piracy

5th-circuit-rules-isp-should-have-terminated-internet-users-accused-of-piracy

5th Circuit rules ISP should have terminated Internet users accused of piracy


ISP Grande loses appeal as 5th Circuit sides with Universal, Warner, and Sony.

Illustration of a laptop with the skull-and-crossbones pirate symbol on the screen.

Credit: Getty Images | natatravel

Music publishing companies notched another court victory against a broadband provider that refused to terminate the accounts of Internet users accused of piracy. In a ruling on Wednesday, the conservative-leaning US Court of Appeals for the 5th Circuit sided with the big three record labels against Grande Communications, a subsidiary of Astound Broadband.

The appeals court ordered a new trial on damages because it said the $46.8 million award was too high, but affirmed the lower court’s finding that Grande is liable for contributory copyright infringement.

“Here, Plaintiffs [Universal, Warner, and Sony] proved at trial that Grande knew (or was willfully blind to) the identities of its infringing subscribers based on Rightscorp’s notices, which informed Grande of specific IP addresses of subscribers engaging in infringing conduct. But Grande made the choice to continue providing services to them anyway, rather than taking simple measures to prevent infringement,” said the unanimous ruling by three judges.

Rightscorp is a copyright-enforcement company used by the music labels to detect copyright infringement. The company monitors torrent downloads to find users’ IP addresses and sends infringement notices to Internet providers that serve subscribers using those IP addresses.

“The evidence at trial demonstrated that Grande had a simple measure available to it to prevent further damages to copyrighted works (i.e., terminating repeat infringing subscribers), but that Grande never took it,” the 5th Circuit ruling said. “On appeal, Grande and its amici make a policy argument—that terminating Internet services is not a simple measure, but instead a ‘draconian overreaction’ that is a ‘drastic and overbroad remedy’—but a reasonable jury could, and did, find that Grande had basic measures, including termination, available to it. And because Grande does not dispute any of the evidence on which Plaintiffs relied to prove material contribution, there is no basis to conclude a reasonable jury lacked sufficient evidence to reach that conclusion.”

Grande’s pre-lawsuit policy: No terminations

The ruling described how Grande implemented a new policy on copyright infringement in 2010, a year after being purchased by a private equity firm:

Under Grande’s new policy, Grande no longer terminated subscribers for copyright infringement, no matter how many infringement notices Grande received. As Grande’s corporate representative at trial admitted, Grande “could have received a thousand notices about a customer, and it would not have terminated that customer for copyright infringement.”

Further, under Grande’s new policy, Grande did not take other remedial action to address infringing subscribers, such as suspending their accounts or requiring them to contact Grande to maintain their services. Instead, Grande would notify subscribers of copyright infringement complaints through letters that described the nature of the complaint and possible causes and advised that any infringing conduct is unlawful and should cease. Grande maintained that policy for nearly seven years, until May 2017.

The record labels sued Grande in April 2017. “It was not until after Plaintiffs initiated this lawsuit that Grande resumed terminating subscribers for copyright infringement,” the ruling said.

In November 2022, the labels were awarded $46,766,200 in statutory damages by a jury in US District Court for the Western District of Texas. But the District Court will have to hold a new damages trial following this week’s appeals court ruling.

Back in 2020, we wrote about the voir dire questions that record labels intended to ask prospective jurors in their case against Grande. One of those questions was, “Have you ever read or visited Ars Technica or TorrentFreak?”

Damages to be reduced

Although the 5th Circuit agreed that Grande is liable for contributory copyright infringement, judges found that the lower court “erred in granting JMOL [judgment as a matter of law] that each of the 1,403 songs in suit was eligible for a separate award of statutory damages.” The damages were $33,333 per song.

The 5th Circuit remanded the case to the district court for a new trial on damages. Record labels can expect a lower payout because the appeals court said they can’t obtain separate damages awards for multiple songs on the same album.

“The district court determined that each of Plaintiffs’ 1,403 sound recordings that was infringed entitled Plaintiffs to an individual statutory damages award,” the 5th Circuit said. “Grande contends that the text of the Copyright Act requires a different result: Whenever more than one of those recordings appeared on the same album, Plaintiffs are entitled to only one statutory damages award for that album, regardless of how many individual recordings from the album were infringed. Grande has the better reading of the text of the statute.”

The Copyright Act says that “all the parts of a compilation or derivative work constitute one work,” the court said. In the Grande case, record labels sought damages for each song but conceded that “each album constitutes a compilation.”

“In sum, the record evidence indicates that many of the works in suit are compilations (albums) comprising individual works (songs),” the 5th Circuit court wrote. “The statute unambiguously instructs that a compilation is eligible for only one statutory damage award, whether or not its constituent works are separately copyrightable.”

Larger battle could head to Supreme Court

The Grande case is part of a larger battle between ISPs and copyright holders. The industries are waiting to learn whether the Supreme Court will take up a challenge by cable firm Cox Communications, which wants to overturn a ruling in a similar copyright infringement lawsuit brought by Sony.

The US Court of Appeals for the 4th Circuit affirmed a jury’s finding that Cox was guilty of willful contributory infringement, though it also vacated a $1 billion damages award because it found that “Cox did not profit from its subscribers’ acts of infringement.” Cox and other ISPs argue that copyright-infringement notices sent on behalf of record labels aren’t reliable and that forcing ISPs to disconnect users based on unproven piracy accusations will cause great harm.

A Supreme Court brief filed by Altice USA, Frontier Communications, Lumen (aka CenturyLink), and Verizon said the 4th Circuit ruling “imperils the future of the Internet” by “expos[ing] Internet service providers to massive liability if they do not carry out mass Internet evictions.” Cutting off a subscriber’s service would hurt other residents in a home “who did not infringe and may have no connection to the infringer,” they wrote.

Cox told the Supreme Court that ISPs “have no way of verifying whether a bot-generated notice is accurate. And no one can reliably identify the actual individual who used a particular Internet connection for an illegal download. The ISP could connect the IP address to a particular subscriber’s account, but the subscriber in question might be a university or a conference center with thousands of individual users on its network, or a grandmother who unwittingly left her Internet connection open to the public. Thus, the subscriber is often not the infringer and may not even know about the infringement.”

Cox asked the Supreme Court to decide whether the 4th Circuit “err[ed] in holding that a service provider can be held liable for ‘materially contributing’ to copyright infringement merely because it knew that people were using certain accounts to infringe and did not terminate access, without proof that the service provider affirmatively fostered infringement or otherwise intended to promote it.”

Record labels also petitioned the Supreme Court because they want the original $1 billion verdict reinstated. Digital rights groups such as the Electronic Frontier Foundation (EFF) have backed Cox, saying that forcing ISPs to terminate subscribers accused of piracy “would result in innocent and vulnerable users losing essential Internet access.”

Photo of Jon Brodkin

Jon is a Senior IT Reporter for Ars Technica. He covers the telecom industry, Federal Communications Commission rulemakings, broadband consumer affairs, court cases, and government regulation of the tech industry.

5th Circuit rules ISP should have terminated Internet users accused of piracy Read More »

reddit-must-share-ip-addresses-of-piracy-discussing-users,-film-studios-say

Reddit must share IP addresses of piracy-discussing users, film studios say

A keyboard icon for piracy beside letter v and n

For the third time in less than a year, film studios with copyright infringement complaints against a cable Internet provider are trying to force Reddit to share information about users who have discussed piracy on the site.

In 2023, film companies lost two attempts to have Reddit unmask its users. In the first instance, US Magistrate Judge Laurel Beeler ruled in the US District Court for the Northern District of California that the First Amendment right to anonymous speech meant Reddit didn’t have to disclose the names, email addresses, and other account registration information for nine Reddit users. Film companies, including Bodyguard Productions and Millennium Media, had subpoenaed Reddit in relation to a copyright infringement lawsuit against Astound Broadband-owned RCN about subscribers allegedly pirating 34 movie titles, including Hellboy (2019), Rambo V: Last Blood, and Tesla.

In the second instance, the same companies sued Astound Broadband-owned ISP Grande, again for alleged copyright infringement occurring over the ISP’s network. The studios subpoenaed Reddit for user account information, including “IP address registration and logs from 1/1/2016 to present, name, email address, and other account registration information” for six Reddit users, per a July 2023 court filing.

In August, a federal court again quashed that subpoena, citing First Amendment rights. In her ruling, Beeler noted that while the First Amendment right to anonymous speech is not absolute, the film producers had already received the names of 118 Grande subscribers. She also said the film producers had failed to prove that “the identifying information is directly or materially relevant or unavailable from another source.”

Third piracy-related subpoena

This week, as reported by TorrentFreak, film companies Voltage Holdings, which are part of the previous two subpoenas, and Screen Media Ventures, another film studio with litigation against RCN, filed a motion to compel [PDF] Reddit to respond to the subpoena in the US District Court for the Northern District of California. The studios said they’re seeking the information concerning claims they’ve made that the “ability to pirate content efficiently without any consequences is a draw for becoming a Frontier subscriber” and that Frontier Communications “does not have an effective policy for terminating repeat infringers.” The film studios are claimants against Frontier in its bankruptcy case. The studios are represented by the same lawyers used in the two aforementioned cases.

The studios are asking that the court require Reddit to provide “IP address log information from 1/1/2017 to present” for six anonymous Reddit users who talked about piracy on Reddit. Although, Reddit posts shared in the court filing only date back to 2021.

Reddit responded to the studios’ subpoena with a letter [PDF] on January 2 stating that the subpoena “does not satisfy the First Amendment standard for disclosure of identifying information regarding an anonymous speaker.” Reddit also noted the two previously quashed subpoenas and suggested that it did not have to comply with the new request because the studios could acquire equivalent or better information elsewhere.

As with the previously mentioned litigation against ISPs, Reddit is a non-party. However, since the film companies claimed that Frontier had refused to produce customer identifying information and Reddit responded with a denial to the requests, the film companies filed their motion to compel.

The studios argue that the information requests do not implicate the First Amendment and that the rulings around the two aforementioned subpoenas are not applicable because the new subpoena is only about IP address logs and not other user-identifying information.

“The Reddit users do not have a recognized privacy interest in their IP addresses,” the motion says.

Reddit must share IP addresses of piracy-discussing users, film studios say Read More »

meta-releases-anti-piracy-tools-for-quest-devs,-including-hardware-based-app-bans-&-more

Meta Releases Anti-piracy Tools for Quest Devs, Including Hardware-based App Bans & More

Meta announced it’s introducing new anti-piracy measures for Quest developers that the company says will protect VR apps from “unauthorized modifications and potential security breaches.”

Called the Platform Integrity Attestation API (Attestation API), Meta says its new system is designed to detect whether an app’s server is interacting with an untampered VR device, thereby ensuring whether an app is authentic or not.

The Attestation API includes things like secure device authentication, hardware-based app bans, protection of financial and enterprise app data, prevention of external data misuse, and other anti-piracy measures.

In a developer blogpost, Meta calls it “increasingly important to instill a consistent method for validating the integrity of apps in order to provide a secure and safe user experience for everyone.”

It remains to be seen what effects this will have on modding communities, since modders for Quest games such as Beat Saber may inadvertently run afoul of the new token system at the core of the Attestation API.

“Once integrated, the API will provide you with an ‘attestation token,’ which you can use to determine if an app running on a Meta device has been tampered with,” Meta says. “This token is cryptographically signed by the Attestation Server to reinforce the security and reliability of the attestation process.”

At the time of this writing, we have not yet received a response for comment from Meta on what effects it may have on those communities. We’ll update this piece when/if we do.

Meta is allowing developers to opt-in now for their Quest apps, which spans Quest 2, Quest Pro, and the upcoming Quest 3, which is slated to launch in late 2023. Meta has published documentation for both Unity and Native.

Meta Releases Anti-piracy Tools for Quest Devs, Including Hardware-based App Bans & More Read More »