Like most regions in the world, Russia has an online piracy problem, with millions of citizens regularly using pirate sites to access free movies, music, TV shows, and other content.

Russia is already a world-leader when it comes to site-blocking but if new proposals are written into law, life for pirate site owners could become much more difficult.

Back in 2018 the Ministry of Culture began mulling amendments to copyright law and this week it became clear that it has a tightened site-blocking regime in mind, along with other significant changes.

Local publication RBC had the opportunity to review the draft, which includes measures for the blocking of sites where pirated content is made available, without rightsholders having to go to court as they do now.

Instead, they will be able to go directly to the web hosts of sites making content available without a license, with instructions to block platforms, if they are unresponsive to takedown demands.

Furthermore, if the amendments are approved, owners of platforms where pirated content is made available will be compelled to sacrifice their anonymity. All such sites will be required to publish the names, addresses, and other contact details of their owners.

It isn’t yet clear how this requirement will be enforced, or how contact details will be checked for authenticity. However, it seems unlikely that company names and/or home addresses (in the case of individuals) will be willingly given up, particularly when site operators are already breaking the law by knowingly hosting or linking to infringing content.

The draft amendments were agreed by the Ministry of Communications and Mass Media, telecoms watchdog Roscomnadzor, and the Ministry of Economic Development, after consultation with entertainment industry companies, RBC reports.

News of the amendments arrives just days after authorities held talks with major rightsholders, hosting platforms, and search providers, with the aim of writing the terms of an anti-piracy memorandum into law.

The currently voluntary agreement aims to create an ever-growing centralized database of infringing content to enable hosting platforms and search engines to take down media and links both quickly and efficiently.

According to comments made this week by Sergey Selyanov, head of the Association of Film and Television Producers, the memorandum is working as planned.

Finally, local search giant Yandex has reportedly developed and launched its own set of tools for detecting pirated content online. Using information being made available in the recently-established piracy database, Yandex is using machine learning to “clean up” its own search results. The company is currently declining to offer any additional details.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


In 2012, file-hosting site Megaupload was shut down by the United States government and founder Kim Dotcom and several associates were arrested in New Zealand.

For the past seven years, the US government has been engaged in a battle to extradite Dotcom, so that he can face trial in the US on several counts including copyright infringement, racketeering, and money laundering.

Dotcom has fought back every step of the way and in 2016, filed an eight-point statement of claim for judicial review, aimed at “attacking the underpinnings of the extradition process” by filing an eight-point statement of claim for judicial review.

In a 22-page High Court ruling (pdf) handed down in December 2017, Justice Timothy Brewer sided with the US and rejected seven out of the eight causes of action, stating they were either not reasonably arguable or were abuses of process.

The eighth point, which wasn’t challenged by the US, concerns the decision by the Deputy Solicitor-General in June 2017 to direct that clones be made of the electronic devices seized from Mr Dotcom’s homes so they could be sent to the US.

Dotcom appealed but the Court of Appeal dismissed the action. Dotcom then sought permission to appeal that decision at the Supreme Court. In a judgment handed down this morning by Justices William Young, O’Regan and Ellen France JJ, the Supreme Court denied leave to appeal.

“The applicant [Dotcom] argues that the criteria for the grant of leave to appeal in s 74 of the Senior Courts Act 2016 are met in relation to the present application either because the application raises matters of general and public importance or because a substantial miscarriage of justice may occur if leave is not granted,” the judgment reads.

“We are not persuaded that the proposed appeal raises matters of general and public importance.”

Dotcom argued that a miscarriage of justice would take place if he was denied permission to appeal. However, the Supreme Court said that was not correct.

“The applicant is seeking to challenge concurrent findings in the Courts below on almost every point that would be in issue if leave were granted. We do not see the arguments foreshadowed by the applicant in his application for leave and the submissions in support of that application as having sufficient prospects of success to justify the grant of leave,” the judgment adds.

After dismissing Dotcom’s application for a hearing at the Supreme Court on the matter, the Court then ordered him to pay $2,500 to the US Government to cover its costs.

Thus far, Dotcom hasn’t commented publicly on the judgment but did find a report published here on TF yesterday darkly amusing. Safe harbor for YouTube, but not him, apparently.

https://platform.twitter.com/widgets.js

The judgment can be obtained here (pdf)

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


YouTube downloaders, often called stream rippers, are seen as the largest piracy threat to the music industry. As such, record labels are doing their best to shut them down.

In 2017, YouTube-MP3, the world’s largest ripping site at the time, went offline after being sued, and several others folded in response to increased legal uncertainty.

Last summer, a group of major record labels, helped by the RIAA, targeted two of the larger stream-rippers that remained online. FLVTO.biz, 2conv.com, and their owner Tofig Kurbanov were sued for copyright infringement at a Virginia District Court.

While the record labels hoped for an easy win, their lawsuit didn’t go as planned. Kurbanov, who resides in Russia, fought back with a motion to dismiss. He argued that the Virginia federal court lacked jurisdiction over a site that’s managed from abroad.

The Court agreed with this assessment. In a verdict released this January, US District Court Judge Claude M. Hilton dismissed the case. The Court carefully reviewed how the sites operate and found no evidence that they purposefully targeted either Virginia or the United States.

“As the Websites are semi-interactive, the interactions with the users are non-commercial, and there were no other acts by the Defendant that would demonstrate purposeful targeting, the Court finds that Defendant did not purposefully avail himself of the benefits and protections of either Virginia or the United States,” the verdict read.

The record labels and the RIAA were disappointed with the outcome and swiftly announced they would appeal. This week they submitted their opening brief which argues that the District Court came to the wrong conclusion.

The record labels state that the site owner’s contacts with Virginia or with the United States are well established. The stream ripping sites transmit hundreds of millions of infringing files to U.S. devices and are monetized by ads which are partly targeted at U.S visitors.

If the current verdict stands, the companies fear that Internet pirates will have “carte blanche” to facilitate copyright infringement, as they will remain out of the reach of U.S. courts.

“The result of the district court’s ruling is that the only court in which U.S. record companies can bring suit to challenge millions of instances of U.S.-based online piracy is in Rostov-on-Don, Russia, where Kurbanov purportedly resides,” the labels write. 

“The district court’s decision thus gives carte blanche to Internet pirates to set up shop outside of the United States, safe in the knowledge that they are  effectively immune from the reach of U.S. courts seeking to vindicate the rights of U.S. plaintiffs for violations of U.S. copyright law, even as they cater to U.S. users.”

In their opening brief the labels reiterate that FLVTO.biz and 2conv.com have millions of US-based users, including hundreds of thousands in Virginia. The interactions with these users are repeated and interactive, they say.

The District Court previously ruled that the number of U.S. users is irrelevant, as the sites’ contacts with these people are “unilateral” and “non-commercial. The site does generate income from US users through ads, but that was not enough to be seen as a commercial contract.

The labels clearly disagree with this conclusion, calling it absurd.

“To isolate the content from the revenue generating advertisements as the district court did here would be to say that Google, Facebook, Snapchat, and countless other Internet companies’ relationships with their users is non-commercial. That position is absurd,” they counter.

The labels further point out that the sites used a U.S.-based advertising firm, U.S.-based domain registrars and, until recently, U.S.-based servers. In addition, the site owner registered a DMCA agent with the U.S. Copyright Office, which isn’t typical for a site that doesn’t target the U.S.

“Appellee has, for example, registered a DMCA agent with the U.S. Copyright Office—the only purpose of which is to seek to qualify for the DMCA’s safe harbor defense to claims of copyright infringement in U.S. courts,” the brief reads.

Based on these arguments the labels ask the appeals court to overturn the District Court’s verdict. Or, as an alternative, vacate it to allow for jurisdictional discovery.

Tofig Kurbanov and his legal team have yet to respond to the accusations. They don’t believe that U.S. courts have jurisdiction over the sites and its owner, and will likely make that clear during the weeks to come.

A copy of  the record labels’ opening brief is available here (pdf).

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


On an average day, roughly half a million hours of video are uploaded to YouTube. As with any user-generated content site, this also includes copyright-infringing content.

YouTube processes takedown notices and uses its Content-ID system to automatically remove allegedly infringing content to address this.

However, major copyright holders are not all happy with the platform’s efforts. Record labels want to see more compensation, for example, and others want YouTube to do more to prevent pirated videos from appearing on the site.

In Austria, this led to a lawsuit between the local television channel Puls 4 and YouTube. In an initial order last summer, the court ruled that the video platform can be held directly liable for users’ copyright infringements. YouTube was not seen as a neutral intermediary and should do more to prevent infringing uploads.

The court noted that YouTube takes several motivated actions to actively organize and optimize how videos are displayed. By doing so, it becomes more than a neutral hosting provider. Therefore, it can’t rely on a safe harbor defense.

“Through the connections, sorting, filtering and linking, in particular by creating tables of contents according to predefined categories, determining the surfing behavior of users and creating a tailor-made surfing proposal, offering help etc, YouTube leaves on the role of a neutral intermediary and therefore cannot claim the host provider privilege,” the court wrote.

YouTube disagreed with the ruling and appealed the matter at the Higher Regional Court of Vienna. The video service maintained that, as a neutral hosting provider, it’s protected under the safe harbor provisions of the Austrian E-Commerce Act.

After a careful review of the case, the Higher Regional Court of Vienna agreed with YouTube, overturning the previous order. According to the appeal court, YouTube doesn’t have an “active role” and is therefore shielded from liability through its safe harbor defense.

The Court doesn’t dispute that YouTube provides search, categorization, and advertising services. However, these are seen as part of the normal business model of hosting platforms, which do not make the company liable.

“If it had to forgo structuring and search options in order to avoid a damaging ‘appropriation’ of video content, its video platform would lose all user-friendliness,” the Court writes in its decision.

“The less users are able to find videos of interest to them amid the vast multitude of uploaded videos (several hundred million in this case), the less it would make sense even to visit such a video platform,” it adds.

Puls 4 cited the GS Media/Sanoma case, where the European Court of Justice ruled that posting infringing hyperlinks, during the course of business, can lead to liability. However, that doesn’t apply in this case, the Court notes, as YouTube wasn’t aware of the infringing nature of the videos.

In summary, the Higher Regional Court of Vienna concludes that, as a hosting platform, YouTube benefits from the safe harbor privilege. This means that it’s not liable for uploads of users and Puls 4’s complaint is dismissed as a result.

The outcome is good news for YouTube, as the order from the lower court severely threatened the operation of the video platform. However, it is not the end of the road yet.

Higher Regional Court of Vienna allows the case to be appealed at the Supreme Court and Puls 4 informs TorrentFreak that it will use this opportunity.

Puls 4 stresses that the current decision does not take into account relevant decisions of the CJEU, including the case regarding the infringing nature of The Pirate Bay. Nor does it reference the recent developments regarding liability under the proposed Article 13 of the EU copyright directive.

“Puls4 will therefore definitely file an appeal to the Supreme Court,” a company spokesperson informs TorrentFreak.

A German court referred various copyright infringement related questions to the European Court of Justice a few months ago. Since this involves YouTube directly, the Austrian Supreme Court will likely consider the pending outcome in this case too.

A copy of the Higher Regional Court of Vienna’s verdict is available here (pdf)

.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


Distribution and uploading of copyrighted content without an appropriate license is illegal in most countries of the world.

It is seen as the most damaging form of infringement, largely on the basis that this fuels illicit downloading.

Straightforward downloading of movies, TV shows and other unlicensed content is rarely, if ever, policed, even when such activity is proscribed under law, as is the case in the EU following rulings from the European Court of Justice.

In Japan, however, new legislation under consideration by the government would’ve taken things to a whole new level. Criminalizing the unlicensed downloading of all content – including the pasting of lyrics or taking of screenshots – struck fear into Internet users and experts alike.

With serious punishments under consideration (up to two years in prison and fines of two million yen – US$18,000), serious alarm bells were sounded, with academics coming out strongly in opposition. Now, however, the government has become sufficiently unsettled and has shelved the proposals altogether.

The planned copyright amendments were set to be submitted to the Diet on March 8, 2019 but Japan’s ruling Liberal Democratic Party (LDP or Jimintō) put the brakes on the proposals the day before they were due to be submitted.

Early this morning the Japanese government took the decision not to submit the bill to the Diet at all, after executives failed to approve it.

“We have yet to eliminate the worries of both copyright holders and [internet] users,” said House of Councillors lawmaker Masaaki Akaike, as cited by Mainichi. “We should work on it anew.”

The proposals also contained measures to deal with ‘pirate’ indexing sites (known locally as “leech sites”) which don’t host any infringing content themselves but provide hyperlinks to content hosted elsewhere. Estimates suggest that around 200 such sites exist in Japan.

The aim was to criminalize the act of knowingly linking to copyrighted content, or linking to the same when site operators should “reasonably be expected” to know that the content is infringing. Unlike the anti-downloading provisions, plans to criminalize site operators with sentences of up to five years in prison were met with little opposition.

If approved, the revisions to Japan’s copyright law were set to take effect on January 1, 2020, but it’s now unclear whether that target will be met.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


Last month the European Parliament and Council agreed on the final text of the EU Copyright Directive.

This includes the controversial Article 13 and Article 11, which opponents condemn as “upload filters” and “link tax” proposals respectively.

Many organizations in the creative and publishing sectors are of a different opinion. They see the copyright reform plans as a much-needed step in the right direction of an Internet that treats creators more fairly.

With the final vote just two weeks away, a massive coalition of 243 organizations representing a wide variety of rightsholders is calling on the European Parliament to adopt the plans.

“We, the undersigned organisations, representing authors, composers, writers, journalists, performers and others working in all artistic fields, news agencies, book, press, scientific and music publishers, audiovisual and independent music producers call on the European Parliament to adopt the Directive on Copyright in the Digital Single Market,” the letter reads.

The full list of supporters includes popular names such as Thomson Reuters, The Independent, the Association of Independent Music, Getty Images, PRS for Music, SACEM, Eurocinema, and many, many others.

The different groups have a shared goal of better copyright protection but some elements of the Copyright Directive may apply more to some than others.

The music groups, for example, are likely to be the most focused on Article 13. This requires for-profit Internet platforms to license content from copyright holders or, if that is not possible, ensure that infringing content is taken down and not re-uploaded to their services.

For their part, news publishers will be more interested in Article 11. This allows these organizations to charge Internet platforms, such as Google, Facebook, and Twitter, for displaying snippets of their content to the public at large.

The joint letter the groups released this week mentions neither article, only the Copyright Directive in general. However, they make it very clear that the proposed changes are needed to create a fair and sustainable Internet.

“This Directive has been long sought to create a much-needed level playing field for all actors of the creative sector in the European Digital Single Market, whilst giving citizens better access to a wider array of content,” the letter reads.

“This is an historic opportunity. We need an internet that is fair and sustainable for all. This is why we urge policymakers to adopt the Directive quickly, as agreed in trilogue negotiations,” it adds.

The sheer number of organizations show that there is broad support for the Copyright Directive in the creative community.

But there is plenty of opposition as well. Earlier today we mentioned that the UN’s Special Rapporteur on freedom of opinion and expression has raised the alarm over Article 13 and its de facto filtering requirements.

In the days to come, we will likely see more calls for support while protests look set to escalate.

—-

A copy of the letter including the full list of signatories is available below. 

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


With Bollywood, India has a thriving movie industry that’s worth billions of dollars and is known all around the world.

At the same time, the country also has one of the highest piracy rates, which is seen as a major threat to the industry.

Pirated copies of films swiftly make their way onto the Internet and are sold on physical media around the country. In many cases, these leaks occur just hours after a movie premieres in theaters.

In an effort to curb this activity, India’s Government recently amended the Cinematograph Act, making it illegal to record or transmit movies and movie audio without permission. Those who do, face a three-year prison sentence.

As with any law, the effectiveness depends on implementation and enforcement. This is something that has yet to be fleshed out and various prominent voices from the local movie industry are calling on the Government to take strict action.

“Everything boils down to implementation. Police feel piracy is not a priority. If the government can ensure plastic ban overnight, why not show the same vigor in this issue,” movie producer G. Dhananjayan told the Times of India.

The local newspaper ran an article last week on the new anti-piracy measures. Aside from the calls for stricter enforcement, the publication also delivered a bombshell. Apparently, movie piracy is frequently facilitated by the industry itself.

According to a Tamil cinema DVD seller, who spoke on the condition of anonymity, piracy is mostly an inside job. The source explains that movie companies are leaking each other’s films, as a competitive move.

“People from rival production companies or those from the creative department secretly release the movie online or circulate it as DVDs to hit the collection at the box office,” the source said.

This sounds like a Wild West story, but the allegations don’t stop there. Another source said that the local censor board and distribution houses are also on the piracy bandwagon.

“Another industry source said insiders in the censor board and distribution houses sell these copies for up to `5 lakh. The copies are uploaded on private portals that have dedicated passkeys,” the Times of India reports.

“For a few lakhs of rupees, these copies can be downloaded and replicated on DVD,” the newspaper adds.

When it comes to recording video and audio at movie theaters, it is believed that some movie industry insiders work in tandem with theater owners to leak high profile films. As a result, some films appear online just hours after their official premiere.

At TorrentFreak, we can’t verify any of these claims independently, but it does put the various arrests of Indian movie theater owners in a different perspective.

Indian police have apprehended several theater owners in the past. Late last year the Indian Film Exhibitors Association called on the Madras High Court to put a halt to these overbroad crackdowns, stressing that the arrestees were innocent.

However, based on the sources referenced by the Times of India, there are some rogue cinema owners out there.

All in all, it is clear that Bollywood’s piracy problem is rather complex, and that shutting down a few websites is certainly not going to cut it. The new anti-camming law may help, but if the industry itself is corrupted, there’s still a long way to go.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


Downloading movies and music is currently prohibited under Japan’s Copyright Act, meaning that anyone who does so is liable to criminal prosecution or civil suits.

Over the past several months, rightsholders and authorities have been seeking to make the downloading of any copyrighted content a crime, something that has raised alarm bells in the country of 127 million citizens.

While many can see the benefits of preventing people from unlawfully duplicating or sharing full copyright works (if that deprives creators of their income), the proposals currently on the table go way beyond what many citizens see as reasonable.

As the wording currently stands, even those making screenshots of copyrighted content would be criminalized, as would those reproducing song lyrics or snapshots of manga publications, for example. With penalties of two years in prison and fines of two million yen (US$18,000) on the table, it’s no wonder that people are concerned.

Last month more than 80 academics, researchers, lawyers, and other experts issued an ‘emergency statement‘ urging the government to reconsider the scope of new proposals. It’s not clear whether this alone prompted a review but it seems that the rush to criminalize large numbers of Internet users is causing those in power to pause for thought.

The planned copyright amendments were set to be submitted to the Diet on March 8, 2019 but according to local sources, Japan’s ruling Liberal Democratic Party (LDP or Jimintō) put the brakes on the proposals the day before they were due to be submitted.

Reports suggest that the party had such serious concerns over the scope of the law that its implementation might mean that “use of the Internet would be atrophied.”

Prime Minister Shinzo Abe reportedly held a telephone call with Keisya Furuya, the former National Public Safety Commissioner and chairman of the bipartisan MANGA (Manga-Animation-Game) parliamentary group on March 6, 2019. According to AnimeNewsNetwork, this led to the decision to remove the proposals from the agenda.

The bill will now be presented for further discussion during the Diet’s Ministry of Culture, Sports, Science and Technology’s next meeting. However, there are no clear indications whether there will be any amendments, ones that might calm the fears of those who feel these overzealous proposals are not only several steps too far but potentially unenforceable.

Scholars and other experts are suggesting that the best route is to only criminalize actions that cause real financial damage to content owners.

The general consensus among the academics is that making infringement criminally punishable may be acceptable, but only when full copyright works – such as movies, music, manga publications, and books – are exploited in their entirety.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


Once upon a time, people with an interest in music production could get into the game cheaply.

Back in the 80s, Amiga users (like myself) could mess around with tools like SoundTracker or OctaMED for hours, producing music at home that could be potentially fit for human consumption, if it wasn’t for a lack of talent.

Later, software like Cubase began to gain traction, since it was often bundled (in cut down form) with PC sound cards. But, of course, times moved on and in the short years that followed an avalanche of amazing tools became available; Fruity Loops and Reason, to name just two.

These days users are spoiled for choice but great production software in the 2010s often has great prices attached too, meaning that many turn to torrent and similar sites for their fix. Anyone who’s visited a back street studio will also let you know – they are often rammed with pirate software.

While controversial, pirate software gets many people into the music production business and, in common with those familiar with Windows or Adobe products, also trains people to stick with products when they can afford to pay. Some, however, forget to clean up the mess after.

Earlier this month, K-pop star Jeon So-yeon (Soyeon) learned that lesson the hard way. The rapper, singer, songwriter and general all-round star is signed to Cube Entertainment, which had put out a video on the label’s official YouTube channel (now deleted) which included a snapshot of her desktop. That turned out to be a big mistake.

Not only is Soyeon’s workspace the most cluttered in human history, eagle-eyed fans noticed that the star had some interesting additions that should’ve been kept away from the public eye.

Pirate software galore – Full size (Credit: Asian Junkie)

The revelations in the video left the star having to explain why she had cracked copies of Native Instruments’ Komplete, Kontakt, and several other pieces of pirated production software on her desktop.

Like many before her, Soyeon’s excuse was that she made mistakes with pirated software before she became famous a few years ago, and forgot to clean up the free stuff she’d trained herself with.

“First of all, I would like to sincerely apologize for causing any worry due to such disgraceful news,” she said, as translated by Asian Junkie.

“I remember using many different programs back when I first started learning how to compose music. For reasons that I neither deleted nor organized these files in the past, and for not even having consciously thought about it, I sincerely reflect back on it with remorse.”

While it’s certainly not unusual for starting musicians to learn their trade using pirated software, it becomes a bigger issue when they use that software to sell records. Soyeon, however, insists that wasn’t the case with her.

“Ever since I began in earnest to produce music, up to the recent songs that I have made, I have only used official programs, but I apologize once again for worrying you with an ignorance of copyright issues as a creator, no matter what the circumstances. From now on, I will study and act more carefully, never to use or own any kind of illegal file in the future.”

In an apology, Cube Entertainment sang the same tune.

“The program in question were downloaded when Soyeon was a trainee and was just beginning to learn about composing music in the process of her using various programs and learning about them. The program was never used again after Soyeon began seriously committing to musical composition,” the company said.

“We have confirmed that all of Soyeon’s compositions that have been released till now were created with a licensed Logic program, instruments we own, as well as Splice, which requires a monthly subscription fee.”

Fans don’t seem to be too concerned about Soyeon’s use of pirated software but of course the news will be an embarrassment to her label which will have piracy issues of its own. That said, she certainly isn’t the first artist to get caught using pirated production tools.

Stars including Kanye West, Avicii (rip) and Martin Garrix have all been caught using less-than-licensed software in the past. They certainly won’t be the last.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link


While many pirates appear to get along with each other just fine, parts of the Kodi addon community regularly descend into chaos.

This so-called ‘drama’ happens on a regular basis and gets covered on various blogs that cover the scene far more closely than we do here on TF.

However, every now and again an issue raises its head that’s worthy of additional coverage, particularly when it has the potential to affect a broad range of users of popular Kodi addons.

Developers of Kodi add-ons, of all types and intent, regularly host their tools on coding platform Github. The US-based service is ideal for development and when users sign up, they’re allocated a unique URL, which can be referenced (just like a regular URL), all over the Internet.

These URLs can also be used to pull updates to add-ons that are installed on users’ machines. However, there is a loophole that can allow add-ons to pull updates that weren’t supplied by the original developer.

The problem was highlighted at least a couple of years ago when famous Kodi add-on developer MetalKettle deleted his Github repo. Shortly after, a third-party signed up to the platform with the same username (something which Github expressly allows) to obtain the same URL.

This meant that this third-party was allowed to push updates to people using MetalKettle add-ons in their Kodi setup. It’s not difficult to see the problem when a previously-trusted URL is suddenly placed in the hands of a potentially malicious third-party.

This ‘hijacking’ of accounts has happened several times since but things boiled over again recently when the popular ’13Clowns’ repo was deleted by its developer, only to be quickly re-registered on Github with the same name and, indeed, the same URL.

As the pair of images below show, the original repo (first) and imposter repo (second) are quite different, despite having the same username and appearing on the same URL.

The original 13Clowns repo (previously at https://github.com/13Clowns)
The imposter 13Clowns repo, using the exact same Github URL

The software hosted in the new repo began sending updates to former users of ’13Clowns’, which included a fork of the Exodus add-on and, controversially, tools that originate from TVAddons, the under-fire Canada-based Kodi add-on indexing site.

Those familiar with the add-on scene see TVAddons as what the Brits might describe a ‘marmite’ resource – people either love it, or hate it – and there is no shortage of Kodi users expressing both opinions.

Those that hate the site immediately claimed that the existence of TVAddons tools in the update means that the site was logically involved in the ‘hijack’, with KodiTips going as far as publishing a guide on how to remove the software pushed by the update. The software doesn’t seem malicious as such, but it does help TVAddons.

In response, those in support of TVAddons claimed that anyone could’ve ‘hijacked’ the repo (which is true, of course), with TVAddons itself going to great lengths to deny the allegations.

They state they have nothing to do with it, while suggesting that a TVAddons supporter could be responsible. Or, alternatively, it might be a “copyright holder trying to destroy the Kodi community through the most effective method to date: in-fighting.”

The truth is that only the people behind this somewhat underhand tactic know exactly what has happened here, so we’ll leave the speculation to other publications. However, perhaps of more interest is the manner in which this situation came to pass via Github allowing people to re-register accounts with not only the same username as a former user, but also granting access to the same URL.

As a law-abiding company, Github is known for quickly responding to takedown requests, fully in line with the requirements of the DMCA. That being said, this loophole can also be exploited by developers of completely legitimate add-ons too, should they decide to delete their accounts.

TorrentFreak contacted Github with an outline of the problem and asked whether it would be possible to implement measures that might reduce the risk, such as disallowing the re-use of usernames and identical URLs for a period of six months following deletion.

While the company didn’t respond directly to this suggestion, TorrentFreak was informed that systems are already in place to deal with this type of abuse.

The company’s repository namespace retirement policy supports mitigating this issue while its Acceptable Use Policy prohibits any kind of exploit. We can confirm that reusing a previously registered repo name to deliver add-ons to Kodi in the manner highlighted above is considered an exploit.

Therefore, this problem – which has caused so much conflict recently – can be dealt with under Github’s existing systems. Anyone sending a detailed complaint to Github via this form can have it investigated by the company, with offending repos being taken down.

In the meantime, it appears that those holding much of the power here are the developers themselves. By not deleting their Github accounts they constantly remain in charge of their own repos, meaning that no imposters can come in to masquerade as them.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.





Source link