December 22, 2024

Lexmark Opinion Available

The Court’s opinion in the Lexmark case is now available. Here’s a summary. (Caveat: I’m inferring some of the technical details, since all I have is the Court’s summary of what the expert witnesses said; but I’m fairly confident that my inferences are correct.)

Toner cartridges for certain Lexmark printers contain small computer programs that tell the printer how much toner is left in the cartridge. The Lexmark printers use cryptographic means to “authenticate” the cartridge program; if the program doesn’t pass the cryptographic test, the printer refuses to work with it.

Static Control’s cartridge chip contains a verbatim copy of the Lexmark cartridge program, a program which is about fifty bytes in length. The Court found this small program to be copyrightable. The Court also found, as a factual matter, that Static Control could have figured out by further reverse engineering how to write a different program that passed the cryptographic test. (Lexmark did not challenge Static Control’s right to reverse engineer any of the Lexmark products.) The Court therefore found that Static Control’s redistribution of Lexmark’s cartridge program was copyright infringement.

The Court also ruled that Static Control’s program was a circumvention device under the DMCA, since (the Court said) it circumvented Lexmark’s cryptographic handshake. The Court actually found that the handshake controls access to both the cartridge program and the printer’s software, therefore finding a double DMCA violation.

If the Court’s factual findings are correct, the copyright portion of the ruling seems pretty straightforward.

The DMCA portion is another story. According to the Court, the Lexmark software implements the access control measure; but the Static Control software which is completely identical to the Lexmark software is improperly circumventing the measure. In other words, circumvention is determined not by what a device does, but by whether the maker of some complementary product has approved it.

The other slightly puzzling aspect of the Court’s DMCA analysis is the finding that the cryptographic handshake controls access (by the user) to the printer’s software. Whether or not a valid toner cartridge is inserted, the printer’s software runs, and it provides services to the user. Thus the user has access to the printer software no matter what; so it’s hard to see how anything is controlling access. True, the printer software behaves differently when a conforming cartridge is inserted, but it seems like a real stretch to say that this change in behavior constitutes “access” to the printer.

It will be interesting to see what happens next. Perhaps the copyright ruling will render the DMCA issues moot; or perhaps the Court’s DMCA reasoning will be subject to review at some point.

Who Uses Peer-to-Peer?

If you listen to the rhetoric about peer-to-peer copyright infringement, you might conclude that most of that infringement takes place at universities. But at this week’s House hearings on “Peer-to-Peer Piracy on University Campuses,” committee chairman Rep. Lamar Smith reportedly cited statistics showing that 10% of P2P users are at educational institutions. That’s surprisingly low. Does anybody know where the other 90% are?

More on Targeting File-Sharers

Seth Finkelstein suggests a follow-the-money approach to thinking about the RIAA’s strategy in enforcing against file sharers. He reaches the same conclusion as I do (though for a slightly different reason), that ISPs are the leverage point for enforcing against file sharers.

The reason for this, Seth says, is that ISPs have money and average file sharers don’t. He has a point here, but he also makes a bit of a simplification. Though the common image of file sharers is of kids, my guess is that the demographics of file sharers are pretty close to those of music buyers. Data on this point are pretty hard to come by, but Napster’s statistics showed more middle-aged users than expected, and I assume that hasn’t changed with the new systems. In my view, people are drawn to these systems as much because of their ease of use (at least compared to the record-company alternatives) as because they are free. So there will be at least some individual file sharers who have a lot to lose.

Another reason the RIAA might want ISPs to take care of enforcement is that whoever does the dirty work will end up looking, well, dirty. There are basically two enforcement strategies. The first is to make examples of a few file sharers. This means imposing large penalties on a few people – if the penalties aren’t disproportionate to the individual offense, then they won’t have the desired deterrent effect. Whoever initiates this kind of make-an-example enforcement will end up looking like a bully.

The alternative is to impose small penalties on many people. For example, ISPs might cut off the accounts of file sharers, either permanently or temporarily. The problem with this kind of enforcement is that the economics dictate that only a small amount of money can be spent on identifying each target, otherwise the cost of enforcement outweighs the benefit. In practice, this means that bots will be used to identify targets, with little human involvement. Mistakes will be made – outrageous, hilarious mistakes – and the enforcers will look like idiots. Either way, whoever is doing the enforcement will end up with egg on their face. If you’re the RIAA, you’d much rather have ISPs handle enforcement.

File Sharers Targeted Next?

Declan McCullagh, at CNet news.com, predicts that we will soon see criminal prosecutions of a few people who make extensive use of file sharing software. He cites RIAA rhetoric and congressional rhetoric supporting prosecution, and he reiterates the relevant laws, which dictate surprisingly stiff sentences for violations.

Orin Kerr, at the Volokh Conspiracy blog, disagrees. He points to his experience as a DOJ official, and says that decisions about whom to prosecute are typically made by Assistant U.S. Attorneys (and not centrally in Washington), and that most of the decisionmakers would rather spend their limited resources going after drug dealers, kidnappers, and the like.

The elephant in the closet here is the lack of civil lawsuits against file sharers by the recording industry. If I were a Federal prosecutor, I would be asking myself why I should spend tax dollars on prosecuting someone for file sharing, when none of the victims of that file sharing are willing to bring any civil suits against file sharers.

Why would the RIAA support criminal prosecutions but not civil suits? The obvious explanation is that they fear a backlash from their customers if they file aggressive lawsuits. But won’t the backlash be even larger if the FBI hauls somebody away in handcuffs at their behest? I’m sure they saw what happened to Adobe when it engineered the arrest of Dmitry Sklyarov.

My bet is on the theory expounded by Jonathan Zittrain, as quoted by Hiawatha Bray in yesterday’s Boston Globe. The RIAA will try to put pressure on ISPs to become enforcement agents, by putting on a DMCA squeeze. The DMCA gives ISPs a limited safe harbor from liability for their customers’ actions, but it also allows various legal strategems that the RIAA could use to pressure ISPs into compliance.

The RIAA still appears to be afraid to sue file sharers. This can’t bode well for their future. If your business model depends on people complying with a law, and you yourself have the power to enforce that law but are not willing to do so, you have a problem.

Copyright and Rhetoric

In a much-acclaimed blog posting, Doc Searls writes that the limited-copyright folks are losing the rhetorical battle to the copyright expansionists.

I believe Hollywood won because they have successfully repositioned copyright as a property issue. In other words, they successfully urged the world to understand copyright in terms of property. Copyright = property may not be accurate in a strict legal sense, but it still makes common sense, even to the Supreme Court.

[…]

Watch the language. While the one side talks about licenses with verbs like copy, distribute, play, share and perform, the other side talks about rights with verbs like own, protect, safeguard, protect, secure, authorize, buy, sell, infringe, pirate, infringe, and steal.

I would go further and say that focusing on the role of the public domain is bad rhetorical strategy. It’s not that the public domain is unimportant. It’s just that public-domain arguments end up sounding like, “We want to use your stuff.” By making a public-domain argument, you’re inviting the accusation that you’re a freeloader trying to make money off the creativity of others. You’re saying, in effect, that certain ideas are the property of the public, and so you’re buying in, indirectly, to the concept of ideas as property.

A better rhetorical strategy is to focus on the entangling effects of copyright on everyday life, including ordinary creative work. The argument is simply that copyright has become a wide-ranging regulatory scheme that goes far beyond its proper role of protecting the legitimate rights of authors. A great example of this is the section of Lessig’s The Future of Ideas about the documentary filmmaker. The filmmaker isn’t trying to copy other people’s work. But because so many everyday objects are the subject of intellectual property claims, filming everyday life becomes problematic, with too many rights to be “cleared”. Expansionist IP claims entangle ordinary creativity, even when nobody is trying to copy anything.

Even the record companies complain about the difficulty of “clearing” rights to recorded music so that they can sell it online. When the big copyright owners find the system too onerous and complicated, that’s a rhetorical opportunity.

This strategy also exploits the ever-growing stock of copyright horror stories. When the Girl Scouts are worried about what they can sing around the campfire, or when the DMCA is being used to regulate garage door openers, you’re seeing the tentacles of copyright reaching into places where it doesn’t belong.

“Free the mouse” is a catchy slogan, but we would do better by talking more about our own freedom and less about Mickey’s.