Follow-up on SunnComm

(All via Prof. Felton’s Freedom to Tinker blog)

SunnComm’s president asserts in today’s Boston Globe that nothing in Alex Halderman’s report (noted yesterday) is surprising to them. BMG spokesperson Nathaniel Brown insists even they were completely aware of how trivial the new “protection” is to circumvent (to recap: press “shift” when you put in the CD). The Globe continued:

”There’s nothing in his report that’s surprising,” said SunnComm president Bill Whitmore. ”There’s nothing in the report that I’m concerned about.” Whitmore said his company’s system is simply supposed to give honest music lovers a legal way to make copies for personal use, not to stop large-scale piracy.

I suppose pointing out that we already have a legal way to make copies for personal use with perfectly normal CDs would be rude, huh? I’ll go ahead and say it anyway: making copies for personal use — say, to put on your iPod, or to use in your car — is perfectly legal. It’s called Fair Use, but the RIAA would like very much to make that go away.

Whitmore goes on to note that future versions of this protection will be harder to circumvent, since they will interact directly with the computer’s operating system, and that “the deployment of this mechanism will be throughout all operating systems.” Really, Bill? Even Linux and FreeBSD and Mac OS X? I doubt it.

A few things are worth noting here. First, I wonder if they’re deploying something so trivial to bypass simply because of the anti-circumvention clauses in the DMCA — i.e., as sort of an additional gotcha on top of the RIAA’s sue-kids-and-grandmothers strategy.

Second, you gotta wonder how much BMG paid for this absurdly trivial “copy protection” mechanism. I mean, c’mon, people; this is a bad joke. As Halderman points out, this isn’t some “dark secret of computer science.” Anyone with a brain can figure out how to bypass this “security.”

Finally, I want to point out that what he means when he says this tool will be integrated into your operating system, he means that future computers from Microsoft (and maybe others, but probably not) will include code specifically designed to STOP YOU from doing things that those computers can do now. Music files aren’t distinct from other files, nor are video files. Music files you make with a kazoo and a $5 microphone aren’t distinct from copies of the new OutKast CD. The flexibility of computing is that you an do anything you want to any of these files. DRM means, basically, removing that flexibility. This is why it’s unlikely that the programmers behind Linux and FreeBSD will support such schemes: removing flexibility is anathema to these people, and for good reason.

Food for thought.

The good news is that I’ll be more productive until April

Citing the theft (copying) of source code, Valve/Vivendi Universal has announced that Half Life 2 will be delayed another four months, to April ’04.

Why some miscreant copying their code delays them is left as an exercise to the reader, but smart money’s on “it doesn’t; they’re just nowhere near ready, and are gradually approaching Daikatana territory, and the code theft is good cover.” Still, the advance screen shots and gameplay demos have been awful damn impressive.

Why Windows gets all the viruses

If you haven’t noticed yet that 99% of those worms, trojan horses, and email viruses floating around target only ONE company’s software, you haven’t been paying attention. Virus writers write for Windows almost without exception. Microsoft would have us believe that this is an outgrowth of their market position — after all, what virus author wants to have his work limited to the few of us running something else?

Much as Bill might like that to be true, though, it’s not the whole story, or even most of if. The truth of it is that Mac OS X, Linux, and FreeBSD really are more secure, and are therefore drastically less attractive targets for virus writers. Security Focus’ Scott Granneman explains why in an article running at The Register. Worth a read, even if you’re not a geek like me.

Ripping This Is Illegal: The DMCA, Copy-Protection, and You

Professor Ed Felton’s Freedom to Tinker weblog is an excellent resource for those of us concerned about copyright, Digital Rights Management (DRM), and the survival of Fair Use. As I noted before, rightsholders were pretty successful in getting the DMCA passed 5 years ago; this law tilts the playing field drastically in favor of folks like the RIAA. Here’s a real-world example.

Big Music hates the idea that you can copy your CDs to your computer and share those files. Actually, they hate the idea that you can even copy the files to anything, since every copy you make, to them, represents a lost sale (a wholly false assertion, but never mind that for now). Consequently, they’ve been working for years to figure out a way to copy-protect their CDs so that digital reproduction is, if not impossible, then very restricted. These efforts have not met with much success; quite famously, one copy-protection method tauted as “the best ever” a year or so ago turned out to be circumventable with a green sharpie.

Well, they’re not giving up (notwithstanding the “success” the software industry has had with copy protection; many of you may remember what a PITA that was with the likes of Lotus and dBase 15 years ago). SunComm has released what they insist is the most secure anti-copying technology yet.

As it happens, Prof. Felton cites a paper today pointing out that you can probably circumvent it by holding down the shift key in Windows when you load the CD. (He’s citing this, which is an interesting read.)

The not-so-interesting part? Publishing this paper may well be a criminal violation of the DMCA, since it contains information on how to circumvent a copy protection scheme. Does this sound right to you? No? Well, that’s the DMCA for you. It doesn’t matter what you plan to DO with the copy — e.g., putting tracks from a CD you own on your iPod is just as bad as uploading them to a thousand college kids via Kazaa. All they’d care about is that you circumvented their copy protection, and that’s illegal — and criminal, not civil.

You just gotta love this

A while back, Dave Barry ran a column about the Do Not Call law controversy, and in that column he included the telephone number for the American Teleservices Association, a direct-marketing trade group lobbying and fighting to get the law overturned. The ATA was deluged with phone calls, which turned out to be very inconvenient for them (a shame, that); they’ve since changed their phone number.

Today, his column includes a recap of what-has-gone-before, and (ahem) the ATA’s new phone number (which, by the way, appears to be 317-816-9336). As Dave says, even though you have a right to call these people, they don’t want to hear from you, so calling them would be rude. I provide the phone number he listed as a point of data only.

Yeah, right.

If this is authentic, it’s scary as hell.

NPR may have edited a transcript to remove commentary about Justice giving the White House a day’s reprieve on the “preserve all evidence” order in re: the Plame affair. This is tantamount to a license to destroy evidence, and (if granted) came directly from Ashcroft.

The questions, then, are “Why did NPR do this, if they did?” and “When will we here more of this story, if ever?”

Google: Evil?

Google introduced an advertising program a while back that’s actually useful for small sites; lots of folks jumped on the badwagon quickly, and a few started making real money.

Then the ugliness started. Contrary to Google founder Segey Brin’s “Don’t Be Evil” edict, it looks an awful lot like Google’s gone to the dark side on this one. The Terms and Conditions are absurdly draconian, and allow them to boot you from the program based on pretty much anything, without providing any sort of evidence of violation beyond their say-so. They explicitly refuse to provide evidence of, say, “inappropriate clicks,” hiding instead behind a proprietary algorithm. It’s also against their T&C to discuss the terms and conditions, or anything else Google decides is “proprietary” — which includes your clickthrough rates and what you’ve been paid.

And the best part? If they shut you down, they don’t have to pay you anything they owe you.

Commentary:

Yet another reason not to use Internet Explorer

I mean, c’mon, people. You guys act like I don’t even look at my server logs.

There’s now a trojan horse that can infect Windows machines through banner ads, which will allow nefarious dorks to run malicious code on your computer. There are plenty of alternatives to Internet Explorer, even if you’re running Windows. Most of them are much, much better by any reasonable metric.

Mozilla is probably the top dog, though it comes in several flavors (a big honkin’ suite of programs, or a much more streamlined browser-only version called Firebird). If you’re on a Mac, do yourself a favor and use Safari. The good news is that virtually all non-IE browsers have built-in pop-up advertisement blockers, which can make your browsing experience much, much nicer.

Well, darn it.

It’s a shame that this lucid and fairly damning explication of SCO’s actions of late is, well, written by Joe Firmage.

Firmage was a Silicon Valley wunderkind of the first order; he founded two companies before he was thirty, and made a big pile of cash doing it. Then he started talking about UFOs and the capital-T Truth, and got essentially ushered out of USWeb. Don’t get me wrong; his points above are strong and clear, and everyone even vaguely curious about the SCO dustup should read it. I just see what McBride & co. might say, and I think the words “ravings of a crackpot” will probably be involved.

Dept. of Science vs. Politics

The Guardian is reporting that the White House censored and edited an EPA report on global warming so much as to completely undermine the scientists’ findings, apparently because “global warming” isn’t part of the GOP platform.

It’s a shame how things like science can get in the way of politics, isn’t it?

Dept. of Amusing Bits of History

In the days and weeks ahead, I suspect we’ll hear calls for an independent counsel to investigate the Wilson/Plame affair. I’m just as certain that the GOP will insist that such a thing is not needed, that we can trust Ashcroft and his existing criminal investigation, and that there’s no reason to worry.

When they say that — and they will — consider these quotes from GOP legislators concerning possible campaign fundraising law violations and the conflicts of interest involved in the Justice Department investigating a sitting president. Then consider which is the greater sin: campaign finance violations, or outing a covert operative of the CIA?

More on Wilson/Plame Affair

Slacktivist — a fine site worth visiting frequently — has a nice rundown of the Administration’s efforts since the weekend. His post title says it all: “Smear, smear again.” Smearing Wilson is just a bit difficult, though, since he has served Democratic and Republican administrations with distinction, and was singled out for praise by the other President Bush.

PATRIOT just keeps on giving

The Feds are invoking PATRIOT in letters to journalists insisting that they retain all their materials related to the Adrian Lamo hacking case (Lamo gained notoriety for breaking into companies’ systems, and then offering to help fix the holes he exploited; Lamo turned himself in on September 9). An FBI spokesman stated that “all reporters who spoke with Lamo” should expect such letters.

This flies in the face of traditional subpoena power, and in fact may well be in violation of the DOJ’s own guidelines, not to mention New York law. Of course, that those so notified aren’t allowed to tell disclose that they’ve been contacted, so these actions by the Feds are only now coming to light. The best part may well be that they’re using clauses of the Act designed to apply to ISPs and the like, not journalists (the specific language is apparently “providers of electronic communication”). More coverage here.

This, at least, is encouraging: CIA Requests DOJ Investigate White House

After a long conversation at dinner when I suggested there was little to be optimistic about in the current political landscape, I came home to discover that the CIA has asked the Justice Department to investigate the White House in the “let’s-blow-the-CIA-agent’s-cover” scandal I noted here months ago, and which the mainstream media essentially ignored. The CIA has no enforcment powers of its own, but it surely has done its own investigation or it wouldn’t be hassling Herr Ashcroft. Of course, emnity between the CIA and 1600 Pennsylvania is no secret; the spooks from Langley have been somewhat marginalized by the neocon “don’t bother us with the facts” worldview pervasive in the West Wing, and have resisted providing intelligence to support assumed conclusions (instead of, say, gathering intelligence and acting on what one discovers).

In case you’re confused, the precis is this: columnist Robert Novak named Valerie Plame as a covert CIA operative in his column, apparently tipped off by (unnamed) senior officials in the White House. This woman was the wife of Joseph Wilson, who was dispatched to Niger in 2002 to investigate reports that Iraq had tried to obtain uranium — and who discovered that, well, there was no real evidence that they had. Never mind that; of course; the administration used the Niger story as part of its smoke-and-mirrors cassus belli for invading Iraq. Wilson publically criticized the administration for using this dubious and ultimately unsupportable claim, and smart money says they outed Plame in retaliation, and the Post (see link below) even has a source saying so:

A senior administration official said two top White House officials called at least six Washington journalists and revealed the identity and occupation of Wilson’s wife. That was shortly after Wilson revealed in July that the CIA had sent him to Niger last year to look into the uranium claim and that he had found no evidence to back up the charge. Wilson’s account eventually touched off a controversy over Bush’s use of intelligence as he made the case for attacking Iraq.

In any case, Novak did indeed name her, and was apparently correct — the CIA has been doing damage control. Wilson himself said in an August 21 forum in Seattle that he believes White House adviser Karl Rove is the culprit, and that he’d like “to see whether or not we can get Karl Rove frog-marched out of the White House in handcuffs.”

The Talking Points Memo interview with Wilson is here (PDF link). TPM’s post on this is here, and is worth reading as well. More coverage:

Now: what happens next?

Must be a good day to die.

George Plimpton, famously the eponymous “Paper Lion,” but also a genuine giant of American letters, passed away at 76. He founded the highly respected Paris Review in 1953, and is famout — or infamous — for his contributions to “participatory journalism,” a school which we may probably blame for the aforementioned Dr. Thompson.

Today, too, singer Robert Palmer passed away, much younger at 54, of a heart attack. He had his largest success in the eighties, which is why I don’t need to explain aobut “Addicted to Love” or “Simply Irresistable,” or even the Power Station.

Dept. of Interesting Developments

On Wednesday, a panel of experts including a man named Dan Geer released a report strongly suggesting that our reliance on Microsoft is a danger to national security. These views are difficult to dispute; computing is dangerously close to monoculture — over ninety percent of corporate desktops are a single type of computer, right? — and the culture involved isn’t a terribly robust one (it seems every couple weeks, we have a new worm or virus to worry about [or, rather, you do; I’m MS-free {HDANCN}]). Recall what happened, for example, when Ireland relied primarily on a single strain of tuber.

Today, Dan Geer was fired from his position as CTO of @stake, a consulting firm with close ties to Microsoft. In a prepared statement, @Stake said “Participation in and release of the report was not sanctioned by @Stake. The values and opinions of the report are not in line with @Stake’s views.”

And dissent, of course, isn’t allowed. Especially of the “but he’s NAKED!” variety.

Dept. of Things I Didn’t Know

Viggo Mortensen and punk pioneer Exene Cervenka (1) were once married and (2) have a child together.

Someday, that kid’s gonna have the best show and tell story ever. “Yeah, my mom was in X, and my dad played Aragorn.”

Not Like This Is News or Anything

So Comcast sucks, of courses. It’s axiomatic: they’re a large cable company, ergo they suck. The Comcasts of the world are the reason I bought a DirecTV system as soon as I bought a house, and they’re the reason I’ll never consider using a cable company for my TV feed again.

Still, it’s fun to read somebody rant about them, especially when the specific area of suck — Comcast’s privacy policy — is so topical.

Here’s a Shocker.

The RIAA has been working overtime, what with suing a 12-year-old girl who lives in subsidized housing and everything, but they didn’t stop there.

They’ve actually tried to sue a 66 year old grandmother who doesn’t own a computer capable of USING Kazaa, and is confused by the whole idea of file sharing. No, she has no children or grandchildren who could’ve been using her connection. This means that an innocent woman had to get legal representation because of the RIAA’s hamfisted antics, and nobody has so much as apologized. In fact, the RIAA has reserved the right to bring action against her again. Beautiful, guys, just beautiful.

This Just In

A pack of marauding dogs have killed Dr. Hunter S. Thompson’s prized peacocks. Dr. Thompson’s reaction will doubtless be swift and savage: “Anything that kills four animals, four people or four of anything on my property is going to die one way or another.”

Just Great.

A Federal Court in Oklahoma has put a hold on the national telemarketing Do-Not-Call list. The ruling is a victory for the parasitic slime who brought the suit (the Direct Marketers Association), who presumably would prefer it if the 50 million folks who signed up for said list would just shut up and answer the phone. The FTC is expected to appeal the ruling, so there may be some hope yet.

More on Black Box Voting

Remember that story I noted yesterday, about the Diebold election machine problem? And how Bev Harris had unearthed company memos more or less admitting how wholly fscked the system is, and that they didn’t care? If not, go read it again; I’ll wait.

Bev Harris’ site is shut down today, courtesy of Diebold. This ought to tell you something, and it’s not something good.