So It was not Radio Silence but 5 full days notice in advance with multiple notices. Thank you for updating us about the other side of the story.
5 days had elapsed from the time the original takedown request came in until our network was disabled but there was plenty of correspondence in between and when we had last spoke to Digital Ocean it was still an open issue.
We provide more specifics on timeline here https://news.ycombinator.com/item?id=12010521
That's the issue when you build a service hosted on a service (DO, AWS, Rackspace). You could have thousands of customers, but if you miss one complaint about one customer, the whole thing goes boom. It's more of an argument for content creators hosting on the platform controlled by the data centre owners.
For Surge, and other large hosting platforms, it's an argument for them hosting their own dedicated servers in a data centre (which of course, raises the barrier to entry and costs for these types of solutions).
Most hosting providers I have dealt with expect abuse resolution within 24 hours, five days is a very long time for abuse issues to be handled.
Clearly DO choked and hurt free speech in the process.
Libel / slander don't require a take down, but also don't provide any protection for the hosting company.
If this goes to court then the Yes Men won't be able to pay for the NRAs legal fees. Which means that the lawyers will be tempted to go after DO to get paid.
DO is a low cost hosting company. You can't expect them to ride or die.
Does it? Please link to the legislation describing the specific complaint made.
Taking down the content is the easiest way not to end up as co-defendants with the Yes Men.
(This is specific enough advice I feel I must say that I am not a lawyer, just a knowledge layperson)
Fair use is not an automatic thing, I'm not so confident this web site (no opinion on the video) would be protected by it, especially since, as I note elsewhere in this sub-thread, such a project is not entirely beyond the realm of possibility.
There's nothing saying you have to obey a random cease-and-desist letter, but there's also nothing saying you can't obey it. If DO prefers to take action for letters like these, that's their right. And if they give their customer warning and a way to respond, I can't even say it would make me uncomfortable to be their customer.
The content could certainly be infringing and there's little safe harbour for an ISP.
The video also said it was "Paid for in part by the National Rifle Association of America with additional support from Smith & Wesson Holding Corporation.", which is a blatant lie. They were hosting fraudulent content, and DO was right to take them down.
This is simply wrong. Here's a link for you:
*Except when it involves a lie or violation of a trademark.
Furthermore there are limits to free speech in the US. For example: obscenity, treats of violence, military secrets, etc.
Australia has no bill of rights, yet judges have upheld individual right to protests (Victoria has a Charter of Rights, but that's it). China has free speech in their constitution. Germany has free speech, unless it has anything to do with the original Nazi party symbols.
You really think that these laws have never been challenged before?
Fraud has been illegal for as long as the US has existed. It's not protected. If it was protected as free speech, fraud laws would have been overturned sometime in the last 225 years.
Further reading:
https://en.wikipedia.org/wiki/False_statements_of_fact
https://en.wikipedia.org/wiki/United_States_free_speech_exce...
In Dred Scott v. Sandford the court ruled that the bill of rights does not apply to African Americans. Are you a supporter of that decision or did you mistype? Where does it say that the court gets to supersede the constitution? I think you will find that it does not.
Ample amount of time for what? The underlying problem is that DigitalOcean should not be arbitrating trademark disputes between companies. They're not competent to decide who is right and who is wrong. They should not suspend someone's content purely because someone claims to be the owner of a trademark, and claims some content is infringing. (Unless we're talking about obvious abuse, intentional malice, etc.)
What exactly is the recourse for the site owner if the claims are unreasonable or outright wrong? With the DMCA, there is a clear process: the site owner can submit a counter-claim, and the content stays up. What should properly happen at that point is the rights-owner can take the site-owner to court to pursue their claim. Instead, DigitalOcean acted as judge, jury, and executioner on behalf of the NRA, taking down content outside any established DMCA-like process, and without leaving Surge any recourse to keep it up.
No surprise there, 5 days is far longer than most providers will give you. You're lucky to get 24-48 hours to take down infringing content at most DCs in my experience.
Did the other guys even make an effort to respond?
5 days total had elapsed from the original request which we responded to within 22 minutes.
It's pretty understandable for DO to not want to get involved in a legal dispute like that, buy your own IP range if you need to avoid this and take it to court yourself. You took on a huge risk yourself by allowing the content to stay on your network after you got the notice and may have implicated yourself should a trial be underway.
Seems insane that you let your entire service get nuked over one customer. And to publicly call this "radio silence"? They literally gave you a warning with an exact timeframe.
We would have had we been sent a notice from the trademark holder but we weren't. Or even had DO been sent the request from the rights holder. This is the due-process we are asking for.
> It's pretty understandable for DO to not want to get involved in a legal dispute like that
To our knowledge Digital Ocean was at no time directed by the trademark owner to remove the content. This was DO acting on their own.
> They literally gave you a warning with an exact timeframe.
This is an exaggeration.
- We responded within 22 minutes of the original complaint. - The complaint did not request takedown. - We were not given timeline nor consequences until 24h before takedown. - When given 24h notice We immediately asked for a call which Digital Ocean wasn't available for until the DAY of the takedown. - We spoke on the phone with DO hours prior to the takedown which at their request was left with an action item to fill out a counterclaim. - Digital Ocean withdrew their request for a counterclaim (unknowingly to us) and disabled our network 39 minutes later.
So in truth we had an email we hadn't received yet that gave us only 39min to comply with. We were warned 24h prior but DO wasn't available to discuss until only hours before the takedown and the last correspondence with them they requested a counterclaim to be filed. Our request for counterclaim documents was the last message they received from us before shutting us off.
> Seems insane that you let your entire service get nuked over one customer. And to publicly call this "radio silence"? They literally gave you a warning with an exact timeframe.
We made it clear to them on the phone that we would rather take down the content then have all our customers taken offline. Digital Ocean disabled our network knowing full well it wasn't necessary to have the parody site removed and gave us only a 39 minute window to comply which we did not see in time.
Digital Ocean went completely dark for an hour after disabling the network and ignored our attempts to reach out.
It supports the idea that DO is not responsible for wholesale, nonspecific "content" - there must be details regarding which pages are infringing.
It's great that DO gave them 5 days, but as a person who's used DO a lot for projects, I'm really disappointed by their lack of sophistication in this area.
To pull the plug on thousands of pages and say "five days is enough!" isn't enough.
The problem is that there is no punishment for take-down notices filed in bad faith.
But let's look at what trade-mark law is all about: it's about avoiding confusion. Do you honestly believe that there is a ground for consumer confusion here, that consumers would believe that the NRA would actually put out these statements? Given the context of the publication as well as the content of the material itself?
Or could it be that the NRA figured out a way to shut down a viewpoint that clashes with their own through abuse of the law?
>According to a series of tweets from the Surge twitter account, the NRA sent a legal complaint to Cloudflare, which then forwarded it to Digitalocean. Surge responded “within 22 minutes.” Digitalocean asked Surge to provide counterclaim documents. Some minutes later, Digitalocean shut down Surge.sh. According to Surge, 38,000 sites became unavailable.
1. Digital Ocean did NOT receive a complaint on behalf the trademark holder. CloudFlare was the company sent a complaint on behalf of the trademark holder, which was forwarded to DigitalOcean which was then forwarded to surge.sh. To our knowledge the NRA isn't even aware of DigitalOceans or surge.sh existence.
2. There was no known trademark infringement happening on surge.sh. There was a complaint sent to CloudFlare that such a thing was happening. Digital Ocean acted as if the alleged infringer was guilty even though there is nothing other than the complaint itself to suggest this is true.
3. Digital Ocean was aware that we were willing to remove the content with proper due process. We at surge do not have editorial control of the sites published to surge.sh therefore we wish to provide legal justification to our customers when their content is removed. This would provide our customer with a means of recourse if the takedown is in error.
4. All we asked for was due process and this was something promised to use in the past by Digital Ocean. https://medium.com/surge-sh/more-on-january-7th-downtime-the...
5. We spoke with DigitalOcean on the phone at 11:02am where things were they said we needed to file a counterclaim with the NRA. We thought this was odd since the NRA doesn't know we exist however we were willing to do it anyway.
Our last message to Digital Ocean was at 12:05pm after Digital Ocean sent us the following case study http://scholarship.law.duke.edu/cgi/viewcontent.cgi?article=...
``` Thanks for sending this over. I'll get through this as soon as possible.
Do you mind sending over the counter-claim you are asking us to fill out?
thanks, Brock ```
They responded at 12:47pm with the following...
``` I’ve shared the outcome of our phone call with our Trust and Safety team. Since this is not a DMCA complaint, a counterclaim does not apply here, contrary to my misunderstanding over the phone. I apologize for the incorrect information. [...] You have until 1:26pm EDT, a bit under an hour from now, to remove the content. Otherwise, we will need to disable networking to this Droplet. ```
We unfortunately didn't see that message until it was too late and at 1:26pm our network access was disabled followed by radio silence from Digital Ocean for the following hour.
So Digital Ocean communication to us went as such..
11:02am - "you need to remove the content or fill out a counter claim" 12:47pm - "we were wrong, no counter claim can be filed and you now have 39minutes to remove the content or we are disabling the network"
Since Digital Ocean realized they misrepresented themselves on the phone we would have preferred if Digital Ocean had picked the phone back up rather than shut us down with less than an hour warning.
I'm willing to clarify to avoid further to confusion if you can provide more detail.
It's frustrating and borderline absurd to me that hosting platforms get involved in dispute processes like this that properly should be handled by a court. What exactly is Surge's recourse here? Sue DigitalOcean to have their content put back up? That's ridiculous.
The DMCA provides a clear process: one party provides a claim asserting that some content infringes copyright. The owner can then provide a counter-claim asserting that it's not infringing. If they do, the content stays up, and if they don't, the content goes down. Providing a counter-claim, which requires asserting under penalty of perjury one's belief that the content is non-infringing, is the site owner's recourse to an unreasonable takedown request. Simple and clear. In this case, with no DMCA process, DigitalOcean is taking Surge down without any recourse for Surge to keep the content up in the event that the takedown request is unreasonable.
I don't know what the standards are for satire to be fair use. It wasn't very clear that the video was satire, but the nature of satire is that it's not always obvious to everyone. DigitalOcean should not have intervened in a trademark dispute between two different companies outside the DMCA. Or if they're going to make up a process, they should have at least followed the protocol DMCA established for Surge to assert non-infringement.
Surge should have been more transparent here. It seems like they were trying to obscure the actual timeline. I'd like to see Surge publish a full log of their communication with DigitalOcean and CloudFlare and related parties in the interest of full transparency, as validation that this is what has transpired. But on the other hand, Surge never should have been shut down in the first place, regardless of timeline. There was no counter-claim for Surge to file - what exactly were they supposed to do?
[1] OK fine, technically it's not extra-judicially because I'm sure DO's terms of service say they can do whatever they want. Nevertheless, it feels extra-judicial from a customer's point of view. Companies shouldn't get involved in arbitrating disputes between other companies - they are not a court and not competent to handle such disputes; they should simply participate in court processes as obligated by law.
> I don't know what the standards are for satire to be fair use. It wasn't very clear that the video was satire, but the nature of satire is that it's not always obvious to everyone. DigitalOcean should not have intervened in a trademark dispute between two different companies outside the DMCA.
The video itself doesn't have much of a leg to stand on. I personally think the approach of the Yes Men is brilliant, but they're obviously operating in a grey area where they can expect censorship via the legal system.
BUT that is irrelevant - it still is not DO's job to act as a judge and skip requiring a bona fide court order, especially when they're clearly dealing with a downstream service provider. If they want to be taken seriously as a platform provider, then they really need to apologize for this incident and fix their policies.
(Also what a horrible title. I guess the NRA stokes more rage with Vice's audience, but Digital Ocean seems to be primary party deserving blame here)
On June 23rd, we received notice from the NRA's counsel that sharethesafety.org was infringing NRA’s trademarks. The NRA demanded that we remedy the problem by removing the material. In response, we followed our standard procedures for trademark infringement notices and informed the customer immediately of the NRA’s demands. We provided more than 5 days for the customer to respond to or resolve the issue. We also spoke to the customer on several occasions to inform them that we intended to take action on the trademark claim. They chose not to remove the violating material. Accordingly, our Trust & Safety team restricted network access to their Droplet, which caused an outage to all of their user’s websites hosted on that Droplet. In less than 2 hours of the outage, the customer was able to address the trademark notice, and network access was immediately restored.
DigitalOcean followed procedures that help protect us from having to resolve what can be complicated disputes between third party rights holders and our customers regarding IP issues. In this case we should have given greater care to the customer’s voice and their right to engage in parody. In retrospect, we believe that the website identified in the NRA’s takedown notice was not a trademark infringement but was instead protected by the First Amendment. We at DigitalOcean champion freedom of speech and the free and open web.
Going forward, we will be working closely with our legal counsel to review our Trust & Safety procedures so we can make better decisions. We are committed to providing our customers with the best level of service and supporting their rights and freedoms. That is our responsibility as an infrastructure service provider and one that I take very seriously.
Sincerely,
Ben Uretsky Co-Founder & CEO
https://cyber.law.harvard.edu/metaschool/fisher/domain/tm.ht...
"We received notice on behalf of a trademark holder that a customer of DigitalOcean was hosting infringing content on our network. DigitalOcean immediately notified our customer of the infringement, and the customer was given a five day period to resolve the issue. The infringing content was not removed within the specified period even though several notifications were issued. Per DigitalOcean’s terms of service, a final reminder was issued to our customer and, when no action was taken, access to the content was disabled. The infringing content was subsequently removed by the customer and all services were restored in less than two hours."
5 days seems to be ample amount of time.