RIAA Abuses DMCA to Take Down Popular Tool for Downloading Online Videos

Author: dannyobrien

Score: 405

Comments: 99

Date: 2020-11-06 00:55:27

Web Link

________________________________________________________________________________

kristopolous wrote at 2020-11-06 06:44:20:

They did a bunch of sites with similar tech shortly after. I can't help but think they are so out of the loop that they _just_ found out the technology existed.

dfxm12 wrote at 2020-11-06 13:33:06:

Or maybe the court that the RIAA thinks will ultimately hear any related cases just had a conservative judge confirmed that they think will be sympathetic to them.

dragonwriter wrote at 2020-11-06 15:03:21:

That couldn't possibly shift anything; RBG was pretty much a copyright maximalist.

The best ACB (who AFAIK has very little if any notable copyright record, either as a judge or otherwise) could be, from their perspective, is no change from the _status quo ante_.

poorman wrote at 2020-11-06 15:28:49:

I'm completely guessing here but as ACB takes the stance of originalism, it doesn't seem like much of a stretch for her to look at the DMCA's ability to silence people talking about how to break DRM as a blatant disregard for the for the First Amendment.

Wowfunhappy wrote at 2020-11-06 14:55:24:

Are conservative judges more likely to rule on the side of strengthening copyright? I didn't realize there was a liberal <-> conservative split on this.

Claudus wrote at 2020-11-06 15:22:35:

I haven’t noticed a political association with copyright cases, I know some conservative Judges in Texas counties pretty much kicked copyright trolls out of the courtroom when they tried targeting defendants using IP addresses.

Intellectual Property also seems like a more liberal realm, Hollywood, Silicon Valley, RIAA, MPAA, Disney, Apple, etc. all seem to be quite left leaning.

harpiaharpyja wrote at 2020-11-07 03:43:09:

They aren't. Like others have pointed out, RBG was a copyright maximalist and all the proponents of strengthening copyright, RIAA, Hollywood, Silicon Valley, etc tend to be left-leaning.

No idea where that line of thinking came from. Though if I were a little more cynical I'd say sometimes it feels like there's a trend to attribute everything negative to conservatives.

momokoko wrote at 2020-11-06 15:13:49:

Wow. Just I don’t even know what to say. I would definitely look the case history of IP related decisions by the Supreme Court.

thrownaway954 wrote at 2020-11-06 14:25:58:

no... everything is moving to streaming now so there is a big push to make sure that there is a single portal to consume content.

null0pointer wrote at 2020-11-06 04:40:48:

Besides the fact that DMCA was probably created specifically for the RIAA, is it possible for the EFF to push for the RIAA to be stripped of their right to use DMCA due to their abuse of it?

rrobukef wrote at 2020-11-06 10:50:46:

OSS developers as a whole can fight back by lobbying projects to add license exceptions against certain corporations. Viewing riaa.com, let's start with jQuery, WordPress and bootstrap.

mnw21cam wrote at 2020-11-06 11:06:36:

It's sometimes very hard to change the license of an open source project. Technically you would need to contact all of the contributors to the project (and there may be a _lot_ of them) and acquire their permission.

In any case, RIAA already has a license to use the existing software. That license can't be unilaterally withdrawn, unless RIAA violates terms of the license that invalidates it. _New_ versions of the software can be released with the new license, but RIAA can continue to use the older version with the original license.

And, as other people have pointed out, this would create a software license that is "non-free", and therefore incompatible with other open-source licenses, causing all sorts of headaches with software distributions, and any other software that has a dependency on the software.

jraph wrote at 2020-11-06 11:32:20:

And if everybody add their own little restrictions on people / organizations they find evil, the whole thing could rapidly become unmanageable even if licenses are somewhat compatible when trying to combine codes from different projects.

This is not a good path to take, even if it sounds appealing.

Revenge is also often not the right response to a bad action, it can escalate where the opposite effect may be desirable.

Let's try other stuff and continue to allow RIAA to use our tools, they even may evolve for the better in the future and that would be great, no?

rrobukef wrote at 2020-11-06 12:34:38:

Licensing is already a big mess.

And it is not about revenge. It is about enforcing the spirit of those open source licenses. WordPress uses GPL to force users to contribute to open source.

Do you think the RIAA contributes? Instead they actively attack it.

Do you think the RIAA can evolve for the better? It has an explicit mandate to restrict copyrights. Its existence opposes the software they use.

True, sadly it is unfeasible. It is a nice fantasy.

athms wrote at 2020-11-06 16:29:47:

>WordPress uses GPL to force users to contribute to open source.

No it doesn't. Users can modify the source and refuse to share it. Sharing only applies if one distributes the code.

rrobukef wrote at 2020-11-06 17:56:11:

This depends on whether the GPL includes (part of) the html-code _distributed_ by the website (seems not, this is the domain of AGPL). GPL is widely known to be insidious.

Using 'force' was perhaps too strong.

raxxorrax wrote at 2020-11-06 12:20:49:

The RIAA is based on revenge against media sharing. There had to be some rules, but I don't think I would want to compromise with the organization.

jmpman wrote at 2020-11-06 13:12:09:

Interesting view. I thought the RIAA was based on ensuring rights for copyright holders.

horsawlarway wrote at 2020-11-06 15:09:04:

If by rights, you explicitly mean "The right to be paid" then I think you're probably correct.

Although I'd note they're not really interested in having the musician get paid. Mainly just members of the RIAA.

Now - I have some sympathy for that view - I'd also like to get paid, and while I think the RIAA has little real value in the world, some of it's members certainly are working on the marketing and promotion front.

That said, I use many of these downloading services to save conference talks from youtube. So they're attacking a service I use legally for a useful purpose. At some point, ethically, I start to lose ANY sympathy for them as an organization.

Basically -

https://www.youtube.com/watch?v=ZNS7IqmZBbA&has_verified=1

finnthehuman wrote at 2020-11-06 15:02:03:

You're not going to get a lot of traction asking open source projects to stop being Open Source.

The OSI open source definition (and the Debian Free Software Guidelines that it was adapted from) specifically prohibit discrimination against Persons, Groups or Fields of Endeavor.

AnthonyMouse wrote at 2020-11-06 13:51:22:

> Viewing riaa.com, let's start with jQuery, WordPress and bootstrap.

More interesting perhaps would be a restriction on using the software on a device that implements DRM. Then wait for the software to end up on RIAA member servers or hardware products and enforce the license.

swiley wrote at 2020-11-06 13:59:10:

That's what the GPLv3 does more or less.

inops wrote at 2020-11-06 12:46:32:

I don't know the specifics, but I'm fairly sure that would make the software not open source/free software as recognised by the OSI/FSF.

rrobukef wrote at 2020-11-06 17:46:38:

Surely there exists better terms than an explicit blacklist. I see this as a social weakness in GPL and other open source. GPL wanted to restrict people from profiting without contributing back. Now they profit and attack other projects.

What about this: GPL is supported by the FSF. Add a term which allows license use as long as no other projects explicitly supported by the FSF are attacked. (For some definition of attacked, supported,...)

Everything remains open, yet the FSF/OSI gets ways to fight back against egregorious takedowns.

Even just terms revoking the youtube-dl license the RIAA has (because you can bet one of them has used it), would be a step forward.

mlang23 wrote at 2020-11-06 12:13:34:

This would make these projects non-DFSG-compliant, and Debian (and its derivatives) could no longer distribute a package.

I totally get the idea of boycott. But the definition of freeness says that if you do that, you are no longer free.

mschuster91 wrote at 2020-11-06 10:54:31:

That's impossible due to the licensing terms of the GPL and other open source licenses.

IIRC there was a row on Debian many years ago that dealt with some license derivation that prohibited use in weapons research and construction...

Darkphibre wrote at 2020-11-06 06:50:12:

This was a fascinating writeup of one person's take on just how... strange a use for DMCA 1201 this was.

https://www.techdirt.com/articles/20201023/19035045569/riaa-...

rStar wrote at 2020-11-06 07:06:38:

microsoft had a rare chance here to actually stand up for developers in a way that would gain them a lot of mindshare, goodwill and respect. i wish they would’ve taken it.

whereistimbo wrote at 2020-11-06 08:20:08:

The GitHub CEO Nat Friedman (

https://news.ycombinator.com/user?id=natfriedman

) personally reached youtube-dl dev on IRC to offer an helping hand.

https://twitter.com/t3rr4dice/status/1320660235363749888

(via TorrentFreak)

wegs wrote at 2020-11-06 11:33:02:

Which was a completely duplicitous PR stunt. Nat:

* Complied with a DMCA take-down request which he had no legal reason to comply with. DMCA takedown requests are for infringing content. DMCA bans anticircumvention measures, but that's between youtube-dl and RIAA. RIAA does that by initiating litigation, or sending a demand letter to the youtube-dl project.

* Took down forks of youtube-dl, which he had no reason to do. Those should have been independent DMCA requests.

* Threatened to ban users who forked youtube-dl, in violation of his own ToS and DMCA policy.

If Nat was doing the bare minimum required to maintain legal compliance, I wouldn't fault him. Legally, he's zealously pursuing youtube-dl and acting as the RIAA's lapdog. At the same time, he's publicly making statements of empathy towards youtube-dl.

Pathetic.

vulcan01 wrote at 2020-11-06 15:32:15:

I wouldn't be surprised if Microsoft's legal department can override Mr. Friedman's decisions. GitHub's owned by Microsoft, after all.

And Microsoft is part of the RIAA...

feanaro wrote at 2020-11-06 08:58:50:

Which is more of an indication that they realized this is costing them too much good will after the fact.

He did still require code to be removed in order to reinstate the repository and the RIAA still managed to cause turmoil, so I would call this too little, too late.

raxxorrax wrote at 2020-11-06 12:04:50:

You cannot know if it is intended or just damage control, because of course it will also fall back on GitHub.

daptaq wrote at 2020-11-06 07:42:48:

But then again, they are still Microsoft and deserve none of that.

MYEUHD wrote at 2020-11-06 11:05:33:

Microsoft is a member of RIAA

darkcha0s wrote at 2020-11-06 11:25:47:

Microsoft had a rare chance to stand up for developers? By what, tackling the DMCA head on by defending a tool which is _clearly_ against the provisions of it? I can get behind them standing up when its an issue thats actually debatable, but this case seems so clear cut it would have just been a waste of everyones time. But hey, anything to shit on MS right?

dredmorbius wrote at 2020-11-06 12:19:57:

Microsoft is a member of the RIAA. It could and should resign.

Microsoft can lobby for further exceptions to §1201 anti-circumvention.

Microsoft can issue a statement formally protesting RIAA's action.

Microsoft could offer an Amicus brief or other statements in favour of youtube-dl developers.

Whilst we're discussing monopolists, Google could issue a statement that the rotating is not in fact an anti-circumventiion device.

rStar wrote at 2020-11-07 02:20:49:

microsoft has lawyers and can afford to pay them. I find your characterization of “_clearly_” as anything but. As to Microsoft, with Ballmer in charge, this is definitely how they would act, but I guess I was under the mistaken impression that under Nadella things would operate differently.

chii wrote at 2020-11-06 05:30:04:

i certainly hope the Streisand effect brings the general public the knowledge that this program exists and proliferate its existence.

Whether the RIAA is acting correctly within the law or not is irrelevant to me. If they are indeed acting correctly within the existing laws, then i would call for civil disobedience against unjust and unfair law.

seg_lol wrote at 2020-11-06 05:52:43:

The program is useless w/o updates. Knowledge of it does nothing.

ObsoleteNerd wrote at 2020-11-06 12:57:53:

It’s still being updated on their website, just not on GitHub:

https://youtube-dl.org/

buckminster wrote at 2020-11-06 17:12:25:

It would be super nice if they published a copy of their latest git repository. It doesn't need to be anything fancy. Just a .gz file pushed to the website once a day (or week even) would be great.

seg_lol wrote at 2020-11-06 19:06:35:

pip download --no-binary ":all:" youtube-dl

vagrantJin wrote at 2020-11-06 07:33:20:

No its not. For some sites maybe but not for all their supported sites.

musicale wrote at 2020-11-06 03:11:25:

It's definitely strange; normal DMCA requests are to remove infringing content, but youtube-dl is code, not content.

dylan604 wrote at 2020-11-06 04:46:52:

You must have missed the whole DeCSS debacle. That was code that absolutely was meant to circumvent an encryption protection scheme regardless of how weak its encryption was. They went so far as to print the source code of DeCSS on t-shirts[0] as first amendment gestures after that code was deemed enemy number 1.

[0] a 20 year old article:

https://www.wired.com/2000/08/court-to-address-decss-t-shirt...

musicale wrote at 2020-11-07 01:28:01:

The comparison with DeCSS doesn't make a lot of sense since youtube-dl was not decrypting anything.

Regardless, since DMCA takedowns are for infringing content, isn't EFF's point valid, namely that there was no infringing content?

phendrenad2 wrote at 2020-11-06 05:10:13:

This is a gross misremembering of how DeCSS went down. They didn't just print "source code" on shirts, they very specifically printed the "magic number" that the MPAA was claiming was copyrighted _CONTENT_, not a circumvention device.

dlgeek wrote at 2020-11-06 06:44:08:

You're conflating DeCSS (which GP post was describing) and the AACS encryption key debacle which came later.

dylan604 wrote at 2020-11-06 16:02:46:

Who's grossly misremembering what? CSS was the encryption scheme attempting to protect DVDs. AACS was the encryption for Blu-ray. DeCSS could defeat CSS encryption because it was so weak. AACS was defeated because the master key that generated all other keys was discovered [0]. That's the magic number to which you are referring. Totally different subjects on somewhat similar topics. These 2 cases were separated by years.

[0]

https://en.wikipedia.org/wiki/AACS_encryption_key_controvers...

kmeisthax wrote at 2020-11-06 04:28:09:

DMCA Section 1201 has a separate notice-and-takedown regime from DMCA Section 512 (the one most people think of when they hear "DMCA takedown").

AnthonyMouse wrote at 2020-11-06 14:12:06:

Could you point to the portion of 1201 that has a notice-and-takedown regime _at all_, as opposed to the ordinary default of the plaintiff needing a court order (which the RIAA hadn't bothered to get)?

brokenmachine wrote at 2020-11-06 04:17:30:

I believe some of the tests download a very small amount of copyrighted content.

shakna wrote at 2020-11-06 04:23:30:

Exactly 10Kb of the video. Which would very likely fall under fair use.

boomboomsubban wrote at 2020-11-06 15:05:55:

This still isn't relevant for a DMCA takedown request, youtube-dl was not hosting the content.

zucker42 wrote at 2020-11-06 06:28:51:

Unfortunately, companies have to respond to even grossly incorrect DMCA requests to avoid liability and there's no recourse against abusive requests.

dragonwriter wrote at 2020-11-06 06:35:16:

> Unfortunately, companies have to respond to even grossly incorrect DMCA requests to avoid liability

No, they don't, because if they are grossly incorrect, there's no liability to avoid.

They have to respond to even grossly incorrect though facially valid DMCA requests to avoid the costs of trying to evaluate whether DMCA requests that are facially invalid are sufficiently grossly incorrect as to present no real risk of liability.

> there's no recourse against abusive requests.

Sure there is, civil action for defamation

thesnide wrote at 2020-11-06 17:36:33:

I'm always wondering about the coincidence of calendar proximity of google music moving to youtube music and that takedown that explicitly mentions VEVO

1vuio0pswjnm7 wrote at 2020-11-06 03:50:08:

"DMCA 1201 says that it's illegal to bypass a digital lock in order to access or modify a copyrighted work."

No, 1201 says, among other things, that it is a violation of the Copyright Act (which may only carry civil liability, so not necessarily "illegal") to share the means to circumvent access controls to a copyrighted work. That is the part of 1201 the RIAA cited in its letter.

It is the sharing that is the alleged 1201 violation. Not any circumvention.

1vuio0pswjnm7 wrote at 2020-11-06 07:01:10:

The RIAA letter cites 1201(a)(2) and 1201(b)(1). The letter alleges sharing of circumvention software.

The letter does not cite 1201(a)(1); it does not allege circumvention.

For a section 1201 violation to be criminal it needs to be willful and for the purpose of financial gain. See Section 1204. To me, the term "illegal" means "in violation of the law", and hence enforceable by so-called law enforcement. Here, non-wilful violations of "the law" that are not committed for financial gain are only enforceable by copyright owners. This, to me, falls into the category of violating someone's intellectual property rights, not violating "the law". If you see things another way, that's fine. I respect your opinion and ask that you in turn respect mine.

qiqitori wrote at 2020-11-06 07:34:06:

Here's the full text of the relevant sections, from

https://www.law.cornell.edu/uscode/text/17/1201

. (Though who knows, there might be other relevant stuff somewhere.)

Note the use of the phrases "primarily designed", "has only limited commercially significant purpose", "is marketed ... for use in circumventing" -- I think the RIAA is on thin ice in this respect, but that's not for me to decide of course. Grepping through my bash history I see some stuff that could perhaps be RIAA stuff, and other things that aren't.

Anyway:

(a) Violations Regarding Circumvention of Technological Measures.—

(2) No person shall manufacture, import, offer to the public, provide, or otherwise traffic in any technology, product, service, device, component, or part thereof, that—

(A) is primarily designed or produced for the purpose of circumventing a technological measure that effectively controls access to a work protected under this title;

(B) has only limited commercially significant purpose or use other than to circumvent a technological measure that effectively controls access to a work protected under this title; or

(C) is marketed by that person or another acting in concert with that person with that person’s knowledge for use in circumventing a technological measure that effectively controls access to a work protected under this title.

(3) As used in this subsection—

(A) to “circumvent a technological measure” means to descramble a scrambled work, to decrypt an encrypted work, or otherwise to avoid, bypass, remove, deactivate, or impair a technological measure, without the authority of the copyright owner; and

(B) a technological measure “effectively controls access to a work” if the measure, in the ordinary course of its operation, requires the application of information, or a process or a treatment, with the authority of the copyright owner, to gain access to the work.

(b) Additional Violations.—

(1) No person shall manufacture, import, offer to the public, provide, or otherwise traffic in any technology, product, service, device, component, or part thereof, that—

(A) is primarily designed or produced for the purpose of circumventing protection afforded by a technological measure that effectively protects a right of a copyright owner under this title in a work or a portion thereof;

(B) has only limited commercially significant purpose or use other than to circumvent protection afforded by a technological measure that effectively protects a right of a copyright owner under this title in a work or a portion thereof; or

(C) is marketed by that person or another acting in concert with that person with that person’s knowledge for use in circumventing protection afforded by a technological measure that effectively protects a right of a copyright owner under this title in a work or a portion thereof.

(2) As used in this subsection—

(A) to “circumvent protection afforded by a technological measure” means avoiding, bypassing, removing, deactivating, or otherwise impairing a technological measure; and

(B) a technological measure “effectively protects a right of a copyright owner under this title” if the measure, in the ordinary course of its operation, prevents, restricts, or otherwise limits the exercise of a right of a copyright owner under this title.

emayljames wrote at 2020-11-06 07:51:31:

It all falls apart for the RIAA at 2) a) "....measure that _effectively_ controls access to a work...."

dragonwriter wrote at 2020-11-06 04:03:42:

> No, 1201 says, among other things, that it is a violation of the Copyright Act (which may only carry civil liability, so not necessarily "illegal")

Illegal (“contrary to or forbidden by law”) , but not necessarily criminal.

zucker42 wrote at 2020-11-06 06:19:31:

> No person shall circumvent a technological measure that effectively controls access to a work protected under this title.

https://www.law.cornell.edu/uscode/text/17/1201

emayljames wrote at 2020-11-06 09:24:04:

Key word that makes the claim fall apart is _effective_.

If the RIAA where to win, then it would mean just opening a URL would give the site owner grounds to file proceedings.

An example being a DB being left open to the internet, that has sensitive data, the DB owner would be able to file a case if you just opened the DB.

Buttons840 wrote at 2020-11-06 12:11:23:

And when defining "effective" we should not only consider YouTube, but also the software protecting that one guy's personal collection of over 9000 movies that he has exposed to the web for his own personal use.

For example, if YouTube has _effective_ DRM. Then I suppose I should be good to throw up all the latest Disney movies on my personal website, for personal viewing, behind that same _effective_ DRM, right?

Arch-TK wrote at 2020-11-06 09:29:12:

The "technological measure" doesn't "effectively" control anything.

You can circumvent it using the inspect element feature of any modern browser.

yt-dl "cirucmvents" it by executing the javascript (the same thing your web browser does).

At this rate V8 is going to get DMCAd for the same reason.

Rizz wrote at 2020-11-06 11:21:34:

Effectively of course means "in effect" in this context, for example YouTube doesn't have to prove the measure was designed to limit access, only that it does in some way.

Pretending yt-dl simply does what YouTube does is obviously not true either, because if it did, then yt-dl wouldn't exist. The copyright holder decided he would allow the streaming of the work, if you want to download it you should either get the ok from the copyright holder for that or choose another work to download, or even make one yourself. V8 doesn't change that.

rpdillon wrote at 2020-11-06 18:09:15:

I was curious about this as well, so I watched Leonard French's discussion about this case, as he is both a copyright defense lawyer and has some background with code.

He discusses exactly this issue, and points out that it does not matter how strong the protection really is...even if it's a basic obfuscation that could be reversed with a one-liner, it still qualifies.

You can watch it here:

https://youtu.be/wZITscblMBA?t=889

In short, even though the above comment is being downvoted, I think it is correct from a legal perspective, in the sense that even YouTube's basic approach to obfuscation will be sufficient to quality.

Rochus wrote at 2020-11-06 11:37:16:

> Effectively of course means "in effect" in this context

No, it means "in an effective manner"; that's also how it is specified in European legal languages (which have more different words with less ambiguity); the effectiveness must be an objectively ascertainable characteristic of the technology, not simply an (unsubstantiated) claim by the claimant; A "mock protection" would not be protected by the law.

> because if it did, then yt-dl wouldn't exist.

You mix up design decisions made by Youtube with copyright law. Even if Youtube requires users to not download videos in their terms of services this has nothing to do with copyright law and the DMCA based actions.

wegs wrote at 2020-11-06 11:39:22:

I've only downloaded works with youtube-dl where I had permission of the copyright holder.

The whole point of youtube was to make it convenient for decentralized content creators to share things. Most WANT their stuff being downloaded. If I'm uploading an educational or family video to Youtube, it's because it's a convenient way for others to watch it, not because I want to maintain control, or earn $0.0001 in ad revenues for Auntie being shown a Trump campaign ad.

youtube-dl makes it possible for kids in the developing world to watch educational videos, for people to watch family videos in rural America, and for kids to learn remotely.

Youtube-dl doesn't do what Youtube does. What it does is extends Youtube to millions of people without high-speed internet connections. That's not a population Google particularly cares about including (not a lot of ad dollars), but it's also not one Google particularly cares about excluding (they are not douchebags, like the RIAA).

If the RIAA wants locked-down controls, they should go with centralized platforms. That's what they're there for. In the meantime, shooting educators using Youtube in the foot means, eventually, educators will go somewhere else.

Arch-TK wrote at 2020-11-06 19:46:23:

yt-dl exists not just for youtube, it allows users to access audio and video streams from many different websites without the overhead of a full featured web browser.

But in the case of youtube, it exists to automate what can trivially be done by hand using the inspector. Seriously, yt-dl really does just selectively run some javascript which gives it the video URL.

I disagree that "effectively" means "in effect", it's the first time I've heard of this and in past court cases regarding such protection measures, the plaintiff had to prove that the measure was effective (not trivially bypassed by an unskilled average user by accident as I think could be argued in this case).

Regarding your claim that I am "pretending" that yt-dl simply does what YouTube does: When I go to the inspector and find the URL for the video and audio streams, without prior knowledge that youtube is using some kind of "rolling cipher" I would have no idea that there was some kind of protection in use. I can access the video stream of a youtube video using just my mouse, I don't have to run any functions or find any decryption functions. You should try it. It's hard to argue that there is a protection mechanism in place if someone could by accident discover the video data if they were a curious user who started playing around with the inspector console.

Finally, to address your implication that the tool is designed to unlawfully acquire content from youtube. I don't think the tool is intended for that purpose, at least not the way it is presented. I think it's important to distinguish between "downloading with intent to keep" and "downloading with intent to temporarily access". I'm not sure if such a distinction is ever made in the courts but it should be considering the former may be illegal depending on whether you asked the copyright holder if you can do it and the latter is literally what your web browser does. 99% of the time I use youtube-dl (which is also the way it gets used by programs like mpv or the kodi youtube plugin), I use it to access and temporarily view a video. I may be on a machine where having a full fledged web browser would be impossible because of performance reasons or whatever. Or I just don't like the youtube viewer and want more control over the playback. The project also codifies in multiple places the intention that it is not designed for illegal use. Extractors which bypass DRM or access control measures are not accepted.

If you look at the implementation of youtube-dl's youtube extractor (please do, the code isn't that complex) it is easy to claim that: youtube-dl is simply a very heavily stripped down web browser which is intended simply to provide the ability to view videos and audio streams on websites with minimal overhead without any intent to circumvent any protection schemes.

As a final note: youtube does have DRM protected videos which use some kind of encryption, these do not work with youtube-dl, I tried (and I paid for the video not knowing that I would be stuck with it being encrypted unless I had EME enabled, in a last ditch effort to watch it I tried youtube-dl but it had the same problem, I got a refund).

ur-whale wrote at 2020-11-06 09:49:10:

Arguing the finer points of a law that is deeply flawed in the first place strikes me as a terrible waste of one's intellectual talents unless the goal is to get said law to be revoked.

bitwize wrote at 2020-11-06 04:36:47:

Wrong.

Section 1201 (a) (1) (A) says:

"No person shall circumvent a technological measure that effectively controls access to a work protected under this title. The prohibition contained in the preceding sentence shall take effect at the end of the 2-year period beginning on the date of the enactment of this chapter."

So circumvention itself is also illegal under the DMCA. But this issue is about trafficking in circumvention devices.

yason wrote at 2020-11-06 09:02:44:

The question is that, AFAIK, there is nothing to circumvent by downloading from Youtube: there's no DRM or anything at all to actually be cracked. Right?

To over-simplify, you just need to implement a streaming client that saves to disk. That's the reason there are a gazillion youtube downloaders and custom, also open-source, clients that can "show" Youtube.

Thus, unless I've been misinformed and, extrapolating a little, they could just as well take down 'wget' in the same go because it also downloads potentially copyright-infringing files over various protocols.

Wowfunhappy wrote at 2020-11-06 14:59:46:

I've seen a lot of speculation that the "rolling cipher" on certain Youtube videos could be classified as a protection scheme.

I'm actually more interested in what this could mean for Adblockers, which often need to employ a variety of tricks to get around anti-adblocking tech on websites.

croes wrote at 2020-11-06 05:45:39:

If you can circumvent the technological measure it isn't effectively controlling access, is it?

feanaro wrote at 2020-11-06 09:02:30:

More importantly, if a work is distributed under a "protection" mechanism that is regularly bypassed by browsers, does that mean that browsers are circumvention tools too?

bitwize wrote at 2020-11-06 10:07:23:

Browsers don't bypass the protection mechanism, they implement it. Certain YouTube videos are licensed only for streaming playback by the YouTube site or app. There's JavaScript on the YouTube site that descrambles the URL of the content. Going to the YouTube site and playing back a video from there is fine. However, if you were to write, say, a Node version of youtube-dl that downloads and 'eval's the descrambling code from the site, and use that to download a video for uses not licensed or authorized by the rightsholder, that too would be circumvention under the DMCA and thus illegal.

There's really is no way around this. YouTube videos are protected by technological copyright restrictions. ANY attempt to get around those restrictions is a crime.

Even if this were not the case, you would be committing copyright infringement by downloading the videos for unauthorized use anyway. The DMCA just gives legal teeth to technological attempts to prevent casual infringement.

feanaro wrote at 2020-11-06 10:26:36:

> Browsers don't bypass the protection mechanism, they implement it.

This is incorrect. The _website_ implements the protection mechanism, browsers execute it, just as youtube-dl. The implementor is the person writing the code, not the system executing it.

> Certain YouTube videos are licensed only for streaming playback by the YouTube site or app.

The meaning of this sentence is unclear. What does it mean for playback to only be allowed _by the (web)site_? Websites alone cannot _do_ anything -- they require a web agent which fetches and executes them. Firefox, Chrome, Safari and youtube-dl are examples of such agents.

> Even if this were not the case, you would be committing copyright infringement by downloading the videos for unauthorized use anyway.

Luckily for me, I am in a jurisdiction where this is not the case and where DMCA plays no role.

bitwize wrote at 2020-11-06 10:01:56:

According to the law, this is incorrect. A technological measure to control access is effective if, "in the normal course of its operation" (that is, when it is not being bypassed), it protects the rights of the copyright owner to some piece of work. The most trivial thing -- JavaScript code that disables right clicks -- can be effective under this standard. And getting around it would still be a crime.

croes wrote at 2020-11-06 12:06:13:

The javascript example shows the problem of this definition.

What if I have disabled javascript or use a browser without javascript?

I wouldn't even know that some kind of protection exists.

Buttons840 wrote at 2020-11-06 11:41:12:

What if I distribute youtube-dl behind some trvially bypassed JavaScript protections and some passwords and "you're not authorised" messages a la CFAA, then have an "enemy" spread knowledge of how to bypass all this on some shady forums? Who sues me? And how many felonies do they commit in building their case against me?

In other words, there's a catch-22 in how strict we are about the definition of _effective_ protection. 99% of the public won't even open their browser tools so I guess if youtube-dl is put behind some very generously documented JavaScript that is easily bypassed then it is not actually out in public because it is _effectively_ DRM protected, right?

briandear wrote at 2020-11-06 07:43:05:

That’s like suggesting a locked door that gets picked isn’t really breaking and entering.

croes wrote at 2020-11-06 12:07:36:

I doubt the laws against breaking in talk about effectivly locking the door. It's just entering without permission.

emayljames wrote at 2020-11-06 09:26:33:

But the "lock" in this case doesn't exist.

bitwize wrote at 2020-11-06 09:58:33:

It's more like saying owning lockpicking tools automatically makes you a thief. (Which is the law in some states, like Illinois).

jimktrains2 wrote at 2020-11-06 04:01:15:

I'm curious how this interacts wit the First Amendment, especially if the circumvention itself is legal.

zucker42 wrote at 2020-11-06 06:22:51:

I certainly believe it's unconstitutional but as an non-expert I think the courts feel skeptical of that argument (I believe they argue circumvention is conduct and not speech), and are perhaps less likely to review such cases because they feel it's unimportant. I'm hopeful about the EFF litigation though.

shmerl wrote at 2020-11-06 04:22:23:

It is unconstitutional. EFF filed a court case to repeal it.

https://www.eff.org/deeplinks/2019/06/first-amendment-case-a...

1vuio0pswjnm7 wrote at 2020-11-06 08:46:55:

2 out of the 3 First Amendment claims (overbreadth, prior restraint) were dismissed. The one that survived was that 1201 might be unconsitutional as applied to the specific set of facts: a researcher publishing a book on encryption. The case is ongoing; there are no indications that EFF will succeed.

shmerl wrote at 2020-11-06 14:49:56:

Someone should succeed, may be legislators who shouldn't have allowed this to exist in the first place. Corrupt DMCA 1201 garbage should be eventually repealed.

mullikine wrote at 2020-11-06 02:45:20:

In the words of Jackie Chiles, this is outrageous, egregious, preposterous

vlovich123 wrote at 2020-11-06 07:31:03:

I’m curious how the DMCA interacts with the 1st amendment. Have there been court cases examining this kind of DMCA application vs free speech rights?

shakna wrote at 2020-11-06 07:55:03:

There is one in progress from the EFF. [0]

[0]

https://www.eff.org/deeplinks/2019/06/first-amendment-case-a...

dredmorbius wrote at 2020-11-06 12:22:48:

Poorly.

EFF explainer video:

https://youtube.com/watch?v=ck7utXYcZng

panny wrote at 2020-11-06 05:34:40:

I'm surprised EFF bothered to say anything at all, now 13 days later. For those keeping score, Popcorn Time repo was only down for 15 days after RIAA's DMCA takedown.

ikeboy wrote at 2020-11-06 04:02:44:

This is mildly misleading. RIAA's argument is mostly about the marketing for use with copyrighted content. The statute clearly doesn't say what EFF is saying RIAA thinks it says, and I don't see any indication that RIAA actually thinks or claims that interpretation.

nullc wrote at 2020-11-06 13:05:51:

> about the marketing for use with

You mean the fact that buried deep inside some test scripts were test targets to test specific URL encoding schemes that only exist on uploads by specific youtube partners (e.g. VEVO) by downloading and discarding less than 1 second of video?

The youtube-dl documentation uses free videos uploaded by youtube-dl developers and by the Linux foundation.

The claims that youtube-dl used RIAA member copyrighted works as examples in their docs are false.