I'm not sure that the DMCA mechanism is relevant for the latter.
        kd5bjo 7y ago
        Honoring a DMCA takedown isn’t ever required, but ignoring one strips away the safe harbor protections for that specific content. This in turn makes you liable for any copyright infringement of that content as if you had published it yourself. If it’s legitimate, you’ll presumably win the court case and quite possibly get your attorney fees back.
        strogonoff 7y ago
        Thanks for patient explanation. I guess, to sum up, the current system enables smaller players (commenters, vloggers, site authors) to publish on the Web through intermediaries of all kinds (like Linode or YouTube). Those intermediaries want to make sure they don’t get sued for the content they host, so they use safe harbor and observe DMCA. Those enjoying more direct access to the backbone (metaphorically and possibly literally speaking) of the Internet trust their legal teams and don’t need safe harbor protections. Thus if you are lucky enough to not need the safe harbor protections, you have the ability to bully smaller fish by issuing takedowns left and right.
- ryacko 7y ago
  A single person LLC does not protect from perjury charges. Unfortunately DMCA perjury cases aren’t prosecuted.
  - strogonoff 7y ago
    Isn’t there a contradiction—if as you say DMCA perjury cases aren’t prosecuted, what’s there to lose for that hypothetical “DMCA troll” LLC?
    - NLips 7y ago
      I think the parent may just be suggesting that there's no need for the LLC wrapper, because it wouldn't hypothetically provide protection anyway.
    - DanBC 7y ago
      DMCA perjury requires "knowingly" sending false reports. So far there's enough deniability for bigcos to get away with it. This hypothetical troll wouldn't have that deniability. It would be very clear that they are knowingly making false complaints.
      - ryacko 7y ago
        “Hello, I get paid tens of thousands of dollars per year to oversee DMCA reporting with innumerable false positives without reviewing whether or not short clips of content with commentary around it is fair use.” There’s enough deniability for prosecutors to not care, but there’s also enough evidence that prosecutors could politely inform them that there is a pattern of misconduct.
- leeoniya 7y ago
  big players are either their own ISPs, hosting provides or most likely have SLAs in place that absolve their ISPs from liability and allow the companies to handle DMCA claims directly by dedicated departments. smaller players are subject to dealing with DMCA claims by proxy via their hosting providers. also, it would be easy for Amazon to prove bad faith by having many examples from a single claimant. smaller companies may only have to deal with a few claims per year from different claimants (still incredibly disruptive) and not have strong enough evidence to demonstrate bad faith.
  - strogonoff 7y ago
    So a BigCo tells their ISP “feel free to keep the content up and break DMCA regulations, we’ll deal with it”, just like that? Doesn’t it mean one or both of them violate a federal law?
    - incompatible 7y ago
      I think there's a difference between running a website vs being a user on somebody else's site. A website must publish its registered agent address if it wants to take advantage of the DMCA system (i.e., receiving take down demands instead of lawsuits). E.g., Wikimedia receives take down demands as described at https://foundation.wikimedia.org/wiki/Category:DMCA https://foundation.wikimedia.org/wiki/Category:DMCA. I'm unclear what the difference is between how Wikimedia is set up and the situation with the Guardian and Mail. That link above doesn't seem to contain everything that Wikimedia receives on its various sites, e.g., there's also https://commons.wikimedia.org/wiki/Commons:Office_actions/DMCA_notices https://commons.wikimedia.org/wiki/Commons:Office_actions/DM...
    - sharpneli 7y ago
      It doesn’t break the law. It just means if the content was in fact infringing then the ISP is also guilty of copyright violation. They simply lose the safe harbor protection. So if they are sure it’s a false claim they can just ignore it.
    - dredmorbius 7y ago
      The DMCA takedown provisions don't introduce liability for actions, they remove it, under a specific set of circumstances, given specific responses to infringement claims. You don't "violate the DMCA takedown law" by failing to take down content. You simply lose protections offered by it. The federal law in question that might be violated would be exclusive rights under copyright, 17 USC 106 For these there are both civil and (in certain cases) criminal remedies possible. https://www.law.cornell.edu/uscode/text/17/106 https://www.law.cornell.edu/uscode/text/17/106
- DanBC 7y ago
  Because that's a criminal offence (perjury) that carries a potential prison sentence, and they'd be liable for costs. NYT, Amazon, Apple, etc aren't going to fuck about with that. They'd push for prosecution of people making false DMCA claims, and they'd sue for their losses.
- dredmorbius 7y ago
  TL;DR: the DMCA takedown provisions apply only to third-party service providers identified as a Designated Agent, and can be avoided by self-provisioning online services. Or finding a provider with balls. The specific mechanism of the DMCA is that: 1. It is a protection afforded online service providers, specifically, against infringement liability. (17 USC 512(c)) 2. Against copyright infringement (17 USC 512(c)(1)). 3. For third-party content (17 USC 512(c)(1)). 4. Of which the provider does not have specific knowledge that the content is infringing (17 USC 512(c)(1)(A)(i)). (More on this below.) And does not directly benefit monetarily (17 USC 512(c)(2), and acts to disable access expediciously (17 USC 512(c)(3)). 5. Where the provider has a designated agent. (17 USC 512(c)(2) 6. A valid notification request is received, (17 USC 512(c)(3) https://www.law.cornell.edu/uscode/text/17/512 https://www.law.cornell.edu/uscode/text/17/512 A consequence of all of this is that a self-serving online service provider does does not qualify for the relief as the content is not third-party. By designating itself as the Designated Party, it can choose to receive DMCA requests directly, and assume the risks of infringment claims itself. There is nothing in the DMCA that says a service provider must act on a claim. Only that the liability protections offered apply only if it does. Linode, here, absolutely could have taken the principled stance that the content was not infringing, and refused to act on the notice it had received. Yes, this would incur a liability, but the overall legal risks of a patently false and malicious claim would be slight. I believe there are cases of this occurring. NB: A longstanding criticism of the DMCA 512 provisions was that there was no liability for misrepresentations. That's now addressed in 17 USC 512(f), though I don't recall when this was added: Misrepresentations.—Any person who knowingly materially misrepresents under this section— (1)that material or activity is infringing, or (2)that material or activity was removed or disabled by mistake or misidentification, shall be liable for any damages, including costs and attorneys’ fees, incurred by the alleged infringer, by any copyright owner or copyright owner’s authorized licensee, or by a service provider, who is injured by such misrepresentation, as the result of the service provider relying upon such misrepresentation in removing or disabling access to the material or activity claimed to be infringing, or in replacing the removed material or ceasing to disable access to it. Mail & Guardian would seem to have some remedy here, if they can successfully bring suit and collect judgement. It's also possible that M&G could bring suit against Linode under 17 USC 512(g)(1) ("good faith" actions), though that's weakened by subsequent paragraphs. Informed legal opinion would be helpful here. Note: I am a space alien cat, not a lawyer.

I didn't realise people bothered to put up fake websites. I thought a plausible-looking DMCA notification was sufficient to get a provider to take something down.

strogonoff 7y ago

If it were so easy and cheap as many comments on this page imply, why aren’t we seeing this often used against large well-known businesses in bad faith? E.g., someone creates a puny single-person LLC, and files DMCA notices against New York Times, Amazon blog posts, Apple press releases, et cetera. According to claims I see here, the content will have to be down for 10-14 days regardless of how quickly the counter-claim succeeds, which if used at the right moment could cause significant damage to the target/substantial profit to the attacker. If this was happening, I’m sure the regulation would be fixed promptly with powerful lobbying from the aforementioned big players—perhaps by imposing a fee for issuing DMCA takedowns, increasing legal cost of a successful counter-claim, etc. Such cases would’ve definitely be noticeable to the public, so I can only assume that they don’t happen because either (A) no one have thought of it yet, or (B) there’s some non-obvious cost to DMCA takedowns or successful counter-claims. EDIT: Removed shady source for DMCA counter-claim info.

joe_the_user 7y ago
If it were so easy and cheap as many comments on this page imply, why aren’t we seeing this often used against large well-known businesses in bad faith? Because medium sized companies know not to mess with large companies but don't care about small companies?
- strogonoff 7y ago
  You wrote “not to mess with large companies”. What are the consequences of issuing a DMCA notice against content published by a large company?
  - incompatible 7y ago
    They probably just send you a counter claim without bothering to take anything down. Perhaps also a nasty note from their lawyers?
    - strogonoff 7y ago
      Wouldn’t it put them in violation of a federal law? If they send a counter-claim without taking the content down, can’t they be sued for DMCA non-compliance? The law appears to mandate immediate takedown for certain period of time regardless of counter-claim status. Playing devil’s advocate here, and may obviously be missing some points of the regulation.
      - incompatible 7y ago
        I don't know about this. There's a difference between taking down supposed infringements from your users (or "subscribers") and your own material put on your own site by your own employees. I'm not sure that the DMCA mechanism is relevant for the latter.
      - kd5bjo 7y ago
        Honoring a DMCA takedown isn’t ever required, but ignoring one strips away the safe harbor protections for that specific content. This in turn makes you liable for any copyright infringement of that content as if you had published it yourself. If it’s legitimate, you’ll presumably win the court case and quite possibly get your attorney fees back.
        strogonoff 7y ago
        Thanks for patient explanation. I guess, to sum up, the current system enables smaller players (commenters, vloggers, site authors) to publish on the Web through intermediaries of all kinds (like Linode or YouTube). Those intermediaries want to make sure they don’t get sued for the content they host, so they use safe harbor and observe DMCA. Those enjoying more direct access to the backbone (metaphorically and possibly literally speaking) of the Internet trust their legal teams and don’t need safe harbor protections. Thus if you are lucky enough to not need the safe harbor protections, you have the ability to bully smaller fish by issuing takedowns left and right.
ryacko 7y ago
A single person LLC does not protect from perjury charges. Unfortunately DMCA perjury cases aren’t prosecuted.
- strogonoff 7y ago
  Isn’t there a contradiction—if as you say DMCA perjury cases aren’t prosecuted, what’s there to lose for that hypothetical “DMCA troll” LLC?
  - NLips 7y ago
    I think the parent may just be suggesting that there's no need for the LLC wrapper, because it wouldn't hypothetically provide protection anyway.
  - DanBC 7y ago
    DMCA perjury requires "knowingly" sending false reports. So far there's enough deniability for bigcos to get away with it. This hypothetical troll wouldn't have that deniability. It would be very clear that they are knowingly making false complaints.
    - ryacko 7y ago
      “Hello, I get paid tens of thousands of dollars per year to oversee DMCA reporting with innumerable false positives without reviewing whether or not short clips of content with commentary around it is fair use.” There’s enough deniability for prosecutors to not care, but there’s also enough evidence that prosecutors could politely inform them that there is a pattern of misconduct.
leeoniya 7y ago
big players are either their own ISPs, hosting provides or most likely have SLAs in place that absolve their ISPs from liability and allow the companies to handle DMCA claims directly by dedicated departments. smaller players are subject to dealing with DMCA claims by proxy via their hosting providers. also, it would be easy for Amazon to prove bad faith by having many examples from a single claimant. smaller companies may only have to deal with a few claims per year from different claimants (still incredibly disruptive) and not have strong enough evidence to demonstrate bad faith.
- strogonoff 7y ago
  So a BigCo tells their ISP “feel free to keep the content up and break DMCA regulations, we’ll deal with it”, just like that? Doesn’t it mean one or both of them violate a federal law?
  - incompatible 7y ago
    I think there's a difference between running a website vs being a user on somebody else's site. A website must publish its registered agent address if it wants to take advantage of the DMCA system (i.e., receiving take down demands instead of lawsuits). E.g., Wikimedia receives take down demands as described at https://foundation.wikimedia.org/wiki/Category:DMCA https://foundation.wikimedia.org/wiki/Category:DMCA. I'm unclear what the difference is between how Wikimedia is set up and the situation with the Guardian and Mail. That link above doesn't seem to contain everything that Wikimedia receives on its various sites, e.g., there's also https://commons.wikimedia.org/wiki/Commons:Office_actions/DMCA_notices https://commons.wikimedia.org/wiki/Commons:Office_actions/DM...
  - sharpneli 7y ago
    It doesn’t break the law. It just means if the content was in fact infringing then the ISP is also guilty of copyright violation. They simply lose the safe harbor protection. So if they are sure it’s a false claim they can just ignore it.
  - dredmorbius 7y ago
    The DMCA takedown provisions don't introduce liability for actions, they remove it, under a specific set of circumstances, given specific responses to infringement claims. You don't "violate the DMCA takedown law" by failing to take down content. You simply lose protections offered by it. The federal law in question that might be violated would be exclusive rights under copyright, 17 USC 106 For these there are both civil and (in certain cases) criminal remedies possible. https://www.law.cornell.edu/uscode/text/17/106 https://www.law.cornell.edu/uscode/text/17/106
DanBC 7y ago
Because that's a criminal offence (perjury) that carries a potential prison sentence, and they'd be liable for costs. NYT, Amazon, Apple, etc aren't going to fuck about with that. They'd push for prosecution of people making false DMCA claims, and they'd sue for their losses.
dredmorbius 7y ago
TL;DR: the DMCA takedown provisions apply only to third-party service providers identified as a Designated Agent, and can be avoided by self-provisioning online services. Or finding a provider with balls. The specific mechanism of the DMCA is that: 1. It is a protection afforded online service providers, specifically, against infringement liability. (17 USC 512(c)) 2. Against copyright infringement (17 USC 512(c)(1)). 3. For third-party content (17 USC 512(c)(1)). 4. Of which the provider does not have specific knowledge that the content is infringing (17 USC 512(c)(1)(A)(i)). (More on this below.) And does not directly benefit monetarily (17 USC 512(c)(2), and acts to disable access expediciously (17 USC 512(c)(3)). 5. Where the provider has a designated agent. (17 USC 512(c)(2) 6. A valid notification request is received, (17 USC 512(c)(3) https://www.law.cornell.edu/uscode/text/17/512 https://www.law.cornell.edu/uscode/text/17/512 A consequence of all of this is that a self-serving online service provider does does not qualify for the relief as the content is not third-party. By designating itself as the Designated Party, it can choose to receive DMCA requests directly, and assume the risks of infringment claims itself. There is nothing in the DMCA that says a service provider must act on a claim. Only that the liability protections offered apply only if it does. Linode, here, absolutely could have taken the principled stance that the content was not infringing, and refused to act on the notice it had received. Yes, this would incur a liability, but the overall legal risks of a patently false and malicious claim would be slight. I believe there are cases of this occurring. NB: A longstanding criticism of the DMCA 512 provisions was that there was no liability for misrepresentations. That's now addressed in 17 USC 512(f), though I don't recall when this was added: Misrepresentations.—Any person who knowingly materially misrepresents under this section— (1)that material or activity is infringing, or (2)that material or activity was removed or disabled by mistake or misidentification, shall be liable for any damages, including costs and attorneys’ fees, incurred by the alleged infringer, by any copyright owner or copyright owner’s authorized licensee, or by a service provider, who is injured by such misrepresentation, as the result of the service provider relying upon such misrepresentation in removing or disabling access to the material or activity claimed to be infringing, or in replacing the removed material or ceasing to disable access to it. Mail & Guardian would seem to have some remedy here, if they can successfully bring suit and collect judgement. It's also possible that M&G could bring suit against Linode under 17 USC 512(g)(1) ("good faith" actions), though that's weakened by subsequent paragraphs. Informed legal opinion would be helpful here. Note: I am a space alien cat, not a lawyer.