Film companies demand names of Reddit users who discussed piracy in 2011

Fonz@lemmy.world to Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ@lemmy.dbzer0.com – 889 points –
Film companies demand names of Reddit users who discussed piracy in 2011
arstechnica.com
160

The MPAA really is grasping for straws aren't they. Ever since people were able to stream movies during the pandemic and found it was a much cheaper more enjoyable experience, they have been trying to invent ways to drive people back to the theaters. Now they are suffering major block buster busts and they have to point the finger at someone so they think, "it's those darn Reddit pirates!" Its funny that they don't realize they caused their own demise. But really I wonder, why specifically 2011?

2011 is well outside the Statute of Limitations for infringement...

That's three years with some wiggle room for ongoing infringement.

This is likely an intimidation/shakedown thing.

Sounds more like they’re going after Grande. Belief being the testimony would allow them to build a case that Grande incited or somehow induced privacy which would strip them from a number of legal protections that may apply to service providers.

Could be that they're looking to block similar usernames in their streaming services?

Right? Yeah, piracy is the reason people don’t go to the movies. It has nothing to do with the overpriced, nasty concessions (cold, overly salty popcorn), dirty floors, uncomfortable “reclining” seats, gimmicks (4DX, RPX, XD), staff that can’t be bothered to turn off the lights at showtime or properly configure the sound systems. All while you’re paying $15 per ticket and $30 on snacks.

These morons live in an entirely different world.

Not to mention the comparison between watching a movie at home, where you know it will be silent, versus the risk of having at least one (but often more) groups of people who will not shut the fuck up the whole time.

The gap between reality and what corporate shills who probably don't even use their own product think is reality is ever widening.

It's funny because we subscribe to the AMC A-List and go to the movies quite a bit (obviously this is in the US). But it's because a) we have a couple of AMC theatres close by, and b) it's just me and my spouse, no kids involved. So it's something that to us is worthwhile (having a night out a few times a months to see a movie on the big screen). Also, we never buy concessions. I can't imagine how an average family with a bunch of kids can just go and drop over 100 bucks on tickets and concessions on any given night.

I think they are short staffed aka underpaid.

Agreed. That means that the current business model for movie theaters is unsustainable.

Yup. Where I'm at two tickets and two popcorn will be 60$...sixty fucking dollars, that's a lot of fucking money to sit in some shitty seats listening to other people eat and slurp.

It has nothing to do with the overpriced, nasty concessions (cold, overly salty popcorn), dirty floors

Ugh, this just reminds me of all those times I went to the theater, and no matter where I walked I would hear the squish sound from my shoes coming into contact with something sticky... I do not miss that at all.

Disagree that it's more enjoyable than going to the theaters. There is a social aspect of going to movies with friend groups that's hard to replicate at home. People don't have space to fit 12 friends to comfortably watch a new release.

Now is a good time to remind users that you are placing some trust in the instance that you use. Lemmy is not anonymous. It is pseudo-anonymous. Your instance can do pretty much anything with your account up to and including turning your account into a sock puppet, and they know exactly where you're connecting from.

With that said, it's a lot better than most social media today that actively tries to violate your privacy at every turn.

This is part of why I signed up through FMHY. If anybody is going to try to protect my privacy it is probably going to be the very actively pro-piracy group.

To add to this: some instances require your email address, and others don't.

Obviously there are plenty of other ways you won't be really anonymous, but if it's important to you, one step in mitigating issues is not to have an email associated with your account.

What about using something like a protonmail address for all social media email?

You may know the answer to this. If I've signed up with no email, and whilst on a secure VPN, how are they going to track me?

Your instance could (edit: theoretically, if they're running custom Lemmy code) track you by your browser fingerprint (screen size, installed fonts, plugins, etc.). Others could keep a profile on you based on what you comment/post/upvote and when.

So if I'm on an app instead of a browser, that app developer would have to provide info on me too?

As for what I comment/post/upvote, that's not really what I'm asking about as that's a profile on what I do, not who I am from an identifiable point of view (correct me if I'm wrong)

Depending on the content you post though, it could hypothetically be traced to you. Potentially even mundane things like mentions of geographic locations, word choices, common phrases you use, common topics -- all of those could be considered at least partly identifying in the right contexts (assuming someone was looking for it and already had info about some particular cue that indicates you).

The point is: you can't really be too careful, and realistically should assume there is always a way someone (including yourself) could be jeopardizing your privacy, if not overtly (by some kind of software or network tracking) then by holes in operational security.

Scary but hey at least Reddit isn't handing out the info so easily in this instance

Would be mad.

There are many topics people discuss that are problematic. Forget piracy. What about people from authoritarian regimes, people from countries that are in danger to fall to authoritarians, even if they haven't yet. Anything from years ago could become problematic if the wrong government gets into power.

Making jokes about God is no deal under some regimes, it's blasphemy in others.

Drugs are a problem in a lot of countries, and a literal death sentence in some.

Making fun of a fringe politician is nothing when they are not in power, but becomes a problem if they get into power.

I am sure Reddit gives some data in cases of actual danger, which is fair. But if they start to hand out data for something minor like piracy, it's going to be a problem for discussion on the discussion plattform.

They will if they get a nickel for doing it.

Whatever. It's not really admissable. People talk about tons of things that they don't actually do. For example, I talked today on teams about deleting a problematic app from our vcenter just so we didn't have to deal with a compatible issue. Didn't actually do it.

I was discussing trebucheting politicians off the white cliffs of Dover earlier today on Discord. Not gonna do that either. Sadly.

But sire is the trébuchets are locked and ready! Do not make us turn back!

Why do you want to pollute the environment with toxic waste?

In a way this does make me slightpy concerned about Lemmy servers, Reddit has a team of lawyers and tonnes of funds behind it to fight pointless demands like these

A lot of server owners won't and will be much easier to coax into giving up information about it's users

The thing is, chasing individual instances is a game of whack-a-mole, with a lot of downside and not a lot of upside. Established companies follow laws and regulations because they are easy targets, with local assets, offices, and public figures that are worth serving/seizing and can be compelled to comply to court orders. How TF you going to enforce a court order in a country that doesn't recognize your jurisdiction or laws?

The other thing thing is, if you run an instance with moderation rules that skirt the law, you are incentivised not to log personal information and disseminate it because a) that makes you a target, and b) you'll get called out by your own users for logging and leaking IPs, and people will just move to a different server.

It seems pretty obvious to me that you should assume at all times when you are online that you are basically in a public space, like in a public cafe: People can see you, even if the fact that they are not paying close attention to you creates the illusion of privacy. If you start doing something to stand out, people will start to pay attention to you, and it's all visible to see unless you actively take precautions to hide your identity. That starts--but doesn't end--with not browsing piracy on main.

9 more...

And why are they demanding it? Just scrape it like the rest of us.

Well, Reddit isn’t in my good books right now, but I hope they fight this fight hard, and I hope they win. Good Luck Reddit

[This comment has been deleted by an automated system]

This was something I suggested for this instance, since there is even a guide for hosting an onion service: https://lemmy.dbzer0.com/post/135234

Maybe /u/db0 will have more time after the spam settles down, but it seems he's got a lot on his plate at the moment between being an admin and doing AI stuff.

Would federating work properly with an instance on i2p or tor?

If with properly you include insane amount of waiting for requests and timing out then yes

Probably if all instances were using Tor, but it would be very slow

Also, would you want it to?

@prole @ReCursing In most cases, the Tor instance wants to federate with clearnet instances. Clearnet instances might want to opt-in to federating with Tor instances - no child porn, but reading news about piracy is legal.

I mean you can very much onion route to a regular server, if it allows connections from Tor.

Unfortunately Tor means it's very hard to IP ban abusers, so a lot of services automatically ban common Tor exit nodes.

[This comment has been deleted by an automated system]

This is basically true. You need to have certain DNS configurations you cannot afford on Tor hidden services to federate, and while you still could be listening on a Tor hidden service, clearnet servers would still need to reach you to federate.

On top of that, even if you somehow manage to do that, either youre federation trafic goes through Tor (lmao how to DDoS Tor in 1 step), or It doesn't and all servers can see your public IP, which deafeats the purpose.

Good to hear that’s still up! I remember when some dude got that up and running shortly after the darknetmarkets sub was closed down.

@skullgiver @Fonz It is possible; you have to set it up yourself and you won't federate with many places.

Hosting Lemmy or Mastodon on Tor or I2P isn't hard; you just host it, and link your Tor/I2P daemon to it same as any other website. But you have to be aware you'll be cut off from the majority of other instances. You'll be running standalone.

I am not sure about Lemmy, but Pleroma supports feeding all your federation traffic through a proxy; you can use one called fedproxy to split out your I2P federation traffic through your I2P daemon, and likewise for Tor. I am not currently running this on my server. It should still work for other fedisoftware than Pleroma. https://docs.akkoma.dev/stable/configuration/i2p/

[This comment has been deleted by an automated system]

@skullgiver Yes, there are many ways to make sure your server connects to Tor and I2P sites. But that's what the guy who ISN'T running a Tor/I2P site has to do, to federate with the Tor/I2P site. If you're running the Tor/I2P site you can't really do much on your side to enable federation.

Cloudflare won't help because you need inbound connections. Some VPNs support *transient* port mapping designed for BitTorrent, but good luck trying to claim a stable port number for any significant length of time, never mind port 443 (which I'm sure is outside of the allocation range anyway). You'd have more luck trying to find a VPS provider crazy enough to let you pay anonymously with cryptocurrency with just a pinky promise that you're not hosting child porn. Or just don't federate.

2 more...

12 years ago, talking about piracy isn’t incriminating so why do the big movie companies need their info? So they can potentially intimidate them for more info they potentially don’t have?

Really no idea why that timeline. In 2010 I got an email from whatever ISP I was using at the time politely asking me to stop torrenting music. They basically said, hey we see you're doing this, please stop or you can't have internet through us anymore. That is when I learned what vpns and tor browser's are for.

Seems absolutely bonkers that any corporation would be digging back that far for media pirates. Absolute waste of time.

I got a similar email once from my ISP, but it was more of a "this is your first and final warning".

They might be looking for something specific. Like they are investigating an individual, or network of individuals, and this is just a piece of that investigation. I doubt they are asking for this to randomly look for opportunities to charge people with a crime related to piracy.

If only we had legal avenues to obtain information from private companies.... Oh well.

If you have a valid reason to investigate people, then you can get a fucking warrant. If your investigation isn't into an actual criminal act, then maybe you don't really need that data so bad.

Agreed. Glad Reddit seems to be doing the right thing here by acknowledging this.

The time it would take to ask for these specific users and the research needed wouldnt amount to the number they would bring in if this would just be a shake down, I would guess you are right

For real. And even if they were to find the users, which is a longshot, those people could say, "no one tells the truth on the internet."

This fishing expedition is a waste of resources.

Seems this has become standard operating procedure for much of this industry - make shitty movies, wonder why they flop at the box office, then go scorched earth against alleged "pirates" and blame them for your "losses". When the studios make movies that are worth seeing, people will go to see them. See: Top Gun Maverick and Avatar 2, among other recent multi-billion dollar hits.

It is worth noting that many of the more egregious abuses of the legal process as of late seem to be by this one company Millennium Media and their many subsidiaries (Bodyguard Productions, HB Productions, etc.) They are basically just a bigger version of Strike 3, just professional trolls who would rather profit off of legal shakedowns than make good movies.

Funny, those are the same movies I'd point to as what's fundamentally flawed with the film industry; chasing the lowest common denominator and avoiding interesting and artful risk.

Name 10 interesting and artful films and you'll have also named 9 box office bombs. Hell, Fight Club didn't even gross half it's budget at the box office. Very few people want good films.

Imagine when film companies pay Google for access to pirate’s gmail registrations. I’m glad I switched to Protonmail years ago. Any of these “free” services will sell your information for the right price.

And what are ya gonna do with that information? Tell us talking about it is illegal? Eh?

Extremely common MPAA idiot L, as usual.

Makes me want to screen record DRM protected stuff and redistribute it right now :)

Yeah this is the kind of crap that encourages people to pirate simply to spite them.

Piracy is part and parcel of the global economic system, and since that system hasn't changed since time immemorial, well it always has been too.

LOL, that's cute. Reddit doesn't even know my real email address.

On a similar note how safe is it to use private torrents such as IPTorrents? They obs keep a log of users and upload/download stats and probably the torrents downloaded and ip addresses. Surely rights holders would be better off going after this data no?

All they have to do is get an account and sit there seeding their own movies, then keep a log of the IP addresses of the people they connect to. That’s how most P2P enforcement is done.

Problem is that anyone with enough knowledge to get private torrent access also knows enough to use a seedbox or VPN. The whole business case for a VPN revolves around not giving out IP addresses so that’s generally a dead end for copyright holders.

Eh, you shouldn't get hit with anything serious unless you're hosting a server that's seeding tons of content. The worst I've seen people who occasionally pirate getting is a 'stop being a pirate, asshole!' letter from Disney or something. I tried cyberghost for a while and it was such trash that I wish I hadn't wasted money on it, I've just not bothered with VPNs since.

Agree with cyberghost being absolute garbage. I got a letter like that for downloading a Megamind cam once. Ironically it was to cut out a piece of the movie to show my friend to recommend he go watch the movie.

FYI, this was done a few years ago. I think the lawyers behind it just got out of prison.

I recommend people use a VPN even when using private torrents. Mostly because aren't really private, they are semi-public but kept behind some sort of application gate-keeping process. Do you trust every single user on these sites all the time? Are they actually vetting new applicants? Do they audit users at all?

Generally unless you personally trust every single user it just takes one bad actor to log IPs and start sharing that information somewhere else to compromise the privacy of the entire userbase.

If I were to torrent I could see myself using a seedbox for the downloading and uploading but sure I would be lax when it came to visiting the torrent site so my ip address would likely be captured.. ;-)

Exposing your public IP to the website itself is not typically as much of a risk. Bad actors would have to get law enforcement to force the website owners to turn over visitor and activity logs to prove that your public IP visited a site and downloaded a torrent. But if that same IP never downloaded or uploaded content using that torrent, then there is no real evidence of actual media sharing.

That makes sense but leads me to another question.. How do site like IP torrents track the user upload / download ratio? Say if I were to log in and use my home internet connection to download a torrent file from there and then use a seedbox to do the download the contents? It can’t be IP based as the IP’s would be different; is each torrent file downloaded different for each user?

My experience with private torrents is a little out of date but you might be right, that could cause problems with how your seed ratio is reported for trackers.

Just went down a rabbit hole.. Turns out IPTorrents give a different torrent file for each user so it’s independent of IP address. It’s the torrent client that reports back the down and upload volumes. Now need to see if this info could be used by the rights holders for claims…