Microsystems Software, Inc. v. Scandinavia Online AB

Last updated
Microsystems Software, Inc. v. Scandinavia Online AB
Seal of the United States Court of Appeals for the First Circuit.svg
Court United States Court of Appeals for the First Circuit
Full case nameMicrosystems Software, Inc. v. Scandinavia Online AB
ArguedAugust 2, 2000
DecidedSeptember 27, 2000
Citation(s)226 F.3d 35; 56 U.S.P.Q.2d 1300
Case history
Prior historyStipulated permanent injunction entered, No. 1:00-cv-10488, 98 F. Supp. 2d 74 (D. Mass. 2000).
Court membership
Judge(s) sitting Bruce M. Selya, J. Clifford Wallace, Joseph L. Tauro
Case opinions
MajoritySelya, joined by unanimous

Microsystems Software, Inc. v. Scandinavia Online AB, 226 F.3d 35 (1st Cir. 2000), was a civil case filed in 2000 in the United States District Court for the District of Massachusetts and appealed to the United States Court of Appeals for the First Circuit. It received considerable attention in the online community because it involved reverse engineering and cryptanalysis of content-control software, allegedly in violation of copyright law and a clickwrap license agreement.

In early 2000, Eddy L. O. Jansson and Matthew Skala reverse engineered the content-control package Cyber Patrol and published a report titled The Breaking of Cyber Patrol 4 detailing what they found, including a cryptanalysis of the CRC-32-based hash function that concealed the configuration password and Web site and Usenet newsgroup blacklists. They commented critically on the content of the blacklist, and highlighted apparent errors in it, innocuous sites and newsgroups blocked as objectionable for no visible reason. Along with the essay, they included software in C and Delphi demonstrating the attacks and allowing users to disable the package, change its configuration, or browse the blacklists in decrypted form. The break was widely reported on March 11, 2000. [1]

On March 15, Microsystems Software, the publisher of Cyber Patrol, and Mattel, its parent company, filed suit against Jansson, Skala, and the ISPs that hosted their personal websites, Scandinavia Online and Islandnet. They filed in US court, though Jansson and Scandinavia Online were located in Sweden and Skala and Islandnet were located in Canada. They alleged that the reverse engineering was copyright infringement by Jansson and Skala; that distributing the essay and software (or, in the case of Islandnet, the link on Skala's site pointing to the essay and software on Jansson's site) was copyright infringement by the ISPs; and that Jansson and Skala's actions constituted breach of the clickwrap license agreement on Cyber Patrol, interference with advantageous business relations, conversion, and theft of trade secrets. [2] Once the lawsuit became known, it attracted considerable attention from the online community, far overshadowing the discussion of the reverse engineering itself. [3]

In response to demands from the plaintiffs, Scandinavia Online deleted Jansson's website and Islandnet asked Skala to remove his link to Jansson's (now non-existent anyway) website. The document and software had already been mirrored on many sites worldwide, however. The plaintiffs asked for, and received, a temporary restraining order against distribution of what they termed the "bypass code", and were authorized to serve it by email on mirror sites, along with a subpoena demanding the identities of every Web user who accessed the information. [4] Some commentators dubbed these email-distributed subpoenas "spampoenas"; use of email for official service of court documents was, and remains, highly unusual if not absolutely unheard of. [5]

On March 27, Skala announced that he had settled the cases against him (including one filed in a Canadian court as well as the US case) out of court and that Jansson was close to doing the same, with an agreement to stop distributing the essay and software and assign its copyrights to the plaintiffs. [6] Other parties had become involved, however, including three mirror site operators associated with Peacefire and backed by the ACLU. The suit continued with the main issue being whether those mirror sites would also be forced to stop distributing the material. When their motions on that topic were dismissed, the mirror sites took that as an indication that they could continue to distribute it safely.

Meanwhile, some controversy erupted when news sources suggested that the exploit software had been released under the GPL, making any restriction on its distribution problematic. [7] Statements from Jansson and Skala denying any intention to place it under the GPL, the lack of any copyright notice in Skala's code, and a vague nonstandard GPL notice in Jansson's code, made it fall apart as a possible GPL test case. In 2001, Jansson stated on his website that he had in fact intended his code to be under the GPL after all, even if he had not put in the proper notices to make that stick. [8]

At the time of the case, the DMCA was not relevant because its enforcement was under suspension pending a review by the United States Copyright Office of whether exceptions to its provisions should be made. Lawrence Lessig nonetheless used the Microsystems case as an example of tension between the DMCA and the First Amendment in his essay Battling Censorware; [9] and when the Copyright Office issued their rulemaking on DMCA exemptions, they also cited this case in their discussion of why reverse engineering of content-filter blacklists was one of only two categories of activities exempted.

Related Research Articles

An Internet filter is software that restricts or controls the content an Internet user is capable to access, especially when utilized to restrict material delivered over the Internet via the Web, Email, or other means. Content-control software determines what content will be available or be blocked.

<span class="mw-page-title-main">Open-source license</span> Software license allowing source code to be used, modified, and shared

Open-source licenses facilitate free and open-source software (FOSS) development. Intellectual property (IP) laws restrict the modification and sharing of creative works. Free and open-source software licenses use these existing legal structures for the inverse purpose of granting freedoms that promote sharing and collaboration. They grant the recipient the rights to use the software, examine the source code, modify it, and distribute the modifications. These licenses target computer software where source code can be necessary to create modifications. They also cover situations where there is no difference between the source code and the executable program distributed to end users. Open-source licenses can cover hardware, infrastructure, drinks, books, and music.

<span class="mw-page-title-main">DeCSS</span> Free open-source program to decode DVDs with encryption

DeCSS is one of the first free computer programs capable of decrypting content on a commercially produced DVD video disc. Before the release of DeCSS, open source operating systems could not play encrypted video DVDs.

A GPL linking exception modifies the GNU General Public License (GPL) in a way that enables software projects which provide library code to be "linked to" the programs that use them, without applying the full terms of the GPL to the using program. Linking is the technical process of connecting code in a library to the using code, to produce a single executable file. It is performed either at compile time or run-time in order to produce functional machine-readable code. The Free Software Foundation states that, without applying the linking exception, a program linked to GPL library code may only be distributed under a GPL-compatible license. This has not been explicitly tested in court, but linking violations have resulted in settlement. The license of the GNU Classpath project explicitly includes a statement to that effect.

Peacefire is a U.S.-based website, with a registered address in Bellevue, Washington, dedicated to "preserving First Amendment rights for Internet users, particularly those younger than 18". It was founded in August 1996 by Bennett Haselton, who still runs it. The site's motto is, "You'll understand when you're younger."

<i>Universal City Studios, Inc. v. Corley</i> American legal case

Universal City Studios, Inc. v. Corley, 273 F.3d 429, was a court ruling at the United States Court of Appeals for the Second Circuit. The ruling was the first significant test of the anti-circumvention provisions of the Digital Millennium Copyright Act.

<span class="mw-page-title-main">Free-culture movement</span> Social movement promoting the freedom to distribute and modify the creative works of others

The free-culture movement is a social movement that promotes the freedom to distribute and modify the creative works of others in the form of free content or open content without compensation to, or the consent of, the work's original creators, by using the Internet and other forms of media.

MacTheRipper is a Mac OS X application that enables users to create a playable copy of the contents of a Video DVD by defeating the Content Scramble System. During this process it may optionally modify or disable the DVD region code or the User operation prohibition features of the copied data. The previous lack of an OS X equivalent to the PC software DVDShrink gave this standalone DVD ripper widespread popularity among Macintosh users.

<i>Specht v. Netscape Communications Corp.</i> American legal case

Specht v. Netscape, 306 F.3d 17, is a ruling at the United States Court of Appeals for the Second Circuit regarding the enforceability of clickwrap software licenses under contract law. The court held that merely clicking on a download button does not show assent to license terms, if those terms were not conspicuous and if it was not explicit to the consumer that clicking meant agreeing to the license.

<i>Jacobsen v. Katzer</i>

Jacobsen v. Katzer was a lawsuit between Robert Jacobsen (plaintiff) and Matthew Katzer (defendant), filed March 13, 2006 in the United States District Court for the Northern District of California. The case addressed claims on copyright, patent invalidity, cybersquatting, and Digital Millennium Copyright Act issues arising from Jacobsen under an open source license developing control software for model trains.

<span class="mw-page-title-main">Copyleft</span> Practice of mandating free use in all derivatives of a work

Copyleft is the legal technique of granting certain freedoms over copies of copyrighted works with the requirement that the same rights be preserved in derivative works. In this sense, freedoms refers to the use of the work for any purpose, and the ability to modify, copy, share, and redistribute the work, with or without a fee. Licenses which implement copyleft can be used to maintain copyright conditions for works ranging from computer software, to documents, art, scientific discoveries and even certain patents.

The WIPO Copyright and Performances and Phonograms Treaties Implementation Act, is a part of the Digital Millennium Copyright Act (DMCA), a 1998 U.S. law. It has two major portions, Section 102, which implements the requirements of the WIPO Copyright Treaty, and Section 103, which arguably provides additional protection against the circumvention of copy prevention systems and prohibits the removal of copyright management information.

Information technology law concerns the law of information technology, including computing and the internet. It is related to legal informatics, and governs the digital dissemination of both (digitized) information and software, information security and electronic commerce aspects and it has been described as "paper laws" for a "paperless environment". It raises specific issues of intellectual property in computing and online, contract law, privacy, freedom of expression, and jurisdiction.

<span class="mw-page-title-main">GNU General Public License</span> Series of free software licenses

The GNU General Public License is a series of widely used free software licenses that guarantee end users the four freedoms to run, study, share, and modify the software. The license was the first copyleft for general use and was originally written by the founder of the Free Software Foundation (FSF), Richard Stallman, for the GNU Project. The license grants the recipients of a computer program the rights of the Free Software Definition. These GPL series are all copyleft licenses, which means that any derivative work must be distributed under the same or equivalent license terms. It is more restrictive than the Lesser General Public License and even further distinct from the more widely used permissive software licenses BSD, MIT, and Apache.

<span class="mw-page-title-main">Digital Millennium Copyright Act</span> United States copyright law

The Digital Millennium Copyright Act (DMCA) is a 1998 United States copyright law that implements two 1996 treaties of the World Intellectual Property Organization (WIPO). It criminalizes production and dissemination of technology, devices, or services intended to circumvent measures that control access to copyrighted works. It also criminalizes the act of circumventing an access control, whether or not there is actual infringement of copyright itself. In addition, the DMCA heightens the penalties for copyright infringement on the Internet. Passed on October 12, 1998, by a unanimous vote in the United States Senate and signed into law by President Bill Clinton on October 28, 1998, the DMCA amended Title 17 of the United States Code to extend the reach of copyright, while limiting the liability of the providers of online services for copyright infringement by their users.

<i>321 Studios v. Metro Goldwyn Mayer Studios, Inc.</i>

321 Studios v. Metro Goldwyn Mayer Studios, Inc., 307 F. Supp. 2d 1085, is a district court case brought by 321 Studios seeking declaratory judgment from the court that their DVD ripping software, i.e. DVD Copy Plus and DVD X Copy do not violate the provisions of the Digital Millennium Copyright Act ("DMCA"), or, in the alternative, that the DMCA is unconstitutional because Congress exceeded its enumerated powers, these provisions are unconstitutionally vague and/or violate the First Amendment.

<i>Arista Records LLC v. Lime Group LLC</i> 2010 United States district court case

Arista Records LLC v. Lime Group LLC, 715 F. Supp. 2d 481, is a United States district court case in which the Southern District of New York held that Lime Group LLC, the defendant, induced copyright infringement with its peer-to-peer file sharing software, LimeWire. The court issued a permanent injunction to shut it down. The lawsuit is a part of a larger campaign against piracy by the Recording Industry Association of America (RIAA).

<i>Sony BMG Music Entertainment v. Tenenbaum</i> U.S. court case

Sony BMG Music Entertainment v. Tenenbaum is the appeals lawsuit which followed the U.S. District Court case Sony BMG v. Tenenbaum, No. 07cv11446-NG.

<i>Ouellette v. Viacom International Inc.</i> US legal case

Ouellette v. Viacom, No. 9:10-cv-00133; 2011 WL 1882780, found the safe harbor provision of the Digital Millennium Copyright Act (DMCA) did not create liability for service providers that take down non-infringing works. This case limited the claims that can be filed against service providers by establishing immunity for service providers' takedown of fair use material, at least from grounds under the DMCA. The court left open whether another "independent basis of liability" could serve as legal grounds for an inappropriate takedown.

<i>Amaretto Ranch Breedables, LLC v. Ozimals, Inc.</i>

Amaretto Ranch Breedables, LLC v. Ozimals, Inc. was a copyright case in the United States District Court for the Northern District of California involving a DMCA takedown notice dispute between companies that produce virtual animals on Second Life. Ozimals filed a DMCA takedown notice to Linden Research, the makers of Second life, claiming that Amaretto's horse infringed on their bunnies and demanding their removal. Consequently, Amaretto responded with a counter-DMCA notice and applied to the court for a temporary restraining order to forbid Linden Research from removing their virtual horses. This was granted and held in effect as the case proceeded. Amaretto claimed in court that Ozimal's DMCA notice was copyright misuse and asked for a declaration that its horses did not infringe copyright. Ozimals counterclaimed for copyright infringement. The court eventually dismissed both claims.

References

  1. "The Breaking of Cyber Patrol 4 - Slashdot". 2000-03-11.
  2. "Cyber Patrol break FAQ (Version 1.11)".
  3. WIRED Staff. "Mattel Sues Over Blocking Hack". Wired. ISSN   1059-1028 . Retrieved 2023-03-02.
  4. "Judge to Ban Mattel Blacklist?". www.wired.com. Archived from the original on 2000-05-10.
  5. "Jargon Scout". tbtf.com. Retrieved 2023-03-02.
  6. "Matthew Skala on Microsystems Settlement". cryptome.org. Retrieved 2023-03-02.
  7. WIRED Staff. "Mattel Suit Takes GNU Twist". Wired. ISSN   1059-1028 . Retrieved 2023-03-02.
  8. "Eddy L O Jansson's Homepage - the Breaking Revisited: Why I did it". gazonk.org. Archived from the original on 11 October 2006. Retrieved 15 January 2022.
  9. "The Standard: Battling Censorware". www.lessig.org. Archived from the original on 2002-02-05.