EDIT: There have been comments informing me that Dropbox keeps a local copy of files on a users desktop (generally speaking), thus making some of my Dropbox examples less relevant. While true, the purpose of this post is around the legal precedent being set vs. a specific fear for a specific provider. As you read, feel free to think of whichever provider you wish interchangeably with Dropbox.
I’m the first to agree that any website obviously engaged in piracy (vs. having independent users leverage the platform in unintended ways) should be shut down, and if this is the case with Megaupload, it should be shut down.
However, the way Megaupload was shut down raises scary implications. With cloud based storage becoming primary for many, it is rather jarring to have people losing legitimate files in the process, with no recourse to immediately find or recover them. I store a lot of personal files in Dropbox, and if they ever got megauploaded (I’m sure there is unintended piracy at Dropbox) I’d likely lose my copies. One has to wonder how many users have less faith in these next-generation systems as a result. We also need to consider that the average user is likely unable to determine what a websites primary use is outside of their personal use case (would your Father know MegaUpload was mostly piracy, or would he think it is a site to share and store files?).
The conclusions here alone are scary:
- If a website has significant piracy, it will be shut down at the expense of legitimate users;
- Legitimate users may be unaware of the piracy while using a legitimate service;
- Users have no recourse to immediately recover legitimate files; and
- Legitimate users may thus be less likely to use cloud services / cloud storage.
If a site must be shut down we, at the very least, need a mechanism for users to immediately recover legitimate files.
Nothing above sounds attractive (at all!) to our industry. I wanted to dig further into the indictment based on the information I could find, and am concerned that a cornerstone of the argument rests on the way infringing files are deleted.
The Digital Millenium Copyright Act provides safe harbor for sites which take down illegal content within a reasonable period of time, of which they had no prior knowledge of. Broadly speaking, it’s a concession whereby a sites users upload illegal content against the sites wishes, and is why companies such as Youtube don’t get shut down.
The Megaupload indictment reads that they removed links to the illegal file, but did not remove the actual file. To those blissfully unaware of how the file systems / internet cloud storage works, this makes sense. But, let’s consider how an average file sharing service works:
User A comes along and uploads a file (say, the film Big Fish.) User B, whom has no relationship to User A, uploads the same file. Instead of store the same file twice, most services will recognize the file is the same and give both users a ‘link’ to the same file. If User A deletes the file from their service, they are merely deleting their ‘link’ to the file, so as not to affect User B. Only when no users have a ‘link’ to the file will it be purged from servers (and in some cases, if a file is routinely popular, it may remained on the servers to account for future uploads).
When receiving complaints, Megaupload removed the ‘link’ to a file, with the assumption that other uploaders’ of the file were legitimate. If you still think that this move is directly supportive of piracy, consider the user who saves backups of digital purchases they have made / old digital content (legal in some jurisdictions). Removing a link, vs. the actual file, is clearly the fairest solution so as to not harm legitimate users.
If the precent is set that the physical file must be deleted where one of many users with ‘links’ engages in illegal activity, things will become very scary. All of a sudden, I can’t trust any file storage, saving or backup mechanism where I don’t hold the physical hard drive. Most less informed users won’t realize this until they get burned. If things are not handled carefully, there is a very real chance this will become precedent.
So far, I’m scared. Hopefully like SOPA, people will understand that a movement with potentially good intentions has been warped, twisted or simply has very unintended ramifications. If you read through further information the case, there are several other key complaints:
- In practice, the “vast majority” of users do not have any significant long term private storage capability. Continued storage is dependent upon regular downloads of the file occurring. Files not downloaded are rapidly removed in most cases, whereas popular downloaded files are retained. (items 7 – 8)
- Because a small proportion of users pay for storage, the business is dependent upon advertising. Adverts are primarily viewed when files are downloaded and the business model is therefore not based upon storage but upon maximising downloads. (items 7 – 8)
- Persons indicted have “instructed individual users how to locate links to infringing content on the Mega Sites … [and] … have also shared with each other comments from Mega Site users demonstrating that they have used or are attempting to use the Mega Sites to get infringing copies of copyrighted content.” (item 13)
- Persons indicted, unlike the public, are not reliant upon links to stored files, but can search the internal database directly. It is claimed they have “searched the internal database for their associates and themselves so that they may directly access copyright-infringing content”. (item 14)
- A comprehensive takedown method is in use to identify child pornography, but not deployed to remove infringing content. (item 24)
- Infringing users did not have their accounts terminated, and the defendants “made no significant effort to identify users who were using the Mega Sites or services to infringe copyrights, to prevent the uploading of infringing copies of copyrighted materials, or to identify infringing copies of copyrighted works” (item 55–56)
- An incentivising program was adopted encouraging the upload of “popular” files in return for payments to successful uploaders. (item 69e et al)
- Defendants explicitly discussed evasion and infringement issues, including an attempt to copy and upload the entire content of YouTube. (items 69i-l. Youtube: items 69 i,j,l,s)
In the most polite words I can muster, this shit is scary! Let’s address some of these points directly:
In practice, the “vast majority” of users do not have any significant long term private storage capability. Continued storage is dependent upon regular downloads of the file occurring. Files not downloaded are rapidly removed in most cases, whereas popular downloaded files are retained. (items 7 – 8)
If this is not a usual online file storage business, I’m scared already. There exist several models / types of file storage businesses, some of which are based around short-term sharing. Naturally, a short term file sharing business terminates files no longer active after x period of time. This does not directly mean piracy. I frequently use similar services to share presentations and other large files that hit e-mail limits.
Because a small proportion of users pay for storage, the business is dependent upon advertising. Adverts are primarily viewed when files are downloaded and the business model is therefore not based upon storage but upon maximising downloads. (items 7 – 8)
I don’t pay for Dropbox either (albeit they are not ad-based, and I intend on upgrading at one point). Free + Ads is not an uncommon model. If I’m serving file downloads, my only option is when a user attempts to download a file. This is not a high retention service.
Persons indicted have “instructed individual users how to locate links to infringing content on the Mega Sites … [and] … have also shared with each other comments from Mega Site users demonstrating that they have used or are attempting to use the Mega Sites to get infringing copies of copyrighted content.” (item 13)
I question whether this should be against the individuals, or the organization itself. While individuals are tied to the organization, data warehouses / file storage raise many key implications.
Infringing users did not have their accounts terminated, and the defendants “made no significant effort to identify users who were using the Mega Sites or services to infringe copyrights, to prevent the uploading of infringing copies of copyrighted materials, or to identify infringing copies of copyrighted works” (item 55–56)
The word “significant” is what scares me here. It is grey. If “significant” was well defined, it becomes a different story.
An incentivising program was adopted encouraging the upload of “popular” files in return for payments to successful uploaders. (item 69e et al)
Indicative of a freemium model. I get incented on many websites for sharing popular content. Fair enough, the popular files may have been pirated content (and thus removed), but this is not an issue with the model, per se.
———-
As one reads further and further I find that the complaints could be made against clearly legitimate file storage services, i.e. Dropbox. One cannot deny that Megaupload was used for piracy, and if this was directly encouraged and profiteered by the organization they should be shut down. I have no qualms on this.
Where I get scared is the process and submitted evidence being leveraged for this shut down. If this becomes precent, we are in for a wild and scary ride, right under the nose of slowing down the SOPA march. This feels like a web of vaguely defined concepts. Based on prior movements by those in power, I’m certainly not comforted by their capacity to understand the issue. The challenge is that on the surface, the shut down makes sense (we found pirated files, and they didn’t delete them.)
We still have a lot of educating left to do…