phone

    • chevron_right

      GitHub Reinstated YouTube-DL But Restoring Forks is Apparently a Problem

      Andy Maxwell • news.movim.eu / TorrentFreak • 17 April, 2021 • 3 minutes

    hithub Last October the RIAA infuriated many players in the open source community by targeting YouTube-ripping tool youtube-dl in a DMCA takedown notice filed at GitHub .

    What followed was a broad backlash against the RIAA, the likes of which hadn’t been seen for many years. The music industry group’s claims of DMCA violations due to the software allegedly bypassing technological protection measures were met with intense criticism, including from the EFF.

    In a surprise move several weeks later, GitHub reinstated the youtube-dl repository after concluding that the code doesn’t violate the DMCA’s anti-circumvention provisions. In addition, GitHub sought to boost its standing with developers by placing $1m into a takedown defense fund.

    “We are taking a stand for developers and have reinstated the youtube-dl repo. Section 1201 of the DMCA is broken and needs to be fixed. Developers should have the freedom to tinker. That’s how you get great tools like youtube-dl,” GitHub CEO Nat Friedman explained .

    Dust Settles But The Fix Was Incomplete, Dev Says

    When the RIAA took down GitHub, its DMCA notice affected many developers who had forked the youtube-dl code. Many repositories were listed in the RIAA’s complaint so those were disabled too, replaced with the familiar GitHub page indicating they had been removed for alleged copyright infringement.

    However, despite youtube-dl being reinstated, these forks remain down following the RIAA’s complaint and according to one developer, GitHub isn’t responding to calls to reinstate them.

    In a DMCA counternotice filed this week, the operator of the ‘spookyahell’ repo describes the situation, noting that his previous requests to have his repository restored are being ignored by GitHub.

    youtube-dl fork

    In supporting evidence detailing why the repo should be restored, the developer covers earlier ground noting that the RIAA’s notice was “way too broad”, is believed to be “wildly invalid”, failed to correctly interpret the law, and cited anti-circumvention methods that “do not apply.”

    The dev also points out that when the RIAA cited a German legal process that determined that youtube-dl is illegal, that should be considered irrelevant to the United States since European law has “no place in a DMCA takedown”. The RIAA, for its part, insists that the relevant German law is “materially identical to Title 17 U.S.C. §1201 of the United States Code.”

    This Dev is Clearly Irritated

    While the developer appears to accept that GitHub eventually stood up to the RIAA, he isn’t entirely convinced of the coding platform’s overall support.

    “[I]t seems like GitHub is still kinda ‘the bitch of the RIAA’ because they side with RIAA rather than developers who wish to reinstate the repos (unchanged) which according to the EFF would be perfectly legal,” his notice reads.

    “The issues that raised from this takedown have lead to a major statement from github and change of already in-place policies and it seems they had to re-convince the developers that they actually support developers. The action they are taking with the actual forks however is unconvincing of their so-called principals [sic].”

    The dev continues by stating that in addition to restoring the original project, GitHub should’ve reinstated all the forks as well, while notifying the RIAA that its claims were wrong. However, there are some important issues that the counternotice doesn’t address.

    While youtube-dl was indeed reinstated, that didn’t take place before the original code was tweaked. Its functionality doesn’t appear to have been degraded but an examination of the code reveals that before it was put back, modifications took place to remove references to copyright works, including a song by Taylor Swift.

    If we work on the premise that GitHub believed that these changes were enough to ease youtube-dl back onto the non-infringing side of the fence, then any original forks would still relate to the unmodified code, meaning that the RIAA’s original takedown notice would carry more weight.

    This probably explains why GitHub hasn’t reinstated this developer’s repository on request, despite the filing of a counternotice.

    Technically speaking, GitHub still has a number of days left before it needs to reinstate the fork under the DMCA, pending the filing of a lawsuit by the RIAA. However, since the music group has had since October to take action against youtube-dl itself, that doesn’t seem likely.

    To learn more about how Github views the situation, TorrentFreak contacted CEO Nat Friedman for additional information, including whether youtube-dl forks will be restored automatically or if devs need to file an official DMCA counternotice. Friedman did not immediately respond to our request for comment but it seems likely that devs will have to let their original forks go and fork the modified project instead.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Reckless DMCA Takedown Purges Legitimate Websites from Google Search

      Ernesto Van der Sar • news.movim.eu / TorrentFreak • 17 April, 2021 • 2 minutes

    Over the past few years, copyright holders have asked Google to remove billions of links to allegedly pirated content.

    Most of these DMCA notices are pretty accurate but occasionally mistakes are made as well, which can do serious harm.

    This week our eye was drawn to a request that RightsHero filed on behalf of the company Vuclip Middle East, which offers on-demand entertainment to emerging markets.

    The DMCA notice identifies more than 7,000 URLs that allegedly infringe the copyrights of several movies, including the United Arab Emirates series عود حي, which translates to “Live Oud.”

    Error After Error

    When we took a closer look, we soon noticed that the takedown notice is nothing short of a trainwreck that involves some high-profile names.

    For example, NASA’s live streaming and multimedia pages are targeted. The same is true for Al Jazeera’s live streaming site, as well as the BBC’s page that allows people to stream Radio One.

    NASA down

    None of these pages are infringing. In fact, the only thing that ties them to the “Live Oud” series is the word ‘live’, which comes back in other reported URLs as well.

    BBC and other takedowns

    In fact, the takedown notice is filled with these ‘live’ errors. It lists a page from the UK Government which gives advice on living in Austria, a page where Apple provides information on Live Photos, and the ‘Live’ entry in the Cambridge dictionary.

    We can go on for a while but the point is clear. This DMCA notice should have never been sent. The good news is that Google caught all the errors we pointed out above. This means that these were not removed from search results.

    Homepages Removed

    Unfortunately, not all targeted sites were that lucky. We spotted several legitimate websites that had their homepages removed from Google simply because they somehow reference the word “live” or “living.”

    This includes the homepage of Live Nation Asia , the Living Architecture website, as well as the homepage of the UK technology company Living Map .

    living takedowns

    All have been purged from Google, which shows the following message at the bottom of the search results . “In response to a complaint that we received under the US Digital Millennium Copyright Act, we have removed 12 result(s) from this page.”

    removed

    Needless to say, these are all obvious errors that should have been avoided if there was some human oversight. It also shows how risky relying on ‘automated filters’ and ‘takedown bots’ can be.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Nintendo Wins US-Wide Injunction Against Seller of RCM Loader ‘Piracy’ Device

      Andy Maxwell • news.movim.eu / TorrentFreak • 16 April, 2021 • 4 minutes

    RCM Loader Nintendo is currently engaged in a war of attrition against individuals and groups who help people to pirate and play unlicensed Switch games.

    Products and individuals involved with the infamous Team-Xecutor became targets last summer and alongside, Nintendo has been chipping away at other sellers of similar circumvention devices.

    Lawsuit Filed Against Amazon Vendor

    Last November, Nintendo filed a lawsuit against Le Hoang Minh, an Amazon vendor doing business under the name ‘Winmart’. According to the gaming giant, the trader was selling RCM Loader, a Switch device marketed as a plug-and-play solution for injecting payload files to allow booting into custom firmware (CFW), including Team-Xecutor’s SX OS.

    “Once this circumvention has occurred, the unauthorized CFW modifies the authorized Nintendo Switch operating system, thereby allowing users to obtain and play virtually any pirated game made for the Nintendo Switch. All of this happens without authorization or compensation to Nintendo or to any authorized game publishers,” the company explained.

    Le Hoang Minh, who according to Nintendo is a resident of Vietnam, was sent a DMCA notice by Nintendo via Amazon, citing the anti-circumvention provisions of the DMCA. As a result, a specific listing was taken down by Amazon but the defendant subsequently filed a counternotice stating that Nintendo had made an error. As a result, the listing was restored.

    In its lawsuit, Amazon claimed that Le Hoang Minh was not only a seller of RCM Loader devices but also the manufacturer too, going on to demand the maximum statutory damages available under the DMCA and a broad injunction preventing any future sales. Nintendo also demanded relief for the defendant’s alleged abuse of the DMCA’s counternotification system.

    Defendant Fails to Respond, Nintendo Moves For Default

    In a motion for default judgment filed this week, Nintendo says that it filed its lawsuit in response to the defendant’s counternotice, in order to keep the Amazon listing down. However, the defendant failed to respond to the lawsuit or enter into discussions with Nintendo.

    As a result, Nintendo demanded a default judgment on each of its claims, arguing that since the defendant is in Vietnam, only a ruling from a US court would allow it to prevent sales of RCM Loader taking place in the United States.

    To promote what Nintendo describes as “an efficient resolution” of the matter, the gaming giant reduced its damages claims to just $2,500 for all actions carried out by the defendant in breach of the anti-trafficking provisions of the DMCA.

    “This request for a $2,500 award is intended to be very conservative and does not reflect anything close to the full amount of damages Nintendo could reasonably seek from Defendant,” the company writes.

    “Nintendo could…credibly seek a separate award for every device Defendant sold — almost certainly many devices, given that Defendant’s RCM Loader device was available online for many months. However, rather than attempt to quantify Defendant’s total sales, Nintendo seeks to facilitate an efficient resolution of this case through entry of judgment awarding damages for a single § 1201 violation.”

    Nintendo also informed the court that it had incurred considerable costs pursuing the case but was not seeking to have those reimbursed. However, the company still demanded a judgment in its favor in respect of the DMCA violations, the misrepresentations made by the defendant in his DMCA counternotice, and the request for a permanent injunction.

    Court Sides With Nintendo

    After considering Nintendo’s motion for default, the court ruled that should be granted. In a final judgment issued Thursday, the court laid down the terms.

    A permanent injunction was granted against Le Hoang Minh and all other individuals and entities acting in concert, restraining all from circumventing or assisting in circumventing any technological security measures that effectively control access to Nintendo’s copyrighted works.

    The same are also restrained from manufacturing, offering for sale, distributing, exporting or otherwise trafficking into the United States “any and all products, services, devices, components or parts thereof” that are designed or produced for circumventing security measures in Nintendo’s consoles, products and protected works.

    Turning to RCM Loader and any product with identical function, the court restrained the defendant from carrying out sales, distribution, imports and/or shipping to any person or entity in the United States. Le Hoang Minh is also banned from indirectly infringing, facilitating, encouraging, promoting or inducing the infringement of Nintendo’s copyrights, whether in existence now or in the future.

    In an effort to prevent sales on platforms such as Amazon, the defendant was restrained from offering RCM Loader or any similar product for sale or distribution. Any seller or online marketplace who receives notice of the order must also “immediately cease and permanently refrain” from offering any such products in the United States.

    The court also authorized Nintendo to seize and destroy all circumvention devices and software that violate its copyrights or exclusive licenses. It further granted the $2,500 in statutory damages requested by Nintendo and reminded the defendant that any violation of the order may be punishable as contempt of court.

    Nintendo’s Motion for Default Judgment can be found here (pdf)

    The Final Judgment and Permanent Injunction can be found here (pdf)

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      UK Pirates Remain Driven by Convenience, Availability and Cost

      Ernesto Van der Sar • news.movim.eu / TorrentFreak • 16 April, 2021 • 3 minutes

    uk Every year the UK Government publishes a new edition of its Online Copyright Infringement Tracker.

    This report is the result of an annual survey that polls the piracy habits of people twelve years old and above.

    Earlier this week the UK Intellectual Property Office published the tenth wave of the report. As always, there are some positive changes compared to earlier years, as well as some negative ones.

    Fewer Pirates

    Starting with the good news, the study finds that the overall level of copyright infringement across all content categories has dropped. In previous years this number was stuck at 25% but has now reduced to 23%. This means that nearly a quarter of the people who consumed online content have used illegal sources.

    While this is a big number, the survey also shows that many of these pirates consume content legally as well. For example, 20% of all film fans occasionally pirate content, but only 3% use piracy services exclusively.

    The same effect can be found in other content categories, including music consumers of which 18% used unauthorized sources last year, but only 2% did so exclusively. For games, these numbers are 10% and 2% respectively.

    For the above categories, a relatively small percentage of the pirating public used illegal sources exclusively. However, that picture is the other way around for software and digital magazines, where the majority of all pirates never purchased anything legally.

    Sports Piracy is Booming

    Similar to last year, the highest percentage of pirates can be found among the live sports streamers. Of all the people who consumed sports streaming content last year, 37% used illegal channels. That is up from 34% last year. Roughly a third of the sports streaming pirates never used legal services.

    This brings us to the motivation people have to pirate content. Here we see a familiar picture emerge as well. People pirate because something is not available or because they can’t or don’t want to pay additional costs.

    Movie fans, for example, may not want to pay for yet another monthly streaming subscription to see a film. Or, the content they desire may not be legally available at all, as we have seen with some of this year’s Oscar contenders.

    COVID Had a Limited Impact

    Despite some small shifts in piracy levels not much has changed. There is a small decline in music, movie and TV piracy, while the proportion of sports, gaming and software pirates increased a bit.

    Interestingly, the COVID pandemic doesn’t appear to have a strong or lasting effect. Some people reported that their piracy activity increased, but there aren’t necessarily more people who pirate.

    “In terms of levels of infringement, the findings from the qualitative phase showed that while many reported no change in their use of illegal sources, some noted that owing to their general consumption in entertainment increasing, so too did their use of illegal sources,” the report notes.

    How to Stop Pirates?

    While the yearly reports help to track how piracy trends develop over time, it does little to address the problem. However, the latest report does give some advice on how to motivate pirates to ‘go legal.’

    The study tested a variety of messages focused on the negative consequences of piracy, to see what would make pirates change their behavior. This leads to some interesting insights.

    For example, mentioning the financial losses of big corporations or the broader economy has virtually no impact. People don’t seem to care that the revenue of major movie studios or sports organizations is impacted.

    A more effective approach, according to the study, would be to focus on the financial impact piracy has on individual artists and employees who work in the creative industries. Those messages even impacted hardcore pirates, who also showed concern about their own risks, including malware and viruses.

    Finally, hasher punishment could work as well, according to one of the report’s conclusions.

    “There is potential to explore messages around risk of greater legal action and consequences for those who infringe – this is not currently seen as a viable threat but was mentioned by a few as a potential deterrent if enforced more widely.”

    A summary of the tenth copyright infringement tracker survey is available on the UK Intellectual Property Office website .

    While not mentioned, it may also make sense for the entertainment industries to change something themselves. After all, harsher publishment is not going to improve the convenience, availability, and cost of legal alternatives.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Plex Plans To Place All Legal Streaming Options (and Piracy) Into One Interface

      Andy Maxwell • news.movim.eu / TorrentFreak • 15 April, 2021 • 5 minutes

    Plex Since being founded in 2009, the Plex media server and service has grown from strength to strength and with 25 million users worldwide, is now a force to be reckoned with.

    Early adopters know Plex as a powerful media server capable of transforming local movie, TV show, and other libraries into a beautiful Netflix-style entertainment experience. Playable on a wide range of devices including PCs, smart TVs and even smartphones, Plex has a strong cult following but in recent years has begun to spread its wings.

    While the company would prefer not to acknowledge it, Plex is the playback weapon of choice for millions of pirates. So-called “ Plex for Share ” services aside, direct piracy isn’t strictly possible within the system but when it is fed with movies and TV shows previously obtained from pirate sites, consumption of such media is transformed. The problem then, is how to tempt these users away from the ‘dark’ side.

    Plex Spreads its Wings

    In 2019, it was revealed that Plex had struck licensing deals with Warner Bros to supply free, ad-supported movies and TV shows to Plex users. Since then, Plex has added free live TV channels and secured more than 240 additional content deals with the likes of Lionsgate, MGM, Sony, AMC and more. This means that when ‘pirate’ users fire up Plex, they are not only presented with their own unlicensed content libraries but also official content too.

    This blurring of ‘markets’ is an intriguing proposition that hasn’t been strongly tested before. Legal movie and TV show content from major providers isn’t seen on pirate streaming sites, for example, meaning that users can’t be easily tempted away during their visits. However, by putting licensed content inside Plex, no external navigation is needed, making the switch to revenue-generating content a breeze.

    However, this innovation was only the beginning and according to an announcement Wednesday, Plex has an even bigger plan on the horizon, one that could transform the market.

    $50m in Funding Secured: One-Stop Shop For Movies and TV

    Yesterday, Plex revealed it had completed a growth equity round of $50 million from existing investor Intercap. The financing includes approximately $15 million in new capital for Plex, which the company intends to invest in its mission to become a one-stop-shop for movies and TV. It aims to do this by addressing one of the most frustrating aspects of today’s legal streaming market – fragmentation.

    “As the industry grows so does the media chaos, creating a more fractured consumer experience with a dizzying array of services and subscriptions – all served up through a multitude of platforms and apps that the consumer has to keep track of,” Plex explains.

    “This experience is painful for consumers who just want to find and easily navigate to movies and TV shows that they like.”

    What Plex has in mind is to present users with a “single pane of glass”, a window to access their entire content libraries from within Plex, enabling them to find what they want quickly and easily.

    “Everybody knows it’s a pain to sift through all the streaming services to find what you want to watch, and our goal at Plex is to manage your media life for you,” says Keith Valory, CEO at Plex.

    “Our job is to understand where everything is, whether it’s from our free library of movies and shows, a subscription service, live on TV, or something you can purchase, and for Plex to be the trusted go-to service to help you find what you want, when you want it.”

    One Interface, Endless Options

    At the moment, Plex users are presented with their local content libraries and Plex’s movies, TV shows and live TV streams. The plan as described thus far suggests that Plex also hopes to partner with platforms such as Netflix, Prime, and maybe even Disney, so that all content libraries are searchable from one place – a legal content metasearch engine of sorts.

    Whether these giants will have any interest in this proposal remains a question but it’s not difficult to see how such a system could be attractive to regular users while also becoming a valuable tool to leverage additional revenue from pirates. These days, only a minority of pirates are ‘hard core’, i.e they only consume content from pirate sources. The majority also consume legitimate content too and it’s not hard to find plenty who also have Netflix and Disney subscriptions, for example.

    However, instead of having pirates sit completely isolated in their own ecosystems, with no immediate opportunity to convert them (or more fully convert them) into paying customers, the Plex proposal appears to welcome them to the fold, making all content searchable from one location and potentially negating the need to switch in and out of numerous apps.

    That being said, there are problems to overcome.

    Subscription and Privacy Concerns Remain

    As things stand, even if users can easily search and discover content across multiple legal platforms in one interface, they’ll still be required to subscribe to those platforms to access the content.

    For Plex, this could provide a source of affiliate revenue when users choose to sign up but there are limits to how much consumers are prepared to spend. A nice option would be to offer a package of subscriptions at a significantly reduced rate (a Plex Pass Plus option, if you like) but in the current environment, there doesn’t appear to be much of an appetite among providers to consider that.

    Also, there are privacy concerns, particularly if Plex wants to assure its pirate and partially-pirate consumers to step onboard and begin the journey.

    “Plex will help users discover new things to enjoy based on everything they already watch, with smart recommendations such as ‘you watched this movie, so you might enjoy this podcast, or this musical artist.’ It’s all about creating a custom multi-media entertainment experience that’s easy and enjoyable for each individual’s unique tastes,” the company explains.

    While subscribers to Netflix and Disney are already used to these types of recommendations, it will remain to be seen how this is welcomed by pirate users. At this stage, it’s unknown whether Plex intends to start harvesting and/or sharing pirates’ viewing habits with their commercial partners. Also, things could get a little bit awkward if messages appear noting that “Since you watched yet-to-be-released-on-streaming-platforms ‘movie X’, then you might like to watch Y.”

    That problem is probably a long way off but nevertheless, Plex’s momentum towards official content partnerships is absolutely clear. Becoming a focal point for lawful content consumption could also mean it faces pressure to do something about piracy too, but only time will tell how that plays out. There are clear opportunities ahead though, including millions of chances to convert pirates while cleaning up the legal streaming market into something cohesive.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Canada Proposes New Regime to Block and Deindex Pirate Sites

      Ernesto Van der Sar • news.movim.eu / TorrentFreak • 15 April, 2021 • 3 minutes

    canada flag The Canadian Government is exploring if and how current copyright law should be amended to better fit the present landscape.

    To this end, Canada’s Innovation, Science and Economic Development department launched a consultation asking for feedback on a wide range of proposals.

    The ultimate goal is to deter piracy by helping copyright holders better protect their content. At the same time, the Government wants to safeguard the rights and freedoms of individual citizens.

    This isn’t a new topic in Canada where there have been similar consultations in the past. Just two years ago, this resulted in a thorough review of the Copyright Act , which advised against implementing a broad site-blocking scheme.

    Today, however, the site-blocking proposal is again being considered, albeit in a different form.

    New Plan to Block and Deindex Pirate Sites

    The proposal notes that any new blocking legislation would be primarily focused on commercial-scale infringement. It shouldn’t target individuals directly, although they ultimately are the ones whose access is blocked.

    The general idea would be to change the law to ‘expressly’ allow courts to require ISPs to block sites and services. Similarly, courts should also be able to order search engines such as Google to remove these pirate sources from search results.

    These orders can be issued without assuming any liability on the part of Internet providers or search engines, who can keep their roles as neutral service providers.

    “The Act could be amended to provide expressly for injunctions against intermediaries to prevent or stop online copyright infringement facilitated by their services even where they are not themselves liable for it, such as where they may be protected by the safe harbors,” the proposal reads.

    The Government adds that these injunctions should be issued by courts that are expected to guarantee the highest standards of procedural fairness.

    Staydown and Termination Injunctions

    In addition to site-blocking and search engine de-indexing, courts should also be able to order online service providers to prevent infringing content from being re-uploaded, or to suspend or terminate access to infringing customers.

    Cementing these options into law is warranted, according to the Government, as courts have already issued site blocking and de-indexing injunctions in the past. This includes the GoldTV case, which is currently being appealed by Internet provider TekSavvy .

    This begs the question; if these injunctions are already an option under current law, why would anything need to change?

    Fewer Court Cases?

    According to the proposal, clearer legal guidelines could help to bring copyright holders and intermediaries together, which may ultimately lead to fewer court cases.

    “This legislative scheme could moreover deter litigation by encouraging intermediaries, rights holders and others to work together to establish a suitable framework for dealing with alleged infringements facilitated by the intermediaries’ services,” the proposal reads.

    This indirectly suggests that the Government hopes that the end result will be more voluntary agreements. While some ISPs may be open to the idea of blocking pirate sites without a court order, we doubt that all are.

    What About the Copyright Act Review?

    To some people, it may come as a surprise that the Government is proposing a site-blocking scheme now as an earlier review of the Copyright Act dismissed this idea . However, the wording of the proposal appears to be carefully crafted to fit the outcome of the earlier review.

    For example, the review dismissed the idea of a “non-judicial” site-blocking scheme or “narrowing the safe harbor” of online service providers. Instead, it argued that new legislation should be focused on “commercial-scale infringers.”

    The new proposal suggests a “judicial” site-blocking scheme that keeps safe harbors intact and is primarily aimed at commercial-scale infringers. This ticks all the right boxes, although that will undoubtedly be contested.

    A full overview of all the proposals, which also includes new measures against repeat infringers and plans for compulsory licensing agreements, is available on the public consultation page published by the Innovation, Science and Economic Development department.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Hackers Use Software Cracks and BitTorrent Client to Steal Cryptocurrency

      Ernesto Van der Sar • news.movim.eu / TorrentFreak • 14 April, 2021 • 3 minutes

    Danger It’s no secret that scammers are constantly trying to trick people into downloading malicious content from pirate sites.

    These files are generally easy to spot for seasoned pirates and they are often swiftly removed from well-moderated sites. However, for casual downloaders, malware can be a serious problem.

    Novices are often directed to dubious portals where these threats are harder to avoid. That can lead to disastrous consequences. This isn’t limited to annoying popups either, it can result in financial trouble as well.

    Bitdefender Warns Against Malicious Cracks

    This week, cybersecurity company Bitdefender reports that hackers are actively using software cracks to empty people’s cryptocurrency wallets. The company discovered a series of malicious KMS activators for Office and Windows, as well as Adobe Photoshop cracks. These can completely compromise the victim’s computer.

    If these malicious cracks are executed, they drop a copy of the legitimate data transfer software “ncat.exe” that can be controlled by the hackers. This tool is used to transfer valuable data from the victim’s computer through a TOR proxy.

    Torrent Clients Exfiltrate Crypto Wallets

    Interestingly, Bitdefender reports that the attackers also use BitTorrent clients to exfiltrate data. Bitdefender’s director of threat research, Bogdan Botezatu, informs us that they discovered instances of the Transmission client that shared stolen data via torrents.

    “Our monitoring shows that they are using the Transmission client to seed the information they want to exfiltrate. They create torrents with the data to be stolen, then use the client to seed that information through the network,” Botezatu informs TorrentFreak.

    The torrent clients are not essential but Bitdefender believes that they may be used to obfuscate the malicious traffic.

    “While the attackers can directly exfiltrate data by simply zipping the files and sending them across the network, the BitTorrent avenue might help them bypass potential firewalls and blend the traffic into the peer-to-peer noise,” Botezatu adds.

    Hackers Install Transmission

    It is worth noting that this doesn’t mean that Transmission users are somehow more vulnerable. The research found that the hackers actively install the client, so it can happen on any system.

    With the backdoor, the hackers have full access to the victims’ computers. They use this to steal all sorts of valuable data, including Monero cryptocurrency wallets, if those are available.

    The cybersecurity company believes that the malware isn’t completely relying on automated requests. Instead, it is likely being controlled by a human operator who can change strategy based on individual situations.

    Firefox Credentials and More

    In addition to stealing cryptocurrency wallets, the security researchers also found that the hackers are going after Firefox browser profile data, which includes browsing history, credentials, and session cookies. This can then be exploited to do more damage.

    These are just a few examples of what can be done. Since the attackers have pretty much full access the victims are vulnerable to all sorts of threats. This may vary based on what opportunities the hackers see.

    “This list of actions is non-exhaustive, as attackers have complete control of the system and can adapt campaigns based on their current interests,” Bitdefender warns.

    Who’s at Risk?

    As we mentioned earlier, these types of malware-ridden cracks mostly affect people who download files from sites that have little or no moderation. This is confirmed by Bitdefender as well.

    “These cracks are usually hosted on direct-download websites rather than on torrent portals, as the latter have a community that downvotes and flags malicious uploads,” Botezatu says.

    At the moment the malware-loaded cracks are most popular in North America and India. More technical details about the files and processes involved can be found in Bitdefender’s full writeup .

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Philippines Government & ISPs Reach Agreement to Rapidly Block Pirate Sites

      Andy Maxwell • news.movim.eu / TorrentFreak • 14 April, 2021 • 4 minutes

    block Alongside various initiatives to discourage Internet users from visiting pirate sites, including improved legitimate offerings, governments, rights holders and service providers are pressing ahead with their site blocking plans.

    Broadly speaking, site blocking takes place under two regimes – court-ordered injunctions and voluntary arrangements between stakeholders. The former can prove effective but there are considerable costs involved and blocking doesn’t always happen as swiftly as rightsholders would like. Voluntary arrangements, on the other hand, are less formal and have the advantage of being less adversarial, not to mention less expensive.

    Philippines’ Authorities and ISPs Reach Agreement

    In common with most regions of the world, the Philippines has a problem with piracy but a new agreement announced this morning hopes to reduce the number of citizens being able to directly access pirate sites for their fix.

    A joint announcement by the Intellectual Property Office of the Philippines ( IPOPHL ), the National Telecommunications Commission ( NTC ) and the country’s internet service providers reveals that a voluntary agreement has been reached to block pirate sites in a streamlined and swift manner.

    The proposal was tabled last week by IPOPHL Director General Rowel S. Barba during a focus group discussion attended by around 50 representatives from government agencies and ISPs, including Globe Telecom, Inc., Smart Communications, Inc., PLDT, Inc., Sky Cable Corp., Converge ICT Solutions Inc., and DITO Telecommunity Corp.

    How the System Will Work

    Via a memorandum of understanding, the parties have agreed to form an alliance that will define coordination protocols that will enable pirate sites to be quickly blocked following an official complaint of infringing activity. The system will work as follows:

    In the first instance, rightsholders will present a complaint to IPOPHL which will work to assess the evidence and the need for action.

    “The duration of IPOPHL’s investigations will depend on the merits of the case and evidence submitted, but we always ensure a speedy and thoroughly validated decision,” says IPOPHL’s IP Rights Enforcement Office (IEO) Officer-in-Charge Director Ann N. Edillon.

    Edillon says that the complaints validation process is a “fine-toothed comb” that aims to ensure that all evidence points to infringing activity before a blocking order is handed down. The requirements for blocking are yet to be published so at this stage the relevant thresholds are unclear.

    When IPOPHL is satisfied that blocking is warranted it will hand down an order to the National Telecommunications Commission (NTC), the government body responsible for the supervision and control of all telecoms services, television and radio networks in the country, including ISPs.

    Once received and validated by NTC, the blocking order will be distributed among the participating ISPs listed above, which will then go about the practicalities of blocking. At this point, the ISPs believe that blocking can be put in place within two hours but according to the government, further streamlining is not out of the question.

    Reducing the Steps Before Blocking

    The validation process carried out by NTC after receiving a blocking order from IPOPHL can reportedly take a few days, a delay that rightsholders would like to reduce.

    The government says that some of the ISPs are willing to cut out the ‘middle man’ and take their blocking orders directly from IPOPHL. Others, on the other hand, say that this would require a new law that would formalize IPOPHL’s authority to directly block pirate sites, without the involvement of NTC. Another scenario would see IPOPHL hand down a blocking order to NTC, which would immediately forward it to ISPs.

    IPOPHL Signs MoU With Anti-Piracy Group AVIA

    Earlier this week the IPOPHL announced the signing a memorandum of understanding with the Asia Video Industry Association ( AVIA ), an anti-piracy group responsible for protecting the interests of video and TV rightsholders in the region.

    The MoU envisions cooperation on several fronts including the sharing of information to help prevent and reduce piracy in the Philippines, the development of piracy monitoring and site-blocking processes and their implementation, and assisting local authorities to build their anti-piracy expertise.

    “I eagerly look forward to the work with AVIA in the months ahead,” said IPOPHL Director General Rowel S. Barba during a virtual signing ceremony.

    “Together, may IPOPHL and AVIA successfully stamp out the infringers and enable Filipino film and video producers, artists and contributors to wholly enjoy the rewards they deserve and to continue creating fresh original works for the benefit of society, culture and economy.”

    AVIA CEO Louis Boswell said that piracy is on the increase in the region and since hosts of pirated content are often outside the country, site blocking is the obvious solution.

    “Site blocking is a responsible means of not allowing access to pirated sites. We have experience now in multiple markets all around the region that site blocking, where it is done properly, can be incredibly effective at reducing the levels of piracy in a market,” Boswell said.

    As part of the agreement, the IPOPHL has agreed to take action against pirates based on information provided by AVIA.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      ‘Pirate’ Law Firm Pressured Cooperative Housing Project to Settle Porn ‘Lawsuit’

      Andy Maxwell • news.movim.eu / TorrentFreak • 13 April, 2021 • 6 minutes

    copyright troll When copyright trolls scour BitTorrent swarms looking for IP addresses, they have absolutely no idea who sits behind them.

    ISPs can eventually be forced to hand over the subscribers’ personal details but even then there’s no solid proof of who carried out the infringement, if there was one. Cases tend to get decided on the balance of probabilities, meaning that an individual in a single-occupancy household finds themselves in a much more tenuous position and under pressure to settle.

    But what happens when there are multiple occupants or even multiple households with many, many potential infringers? In Denmark, it appears, the response from copyright trolls remains the same: We don’t care who infringed: Pay us.

    Law Firms’ Reputations Destroyed

    Aggressive copyright-trolling has developed into a worldwide scandal over the past 15 years, with numerous lawyers finding themselves suspended and even imprisoned for their behavior. But even now, law firms wander into the fire nonetheless, with Denmark’s Njord Law just the latest example.

    After accusing thousands of Danes of illegally sharing movies using BitTorrent, Scandinavian law firm Njord Law approached many for cash settlements despite their clients not holding the copyrights to the content in question. As a result, a partner in the firm and the firm itself have been charged with serious fraud offenses dating back to April 2017.

    As that case develops in the background, those targeted with questionable settlement demands are stepping forward with stories that only reinforce what observers have known for some time: Something is rotten in the state of Denmark.

    Copyright Trolls Target Cooperative Housing Association

    The whole idea of copyright enforcement is to find the actual infringer and force them to compensate the rightsholder for their actions. For copyright trolls, however, finding the actual infringer doesn’t seem as important as finding someone who will simply take responsibility and pay, even if they aren’t guilty of anything.

    This notion is underlined by a case reported by Berlingske ( paywall ), involving 37-year-old Christie Bak, who in 2019 was chairman of the board of a cooperative housing association in Copenhagen.

    The association received correspondence from Njord Law, who alleged that the association’s Internet connection had been used to download and share a porn film. To settle this matter the law firm wanted a payment of DKK 7,500 (around US$1,200) with the suggestion that things could get much more expensive if the matter went to court.

    The association contacted the law firm, informing them that they had no idea about any porn downloads so were considering employing a lawyer to deal with the matter. This, of course, would cost the association money, something copyright trolls are only too aware of.

    Balancing The Books

    At this point in a copyright troll matter, both parties are led into their own set of calculations. Most law firms don’t want to take cases to court since early settlements are far more lucrative and less hassle. On the other hand, they are well aware that if their target lawyers up, they might not get anything. So, at this point, many copyright trolls attempt to make it more attractive to settle and less attractive to mount a defense. This case was no different.

    After the housing association indicated it could fight back, Njord Law made a counteroffer of DKK 4,000 (around US$640) to make the matter go away, an amount getting dangerously close to the cost of hiring a lawyer to send a couple of “back off” letters.

    Counteroffer Made The Association Suspicious

    Christie Bak informs Berlingske that the rapid reduction of the amount being demanded raised her suspicions. If Njord Law were originally prepared to go to court with the evidence they had, why were they now offering to settle for much less?

    “Was it because they had a thin case? Did they think it would be nice if they could just get some money out of us? It seemed strange,” she says.

    Discussing the matter with members of the cooperative’s board, Bak says it was made clear that if someone had been responsible for the sharing of the movie, they could just come forward and the association would’ve simply paid the settlement “in good conscience”. In the event, no one in the entire association knew anything about the alleged infringement.

    Housing Project Has Shared Internet, No Infringer Identified

    Unable to identify who (if anyone) had carried out the alleged infringement, Njord Law was informed that it could’ve been anyone, including various holidaymakers who also had access to the association’s Internet connection. This prompted the initial reduction to DKK 4,000 but that amount was rejected by the association.

    In this case, knowledge was power. The association wrote back to Njord and informed the law firm that they were aware that Njord’s file-sharing cases were floundering in the courts, with three cases in particular already having been rejected. They also informed Njord that the evidence of its copyright troll partners was also being questioned in the media.

    “The only thing we saw was some paper with some [IP address] numbers on it. There was no letter or explanation. It also did not appear where they got the numbers from. How could we be sure that it was not something they had manipulated? There was no guarantee of authenticity on it. It was just a lot of print,” Bak informs Berlingske.

    Njord Law Reduces Settlement Amount Yet Again

    Following this response, Njord – having previously stated the strength of its case – quickly dropped its demands to DKK 2,500 (US$400) – an amount that would be gobbled up by a lawyer in a matter of minutes, should the association choose to defend itself in a lawsuit.

    In the event, the board did the calculations and took the decision to pay Njord off, a decision that Bak says she now regrets.

    Journalist Freja Marquardt contacted Njord Law with a request to comment on the matter, including previous correspondence with the law firm suggesting that lawsuits aren’t filed against entities offering Internet in “open access conditions”.

    No Comment – Legal Ethics

    Njord lawyer Lars Lokdam told Marquardt that due to the company fully complying with the rules of legal ethics, it was impossible for him to talk about the case since the settlement was private. On the related matters, including not filing lawsuits against those who enter into dialogue or have widely accessible Internet, he refused to answer any questions.

    What appears clear, however, is that at least in some instances (and certainly in this case), companies like Njord Law and their copyright troll partners have little interest in targeting the actual infringer. What they want is someone – anyone – to pay up and when they do, it is mission accomplished.

    The big question then is whether legal ethics stretch to having innocent parties pay for the alleged crimes of others, particularly when there may not have been a legal basis to demand a settlement or bring a case in the first place.

    During the course of its live criminal investigation against Njord Law, these questions and more could be answered by the State Prosecutor for Serious Economic Crime (SØIK), which currently believes the law firm defrauded Danes out of at least 7.5 million kroner (US$1.22 million).

    From: TF , for the latest news on copyright battles, piracy and more.