> Any hosting platform will sooner or later have to comply with such a request. It can become very expensive if you end up in court.

Given that this request was completely fraudulent, no matter your take on whether youtube-dl itself is legal the project itself is not an unauthorized post of copyright material, doesn't this give groups like the RIAA a free pass to do whatever they want until someone challenges them?

While it's good that github eventually returned it, their willingness to comply with such a sham should make projects consider moving from them.

Based on how easily the EFF resolved the problem by sending that notice to GitHub, it feels like this could be an easy problem to solve in the future..

The RIAA got effortlessly blocked here with a couple of lawyer man hours, which contained information gathered from a handful of really interesting blog posts.

I would say this entire story is something to celebrate, because it shows how easily a single person could stop this.

Mitchell L. Stoltz, Senior Staff Attorney at the EFF signed this letter, which probably took no more than handful of man hours to compile.

Pretty great roi.

Not every project will have a sufficiently high profile for the EFF to notice. Relying on the EFF like this doesn't scale, isn't future proof, and doesn't address the long tail of the problem.

I think it'll most likely come down to a question of cost per incident - while a couple of lawyer hours is certainly relatively cheap if that same cost is required for every similar RIAA take down request then you'd need to look at how many hours it takes for RIAA to identify a good target and produce a take down notice. The effortlessness of this particular incident gives me hope that if the volume of take downs increased then maybe the EFF or someone else could essentially put together a form reply.

>The RIAA got effortlessly blocked here with a couple of lawyer man hours, which contained information gathered from a handful of really interesting blog posts.

It's not clear that the RIAA needed to spend any real lawyer man hours making the request, I don't think a designated agent needs to be a lawyer but even if they do they just send a form letter.

> it feels like this could be an easy problem to solve in the future

Welcome to the future. Github has received “a DMCA” from the RIAA’s film counterpart requesting they take down another repo for tool that does not contain proprietary copyrighted material (this time not even including a test suite that downloads it IIUC), and apparently instantaneously complied. As of the time I’m posting this, it’s been more than a day (an order of magnitude longer than “a couple of lawyer man hours”, times 1–2?) since it was posted here https://news.ycombinator.com/item?id=25836503 and I’m still not aware of any other response from them so far.

Even if the RIAA payed 1.5 lawyer hours to the EFF’s 1, this is a bad trade IMO. And I doubt the RIAA is spending significant time on these cases based on their record of general sloppyness (ex- the time the RIAA sued charter for infringement on songs they didn’t have the copyright to, after making the same mistake with Cox https://abovethelaw.com/2020/03/riaa-realizes-it-sued-charte...)

Oh, a legal memo like that, for something that is going to be high-visibility and you want to get right and you want to win, definitely took more than a few person hours. I bet several people were working on it for a few days, minimum.

It's also something that requires lawyers/law staff, not just random people, for maximum effect.

But yes, this is definitely a positive thing! I'm not sure anyone but the EFF would have done it succesfully, I am grateful to the EFF... and, yes, to github for their response, which not every company would have had.

> Given that this request was completely fraudulent, no matter your take on whether youtube-dl itself is legal the project itself is not an unauthorized post of copyright material, doesn't this give groups like the RIAA a free pass to do whatever they want until someone challenges them?

The takedown request didn't claim the project was an unauthorised post of copyright material. It claimed it was a DRM circumvention measure, and US law is sufficiently vague on that matter it really can't be said definitively one way or another if that's correct unless someone is willing to litigate it.

Nobody does, in this case. Certainly, describing the request as "completely fraudulent" is wrong. It may or may not have been valid, but the legislation is sufficiently vague in most of the US and Europe that it's entirely possible this could go to court and the RIAA would win.

>. It claimed it was a DRM circumvention measure

The takedown notices do not apply to DRM circumvention measures, only copyright material.

I agree it's completely possible that a court case could rule against youtube-dl, but the only method for taking down a DRM circumvention tool is to get a court order.

DRM circumvention measures don't have a takedown provision as such, but the hoster becomes jointly liable as soon as they are notified, which was the point of the letter.

If this were true, it would make no sense for github to have reinstated youtube-dl. I assume such legal liability would need the start of a lawsuit to be valid.

> If this were true, it would make no sense for github to have reinstated youtube-dl.

Github took a punt that the RIAA weren't going to take it to court, because they don't want to risk establishing that the circumvention provisions are more limited in a court case. They got a lot of free PR out of it with little risk, that's why they did it.

As I said at the time, I wouldn't want to litigate on either side of this case. The law is badly drafted, there's little precedent, and I think it's a genuine 50/50. Any lawyer on both sides would advise you not to do so. I suspect the main reason is that the RIAA can now go back to Google and say they are in breach of contract for not preventing downloads on YouTube using technical protection measures, and push them to switch to Widevine on everything with any music in it.

> Any hosting platform will sooner or later have to comply with such a request. It can become very expensive if you end up in court.

Yet it wasn't actually DMCA takedown request, but a strange new kind of takedown request, where a a private company claimed (falsely) that youtube-dl violated section 1201 and demanded that github remove it.

Unfortunately github seems to have codified these new "1201 takedowns" which didn't seem to exist previously.

Even if DMCA 512 doesn't cover DMCA 1201 violating circumvention tools, that wouldn't make GitHub in the clear to host them. If anything, it would actually increase their liability: the whole point of DMCA 512 is to provide a process by which an ISP can disclaim liability for contributory copyright infringement.

If they refuse the request on the grounds of "you can't DMCA a circumvention tool", then they're still liable regardless of if a DMCA 512 takedown can or can't apply to a 1201 violation, since there's still an underlying tort of distributing a 1201 circumvention tool. If they accept the request, and get sued anyway, they could at least argue that they have a safe harbor (or should have a safe harbor).

Advocating for even more centralization isn't necessarily more productive. I'd love for someone to manage a mirror of all github repos in a place that is less likely to face these kinds of legal jeopardies.

Why not try to direct people toward that, rather than direct them towards crossing their fingers and hoping the lone company wins the fight?

Because the only way to “win” a “battle” is to take a stand and “fight,” running and hiding isn’t winning.

By building up sufficient case law, everyone can do things better and the next time this comes in front of law makers, there will be a better understanding of edge cases and better laws can be written.

I’d really love to see a Developer’s Guild or Union that could collectively take on these sorts of fights and argue for all software devs. The EFF can’t stand alone.

Interestingly enough, sometimes its the only way to "lose" them. Centralized control within companies has its own issues.

Any hosting platform in the US.

> Any hosting platform will sooner or later have to comply with such a request.

The Pirate Bay would disagree? Somehow they've been mostly online for over 10 years despite blatantly and obviously facilitating copyright infringement.

Now YouTube-DL doesn't actively intend for its software to be used for infringement, however its inherent capability to do so is apparently enough to piss off the media industry, so maybe it's best to learn from the aforementioned "expert" in this field and move to infrastructure that's outright immune to the industry's complaints?

In addition, there is huge benefit if you can persuade a large company to defend against this. GitHub/Microsoft is one of the few entities that actually has the financial and legal firepower to take on the recording and music industry.

The smaller hosts may not have the financial and legal cushion to do anything but rollover if the music industry lawyers send them a notice.

> Any hosting platform will sooner or later have to comply with such a request.

Gitlab so far has a history of not responding to bogus requests

Where can I see a list of DMCA requests that Gitlab has received and which ones Gitlab has chosen not to comply with?

[deleted]

AFAIK NewPipe does not use youtube-dl.