" /> Psycho Sensei: September 2009 Archives

« November 2008 | Main | October 2009 »

September 27, 2009

TPRC 2009: Copyright, DMCA and IPRs - Pamela Samuelson


Statutory Damages in Copyright Law: A Remedy in Need of Reform
Pamela Samuelson, University of California Berkeley, Tara Wheatland, Berkeley Center for Law & Technology

Tripartite structure of 1976; statutory damage awards in recent years have become sometimes grossly excessive, ignoring the initial statutory scheme. The paper articulates principles to make statutory damages better.

Some say the US has always had statutory damages, so they can’t be unconstitutional. But a 50-cent-per-sheet penalty from the Statute of Anne, 1790 Act, in copyright until 1909, was substantially different from today’s statutory damages. Explicitly penal, and thus narrowly interpreted; was a fixed fee, half going to the US government; rarely used because an equity court couldn’t grant, and plaintiffs usually wanted equity for an injunction and an accounting, which wasn’t available in a common-law court.

Legislative history of 1909 Act: considerable dissatisfaction with per-sheet penalty.

1909: For the first time, the law-equity split was ended—could get plaintiff’s lost profits plus defendant’s profits, plus injunction, costs and forfeiture, in one action. Statutory damages were created as an “in lieu” alternative to lost profits and defendant’s profits, notas a penalty. The goal was to compensate the plaintiff when damages/profits were difficult to prove. The perceived need for a penalty was broken off into a new criminal provision for willful infringement for profit. Caselaw: generally in keeping with compensatory goals. Courts would sometimes refuse to award statutory damages where actual damages were shown/approximated.

1976: New tripartite structure, creating a special rule for innocent infringement: could lower to $200 or even $0 nonprofit educational users. Ordinary infringement, $250 to $10,000 per infringed work. This was a change directed at making excessive awards less likely—per work, rather than per infringement. Didn’t foresee problems in modern era of multiple low-value works. Courts were expected to take actual damages into account in setting actual damages in cases of ordinary infringement. The reform that gave rise to the gravest modern problems: a new enhanced level of damages for willful infringement up to $50K. Congress expected that this award would only be available in exceptional cases like counterfeiting, not just every time someone should have known that a work was infringing.

Today, copyright owners who qualify can elect statutory damages any time before final judgment. 1909 Act: anyone could get statutory damages; 1976 Act: registration within three months of publication/before infringement began required. Means that major copyright owners are eligible, but not all victims of egregious infringement. The ordinary infringement minimum has now been raised to $750 and the maximum to $30,000; courts often treat ordinary infringement as willful, which goes up to $150,000. “Should have known” is now the standard, even where there were plausible, albeit unsuccessful, fair use and other defenses. This is inconsistent with what Congress intended. Courts haven’t developed a guiding jurisprudence. Congress expected courts to be the ones awarding statutory damages, but Feltnerheld that there was a right to a jury trial, and some of the worst awards come through juries.

Excessive awards: Jammie Thomas on 2 ndtrial, $80K per song: $1.92 million award. The jury was divided—some wanted to award $750 and others wanted to award larger sums, and they picked a number. Compare to $220K award in first trial, and $750 per song awarded by trial judges in 12 other music p2p cases. Also: $118 million Judge Rakoff was ready to award to mp3.com for its “beam-it” service, despite lack of actual damages to RIAA firms and lack of profits. Rakoff explicitly said he was doing so in order to deter mp3.com and also all those other people out there on the internet paying insufficient attention to copyright law. $19.7 million award against Legg Mason for photocopying articles form journals to which it subscribed, compared to $66K in actual damages. $1 million initial award in LA Times v. Free Republic, where a nonprofit conservative website posted news articles to show bias; eventually settled for $10K.

Other examples of arbitrary awards: $300K for posting two poems on a website, but $750 per work for Scientology texts. Peercases involving similar sound recording infringements—vastly different amounts per work.

Huge damage awards and their potential have real chilling effects on many different sectors: documentary filmmakers, tech innovators—where the per infringed work rule leads to grossly excessive awards because each song that might be processed is potentially a new award. Google Book Search: another example where the exposure Google faced for scanning 8 million books is quite substantial.

Principles for courts: award the minimum when there’s no damage to plaintiff or profits to defendants, or when the plaintiff is unwilling to show approximate evidence of harm. Approximate actual damages when there was a plausible fair use or other defense. 2-3x actual damages/profits when reclkless or intentional or some other reprehensibility. 10x if highly willful. Wouldn’t need constitutional jurisprudence if we had these principles.

However, as things are, due process issues arise. When awards are grossly excessive, they violate due process under BMW v. Gore. Juries in particular may be insufficiently constrained, requiring de novo review. Don’t punish this defendant for the wrongs to other parties who are strangers to the litigation. Three guideposts: reprehensibility of defendant’s conduct—some are worse than others in copyright as in tort law. Higher ratios are ok when the conduct is more reprehensible. Disparity between the harm to the plaintiff and the punitive award—few awards exceeding a single digit ratio will satisfy due process. Ben Sheffner thinks this guidepost shouldn’t apply in copyright, but she thinks that approximating actual damages is generally possible. Third: comparison of award to ordinary civil penalties, which is a little more troublesome. Part of what we should look at is other awards for similar kinds of infringement.

Two district court cases have rejected the idea that BMWapplies to statutory damages, but she disagrees. Part of the reason: courts increasingly talk about statutory damages for willful infringement as punitive, which makes due process review appropriate even when there are statutory caps.

We need statutory reform as well as judicial action. The problem is the melding of compensatory/moderately deterrent functions and the penal function. Canada has statutory damages, but only for ordinary infringement and only where actual damages are hard to prove, and then there’s a separate punitive award for exemplary purposes. Consider patent or TM-like awards of up to 3x damages as an alternative to statutory damages. The US is the only country with this whacked a statutory damages regime. Out of 120 WIPO countries, less than 20 have a statutory damages award scheme at all, and most of those were forced to do so by US FTA agreements.

Undue Process: Challenges for Rightsholders and Service Providers in Implementing Section 512’s Notice and Takedown Provisions
Jennifer Urban, Laura Quilter

Empirical perspective on the DMCA, which can give insight into other proposals, for example to modify §230 to provide DMCA-like procedures. For this paper, they looked at a random sample of 451 §512 notices from The Planet, a hosting service provider in Texas, out of a set of 6366 from 2004-2007. They coded the set for parties, dates, claims, DMCA section, etc.

The Google dataset from their first paper mostly concerned search, as you’d expect: people were using the takedown to get things out of search indexes—competitors trying to change search rank. The Planet was a more standard ISP at the heart of the DMCA’s concerns about hosting.

Providers of connectivity got a straight safe harbor from infringement under §512(a) in 1998. In 1999, Napster showed up. The DMCA presumed that infringing content was hosted, but the major copyright owners quickly grew concerned over p2p, which is a transitory network communication for the ISP subject to §512(a). So what happened? Connectivity providers say: large copyright holders responded by sending takedown notices anyway and telling the ISPs that they needed to terminate repeat infringers’ access entirely. Research question: is that happening? Answer: 21% of their dataset, an extra burden on ISPs.

As expected, the people who send 512(a) notices tend to be large copyright industry players. Over 90% sent by third parties—BayTSP and other p2p focused contractors/rights enforcement agencies, trade associations, and others. Tend to be small shops, but they send a ton of notices. Though courts haven’t bought this, copyright owners argue that ISPs are obligated to investigate and terminate users.

Third parties send a lot of notices overall—55% of the sample. Range of techniques. A lot are well done, but their investigations aren’t always accurate—identifying IP addresses that aren’t on the Planet’s network, etc.

Who sends 512(c) notices? The third parties; large industries—shows that there were still a bunch of allegedly infringing files beinghosted , not just shared p2p, so 512(c) is providing a benefit to copyright owners.

Qualitatively, how are people dealing with this complex statute—is it really cheap and easy? Apparent: the complexity of the statute and the underlying law was a real challenge. The Planet’s information about 512 is pretty clear to a lawyer, but to a nonlawyer it’s not. 20% of notices were returned with “does not substantially comply” notes. That doesn’t include a substantive evaluation of whether the claim sounds in copyright or anything else, just the statutory information: did you identify the copyright owner, the location of the material, etc.? (16% of notices were bounced when you excluded one particularly troubled and active copyright agent.) So this doesn’t include the problematic §512(a) notices—combined, that’s a pretty good chunk of activity.

Example: someone trying very hard to comply with the statute, but can’t figure out what he’s doing wrong; The Planet’s standard reply is that the notice is deficient and the complainant should visit their website. He says he’s done so and asks, angrily/plaintively, what he’s done wrong, but they just refer him back to the website. The authors think he probably just gave up.

Some people who seemed to have real claims were just unable to comply—misunderstood the DMCA. People were really bewildered.

They also got anonymous tipsters and people complaining about non-copyright content (game cheats, trademark, product keys), or people invoking non-US law. Some senders may have been confused, but some may also have been using §512 more strategically. Why not try to fit things into copyright if it means you can easily get what you need? Examples: unauthorized product resellers (Sony claimed copyright in photos of the products); game cheats (game companies complaining about gold farming, which implicates TM and contract but not copyright).

Conclusion: 512(c) remains useful for a wide range of copyright holders, but the senders also have trouble complying/understanding, which causes various problems—chaff for the ISP. These and 512(a) notices impose a genuine cost on ISP, though it’s hard to gauge how problematic this is. The greater risk: to targets. Different ISPs have different reactions—what they do in response to 512(a) notices may vary, and the authors feel that disabling internet access is a disproportionate response. Latest attempts: more draconian, three-strikes law like that passed in France. More moves towards filtering, too.

We need to understand more about rights enforcement agents and trade associations, prominent senders with incentives to find infringement and show results.

Reaffirm other recommendations: mostly tweaks to build back due process, like don’t do a takedown until the target has a chance to respond. Modest calls to help copyright owners who are having trouble using the statute—the Copyright Office or someone else should create educational materials on using the statute appropriately. Part of what makes §512 hard to understand is that it’s private, so more transparency would also help. Notices should be public. Also suggest caution before replacing §230 with notice and takedown—we see so much chaff with the wheat, and notice/takedown lacks any substantive/judicial-type review.

My reaction: The paper argues that copyright is one of the few claims where ISPs are actually required to take action to avoid liability, since so much is protected by §230, so there’s an incentive to send DMCA claims regardless of whether the conduct at issue is actually copyright infringement. This doesn’t entirely explain why lawyers would use the DMCA for trademark claims, where secondary liabilitywould apply. Lack of familiarity with IP law or the hope that the ISP will just go along, coupled with uncertainty over whether the ISP would actually be secondarily liable for trademark infringement under the governing standards, could explain more of why all IP claims are funneled into DMCA notices.

A: TM private ordering: ISPs are beginning to follow similar procedures to the DMCA—eBay has essentially notice and takedown for TM. Sometimes people send mixed claims—copyright and TM together. But the ISP procedure tends to be copyright-based.

Incentives to Lead, Follow, or Compete: Comparative National Choices of International Copyright

Michael Yuan, Roger Williams University

England led with the Statute of Anne in 1709; US followed with the Copyright Act in 1790. Berne Convention led in 1886; the US followed in 1976 and 1988. The EU led in 1993 by extending duration for 20 years; the US ultimately followed.

When do countries have the incentive to lead or follow? Is this system a good idea?

Results of paper: it is desirable to have a lead-follow model except when the economic life of information goods in the leading country’s market is very short. But this is an unlikely case because the leading country is unlikely to act. In the ordinary case, not everyone is likely to follow—small countries can improve welfare by not following and free-riding—and that can be bad.

Model: two countries, each with a creative industry that competes domestically and internationally. Each creator decides pricing and volume of market participation. Each market provides national treatment to foreign works. In the lead-follow market, a leading country sets policy to maximize local welfare, and expects that follower will peg its copyright policy on the leader. In the competitive model, by contrast, countries act separately to maximize individual national welfare. There may be a need to incentivize small countries to lead/follow and to induce countries with short economic lives for information products to follow.

Question for Samuelson: how do you measure damages?

A: It’s clear, in general, that when a defendant sells items, there are lost profits/sales—compensating plaintiff for lost sales/lost license fees makes sense. Defendant’s profits are more about deterring infringement, but also often has a compensatory effect. People who don’t promptly register can have trouble getting enough of an award to cover costs, but costs are also an available remedy. We have statutory damages to make a small lawsuit possible—e.g., a photographer whose usual reproduction fee is $150. $750 can make detecting infringement/bringing a suit worthwhile. The legislative history suggests that one purpose is to make it possible to sue, but that’s more evident in 1909 because ordinary copyright owners who don’t promptly file, and most don’t, are ineligible now—wrong design.

Q for Urban: How often does the recipient counternotify? How often then does the notice-giver file/not file suit?

A: For Google’s search notices, the ISP doesn’t have to and can’t notify the target (no service relationship); Google said it essentially never got counternotification. Quilter: ISPs say they don’t get many. Didn’t see any in the study. The Planet gave them all correspondence attached to the original notice, but not the correspondence to the alleged infringer. We think that if they had gotten counternotices, we might not have picked them up, but we should have seen at least some of them in correspondence with the sender. We think people don’t know they can counternotify, and they might just give up. Lawsuit: another unknown, but sense is that it’s uncommon.

Q: Are there risks to the counternotice that might not be present under §512(f)?

A: §512(f) allows suit against knowing and material misrepresentations in the chain; people may be dissuaded, but the standard for liability is so high that it’s unlikely that anyone who understood this would have their decisions affected. (Understanding, of course, is precisely the problem the authors have identified in the study. Laypeople are really scared to claim rights because of all the legal and lawsuit-based language that accompanies a notice; I’ve seen this with YouTube users.)

Kathy Strandberg for Yuan: In your model, the cost of creation is independent of the length of protection—so that doesn’t take into account the effect of bigger rights on cost of creation, right?

A: Right.

[From TPRC 2009: Copyright, DMCA and IPRs]

September 26, 2009

"Don't trust anyone you meet online. You could regret it." - Wil Wheton's Blog

8420_165904241417_571726417_4022515_1327875_n

(from Cory Doctorow by way of John Rogers on Twitter)

[From "Don't trust anyone you meet online. You could regret it."]

AT&T Falls Back on "It's All About Google" Strategy

For some years now, the opponents of Network Neutrality have had the same basic fallback strategy: When all else fails, make it about Google. So no surprise that AT&T, in a letter supposedly about the rather technical issue of “traffic pumping” opens with an attack on Google and Net Neutrality. Because if we have learned anything from our national healthcare debate, it is that it is more important to make this about how awful the other side is rather than debate the merits.

To clarify what is actually going on for those just tuning in. First, read this excellent summary of what “traffic pumping” is by Jonathan Lee.

read more

[From AT&T Falls Back on "It's All About Google" Strategy]

Who needs Dr. Phil?

Category: Entertainment
Released: Aug 25, 2009
Price: $0.99

Description:
Do you find yourself wondering if you should dump him? Are you questioning whether you should end the relationship? Should Dump Him? is a fun tool that aids your decision making process. It helps you clearly identify and rate the PROs and CONs of a decision and the probability of each. And then instantly supplies you with a decision based on your input. It is not scientific, but rather a great way to itemize and subjectively rate what is important to you so a decision is made with less emotion and more thoughtful reasoning. Should Dump Him? provides you with a starter list of PROs and CONs to get you going, but then you can add others and rate their importance. Once you are ready, you press a button and the answer displays. You can play it over and over changing the PROs and CONs and their level of importance and probability. Get an answer today to that all important question, Should I Dump Him?

Website: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=329083837&mt=8
Support Website: http://www.shouldinc.com [From Should I Dump Him?]

September 24, 2009

Remix, Rights and Removal

And, of course, this kind of crap has caught the Psycho Sensei on many occasions, for using music in a totally FAIR USE manner on YouTube. Regardless of the use, they automatically take it down because of DMCA bullies.   

Video remixers are on the front lines of the battle between new media technologies and impeding copyright laws that threatens to obstruct the public space for popular culture critique. Public spaces such as YouTube are teeming with meticulously crafted and articulate video remixes that make powerful arguments, deconstructing social myths and challenging dominant media messages. These remixes reflect the participatory nature of both pop and remix cultures, but their future is in jeopardy due to corporate claims of copyright infringement, DMCA takedown notices and an inability to distinguish between an illegal use of proprietary content and a fair use of one.

read more

[From Remix, Rights and Removal]

There's an App for that....

Now life is complete!

Category: Education
Released: Sep 09, 2009
Price: Free

Description:
Want to talk to that cute Japanese exchange student from class, but feeling self-conscious of your own Japanese speaking skills? Don't let the language barrier block you from meeting new, interesting and sexy people! Whether you're a Japanese speaking hotshot or don't know the difference between gari and geisha, take your Japanese socializing skills one step further with the Japanese Pickup Lines interactive language tutor, from the makers of Japanese for Beginners and Crazy Japanese! Master the sensual side of the Japanese language the fast and easy way with this awesome free language tutor! Our sexy audio guide teaches you how by reciting a number of Japanese social icebreakers and other conversation starters-- helping you make the ultimate first impression with the Sailor Moon-watching cutie or the Pachinko-playing stud. Just some of the awesome things you will be able to do: Impress that cute girl who sits behind you in Japanese class. Engage in conversation with others over teppenyaki or shabu-shabu Become popular with the local anime club. Introduce yourself to the hot Japanese bartender in the club or game hall. Find true love with a Japanese geisha. So leave your Japanese dictionary in the desk. Forget about that crappy translation website that messes up even the simplest of phrases. All you do is shake and one of several insane Japanese phrases will appear on screen with an accompanying vocal cue. Shake, listen, recite, repeat. It's so easy, you'd think you're standing in a bustling Japanese metropolis such as Tokyo or Osaka right now! And best of all: it's entirely free!

Website: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=329824475&mt=8
Support Website: http://www.hostflare.com/support/ [From Japanese Pickup Lines]

September 22, 2009

Apple Battles Entrepreneur Over ‘Pod’ Trademark | Gadget Lab | Wired.com

RSS Feeds Apple Battles Entrepreneur Over ‘Pod’ Trademark By Brian X. Chen September 22, 2009 | 3:52 pm | Categories: Media Players We assure ourselves that words will never hurt us, but they can cost a lot of time and money when it comes to trademark battles. Take the story of Daniel Kokin, who is continuing to fight Apple over a three-letter word: Pod. Not iPod, mind you — just “Pod.” For nine years, Kokin has been developing a video projector, whose body design he feels is best described as a pod. His “Video Pod” projector would display video from a DVD player and other multimedia equipment, but not an iPod. In 2007, Apple filed an opposition blocking Kokin’s registration of the Video Pod trademark with the United States Patent and Trademark Office, and Kokin (pictured right) decided not to back down. Thus far his efforts are paying off: USPTO recently denied Apple’s motion for summary judgment, meaning the two parties must finish this battle in court in front of [From Apple Battles Entrepreneur Over ‘Pod’ Trademark | Gadget Lab | Wired.com]

$9.5 Million Facebook Settlement Will Set Up Online Privacy Foundation

Facebook users angered about Beacon, a service that broadcasts users' transactions with partner Web sites, have settled their class action suit claiming Beacon disclosed personal information for advertising purposes without their consent. As part of the deal, Facebook has agreed to terminate Beacon. In addition, Facebook pledged to pay $9.5 million to set up a foundation devoted to studying online privacy, according to court records. [From $9.5 Million Facebook Settlement Will Set Up Online Privacy Foundation]

SEC Will Go to Trial Against BofA Over Bonuses

The Securities and Exchange Commission said Monday it will go to trial against Bank of America Corp. over bonuses at Merrill Lynch, opening the possibility of also bringing charges against bank executives, a week after a judge's stinging rejection of a $33 million settlement of the case. Despite its decision to go to trial in the case, the SEC noted in a statement issued Monday night, "We firmly believe that the settlement we submitted to the court was reasonable, appropriate and in the public interest." [From SEC Will Go to Trial Against BofA Over Bonuses]

MP3 player in an old training-grenade

The NYC Resistor hackers have installed an MP3 player in a decommissioned training hand-grenade, because they could, and because it is the kind of deliciously bad idea that is hard to resist. Receipt of the grenade in its shipping box occasioned something of a stir at NYC Resistor, it appears.

There was much fear and freak out. But cooler heads prevailed and a phone call was made. "Hey Matt, did you order metal objects of a dubious nature?" "Yes, yes I did." There was a great deal of internal strife over this particular event as ordering munitions to the space is strictly forbidden. Upon review and discussion it was decided that while purchasing decommissioned training grenades was not in fact illegal in NYC (as far as we know), it was not something we would ever do again. That being said. I immediately set forth on a childhood dream project. I put an 1/8th inch jack into the pin hole for the gr3nade. It looked GOOD. Totally flush... very pretty. So I decided to run with it. I ran the cabling into the gr3nade... hacksawed it open. Inserted a Sansa 2 GB mp3 player. And then tried to SMD rework it. This ended poorly as the first sansa basically got burned by the rework station and died. The second I avoided using the rework station and instead recruited bre and his arms for a session of intense soldering onto very tiny solder points.
mp3 grenade in it's final design glory (via Make)

September 21, 2009

FCC to Propose Net Neutrality Rules

FCC to Propose Net Neutrality Rules:


New FCC Chairman Julius Genachowski threw down the network neutrality gauntlet in a speech today [PDF] [HTML] at the Brookings Institution, announcing his intention to start a formal process that would result in adoption of binding regulations. [There is good news and blog coverage from AP, Wired, and Washington Post.] His proposal would turn the FCC’s existing advisory guidelines, known somewhat ridiculously as the “Four Freedoms” (begging unflattering comparison with a much more significant quartet) into rules governed by six principles. Quick statements of support from two other commissioners, longtime net neutrality supporter Michael Copps and new member Mignon Clyburn, demonstrated that Genachowski has the three out of five votes he needs to prevail.


The two additional principles are extremely important aspects of the plan. First, a “nondiscrimination” principle would embody the heart of the concerns expressed by activists for free speech and end-to-end openness who warned that providers would begin to offer preferential treatment to some content based on the identity of the sender, either to extract fees for high-speed delivery or to block competition. Second, a “transparency” principle addresses the concern I’ve always expressed: consumers and regulators can’t find out about ISPs’ traffic-shaping. As if the formal rule and the new principles weren’t enough, Genachowski also said he would apply the new regime to wireless as well as broadband carriers.


This will be a major fight, probably the most significant battle we have seen within the federal government over the structure of the internet.


A few other observations after the jump:


Language: Genachowski appears to avoid the language of “network neutrality.” He prefers to talk about a “free and open internet.” I don’t think it means much substantively, but it suggests he is thinking carefully about how to present these complex ideas to the wider public.


Characterizing Supporters: The story was leaked in advance to the New York Times, Washington Post, and Wall Street Journal, which all run stories over the weekend. I could not help but notice that the Journal cast the entire debate in terms of telecoms (like AT&T or Verizon) against content providers (like Google or Amazon), making no mention whatsoever of the grass roots citizen activism on the issue. The Times, meanwhile, did just the opposite, painting the dispute only as a corporate vs. consumer one without ever noting the interest of big content providers in getting federal regulation of internet access. Both portraits are grossly inaccurate, of course.


The Need for Action: Genachowski strongly refuted the argument often made by telecoms that there are not serious access problems (yet) so action on network neutrality is premature. He said:


Saying nothing — and doing nothing — would impose its own form of unacceptable cost. It would deprive innovators and investors of confidence that the free and open Internet we depend upon today will still be here tomorrow. It would deny the benefits of predictable rules of the road to all players in the Internet ecosystem. And it would be a dangerous retreat from the core principle of openness — the freedom to innovate without permission — that has been a hallmark of the Internet since its inception, and has made it so stunningly successful as a platform for innovation, opportunity, and prosperity.


Details, details: Boy oh boy is the devil in the details on this one! There are so many questions about implementation. For example, under the plan the FCC would evaluate cases under the nondiscrimination principle on a case-by-case basis, so we may not know precisely what’s allowed for a long time to come. Also, there would continue to be “reasonable” exceptions to allow for network management, but how much scope would wireless broadband providers have to constrain bandwidth-hogging applications, especially at peak times? And Eric Goldman just tweeted about the tension between network neutrality and Section 230 immunity. And those are just the first ones that come to mind. This is going to be a doozy…



September 20, 2009

NTSB's Hudson Midair Animation Lacking Key Details?

NTSB's Hudson Midair Animation Lacking Key Details?:


NTSB Chairman Deborah Hersman last week spoke before the Subcommittee on Aviation in the U.S. House of Representatives and stated that the pilot of the Piper involved in the fatal midair with a Eurocopter over the Hudson this August may have transferred to the wrong frequency. Hersman told the Subcommittee that the pilot acknowledged the Teterboro controller's last instruction to pick up Newark, but that "the pilot read back to the controller an incorrect frequency." There is no indication, according to Hersman, "that the incorrect read-back was heard or corrected by any air traffic controller." Matched with the NTSB animation released the same day, the read-back occurred while the lone working Teterboro controller was also engaged with what the NTSB identifies as a "personal phone call" and other audible radio communications from a controller at Newark. However, from the NTSB's animation alone, it is not at all clear that the read-back was incorrect or even complete. (See minute 2:25 of the video.) The animation does, however, include transcription of some communications that are not audible in the presentation.

September 19, 2009

Legal Technology - iPhone Train App Stopped in Its Tracks

Legal Technology - iPhone Train App Stopped in Its Tracks:


The idea was born out of necessity.

Greenwich, Conn., software developer Chris Schoenfeld was working irregular hours in New York City and needed access to updated Metro-North commuter train schedules for Grand Central Station. He couldn't access those schedules as he rode the subway to the train station because of lack of Internet access.

So he developed a software program for Apple's iPhone, which allows people to access train information without an Internet connection. "I developed the application for myself, and I knew others would appreciate it," Schoenfeld said.

Last October, Apple launched the application as StationStops.com, which is tied to Schoenfeld's blog of the same name. That's when the quasi-public Metropolitan Transportation Authority, which owns the Metro-North Railroad, came calling.

Several months of discussions about licensing agreements followed with no resolution, and MTA's in-house legal team claimed that Schoenfeld was infringing "upon MTA's statutory and common law intellectual property rights," according to cease-and-desist letters sent to Schoenfeld and Apple.

Apple disabled the application in late August.

This plant isn't dope, you dopes

This plant isn't dope, you dopes:


Fri, September 18, 2009



By JOE BELANGER, LONDON FREE PRESS

It may look like wacky tobacky, but the only kick you’ll get off this bud is sick.

Stratford Police have issued a public alert after reports of people – “adults and youth” – helping themselves to a crop of commercial hemp that looks like marijuana but instead of delivering a high can make users “violently ill” with severe headaches, nausea and vomiting.



The crop, located just south of the Festival Marketplace Mall off C.H Meier Blvd., has become the target of thieves, police say.



“People, both adults and youth, have been going onto the property and stealing the crop, thinking it is marijuana,” said Insp. Sam Theocharis.”



“Our biggest concern is from a public-safety standpoint. Hemp is not meant for ingestion and the user will become violently ill and may very well require hospital care.”

So, where has Psycho Sensei Been?

Well well, where have I been all this time? As is normal for me, I've been running in 20 ways at once. Due to economic circumstances, I've gone back to work and have spent the past 10 months at Oracle as a Senior Contracts Manager. Darling husband still doesn't have a job, which is annoying. Meantime, I'm "Recalcitranttoy" on Live Journal, which I may change to Psycho Sensei or something close, we'll see. I'm also on Facebook. Both of these make it relatively easy to keep a running diary of the state of the universe. However, I figured that I also could keep these lovely blogs going because... I mean why not?

So, as I find the time and find interesting articles of fun, I will post them. I will also consider cross posting my other fun stuff from Live Journal, etc. And so there it is...a vengence on it :-)

My take on Macintosh security - Gaige Paulsen

My take on Macintosh security:


Ah, a new release.... must be time for another slew of articles aimed at getting press and money for the "security" folks out there. For those of us with Macintoshes, here is my take on the whole Macintosh virus situation.
Every time a new OS release comes out, a whole mess of security "professionals", especially those with recent books (such as Miller's The Mac Hacker's Handbook), are being interviewed by every Tom, Dick, and Harry, and repeat the same drivel that we've been hearing about Macintosh security for years, which basically amounts to:

Oh yeah? Well, if more Macintoshes were sold, then there'd be a lot more viruses for the Mac, I tell you.... just you wait!

Now, it may well be true that if there were more Macs out there, there would be more reason to go after the Macintosh and it would tend to lead people to write more viruses for them. It may also not be true, and I've never seen any indications that there is a statistical basis for this complaint.

However, let's take for the moment that it's a possibility and start looking at the kinds of exploits that tend to show up for the Macintosh in these articles. Generally speaking, and I'm not going to cite individual articles here because I haven't done a complete statistical analysis of them, the kinds of exploits that show up for the Macintosh are trojan horses, a class of malicious software that the user downloads and runs or installs. Once you've done that, you're open to a number of potential problems, including the stealing of data and the deletion of files that are not protected.

There are 2 key take-aways about trojan horses on the Mac: first, they are not the same as viruses; and second, they are limited in what they can do to your system unless you give them power. Now, this part in bold is important. If you download a questionable piece of software from the Internet (or any software for that matter, since most really don't need this facility) and the software prompts you for a password to your system during the installation process, you should be seriously considering saying "no". If you say yes, you do not have any granular control of what it might do to your system, as you have provided it with escalated privileges to access all data and services on your Macintosh.

Here are a few other things that make a big difference to Macintosh users: no in-the-wild viruses. There are basically no programs that exist today that can infect Macintoshes without the user taking specific action (opening a program in particular). Through the use of Quarantine, which has been around since Leopard, Apple tries to warn you the first time you open a piece of software, telling you where it was downloaded from asking you if you're sure you want to run it. It only happens the first time you run each program, so it doesn't provide an overwhelming number of "are you sure" dialogs.

Once you install a program on one Macintosh, the liklihood of it spreading virally (without you or the user of the computer specifically starting the program in question) is really, really low. I say really, really low, because there were some programs that managed this feat before Leopard due to hiding executables in what looked like data files. However, quarantine makes that virtually impossible these days.

Most importantly, the kinds of worms that have infected Windows and other systems over the years (a worm being a particularly viscious type of malware that makes its entrance behind the scenes, infects the computer and uses it as a jumping off place to infect more), have been almost absent from the Mac (there was a report of one in 2006/2007 using Bonjour as a vector, but that was patched by Apple on all affected systems and the worm appeared to only show up after that problem was disclosed).

People can argue until their blue in the face about why Macs tend to have a lot less trouble than PCs. Frankly, the amount of open administrative software that lies on (especially older) Windows machines is a good portion of the problem here. For years, Windows 2000 and other versions had the ability for network administrators to broadcast a message to every user on a network that was then displayed on their screens. This was a horrible idea, since it had absolutely no security whatsoever involved in it and basically allowed anyone with knowledge of your network address to send a message to your screen that popped up as if it were from the OS. To make matters worse, there were security problems with the program that put up the window and they were exploited to deliver worms and other viruses on the Windows platform. This is not an isolated case, either.

Architecturally, there's definitely more that Apple can do about security on the Macintosh and I hope that we continue to see the kind of sandboxing that is being used by Apple on the iPhone slowly creep its way into the Mac. By using this judiciously, they could keep only authorized programs from doing things on the system and they could make a much better permissions model for the otherwise-dangerously all or nothing approach that the installers tend to take these days. I'd love to see something along the lines of an installation dialog for VMWare (as an example) that requests permission to "add kernel extensions and startup items" and then have the OS grant just permissions to install items in those places. More importantly, for programs that use the installer just to put things into special locations, such a scheme could prevent them from doing other things behind the scenes (like installing kernel extensions) without your knowledge. I know I'd think twice if a graphics program requested permission to install a kernel extension.

But, for the time being, the Macintosh is a pretty safe platform, as long as users are vigilant. Keep up to date on your software updates and don't run programs with questionable pedigrees.

NOTE: Today's Wired article pretty much caused this article to be written. I have to say that you must admire a magazine that continues such superlative reporting as telling us that "In Snow Leopard, Apple has added security enhancements including Executive Disable"... executive disable? Sounds like something you'd use in a bad movie to remove your competition, did you mean Execute Disable (XD), a technology that's been around for years and was one of the most touted security features of the last 3 generations of processors? Oh, you know, that whole accuracy thing isn't important. Wonder how well you did on the other facts? Probably about the same, interview a couple of guys who are shilling a book and reprint their stuff as well as whatever you can find in a quick Google search. No offense to Google. For more humor, the next line: "Apple also added hardware-enforced Data Execution Prevention" is basically a reference to the Exact Same Technology. Curiously, Apple's only technology mention is of "hardware-based execute disable for heap memory", which I'll note doesn't mention disabling executives at all!