News for hackers. Stuff that matters.
Re:Did I receive fraudulent DMCA takedowns? by not2b on Wednesday June 21, 2023 @07:50PM (#36426386)
If someone sends you a DMCA takedown request for URLs that aren't even valid, then you can reply that you've complied with their request and taken the (nonexistent) material down: you are no longer serving content from those URLs because you never were.

I think that what's going on here is incompetence, not fraud.

Re:Did I receive fraudulent DMCA takedowns? by klabb3 on Wednesday June 21, 2023 @08:19PM (#36426576)
> I think that what's going on here is incompetence, not fraud.

There’s a middle ground: sabotage. DMCA complaints have asymmetric incentives. You can, afaik, send a near-infinite number of (generated, duplicated, likely-to-not-exist) complaints at the cost of an email. As a host, you are obligated to comply with each individual report. Automating the process of decoding arbitrary emails, mapping to content you have and verifying that it’s copyrighted is extremely hard if not impossible, so you end up with a manual defense against an automated attack. This can obviously be exploited for purposes of sabotage.

Imagine sending bulk emails to the police reporting all people you don’t like for all crimes you can think of, without any risk. Or if you could call mayday on the sea, get other ships to reroute and risk their lives, with no consequences.

Re:Did I receive fraudulent DMCA takedowns? by tough on Wednesday June 21, 2023 @08:26PM (#36426603)
Also a legal hack.

If you even reply to them you acknowledge their validity and accept whatever legal geography they send it from to be judged on, if you're outside the US. ignore them

Re:Did I receive fraudulent DMCA takedowns? by HWR_14 on Wednesday June 21, 2023 @09:09PM (#36426898)
Is that also true with a response of "this is outside your/my jurisdiction"?
Re:Did I receive fraudulent DMCA takedowns? by worik on Wednesday June 21, 2023 @09:14PM (#36426920)
> you're outside the US. ignore them

Sadly that is nor good advice

You can find yourself being extradited. The legal grounds matter little, as you may find yourself in a Kafkaesque process that will ruin your happiness

Re:Did I receive fraudulent DMCA takedowns? by bragr on Wednesday June 21, 2023 @09:30PM (#36427019)
You cannot be extradited for civil matters in any jurisdiction that I'm aware of, not that I'd recommend ignoring them either.
Re:Did I receive fraudulent DMCA takedowns? by tough on Wednesday June 21, 2023 @09:32PM (#36427031)
I have ignored this for years when I was a digital pirate in Europe.

Fake DMCA bogus can also index you out of google, even your homepage where no 3rd party links are found if you don't fight them

I got lawsuits from the RIAA but non related.

You can safely ignore DMCA's if they're not applied to your jurisdiction, BUT your host and other providers won't when they go upstream unless they also are like in china russia or whatever ignores the US asks

Re:Did I receive fraudulent DMCA takedowns? by dontlaugh on Thursday June 22, 2023 @06:21AM (#36430049)
Re:Did I receive fraudulent DMCA takedowns? by tough on Thursday June 22, 2023 @12:22PM (#36434542)
I remember this case from the UK, well the five-eyes english kingdom is very strong in it's ties.

I only know of cases getting condemned in my country when they accepted dubious plea deals. Very few. Anecdotical.

I read somewhere if you think a law Is unjust, you must break it, but do so publicly accepting facing any consequences.

If extradition is on the table, and jail on the US, maybe we need some more martyr's to suffer through this to make a point that copyright is absurd nowadays.

Re:Did I receive fraudulent DMCA takedowns? by qingcharles on Wednesday June 21, 2023 @09:17PM (#36426943)
While the DMCA is of dubious legal authority served on sites hosted outside the USA, you need to make sure your hosting company is in on your policy position as they will start taking the heat once you start disregarding all the notices.
Re:Did I receive fraudulent DMCA takedowns? by tough on Wednesday June 21, 2023 @09:34PM (#36427040)
Agreed, your host/servers/isp are the ultimate frontier, they can also seize your domains with the eagle via ICANN
Re:Did I receive fraudulent DMCA takedowns? by moi2388 on Wednesday June 21, 2023 @11:28PM (#36427697)
Nonsense.
Re:Did I receive fraudulent DMCA takedowns? by dclowd9901 on Thursday June 22, 2023 @02:28AM (#36428633)
> Imagine sending bulk emails to the police reporting all people you don’t like for all crimes you can think of, without any risk. Or if you could call mayday on the sea, get other ships to reroute and risk their lives, with no consequences.

I love this analogy because we find it wouldn’t work because it would likely raise some flags: 1) sudden influx of reports, 2) the person reporting leaves no reliable way to reach them back, 3) the people are already not on the police’s radar, so that in itself becomes suspicious.

How can we replicate these checks on the web?

Re:Did I receive fraudulent DMCA takedowns? by ixwt on Thursday June 22, 2023 @07:18AM (#36430434)
From my understanding, this would put you at a significant legal risk. Part of the DMCA is a counter suit, and the courts would seriously frown on this kind of tactic. It would seriously negatively impact your case, and could get you labeled a serial litigant (not for doing it one time), which would put any filing you made under serious scrutiny.

Not a lawyer. Just watched and read a good bit about this kind of thing.

Re:Did I receive fraudulent DMCA takedowns? by margalabargala on Wednesday June 21, 2023 @08:20PM (#36426584)
> I think that what's going on here is incompetence, not fraud.

Due to the following bit in the notice:

> Gareth Young, Internet Investigator, swears, under penalty of perjury, that the information in the notification is accurate

It would appear that in this situation, incompetence in fact constitutes fraud.

Re:Did I receive fraudulent DMCA takedowns? by mjg59 on Wednesday June 21, 2023 @08:45PM (#36426745)
No, since the law is what defines whether you're actually under penalty of perjury, and the law says "A statement that the information in the notification is accurate, and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner of an exclusive right that is allegedly infringed". You're only committing perjury if you falsely assert that you're authorised to act on behalf of the owner of the allegedly infringed right. Incorrectly asserting that you're under penalty of perjury if you falsely assert that the information in the notice is accurate is further evidence of incompetence rather than of fraud, sadly.
Re:Did I receive fraudulent DMCA takedowns? by rerdavies on Wednesday June 21, 2023 @09:38PM (#36427063)
Isn't perjury the act of swearing to something that isn't true? He did do that. Whether he was required to swear to that is surely a separate question. He wasn't required to swear to that, but he did.
Re:Did I receive fraudulent DMCA takedowns? by lmkg on Wednesday June 21, 2023 @10:05PM (#36427192)
> Isn't perjury the act of swearing to something that isn't true?

Perjury is lying under oath. The statement must be made under oath to be eligible for perjury. And making a statement under oath is a formal process, dictated by court or law.

You cannot make yourself be under oath. Swearing something to be true doesn't count, unless there is a legal context that makes it true. Swearing in a witness in court makes that happen. Some laws (like DMCA) make statements in certain documents oathful. But it is the law, not the document, that decides that.

Re:Did I receive fraudulent DMCA takedowns? by EdwardDiego on Thursday June 22, 2023 @12:08AM (#36427912)
It seems like "swearing" has been overloaded in your jurisdiction?

In my common law country, at least, when you swear something, it's an oath, and only an oath. We have a non-religious variant, no almighty God required, where you solemnly affirm to the same effect, and false information provided is perjury, punishable by up to 7 years imprisonment (if you perjured yourself in a judicial proceeding), unless you perjured yourself to get someone falsely convicted for a serious crime, then it's up to 14 years.

We also do statutory declarations, where you only declare it to true, but false information in one of those is still a crime, with a lesser penalty.

Oh, and we have a fun wee clause that maybe your jurisdiction doesn't? Where if you swear an oath, it can still be perjury even if it's not being sworn in a judicial proceeding. Only 5 years though.

So yeah, what does "swear" actually mean in the US? I don't get how you'd swear a DMCA takedown without your oath being taken. I figured if it was legit sworn, they'd do the usual "sworn this day X at BLA, witnessed/authorised/etc by Z"

Are they just trying to sound legal and scary, or is that format required in a takedown?

Not a lawyer, nor do I play one on TV, but I've been an occasional customer of the judiciary sufficiently to pick up the vagaries.

Re:Did I receive fraudulent DMCA takedowns? by zorgmonkey on Thursday June 22, 2023 @12:28AM (#36428012)
You don't swear anything with a DMCA, the law says this in 3.A.vi: > A statement that the information in the notification is accurate, and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.

https://www.law.cornell.edu/uscode/text/17/512

Re:Did I receive fraudulent DMCA takedowns? by EdwardDiego on Friday June 23, 2023 @06:26PM (#36453006)
Ah yep, so they most likely did chuck in the "I swear, under penalty of perjury" to sound more intimidating and dramatic then.

Sigh.

Re:Did I receive fraudulent DMCA takedowns? by dclowd9901 on Thursday June 22, 2023 @02:30AM (#36428654)
A legal context like a “cease and desist” letter?
Re:Did I receive fraudulent DMCA takedowns? by mjg59 on Thursday June 22, 2023 @03:19AM (#36428980)
If I say "I swear under penalty of perjury that the earth is flat" in a cease and desist letter, even if I know that the earth is not flat, I cannot be found guilty of perjury because it is not a context in which I can perjure myself - I am not under oath in a court of law, and there is no other law that constrains my freedom to say such a thing. Title 17, Section 512(c)(3)(A)(vi) says that a valid DMCA takedown request must contain an assertion, under penalty of perjury, that the author is authorised to act on behalf of the copyright holder, and as a result making that claim falsely would be perjury. But the reason it's perjury is that the law says that the claim is under penalty of perjury, not that someone wrote "Under penalty of perjury" at the beginning of the sentence.
Re:Did I receive fraudulent DMCA takedowns? by mcv on Thursday June 22, 2023 @03:05AM (#36428903)
If I understand this correctly, it's perjury if they claim ownership over a video of you playing some Bach on piano on Youtube (which has also happened), but it's not perjury if they claim ownership over something that doesn't exist at the claimed URL?
Re:Did I receive fraudulent DMCA takedowns? by mjg59 on Thursday June 22, 2023 @03:23AM (#36429007)
It's more complicated than that - recordings have copyright independent of the original works, so if you make a recording of Bach now, you have copyright over that specific recording even though the music itself is out of copyright. So if someone were to file a takedown request of someone playing Bach on piano on Youtube on the grounds that you had used a recording owned by someone they were authorised to act on behalf of (even if you hadn't used that recording!), that wouldn't be perjury. But if they were to make the claim that they were authorised to act on behalf of Bach himself (which, clearly, they're not), that would be perjury.
Re:Did I receive fraudulent DMCA takedowns? by mcv on Thursday June 22, 2023 @03:34AM (#36429074)
But if the video is simply you playing Bach, does that mean they fraudulently claim to represent you? Or are they fraudulently claiming Sony (or whoever) owns your video? Or are they merely correctly claiming that Sony owns something obviously unrelated to your video, and they're incorrectly but not fraudulently claiming that that thing is related to your video?

I guess it's the third option. Which is frustrating, because I think that it's still harmful, especially when it's so obviously false.

Re:Did I receive fraudulent DMCA takedowns? by mjg59 on Thursday June 22, 2023 @04:26AM (#36429402)
If they knowingly misrepresent a claim that content is infringing, they're liable for damages (17 section 512(k)(2)) but didn't commit perjury. If they are simply negligent in making a claim (eg, because a piece of software told them an infringement had occurred and they didn't actually verify that), they're probably fine. This obviously makes abuse trivial and if anything actively discourages people from verifying whether an infringement actually exists - if they do and then send the takedown notice anyway they're potentially liable for damages, whereas if they never bother then negligence doesn't seem to result in bad outcomes for them. The DMCA is bad law.
Re:Did I receive fraudulent DMCA takedowns? by mcv on Thursday June 22, 2023 @08:23AM (#36431042)
Yeah, that's pretty terrible. They should be required to always verify and always be held liable to some degree when they're wrong.
Re:Did I receive fraudulent DMCA takedowns? by salawat on Sunday June 25, 2023 @03:06PM (#36471534)
So wait...

Can't somebody take the precedent set by those lawyers using ChatGPT to whip up nonsense for the court, and take these DMCA mills to tadk for conduct unbecoming for not verifying that, in fact, any software generated flag actually has merit before the Courts?

The Courts have been clear and unambiguous that their time is not to be wasted on BS, and that an attorney has the Duty of Care to ensure that what they vouch for is representative, and truthful.

Why is this still done at the scale it is if, in fact, the Courts are enforcing due rigor?

...The answer likely is, they aren't, and big tech is usurping the authority of the Courts to weigh in, thereby disrupting due process. In doing so, their legal team is committing the same censurious behavior, by advising their client to act unlawfully too.

Frankly, I'd start being thrilled at such notices if I could find an attorney willing to take a shot at holding notice generators to account for false positives, and service providers who cancel service without complying with due process accountable.

In fact, if the Courts were sufficiently dedicated to it, it would create a selection pressure on attorneys to ultimately be truthful, lest they be hunted by one of their fellow attorneys who actually is honest, and willing to check.

Who watches the watchers? Another watcher, with the incentive to reap a reward for proving the falsity of a claim.

Let the attorneys feast on one another for a bit, and eventually we should reestablish some sanity.

Re:Did I receive fraudulent DMCA takedowns? by autoexec on Thursday June 22, 2023 @03:27PM (#36437421)
> You're only committing perjury if you falsely assert that you're authorised to act on behalf of the owner of the allegedly infringed right.

The courts don't care about that either. In at least one of the cases against ISPs (cox I think) the RIAA sent a large number of DMCA notices for works they didn't even own the copyrights to. After years of work the ISP's lawyers found a bunch of them and told the court who did reduce the damages they were on the hook for to account for the invalid DMCA notices but the court took no action whatsoever against the RIAA for sending them.

Re:Did I receive fraudulent DMCA takedowns? by catminou on Wednesday June 21, 2023 @08:36PM (#36426689)
"ddos" via DMCA requests is an actual thing. There are actual methods that a few ddos-as-a-service providers provide (aka booters or stressers) that will fling tons of DMCA/abuse reports at your hosting/cloud provider to get them to take action on you.
Re:Did I receive fraudulent DMCA takedowns? by unyttigfjelltol on Wednesday June 21, 2023 @08:13PM (#36426534)
Yeah, and then the sender writes back to complain about the 1 address that was real. If this person is a paralegal, complain to the law firm. If the law firm doesn't respond, complain to the bar.
Re:Did I receive fraudulent DMCA takedowns? by HWR_14 on Wednesday June 21, 2023 @09:11PM (#36426903)
Does the bar regulate paralegals?
Re:Did I receive fraudulent DMCA takedowns? by unyttigfjelltol on Wednesday June 21, 2023 @10:06PM (#36427195)
If the paralegal works for a lawyer, yes.
Re:Did I receive fraudulent DMCA takedowns? by slang800 on Wednesday June 21, 2023 @08:53PM (#36426788)
In this case the URLs contain valid IPFS hashes. The ones that I've tried all resolve to real files with the IPFS CLI.

The issue is they've never been requested from the gateway that the DMCA notices is being sent to. They might be blocked by the gateway, they might fail to resolve on the gateway for other reasons, or they might work. Nobody checked before sending the complaint.

Re:Did I receive fraudulent DMCA takedowns? by Libcat99 on Wednesday June 21, 2023 @11:30PM (#36427708)
You shouldn't have to reply with anything. Entities with no proof, due diligence, or process shouldn't be able to make you incur a cost (of discovery of compliance) just because they feel like it.

Sure, in this case, 30 minutes spent and done.

Recently I got a per capita tax bill for a town I didn't live in. They wanted payment for the last 8 years. I lived in a different town entirely (2 towns during the time in question).

When I filled out their form to contest it, they asked for deeds or leases for the duration to prove I didn't live there.

I told them I wouldn't provide such documentation without some proof to the fact I didn't live where I said I did. They responded to ignore the bill, it would be removed (which it was).

To me even the time I spent on this was excessive. In a just world, they'd be liable for my time. Entities, private or government, shouldn't be able to incur costs on our time and life due to their bullshit reasons or error.

Re:Did I receive fraudulent DMCA takedowns? by throwaway_ab on Thursday June 22, 2023 @12:00AM (#36427876)
If there were a law that stated the organisation (corp and gov) must reimburse people for their time wasted due to false accusations it would make a lot of these time wasters go away, when they know there is a consequence for these types of accusations they'd think twice.

I would support such a law.

Re:Did I receive fraudulent DMCA takedowns? by _nalply on Thursday June 22, 2023 @01:22AM (#36428271)
Then some people would misuse such a law to waste other people's time.
Re:Did I receive fraudulent DMCA takedowns? by tourmalinetaco on Thursday June 22, 2023 @01:57AM (#36428461)
And then they’d be liable for timewasting.
Re:Did I receive fraudulent DMCA takedowns? by ShadowBanThis01 on Thursday June 22, 2023 @02:13AM (#36428557)
Absolutely, and if there are legal remedies to make them pay... all victims should.

Too few people take stock of the fact that those who deliberately waste their time are stealing from them.

Re:Did I receive fraudulent DMCA takedowns? by _nalply on Thursday June 22, 2023 @06:53AM (#36430267)
It's all turtles all the way down
Re:Did I receive fraudulent DMCA takedowns? by survirtual on Thursday June 22, 2023 @06:50AM (#36430241)
I would support such a law as well.

Government and legal entities should be optimizing for people's time.

I believe it’s not only a matter of financial reimbursement but also respect and acknowledgement of an individual’s time, which is a non-renewable resource. Law like this would encourage organizations to be more careful and responsible, fostering a culture of respect and accountability.

Re:Did I receive fraudulent DMCA takedowns? by aosmith on Thursday June 22, 2023 @02:34AM (#36428681)
I'm pretty sure it's illegal to file false DMCA claims. If there's actually a lawyer involved contact the state bar association.
Re:Did I receive fraudulent DMCA takedowns? by Karunamon on Thursday June 22, 2023 @08:20AM (#36431007)
It is… But if and only if you can prove bad faith, which is basically impossible. There is no recourse to negligently sending DMCA claims.