Monday, October 26, 2020

On Friday, code hosting and sharing website GitHub blocked the public access to youtube-dl, a software which can download videos from the internet via the command-line. The blockade came after GitHub received a Digital Millennium Copyright Act (DMCA) take-down notice from the Recording Industry Association of America (RIAA). After stripping the metadata from the notice, GitHub published the take-down notice on their site.

Initially started in July 2008 by Ricardo Garcia, youtube-dl is a script written in Python which can download videos from multiple websites including YouTube, LiveLeak and Vimeo. youtube-dl is a FLOSS software and is under public domain. Currently, the repository on GitHub is locked for viewers other than maintainers of the project.

RIAA’s DMCA notice alleged the script’s purpose of existence was to “circumvent the technological protection measures used by authorized streaming services such as YouTube” and “reproduce and distribute music videos and sound recordings owned by our member companies without authorization for such use”.

youtube-dl has multiple unit tests in its source code, which test whether the software works in different circumstances or not. Some of the tests include checking if the script can download Creative Commons licensed videos, videos which did not have square pixels, videos with no age restriction, “offensive to some audiences” per YouTube community and age-restricted videos. One of the tests included the URL of some copyrighted songs. Citing this test, RIAA’s take-down notice claimed “comments in the youtube-dl source code make clear that the source code was designed and is marketed for the purpose of circumventing YouTube’s technological measures”.

RIAA’s notice published by GitHub alleged violation of 17 U.S. Code § 1201 Circumvention of copyright protection systems which says “No person shall circumvent a technological measure that effectively controls access to a work protected under this title”. RIAA listed a number of forks of youtube-dl and requested GitHub via the notice they all be made inaccessible.

The notice did not list any incident of anyone using youtube-dl to download or share copyrighted material, nor mention any damages that actually occurred. Unremarked by the notice, YouTube allows videos to be licensed under a Creative Commons Attribution license. When a copyright holder chooses to release their work, be it a photograph, a video, or audio, under a Creative Commons Attribution (CC BY) license, they allow everyone to freely own, share or modify the work as long as the reusers properly attribute the author of the work. YouTube also hosts many audio and video recordings in the public domain which can be used for any purpose without any restrictions.

youtube-dl is used by thousands of people around the world. Multiple Creative Commons-licensed and public domain videos on Wikimedia Commons are uploaded via a tool called video2commons, which relies on youtube-dl to download media. youtube-dl also lets users download videos from LiveLeak — a video-sharing platform for citizen journalism. Videos downloaded using youtube-dl are also used for the purpose of fair use, or for evidence.

youtube-dl comes with a small JavaScript interpreter where it acts as a web-browser would behave while receiving video data from the server. The script has “extractors” for various websites to handle videos from different sources. Whenever something is displayed on the user’s screen, the device has a copy of that content. Web browsers “download” data while surfing the web, though most of it is not persistent on the device. It is possible to download copyrighted photos by using a web-browser. The way the world wide web works, there are no technological prevention measures to prevent recording and sharing of content such as RIAA talks about in the notice. Photos and texts can be downloaded by taking screenshots, videos by screen recording tools, and audio by recording on a tape if not an audio recording software.

Multiple users expressed their disappointment on Twitter and Internet Relay Chat. One of the users said “this is yet another example of why we should use git as it was intended, as a distributed network, rather than rely on one single proprietary server”. Git is decentralised version-tracking software which is used by a large number of software companies and projects. It is possible to host one’s own git server for software development. While Microsoft’s GitHub is a centralised git server, development of software using git does not require a GitHub account.

Soon after the public access to the repository was locked, multiple users started sharing the source code via self-hosted git servers, Tor sites and via the Torrent protocol leading to a Streisand effect. Streisand effect is when a measure to censor information causes further spread of that information. The binary files of the software are still available on its website for users to download. Some people came up with esoteric ways to share the source code, by converting the compressed code into photographs and providing shell commands to convert to the source code.

GitHub’s DMCA repository, where the takedown notice was published for public viewing, was subject to contant vandalism from multiple GitHub users. One user submitted a pull request, merging the source code of youtube-dl along with the dmca repository. This enabled users to view youtube-dl’s source code from within the dmca repository, provided they know the commit id.

The Electronic Frontier Foundation said on Twitter “Youtube-dl is a legitimate tool with a world of a lawful uses. Demanding its removal from Github is a disappointing and counterproductive move by the RIAA.” Richard Stallman, the founder of Free Software Foundation, has been highly critical of DRM (digital rights management, the subject of the DMCA) for many years now.

Wikinews reached out to Sergey M?, one of the maintainers of youtube-dl script, however Sergey said he “won’t give any comments at this time”. Later, he shared an update on the IRC channel. Sergey said, “they require complete removal of so called YouTube’s rolling cipher implementation […] GitHub requires in order to reinstate the repo […] under this conditions I could reinstate it in Saturday/Sunday already but this is an unsatisfactory outcome”. He also said, “I can’t guarantee whether [or] not we will bend over them considering the situation with @phihag [Philipp Hagemeister] but we’ll see soon what we can do in order to keep the max we have and mitigate potential legal issues at the same time”.

EFF is yet to respond to Wikinews queries. Wikinews also reached out to Philipp Hagemeister, a former maintainer and contributor of the youtube-dl project to discuss this takedown.

When did you get to know about the takedown notice and what were your initial reactions?

((Philipp Hagemeister)) I saw the takedown notice along with anyone else, on reddit. Since I am no longer involved with the youtube-dl project (except for occasional contributions, my maintainership ended in 2016), I don’t know any details.

((RS)) Does YouTube implement DRM for videos not under Creative Commons license, and if so, how does youtube-dl bypass it? Could you please elaborate the procedure?

((Philipp Hagemeister)) YouTube implements DRM for YouTube Movies. youtube-dl does not support those.

YouTube has multiple non-DRM video delivery protocols. I’m not up to date about specifics; my last dabbling in this was in 2015.

One of these protocols is described here. YouTube uses JavaScript to compute parts of the URLs. youtube-dl executes this JavaScript, just like a web browser.

((WN)) Could you also explain in brief how youtube-dl functions, and how the maintainers had intended it to be used?

((Philipp Hagemeister)) youtube-dl downloads and plays videos and music, just like any other web browser, from over 1000 different services. Its uses are varied: It enables video playback on many devices (e.g. Raspberry Pi) where the video services don’t work properly, it makes high-quality video playable for people with a bad or no Internet connection, it enables disabled users to use tools to play videos, and it is used for archival and research.

((WN)) What do you think of the DMCA notice?

((Philipp Hagemeister)) I think it is not warranted because youtube-dl is entirely legal. As the DMCA notice has no effect for me personally, I’m not really the right person to address it.

((WN)) Why were the copyrighted tests in the source code? Could they be replaced?

((Philipp Hagemeister)) I’m not sure why, but my guess is that users requested support for these videos and thus they were added as test cases. They can be removed trivially, without losing any function of youtube-dl.

((WN)) Are you aware Electronic Frontier Foundation said it was a “disappointing and counterproductive move”? What do you think should be the next steps?

((Philipp Hagemeister)) Yes, and I concur. I’m no longer involved in the project. If I were, I would probably just remove the test cases, block these music videos (RIAA is not worth the trouble for me, that can be done by other projects), and get the project back online.I understand people who think differently.

Wednesday, March 30, 2005UN Secretary General Kofi Annan has been cleared of wrongdoing in an investigation of charges that he influenced the UN to award aid-screening contracts in Iraq to Swiss company Cotecna Inspection Services, which employed his son Kojo Annan. The investigation was led by former US Federal Reserve Chairman Paul Volcker, who said that the investigation initiated by Kofi Annan should instead have been referred to UN’s independent watchdog agency. The report issued was called by the secretary general a “second interim report” in his statement reported in the New Zealand Herald. The commission will issue its final report in the northern hemisphere summer of 2005.

While Kofi Annan was exonerated, two of his staff members, Iqbal Riza and Dileep Nair, were criticized by the report. Riza allegedly shredded documents related to the contracts under investigation after the secretary general ordered that they be retained. The New York Times said that Nair was “faulted for appointing a person to a high-level post with oil-for-food responsibilities who did almost no work on the program”.

According to the New York Times, the Secretary General said “I am deeply saddened by the evidence to the contrary that has emerged, and particularly by the fact that my son had failed to cooperate fully with the inquiry”. The Guardian reports that Annan’s son concealed from his father the fact that Cotecna continued to pay him for 6 years after “he left Cotecna in 1998”. It was not clear from the Guardian report why Cotecna was paying Kojo Annan if he had indeed left the company.

Asked whether he planned to step down as Secretary General, as called for by US Republican Senator Norm Coleman, among others, Kofi Annan responded, “Hell, no!” according to Ewen MacAskill of the Guardian, as well as an unattributed Sydney Morning Herald article. Senator Coleman continued to press forward with his criticism of Annan and calls for his resignation despite the report’s findings.

Monday, October 24, 2016

On Friday, a network of diverse Internet-connected devices targeted the Dyn domain registration service provider. It took down Dyn clients, including several popular websites such as Twitter, Netflix, Spotify, Reddit, New York Times, and Wired.

The attack involved targeting Dyn’s domain name system servers with a large volume of requests, rendering it incapable of serving replies to legitimate requests — a DDoS (distributed denial of service) attack. Users’ browsers and other clients sent requests to Dyn to resolve the respective web sites’ domain names to an IP, but did not get a reply within the time required.

The first attack started at about 7am local time (UTC-4) and was resolved in two hours. A second attack started at mid-day, and a third attack started at about 4pm local time. Tens of millions of malicious request sources were observed, interfering with legitimate Dyn traffic.

The reports noted the malicious devices included internet-connected devices — not only servers and desktops, but also webcams, digital video recorders, routers — referred to as the Internet of Things.

On Friday evening Dyn said a security company Flashpoint and a cloud services provider Akamai identified symptoms of malware Mirai participating in the attacks. The malware infects the devices by brute forcing their passwords. This strategy may work as a consequence of users’ negligence towards password security of stationary devices, which the users do not directly interact with in their everyday life while leaving them exposed to the Internet.

Matthew Prince, the CEO of an Internet infrastructure company Cloudflare said it’s a known issue, “There’s nothing really new about [this type of DDoS attack]. We’ve seen them for at least the last three years, they tend to be difficult to stop”.

Public release of Mirai source code was announced at Hackforums on September 30.

Dyn’s corporate headquarters are in New Hampshire.

Thursday, October 22, 2020

2020 Melbourne Lord Mayor candidate Wayne Tseng answered some questions about his campaign for the upcoming election from Wikinews. The Lord Mayor election in the Australian city is scheduled to take place this week.

Tseng runs a firm called eTranslate, which helps software developers to make the software available to the users. In the candidate’s questionnaire, Tseng said eTranslate had led to him working with all three tiers of the government. He previously belonged to the Australian Liberal Party, but has left since then, to run for mayorship as an independent candidate.

Tseng is of Chinese descent, having moved to Australia with his parents from Vietnam. Graduated in Brisbane, Tseng received his PhD in Melbourne and has been living in the city, he told Wikinews. Tseng also formed Chinese Precinct Chamber of Commerce, an organisation responsible for many “community bond building initiatives”, the Lord Mayor candidate told Wikinews.

Tseng discussed his plans for leading Melbourne, recovering from COVID-19, and “Democracy 2.0” to ensure concerns of minorities in the city were also heard. Tseng also focused on the importance of the multi-culture aspect and talked about making Melbourne the capital of the aboriginals. Tseng also explained why he thinks Melbourne is poised to be a world city by 2030.

Tseng’s deputy Lord Mayor candidate Gricol Yang is a Commercial Banker and works for ANZ Banking Group.

Currently, Sally Capp is the Lord Mayor of Melbourne, the Victorian capital. Capp was elected as an interim Lord Mayor in mid-2018 after the former Lord Mayor Robert Doyle resigned from his position after sexual assault allegations. Doyle served as the Lord Mayor of Melbourne for almost a decade since 2008.

Thursday, January 10, 2019

In late December, Indonesian cargo ship MV Namse Bangdzod vanished in local waters. The tanker, gross tonnage around 1,150 and loaded with crude palm oil, had over ten crewmembers. Wikinews examined data and contacted experts and local authorities in an effort to establish further details.

The exact date of disappearance is unclear, with industry publications reporting either December 27 or December 28. Crew totals are also unclear, with both eleven and twelve reported by industry sources while The Jakarta Post reports a captain and eleven other crew. Wikinews has contacted the Command and Control Centre of the Coast Guard seeking to clarify, among other things, the date of the disappearance and is awaiting a response.

Wikinews is also awaiting responses from both the Coast Guard and the National Search and Rescue Agency detailing the efforts being made to find the ship, which was last known to be in the Java Sea. MV Namse Bangdzod sailed with cargo from Sampit, a port town on a river in Borneo; it was last bound for Jakarta. It is owned and operated by Indonesian companies and also registered in Indonesia. The 75 m (250 ft) ship was built in 1993 in Japan.

Ships broadcast their position and other information via both the Automatic Identification System (AIS) and the Long Range Identification and Tracking (LRIT) system. AIS is a ship-to-ship safety system, but can also be detected from further afield by satellites. Marine Traffic’s AIS tracking database shows a reestablishment of AIS contact by MV Namse Bangdzod on January 6, with a pattern described by Marine Bulletin as “rather hectic and kind of confused”. In addition to asking local authorities, Wikinews sought expert input on the AIS data.

Dr. Tristan Smith of University College London, a shipping researcher with expert experience interpreting AIS results, explained to Wikinews that crews might turn their AIS transponders off on purpose for security reasons, such as “in certain sea areas where piracy is a risk” in order to “avoid attracting unwanted attention. This can involve them being turned off for several days at a time.” Doug Miller of Milltech Marine, a firm specialising in AIS, told our correspondent an AIS transponder will broadcast automatically provided it has power and antennae, even if the crew abandoned the vessel.

Baslan Damang, a security official from the port of departure, on Tuesday told The Jakarta Post radio broadcasts were being used to alert other traffic such as fishing vessels to look out for MV Namse Bangdzod. He added authorities “are still waiting for updates on the tanker’s condition, so please refrain from speculating that it had been hijacked”. As of yesterday, no oil slicks or other evidence of accidents have been found along the scheduled route the vessel was due to take. A major search continues.

Miller and Smith both acknowledged faults with the AIS system on-board as possible explanations, with Miller describing issues with the signal between the transponder and the satellite receiving it as one potential scenario for intermittent data reception. He too suggested a hypothetical scenario, in which “the AIS equipment has been tampered with or has been turned off for some of the time — either intentionally or accidentally or due to a power malfunction.” Smith called the disappearance an “interesting” case; Miller said “It is a little hard to definitively say what’s going on”. Miller explained that while transponders generally transmit every ten seconds “even if the transponder is transmitting there is no guarantee that other vessels or MarineTraffic can see it”. “It could also be a power supply issue or faulty transponder”, said Smith.

Smith told Wikinews “There are also some operations done on ships containing hazardous cargoes[…] where all risks of sparking/arcs need to be removed and radio transmitting equipment is sometimes turned off for this reason.” He said this applied to product tankers, but the long duration of AIS downtime would in this instance be unusual if this is the reason. Smith had one more theory: Namse Bangdzod could be the victim of identity theft, with a second vessel conducting manoeuvres it wished to conceal while falsely transmitting information identifying itself as Namse Bangdzod. Smith told Wikinews this might happen in cases of illegal fishing. He stated “In this scenario, it would normally be expected that both the legal and illegal transmission would be received but depending on how Marine Traffic handle this, it’s possible the two signals could be confused.”

Smith drew attention to LRIT as another method for search and rescue personnel to find the tanker. Unlike AIS, which is a safety and tracking system, LRIT is used for maritime security by seagoing nations. Created under the auspices of the International Maritime Organization, LRIT allows states to examine data about ships bearing their flag, visiting their ports, or in or near their waters.

Like all vessels exceeding 300 tons, Namse Bangdzod is required to transmit LRIT data. Search and rescue bodies can also access this information; Smith told Wikinews he believed this would include foreign navies with ships in the Java Sea. Singapore, India, and Australia have in the past conducted emergency searches of the Java Sea: All three nations offered military assistance after Indonesia AirAsia Flight 8501 vanished in December 2014.

Marine Traffic’s website’s most recently publicly available AIS result, as of Tuesday, showed the ship underway a few miles off Jakarta. VesselFinder listed no AIS results for the last month. Vessel Tracker’s database had no sighting of the ship within the last 59 days on Tuesday; the website noted the AIS signal received from Jakarta but declared the ship was not actually there. Maritime Connector has an entry for the ship in its database but has no location data available.

Local authorities, according to Maritime Bulletin, have noted other unusual AIS data. The website yesterday suggested piracy, perhaps to obtain the valuable cargo, is now the most prominent theory. The Indonesian Palm Oil Producers Association reports a value of US$473.60 per metric ton of crude palm oil as of November 2018, with the price decreasing that month. “Its plausible that an explanation [why] the AIS transponder is not transmitting is that it had been turned off by pirates who wanted to hamper the efforts of a rescue mission” Smith told Wikinews yesterday.

Yesterday the Search and Rescue Agency told The Jakarta Post it was intending to end its search on the basis of piracy, which is outside its remit; the paper also spoke to the Navy, who told it this was as-yet uncomfirmed and noted no ransom has been sought and the ship vanished from an area without previous piracy problems. Four Navy ships assisted by aircraft are searching. “We will continue searching until we find it,” 1st Fleet Command’s Navy Information Agency head Arba Agung told The Jakarta Post, which also today reported location data falsely showing the ship in Sunda Kelapa Port after its inaccurate position in Jakarta Bay was recorded.

Saturday, June 23, 2018

In order to prevent cheating in high school diploma exams, the Algerian government ordered a series of two-hour nation-wide internet blockades, starting on Wednesday, reports from tech giant Oracle and Agence France-Presse confirmed.

Per the blockage, neither the cellular nor the wired data connections are to provide internet access during the exam hours. Social networking website Facebook has been blocked for the entire period. More than 500 thousand students had to appear for re-examination in June 2016 after question papers were leaked on Facebook. During the re-examinations, there were partial bans on Facebook and Twitter, and during that month, multiple employees working at the education ministry and the exam printers were arrested on suspicion of leaking the exams.

CCTV cameras have been installed at the locations where the exam question papers are printed, and metal detectors have been installed in over 2000 exam centres. According to various reports, around 700 thousand students are due to take the exams, whose results are expected to be declared a month later from July 22. Electronic gadgets are banned from the exam centres.

National education minister Nouria Benghabrit said the decision for the nation-wide blockade was “not comfortable” for the ministry, but it “should not passively stand in front of such a possible leak.” According to internet service provider Algérie Télécom, the move was “aimed at ensuring the high school diploma tests run smoothly.”

Other countries including India and Iraq also have a record of using internet blackouts as preventative measures against cheating during exams.

Wednesday, August 29, 2007

An English lawyer has pleaded guilty to perverting the course of justice. He faked a legal judgment and sent it to a father who was pleading in Taunton family court to be able to remain involved in his child’s upbringing. The lawyer, London barrister Bruce Hyman, now awaits his sentence. The judge indicated that he could receive a prison sentence. Bruce Hyman is well-known in media circles, having produced The Hitchhiker’s Guide to the Galaxy on BBC Radio. He also produced a series with Clive Anderson, at Above the Title Productions, called Unreliable Evidence.

The father, a former City financier, had attended a series of court hearings in order to make suitable arrangements to see his child following an acrimonious divorce. Shortly before one of these hearings he received an email, ostensibly from a self-help group to which he belonged, which had attached a Court of Appeal case that appeared favourable to an application he had made for the judge to stand down from the case. The father, who was representing himself, duly showed the case to the judge. At this point, Bruce Hyman, the lawyer representing the former wife, claimed to the judge that the case was a forgery, which indeed it turned out to be.

After confirming that the self-help group had not sent him the email, the father then embarked on some detective work his own. The fraudulent email was traced via its header to a dial-up internet connection and a phone number belonging to a shop in London. The shop was able to recover CCTV footage which showed a man sending the email from an Apple laptop. The man turned out to be Bruce Hyman.

Sentencing of Hyman is due in Bristol Crown Court on the 19th of September.

Monday, January 12, 2015

Following the shootings at the offices of Charlie Hebdo, millions of people turned out yesterday for marches in Paris, in cities across France, and around the world. Reported estimates of between 1.5 and 2 million people rallied in Paris, and the French interior ministry estimated 3.7 million or more rallied across France.

44 world leaders attended the Paris march including French President François Hollande; German Chancellor Angela Merkel; British Prime Minister David Cameron; Spanish Prime Minister Mariano Rajoy; Italian Prime Minister Matteo Renzi; the President of Mali, Ibrahim Boubacar Keïta; Israeli Prime Minister Benjamin Netanyahu; Mahmoud Abbas, President of the Palestinian Authority; King Abdullah II and Queen Rania of Jordan; Turkish Prime Minister Ahmet Davutoglu; the Russian Foreign Minister, Sergey Lavrov; the Hungarian Prime Minister Viktor Orban; and the President of Gabon, Ali Bongo Ondimba.

US Ambassador to France Jane D. Hartley attended. White House Spokesman Josh Earnest responded to criticism for not sending a higher level representative on behalf of the United States: “It is fair to say we should have sent someone with a higher profile.” Earnest said the rally had been planned on Friday and President Obama attending the rally on such short notice presented “significant security challenges”. Secretary of State John Kerry said he already had a prior engagement in India.

Charlie Hebdo has previously published cartoons featuring the Islamic prophet Muhammed. These include original depictions and reprints of controversial cartoons originally by Danish newspaper Jyllands-Posten. Some of these cartoons were on display at the marches.