February 2004 - cypherpunks-legacy

The EFF Offers a Better Way Forward on File Sharing
by An Metet 26 Feb '04

26 Feb '04

Invisiblog is a service which uses anonymous remailers and gpg-signed messages to allow bloggers to make their contributions anonymously. The following essay is taken from the Unlimited Freedom blog: http://invisiblog.com/1c801df4aee49232/article/6241d2ffded8876b97cd140c6e48… . It discusses the EFF white paper on file sharing at: http://www.eff.org/share/collective_lic_wp.php . Thanks to Derek Slater for his pointer to an interesting new proposal for handling music file sharing. I've criticized the EFF in the past, but their new white paper is definitely worth a read. "A Better Way Forward: Voluntary Collective Licensing of Music File Sharing" has some great ideas and would be a terrific solution to the file sharing problem if it could be made to work. I do see some problems, but perhaps they can be solved, and in any case the concept looks highly promising. Voluntary Collective Licensing (VCL), as the EFF explains, is the system used by radio broadcasters and other public performers to compensate the music copyright owners. The broadcasters pay a fee to ASCAP and other collection societies to gain the rights to play the music; ASCAP then divides it up and pays it out to the artists. Having just a few collective organizations like ASCAP makes it easy for the radio broadcasters to license all the music they play. The same idea in the P2P world would mean that users would pay a fixed fee to the VCL agency, which the EFF suggests might be a modest five dollars a month. This would then give them the rights to freely download and share all the songs belonging to the artists (or record companies) which had joined the VCL collective. The fees would be divided among the artists using a combination of something like Nielsen ratings plus monitoring public file sharing activity. Users would be free of the threat of lawsuits or of the record companies using the various technical countermeasures which are continually being developed and deployed. And the record companies would be making money from the P2P filesharing phenomenon which shows no sign of stopping. My initial reaction to this proposal doesn't even need to get past the first word. It's voluntary? I'm for it. Look up at the top of this blog and you see what I'm about. Voluntary arrangements are the essence of freedom as I see it. This is why I support trusted computing and DRM, as well as encryption and anonymity. All of these are technologies which people can use voluntarily to interact with each other in new and powerful ways. Giving people access to the maximal set of options in their lives is part of what I call Unlimited Freedom. And the EFF proposal truly is voluntary. Artists would only join the collective if they chose to do so; but staying outside would force the artists to pursue expensive legal and technical warfare against file sharers. Users would only sign up and pay the fees if they wanted to; but refusing to pay would expose them to the hassles and hardship of illegal downloading (not to mention the ethical conflicts). The EFF points out that current anti-trust laws might interfere with the formation of a VCL agency, but from the libertarian perspective I am of course entirely in favor of weakening antitrust. So before going on to criticize the proposal, I want to emphasize again how pleased I am that the EFF has come up with an idea which respects principles of freedom and choice for all parties. It makes me proud that I have joined EFF and have supported it with contributions over the years. However, while the goals of the VCL are laudable and the methods are highly ethical, I do see practical difficulties which the EFF seems overly optimistic about. These are fundamentally due to the loss of price information which is such a crucial part of a normal market structure. With music downloads disconnected from costs, signals are no longer automatically provided to the producers to show how consumer demand is being distributed. While the plan tries to provide proxies and other mechanisms to provide this information, it is extremely hard to do so reliably. More concretely, there are three obvious problems with the idea. First, people are still going to freeload, and it's possible that the greater availability of legal P2P filesharing will be exploitable by illegal file traders to make their jobs that much easier. Second, setting the size of the per-month fees is going to be a difficult and risky calculation, and it's all too likely that the artists will initially err on the side of caution, setting them too high for the plan to succeed. And third, finding a reliable way to divide up the proceeds which accurately reflects listener preferences will be difficult, since cheaters will have financial motivation to distort the results. As far as illegal file sharing, the EFF very optimistically and idealistically predicts that if the license fee is in the modest range they suggest, $5/month, users will want to be honest and enjoy the ethical and practical gains from getting their music legally and honorably. I have real admiration for the EFF's high opinion of the file sharing community. The EFF has worked with members of this group for years, and they should have a good sense of how file traders feel. But I'm sure that even the EFF would admit that there might well be a significant percentage of people who will refuse to pay any amount for the privilege of downloading music. I have certainly seen such sentiments expressed in various online forums. Many people have come of age with the expectation that music ought to be free, because that is all they have known. They see the creation of music as an inexhaustable fountain from which they can drink as often and as long as they wish. Now that they have gotten used to having their music for free, they won't want to go back to paying for it. The existence of such people is going to make the whole plan more expensive and difficult, in several ways. For one thing, the only thing that will motivate people to stay with the program and not freeload will be some kind of negative consequence if they leave. So the record companies may have to continue their program of lawsuits and technical countermeasures, even once the VCL plan is in place. A major potential cost savings thus does not materialize. And even if the percentage of freeloaders is small, the expense of the lawsuits may have to continue to be large, in part because locating such people may be more difficult now that they can hide among a much larger number of legal file sharers. If the freeloaders can't be effectively deterred, then their existence will serve as a constant temptation for legal members to quit the program. We have all seen situations where a law which is ignored with impunity by a minority eventually becomes less respected by everyone. The same kind of gradual breakdown would be a constant threat to a VCL program. It's not like radio, where there are only a few hundred or thousand broadcasters. We're talking millions or potentially billions of people now, and the enforcement lessons from radio are not applicable. Another problem with the EFF plan is setting the size of the VCL fees. I give the EFF enormous credit for resisting the temptation to put the government in control of this aspect of the program. Politicizing this issue would be disastrous. Letting the creators of the music (or their agents) decide how much they are willing to let it go for is the only free, fair and economically sound possibility. Nevertheless, there are going to be significant practical difficulties in getting a reasonable licensing fee. First, from the theoretical side, it's not even clear what kind of fee we would see, if the VCL agency had perfect knowledge. What would maximize their profits? As they increase their fees, revenue per subscriber goes up, but they lose subscribers, and face the costs described above to try to coax people back into the program. But as further argued above, those enforcement costs may not be able to be reduced below a threshold value, since people can always leave the program and potentially still get access to music. It's a complicated tradeoff. It's often the practice, with new business models, to set initial fees on the high side in order to reduce risk. Then the fees can be gradually lowered as market demand increases. This provides for a gradual and manageable growth rate. The VCL agency probably can't realistically sign up and manage 100 million subscribers the first year. They might prefer to set the fees high enough so that they have only a million subscribers that first year, and then bring them down gradually. This will also give them a sense of the shape of the demand curve, how many more subscribers they get for a particular decrease in licensing fees. For these reasons, I'd expect the fees to be quite a bit higher than the EFF estimate of five dollars a month, especially at first. Hopefully they would come down within a few years, and maybe the EFF goal would not be too far off, eventually. But initially the plan will face criticism and disillusionment if the fees are considerably higher than were initially promised. As far as likely long-term licensing rates, I'd like to see some analysis and modeling of this tradeoff which could shed more light on where a good price point is likely to be found. The third problem I listed is the difficulty of accurately figuring out how the proceeds should be distributed to the artists. The EFF report suggests copying the Nielsen ratings and having randomly selected families allow their downloads to be monitored. This isn't a bad idea, but the problem is that there are far more songs in common use than TV shows. At any given time there are probably no more than 200 shows tracked by the Nielsen ratings. But there must be tens or even hundreds of thousands of different songs being downloaded in a typical day. That means that the statistical precision necessary to fairly divide up the revenues is going to be far more difficult to meet than for TV shows. The truth is that Nielsen ratings have larger error bars than many people realize, and once you divide the measurements a hundredfold or worse, the statistical errors are likely to swamp the measured results. The noise will overwhelm the signal. The other idea the EFF suggests is to monitor file sharing activity, as is done already by companies like Big Champagne. The problem with this is that at present, no one has much incentive to try to manipulate this data. But in a VCL system, these measurements will determine the financial success or failure of artists and record companies. If the system can be gamed, it will be. So far I haven't seen a proposal that would both respect user privacy and simultaneously prevent people from creating bogus download requests or using other tricks to inflate the numbers for a desired artist or company. The EFF's confidence that these two methods will work is not well justified at present. In summary, the EFF's Voluntary Collective License proposal is innovative, ethical, and idealistic. It respects the freedom of all parties involved and tries to offer a path which everyone can walk to their mutual benefit. There are still significant practical problems to be overcome, but the goal is important and desirable enough that it is worthwhile putting in effort to see if this system can succeed. Even if it ultimately fails, VCL should be encouraged as a new, voluntary and creative option for people to approach the difficult issues of file sharing today.

1 0

Re: Authentification required. Read the attachment!
by Steve Furlong 25 Feb '04

25 Feb '04

On Wed, 2004-02-25 at 22:00, Jim Choate wrote: > > TO SUBSCRIBE to Cypherpunks, one should send a message to ONE of the following > > addresses: > > > > majordomo(a)minder.net > > majordomo(a)lne.com > > majordomo(a)ssz.com > > There is no SSZ node anymore. LNE, neither. Try majordomo(a)al-qaeda.net majordomo(a)ds.pro-ns.net

1 0

Microsoft Plans Biometric ID Cards
by R. A. Hettinga 25 Feb '04

25 Feb '04

<http://www.cbronline.com/print_friendly/b6e1a01bb2c038c380256e450038609e> DATE: 25/02/2004 Microsoft Plans Biometric ID Cards Microsoft Corp yesterday announced that it plans to get into the identity card business, as it lifted the veil on software, under the name Tamper-Resistant Biometric Ids, it currently has under development. Demonstrated during Bill Gates' keynote address at the RSA Conference yesterday, the software comprises a system for producing cards and subsequently verifying that they have not been altered. Cards would consist of a photograph of the bearer, along with some personal information such as date of birth. The photo and the data would be hashed and stored in a two-dimensional color "bar code" on the card itself. Tampering could be subsequently detected by scanning the entire card and reperforming the hash, to see if it matched the one on the card. The word "biometric" seems to be loosely applied here to the fact that the cards carry photographs. Gates did not give a firm data for when the company expects to come to market with this technology, but it was suggested that it will not be this year. Terms & Conditions | Privacy Policy | Add to Favorites Copyright | ComputerWire 2004 -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

2 1

GPS Goes to Court
by R. A. Hettinga 25 Feb '04

25 Feb '04

<http://www.technologyreview.com/blog/blog.asp?blogID=1278&trk=nl> Technology Review GPS Goes to Court ? In what is a first of a kind ruling in the nation, the Washington State Supreme Court declared Thursday that police may not attach a Global Positioning System tracker to a suspect's car without getting a warrant. "Use of GPS tracking devices is a particularly intrusive method of surveillance, making it possible to acquire an enormous amount of personal information about the citizen under circumstances where the individual is unaware that every single vehicle trip taken and the duration of every single stop may be recorded by the government," Justice Barbara Madsen wrote in the unanimous decision. A spokesperson for the Washington chapter of the American Civil Liberties Union compared the use of GPS trackers in law enforcement to "placing an invisible police officer in a person's back seat." Meanwhile, USA Today has an article (not in the online edition) about the use of GPS tracker data as evidence in the Scott Peterson case. Apparently, the Modesto police used GPS trackers to monitor the suspect's movements for four months before his arrest. Peterson's defense attorney wants the evidence tossed out. One of their tactics is to question the motives of the experts who are defending the accuracy of such information, claiming that they are self-interested: "I assume you want the judge to rule that this evidence is admissible so you can sell more GPS receivers." Here, the dispute centers less around the constitutionality of its deployment than on its reliability, resulting in a war of competing experts. This is a fascinating example of the negotiation process by which a society -- or in this case, the courts -- adjusts to the potentials of a new technology. Whether it gets adopted or not depends on how it passes these various legal challenges. posted by Henry Jenkins @ 2/13/2004 3:05:27 PM | Comments (4) | -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

3 2

[IP] Ruling on Doe v Chao [ for IP list]
by R. A. Hettinga 24 Feb '04

24 Feb '04

--- begin forwarded text

1 0

Voices Inside Their Heads: Fbi 'Drowning' In Info From Bugs, Wiretaps
by R. A. Hettinga 24 Feb '04

24 Feb '04

<http://www.drudgereport.com/flash2.htm> The Drudge Report Support The DrudgeReport; Visit Our Advertisers VOICES INSIDE THEIR HEADS: FBI 'DROWNING' IN INFO FROM BUGS, WIRETAPS Tue Feb 24 2004 08:48:10 ET Thanks to the bundle of anti-terrorism measures known as the USA Patriot Act, the FBI is conducting a "record amount" of electronic surveillance, including the use of wiretaps and bugs, CONGRESSIONAL QUARTERLY reports on Tuesday. But the bureau can't keep up with all the information pouring in from those and other sources, CQ's Justin Rood reports. "We have a record amount of collection going on," said FBI spokesman Ed Cogswell in a telephone interview. The Justice Department's 2005 budget justification for the bureau backs Cogswell up. "Electronic Surveillance (ELSUR) collection volumes are expected to continue an upward trend for months and years ahead," the justification for the FBI reads. The document says the increases are the result of "statutory easements to Foreign Intelligence Surveillance Act (FISA) authority (USA Patriot Act), a shift of FBI investigative resources to counterterrorism and counterintelligence programs heavily dependant [sic] upon ELSUR collection, and incremental growth in available ELSUR line capacity." Electronic Surveillance - ELSUR - refers to telephone wiretaps, hidden microphones, cameras placed in private areas, and other forms of surreptitious interception of oral, written or electronic communication. The 2001 Patriot Act (PL 107-56) included provisions making it easier for the FBI to obtain permission to spy on individuals as a part of counterterrorism investigations. "All systems are go," said Steven Aftergood, director of the Project on Government Secrecy at the Federation of American Scientists. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: More on VoIP
by Tyler Durden 24 Feb '04

24 Feb '04

Uhm. Good point. But I think that the Luxemborg wrinkle was interesting... The more interesting idea is peer-to-peer VoIP. That plus crypto and I don't think prying ears could do a whole hell of a lot. In fact, the game may be over on some levels...certainly, CALEA seems to have at best a slippery legal hold on VoIP at all, and that's when the VoIP calls are hubbed or "switched" somehow (you packet heads can remove the quote-marks from 'switched'). Peered VoIP seems to push any eavesdropping all the way out to the edges of the network. In fact, I'm wondering if there may be a popular 'giving up' underway on the greater crypto issue, with greater starting to encompass voice traffic. Actually, while we're fighting Satan's Minions(TM) (ie, the evil dark-skinned ragheads), nobody seems to care as much about some hydroponic pot growers and whatnot, and Al Qaeda seems to think that word of mouth works just fine for disseminating mission-critical information. -TD >From: "Dave Howe" <DaveHowe(a)gmx.co.uk> >To: <cypherpunks(a)minder.net> >Subject: Re: More on VoIP >Date: Tue, 24 Feb 2004 09:49:13 -0000 > >Tyler Durden wrote: > > Encryption ain't the half of it. Really good liottle article. And I > > didin't know Skype was based in Luxemborg.... > > http://slate.msn.com/id/2095777/ >Not playing with Skype - why risk a closed source propriatory solution >when there is open source, RFC documented SIP? > _________________________________________________________________ Find and compare great deals on Broadband access at the MSN High-Speed Marketplace. http://click.atdmt.com/AVE/go/onm00200360ave/direct/01/

1 0