The copyright cops strike again

Two researchers at a computer security conference are served cease-and-desist orders moments before they're scheduled to speak.

Topics: Copyright, Intellectual Property,

The copyright cops strike again

Score another win for the forces of copyright protection. On Saturday, two computer science students decided to cancel their presentation to a security conference in Atlanta after they were threatened with prosecution under, among other statutes, the Digital Millennium Copyright Act.

The researchers, Billy Hoffman and Virgil Griffith, were scheduled to talk about possible security vulnerabilities in the Blackboard Transaction System, a computerized debit-card system widely used on college campuses. But on Friday Blackboard obtained a temporary restraining order against Hoffman and Griffith, preventing them from presenting their findings; the pair were also sent cease-and-desist letters threatening further legal action. In addition, Blackboard’s attorneys sent a cease-and-desist letter to the organizer of the conference — a person who goes by the name “Rockit” — letting him know that he too could face prosecution if he allowed Hoffman and Griffith to present their findings at the event, an annual gathering of hackers known as Interz0ne.

Instead of the scheduled discussion, several hundred conference attendees were read the cease-and-desist letter, said Scott Milliken, an attendee. Attendees said they saw the case as a clear infringement on the First Amendment rights of the two students, and they contacted the Electronic Frontier Foundation and Lawrence Lessig, a Stanford law professor who specializes in copyright issues, seeking advice on what to do next.

Representatives for Blackboard balked at the claim that they were stifling free speech. They portrayed the students as being substantially different from mere security researchers. “I’ve met one of the individuals at a trade show, and he was a very nice young gentleman, but his definition of ‘research’ was very different from ours,” said Greg Baker, Blackboard’s vice president of product development. “The things these people are doing are not what I’d call research but is closer to damage — kind of like you or I going to an ATM machine and cutting the phone line and then listening in as to what happens on it. It’s them of their own volition doing damage to physical cables.”

“The local Bank of America,” added Michael Stanton, a spokesman for the firm, “may have a physical bank machine at its location, and if I were to publish a guide to take it apart, telling you how to pull apart a circuit board and monitor the history of what transactions take place, I think it certainly does not fall under the guise of research and it’s not an inherent security issue, either.”

The Blackboard system — known as CampusWide — allows students to use debit cards to conduct transactions at their college campuses: at dining halls, on vending machines, and in laundry rooms, among other places. Neither Hoffman nor Griffith could be immediately contacted for comment.

Hoffman, a computer engineering student at Georgia Tech who goes by the name “Acidus,” published his first exposé on security flaws he says he found in Blackboard in 2002, in the spring issue of 2600 magazine. The article, titled “CampusWide Wide Open,” seems to draw on published technical specifications of the system and on interviews with Blackboard experts to conclude that “there are several ways to cheat the system” and that it is “horribly insecure.”

Hoffman also writes about times he physically broke in to Blackboard equipment on campus. “This metal box has a handle and a lock,” he writes of one Blackboard device, “but the front of the handle and lock assemble has 4 flat head screws. I used a cheap metal knife and opened this locked box. Inside I found the LCM [Laundry Center Multiplexes] that controlled the laundry room I was in. Everything had ‘AT&T CampusWide Access Solution’ written on it, as well as lots of Motorola chips. Sadly this was early in my investigation, and I haven’t gone back to look again.”

Although he does not indicate that he has done any of these things, Hoffman tells how a person might be able to fool the system to “get another load of wash” in a laundry room, say, or to “make the Coke machine think money has been paid” and cause it to “spit out a Coke!” Hoffman writes, “You fool door readers as well if you could get to the wires that go from the reader and go to the magnet holding the door shut. Just send the correct pulses.”

According to a timeline of his research posted on the Web, Hoffman called the company to tell them of his findings and was “blown off.” Only then, he says, did he publish them. After Blackboard learned of his article, officials at Hoffman’s college questioned him — “I basically got reamed” — about his research, but the campus police did not file any charges against him.

On its face, the case is similar to one involving Ed Felten, a computer science professor at Princeton, who in 2001 declined to present his findings of security flaws in technology meant to secure music files after attorneys for the recording industry seemed to suggest they’d sue him under the DMCA. The recording industry’s apparent threat caused civil libertarians to say that the DMCA should be struck down because it threatened legitimate academic research, but the recording industry, in a sudden about-face, announced that it had never had any intention of suing Felten. A judge later dismissed Felten’s efforts to have a court rule that the recording industry never had a case in the first place.

This case is somewhat different from the Felten case, however, in that Blackboard is claiming violations not just of the DMCA but also of less controversial state and federal computer security laws; some of the research that Hoffman and Griffith did might have involved breaking in to systems on campus, an act that might be illegal under those other laws. Attorneys at the Electronic Frontier Foundation said they were investigating the case in order to decide whether the group should become involved.

“We’re concerned right off the bat when we hear of speakers at a conference being served with a [temporary restraining order] moments before they’re supposed to speak,” said Wendy Seltzer, an attorney at the EFF. “It’s the kind of thing that makes us nervous.”

One attendee at the conference — an engineer who goes by the name “Decius” — said that after the cease-and-desist letter was read to the group, “a few of us got up and decided that the best thing that we could do was to make as many people aware of what happened as possible. In addition to contacting the press, several individuals said they wished to contact universities using the system to say they were unhappy to hear it was not secure and were unhappy to hear that the company was behaving in this manner.”

Decius added: “We live in a society in which we are increasingly dependent on this high-tech infrastructure which our lives are arranged around, and if we can’t take these things apart and understand how they work, then I think we have a very serious threat to our freedom.”

A courtroom hearing on whether to make the temporary restraining orders against the two students permanent will be held Thursday.

More Related Stories

Featured Slide Shows

  • Share on Twitter
  • Share on Facebook
  • 1 of 11
  • Close
  • Fullscreen
  • Thumbnails

    Ten spectacular graphic novels from 2014

    Beautiful Darkness by Fabien Vehlmann & Kerascoët
    Kerascoët's lovely, delicate pen-and-watercolor art -- all intricate botanicals, big eyes and flowing hair -- gives this fairy story a deceptively pretty finish. You find out quickly, however, that these are the heartless and heedless fairies of folk legend, not the sentimental sprites beloved by the Victorians and Disney fans. A host of tiny hominid creatures must learn to survive in the forest after fleeing their former home -- a little girl who lies dead in the woods. The main character, Aurora, tries to organize the group into a community, but most of her cohort is too capricious, lazy and selfish to participate for long. There's no real moral to this story, which is refreshing in itself, beyond the perpetual lessons that life is hard and you have to be careful whom you trust. Never has ugly truth been given a prettier face.

    Ten spectacular graphic novels from 2014

    Climate Changed: A Personal Journey Through the Science by Philippe Squarzoni
    Squarzoni is a French cartoonist who makes nonfiction graphic novels about contemporary issues and politics. While finishing up a book about France under Jacques Chirac, he realized that when it came to environmental policy, he didn't know what he was talking about. "Climate Changed" is the result of his efforts to understand what has been happening to the planet, a striking combination of memoir and data that ruminates on a notoriously elusive, difficult and even imponderable subject. Panels of talking heads dispensing information (or Squarzoni discussing the issues with his partner) are juxtaposed with detailed and meticulous yet lyrical scenes from the author's childhood, the countryside where he takes a holiday and a visit to New York. He uses his own unreachable past as a way to grasp the imminent transformation of the Earth. The result is both enlightening and unexpectedly moving.

    Ten spectacular graphic novels from 2014

    Here by Richard McGuire
    A six-page version of this innovative work by a regular contributor to the New Yorker first appeared in RAW magazine 25 years ago. Each two-page spread depicts a single place, sometimes occupied by a corner of a room, over the course of 4 billion years. The oldest image is a blur of pink and purple gases; others depict hazmat-suited explorers from 300 years in the future. Inset images show the changing decor and inhabitants of the house throughout its existence: family photos, quarrels, kids in Halloween costumes, a woman reading a book, a cat walking across the floor. The cumulative effect is serene and ravishing, an intimation of the immensity of time and the wonder embodied in the humblest things.

    Ten spectacular graphic novels from 2014

    Kill My Mother by Jules Feiffer
    The legendary Pulitzer Prize-winning cartoonist delivers his debut graphic novel at 85, a deliriously over-the-top blend of classic movie noir and melodrama that roams from chiaroscuro Bay City to Hollywood to a USO gig in the Pacific theater of World War II. There's a burnt-out drunk of a private eye, but the story is soon commandeered by a multigenerational collection of ferocious women, including a mysterious chanteuse who never speaks, a radio comedy writer who makes a childhood friend the butt of a hit series and a ruthless dame intent on making her whiny coward of a husband into a star. There are disguises, musical numbers and plenty of gunfights, but the drawing is the main attraction. Nobody convey's bodies in motion more thrillingly than Feiffer, whether they're dancing, running or duking it out. The kid has promise.

    Ten spectacular graphic novels from 2014

    The Motherless Oven by Rob Davis
    This is a weird one, but in the nervy surreal way that word-playful novels like "A Clockwork Orange" or "Ulysses" are weird. The main character, a teenage schoolboy named Scarper Lee, lives in a world where it rains knives and people make their own parents, contraptions that can be anything from a tiny figurine stashable in a pocket to biomorphic boiler-like entities that seem to have escaped from Dr. Seuss' nightmares. Their homes are crammed with gadgets they call gods and instead of TV they watch a hulu-hoop-size wheel of repeating images that changes with the day of the week. They also know their own "death day," and Scarper's is coming up fast. Maybe that's why he runs off with the new girl at school, a real troublemaker, and the obscurely dysfunctional Castro, whose mother is a cageful of talking parakeets. A solid towline of teenage angst holds this manically inventive vision together, and proves that some graphic novels can rival the text-only kind at their own game.

    Ten spectacular graphic novels from 2014

    NOBROW 9: It's Oh So Quiet
    For each issue, the anthology magazine put out by this adventurous U.K.-based publisher of independent graphic design, illustration and comics gives 45 artists a four-color palette and a theme. In the ninth issue, the theme is silence, and the results are magnificent and full of surprises. The comics, each told in images only, range from atmospheric to trippy to jokey to melancholy to epic to creepy. But the two-page illustrations are even more powerful, even if it's not always easy to see how they pertain to the overall concept of silence. Well, except perhaps for the fact that so many of them left me utterly dumbstruck with visual delight.

    Ten spectacular graphic novels from 2014

    Over Easy by Mimi Pond
    When Pond was a broke art student in the 1970s, she took a job at a neighborhood breakfast spot in Oakland, a place with good food, splendid coffee and an endlessly entertaining crew of short-order cooks, waitresses, dishwashers and regular customers. This graphic memoir, influenced by the work of Pond's friend, Alison Bechdel, captures the funky ethos of the time, when hippies, punks and disco aficionados mingled in a Bay Area at the height of its eccentricity. The staff of the Imperial Cafe were forever swapping wisecracks and hopping in and out of each other's beds, which makes them more or less like every restaurant team in history. There's an intoxicating esprit de corps to a well-run everyday joint like the Imperial Cafe, and never has the delight in being part of it been more winningly portrayed.

    Ten spectacular graphic novels from 2014

    The Shadow Hero by Gene Luen Yang and Sonny Liew
    You don't have to be a superhero fan to be utterly charmed by Yang and Liew's revival of a little-known character created in the 1940s by the cartoonist Chu Hing. This version of the Green Turtle, however, is rich in characterization, comedy and luscious period detail from the Chinatown of "San Incendio" (a ringer for San Francisco). Hank, son of a mild-mannered grocer, would like to follow in his father's footsteps, but his restless mother (the book's best character and drawn with masterful nuance by Liew) has other ideas after her thrilling encounter with a superhero. Yang's story effortlessly folds pathos into humor without stooping to either slapstick or cheap "darkness." This is that rare tribute that far surpasses the thing it celebrates.

    Ten spectacular graphic novels from 2014

    Shoplifter by Michael Cho
    Corinna Park, former English major, works, unhappily, in a Toronto advertising agency. When the dissatisfaction of the past five years begins to oppress her, she lets off steam by pilfering magazines from a local convenience store. Cho's moody character study is as much about city life as it is about Corinna. He depicts her falling asleep in front of the TV in her condo, brooding on the subway, roaming the crowded streets after a budding romance goes awry. Like a great short story, this is a simple tale of a young woman figuring out how to get her life back, but if feels as if it contains so much of contemporary existence -- its comforts, its loneliness, its self-deceptions -- suspended in wintery amber.

    Ten spectacular graphic novels from 2014

    Through the Woods by Emily Carroll
    This collection of archetypal horror, fairy and ghost stories, all about young girls, comes lushly decked in Carroll's inky black, snowy white and blood-scarlet art. A young bride hears her predecessor's bones singing from under the floorboards, two friends make the mistake of pretending to summon the spirits of the dead, a family of orphaned siblings disappears one by one into the winter nights. Carroll's color-saturated images can be jagged, ornate and gruesome, but she also knows how to chill with absence, shadows and a single staring eye. Literary readers who cherish the work of Kelly Link or the late Angela Carter's collection, "The Bloody Chamber," will adore the violent beauty on these pages.

  • Recent Slide Shows



Comment Preview

Your name will appear as username ( settings | log out )

You may use these HTML tags and attributes: <a href=""> <b> <em> <strong> <i> <blockquote>