Date: Tue, 21 Mar 2000 20:28:40 -0800 (PST)
From: Phil Agre <pagre@alpha.oac.ucla.edu>
To: "Red Rock Eater News Service" <rre@lists.gseis.ucla.edu>
Subject: [RRE]Cyber Patrol subpoena
Sender: <rre@lists.gseis.ucla.edu>
Precedence: Bulk
List-Software: LetterRip Pro 3.0.7 by Fog City Software, Inc.
List-Subscribe: <mailto:rre-on@lists.gseis.ucla.edu>
List-Unsubscribe: <mailto:rre-off@lists.gseis.ucla.edu>
 
[Cyber Patrol is a Web filtering program owned by Mattel, and the code
one requires to hack its list of blocked sites is running loose on the
Internet.  After Declan McCullagh circulated a list of URL's where the
code can be found, he got a threatening letter from a Mattel attorney.
Declan believes that it's a "reasonable interpretation" that they are
demanding a list of his subscribers.  The letter just strikes me as
confused, inasmuch as it asks for information that there's no reason
to believe that Declan has.  For background on Cyber Patrol, see the
Peacefire site: <http://www.peacefire.org/censorware/Cyber_Patrol/>.
In any case, I have forwarded these messages with Declan's permission,
and have reformatted them to 70 columns.  Only the committed will need
to read them all.]
 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
This message was forwarded through the Red Rock Eater News Service (RRE).
You are welcome to send the message along to others but please do not use
the "redirect" option.  For information about RRE, including instructions
for (un)subscribing, see http://dlis.gseis.ucla.edu/people/pagre/rre.html
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 
Date: Sun, 19 Mar 2000 03:18:50 -0500
From: Declan McCullagh <declan@well.com>
To: politech@vorlon.mit.edu
Subject: FC: Mattel sends me a subpoena, wants politech reader list
 
Mattel's attorneys have sent me a subpoena. Mattel, which sells
CyberPatrol, has a problem: It wants to know exactly who's been
downloading a program that reveals CyberPatrol's list of off-limits
web sites.
 
Now, I never mirrored this "cphack" utility. But I did post the
addresses of mirror sites to the politech list and the politechbot.com
web site -- and that information source seems to be what attorney
Irwin Schwartz is worried about. Schwartz copied system administrators
at MIT, which is where the list lives.
 
Naturally I have no intention of revealing the identities of politech
readers to Mattel or anyone else. Nor is a subpoena sent via email
usually viewed as proper service, at least where I come from.
 
I've set up a web site to keep track of all these documents and
developments:
   http://www.politechbot.com/cyberpatrol/
 
- -Declan
 
***********
 
>Date: Sat, 18 Mar 2000 17:34:03 -0500
>From: "Irwin B. Schwartz" <ischwartz@schwartz-nystrom.com>
>To: "'webmaster@bip.net'" <webmaster@bip.net>,
>         "'redaktionen@bip.net'"
>         <redaktionen@bip.net>,
>         "'declan@well.com'" <declan@well.com>,
>         "'web-request@mit.edu'" <web-request@mit.edu>,
>         "'mis-team@mit.edu'" <mis-team@mit.edu>
>Cc: "'mailbox@schwartz-nystrom.com'" <mailbox@schwartz-nystrom.com>
>Subject: Service of Temporary Restraining Order
>
>To Whom It May Concern
>
>Re:     Microsystems Software Inc. et al. v. Scandinavia Online AB et
>al.,  Case No. 00-cv10488-EFH (D. Mass.)
>
>Greetings:
>
>         This firm represents Microsystems Software, Inc. and Mattel,
> Inc. in the above-referenced action filed in the United States
> District Court for the District of Massachusetts.
>
>         On March 17, 2000, United States District Judge Edward
> Harrington entered a temporary restraining order in the above-
> referenced matter prohibiting any further publication of 
> "CP4break.zip" or "cphack.exe" or any derivative thereof, which
> likely violate United States copyright laws (the "Order").  A copy
> of that Order is attached here as Order.uni and in its proposed form
> as order.doc.  You may open the *.uni document with a *.tif file
> reader.
>
>         It has come to our attention that your Web hosting service
> or Web site is publishing one or both of these prohibited files.
> This letter and the enclosed Word documents and *uni files will
> place you on notice of Judge Harrington's Order.
>
>      The Order also permits Microsystems to take discovery on an
> expedited basis.  Accordingly, I have included a subpoena to you
> that requires you to disclose the log of persons who downloaded
> either "CP4break.zip" and/or "cphack.exe".  A copy of the subpoena
> is attached here as *.uni and in Word format as subpoena.doc.
>
>         In addition, attached to this E-mail transmittal are the 
> following documents in Microsoft Word and *.uni format:
>
>Verified Complaint
>
>Plaintiffs' Ex Parte Motion for Temporary Restraining Order and
>Expedited Discovery;
>
>Memorandum in Support of Ex Parte Motion for Temporary Restraining
>Order and Expedited Discovery.
>
>         We recommend that you retain counsel in Massachusetts and
> we ask that you or your counsel contact us as soon as possible to
> arrange more formal service of these documents on you.
>
>                                 Sincerely,
>
>
>
>                                 Irwin B. Schwartz
>
>Enclosure
 
------- Message 2
 
Date: Tue, 21 Mar 2000 09:54:24 -0600
From: Declan McCullagh <declan@well.com>
To: politech@vorlon.mit.edu
Subject: FC: USA Today on Mattel's subpoenas, by Janet Kornblum
 
  http://www.usatoday.com/life/cyber/tech/jk032000.htm
 
March 20, 2000
E-Briefing
 
    Judge helps Mattel zap effort to undermine filter
    By Janet Kornblum, USA TODAY
 
    A federal judge in Boston issued a temporary restraining order
    Friday that calls for the removal from the Net of a program
    that allows users of the Web filtering software Cyber Patrol to
    see which sites the software blocks. The program also lets kids
    and others circumvent the filtering, says Mattel, parent company
    of Cyber Patrol. The order sides with Cyber Patrol against two
    programmers and, says Mattel's attorney, extends to anyone who
    posted the program. It's tough to make something disappear once
    it hits the Net; several sites picked up the program and reposted
    it. Then again, a court order can be persuasive.  For more
    information:
 
    On Saturday, Declan McCullagh, a journalist for Wired who runs
    a popular e-mail list and accompanying Web site on which this
    issue was discussed and links to sites were published, received
    a subpoena via e-mail from Mattel's attorney. It ordered him
    to reveal "each and every person who produced, received, viewed,
    downloaded or accessed" the program from his site. "If they do try
    to force me to turn over my readership list, I'll fight it as hard
    as I can," he says. "Can you imagine Mattel trying to subpoena
    Time magazine's subscriber list? A judge would laugh. Internet
    publishers shouldn't have fewer rights."
 
    ...
 
- --------------------------------------------------------------------------
POLITECH -- the moderated mailing list of politics and technology
To subscribe, visit http://www.politechbot.com/info/subscribe.html
This message is archived at http://www.politechbot.com/
- --------------------------------------------------------------------------
 
 
Date: Thu, 16 Mar 2000 09:46:46 -0500
From: Declan McCullagh <declan@well.com>
To: politech@vorlon.mit.edu
Subject: FC: CyberPatrol decryption utility mirrored in response to lawsuit
Cc: junger@SAMSARA.LAW.CWRU.EDU
 
It should be obvious to anyone who has half a clue about the Internet
what happens when a company or government tries to stomp out something
it doesn't like.
 
The offending bytes appear in every corner of the globe.
 
It happened in the case of DeCSS
(http://www.politechbot.com/cgi-bin/politech.cgi?name=mirror), and
it's happening now with the CyberPatrol decryption utility. So far the
verboten-ware is at:
 
http://bur-jud-118-039.rh.uchicago.edu/
ftp://blackstar.myip.org/pub/mirrored/
http://www.shub-internet.org/cp4/cp4break.html
http://www.wwcn.org/~grit/free/
http://www.reed.edu/~turnerd/cyberpatrol.tar.gz
http://www.mit.edu/~ocschwar/
http://members.optusnet.com.au/~kris_j/rio.html
ftp://128.148.190.238
http://cr939566-a.bloor1.on.wave.home.com:2600/FusionReactor.html#mattel
http://www.openpgp.net/censorship/index.html
 
Slashdot.org thread:
   http://slashdot.org/article.pl?sid=00/03/16/0022227&mode=thread
 
Background:
   http://www.politechbot.com/cgi-bin/politech.cgi?name=cyberpatrol
 
- -Declan
 
>Date: Thu, 16 Mar 2000 00:51:45 -0500 (EST)
>From: Dave Gowan <dgowan@tfn.net>
>To: Declan McCullagh <declan@well.com>
>Subject: RE: CyberPatrol sues coders who revealed flaws in its software
>
>On Wed, 15 Mar 2000, Declan McCullagh wrote:
>
> > >They also offered a small ``cphack'' utility for ``people
> > >oppressed by Cyber Patrol'' that, when run on a parent's
> > >computer, reveals the password that blocks questionable Web
> > >sites -- and also discloses the product's entire list of more
> > >than 100,000 Internet sites deemed unsuitable for children.
>
>DeClan:
>         Let me see if I understand this... the company made an
>inferior blocking product, not hacker-proof, and they sell it for
>$30, and now that someone has exposed it as a deficient product, they
>want the courts to guarantee they still get to make the same large
>profit despite the defects in the product?
>
>         I like the phrase above, "...discloses the product's entire
>list of more than 100,000 internet sites deemed unsuitable for
>children."  Maybe now we should get the cphack utility, extract the
>100,000 sites, and publish the list at several sites, so everyone
>can see if they've been blocked when they shouldn't have, and if they
>have lost any income as a consequence.  The newspapers would probably
>like to the see the list, too, to see if it is fair.  Send the list
>to the Wall Street Journal and to Jessie Berst (Berst's AnchorDesk)
>at ZDNet.
>
>         I wrote articles in three newspapers on this issue of
>mandatory software blocking, saying that blocking should be up to
>parents and not government and not any third parties; I'd like to see
>this one exposed if possible.
>
>Dave Gowan
>Tallahassee
 
***********
 
>Date: Wed, 15 Mar 2000 23:41:00 -0600
>From: gep2@terabites.com
>To: declan@well.com
>
>The CyberPatrol people (and their attorneys) are idiots.
>
>I know of NO better way to ENSURE that the site will be mirrored
>around the world, and that tens of thousands of offline copies of it
>will be created.
>
>If they're hoping to help their cause, this is the WRONG way for
>CyberPatrol to do that.  The Net doesn't take kindly to this kind of
>legal bullying!
>
>Gordon Peterson
>http://web2.airmail.net/gep2/
>Support the Anti-SPAM Amendment!  Join at http://www.cauce.org/
>12/19/98: the day the Conservatives demonstrated their scorn for their
>    fraudulent sham of representative government.  Voters, remember it!
 
 
***********
 
>Date: Thu, 16 Mar 2000 01:13:42 -0600 (CST)
>From: sam th <sam@bur-jud-118-039.rh.uchicago.edu>
>To: Declan McCullagh <declan@wired.com>
>Subject: Re: [dvd-discuss] CyberPatrol sues programmers who published info
>  on encryption
>
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>I have a mirror on my website.  However, since this hit slashdot,
>enough mirroring has gone on already that the genie is out of the
>bottle, so to speak.
>
>
>                                 sam th
>                                 sytobinh@uchicago.edu
>                                 http://bur-jud-118-039.rh.uchicago.edu 
 >
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.0.1 (GNU/Linux)
>Comment: For info see http://www.gnupg.org
>
>iD8DBQE40Imot+kM0Mq9M/wRAvyMAJ9291qKE+xhFi/GuXijmDWwANvlRACgolCt
>oEvhWJpaXDvaZ5UU2l4agos=
>=0LHg
>-----END PGP SIGNATURE-----
 
 
***********
 
 
>Date: Thu, 16 Mar 2000 02:03:22 -0600
>From: "William H. Geiger III" <whgiii@openpgp.net>
>To: Declan McCullagh <declan@well.com>
>Subject: Re: FC: CyberPatrol sues coders who revealed flaws in its 
>software, from AP
>
>In <4.3.0.20000315220653.02666f00@mail.well.com>, on 03/15/00
>    at 09:07 PM, Declan McCullagh <declan@well.com> said:
>
> >Background:
> >   http://www.politechbot.com/cgi-bin/politech.cgi?name=cyberpatrol
>
> >If you want to download the software before the injunction hits:
> >   http://hem.passagen.se/eddy1/reveng/cp4/cp4break.html
>
> >If anyone sets up a mirror site, please let me know.
>
>Hi Declan,
>
>You should have known I couldn't resist. :)
>
>http://www.openpgp.net/censorship/cp4break/index.html
>
>You might want to make reference to
>
>http://www.openpgp.net/censorship/index.html
>
>As I will have links to the above mirror and additional sites that I am
>mirroring.
 
 
***********
 
>Date:         Thu, 16 Mar 2000 05:34:09 -0500
>From: "Peter D. Junger" <junger@SAMSARA.LAW.CWRU.EDU>
>Subject:      Re: CyberPatrol (censorware) sues reverse-engineers
>
>I have downloaded all the files at
><http://hem.passagen.se/eddy1/reveng/cp4/cp4break.html>, but am
>not sure that I got all the hot stuff, since at least one file was
>missing.
>
>It turns out to be a wonderful tutorial on decryption, modular
>artithmetic, 8086 assembly language, etc.
>
>I don't know yet whether I dare mirror it.  It's got crypto in it,
>but under the new regulations I guess I can do it.
>
>I suspect that the big risk is the DMCA.  It does make a wonderful
>example of how to circumvent weak encryption.  But I am not sure
>that the circumvention has anything to do with copyrighted materials.
>
>I'm off now, but will look at it more closely later.
>
>But, anyway, I wanted to point out that this is seriously useful
>educational stuff; it's not just a cute hack, although I am sure
>that it is that too.  The programmers explain how they went about
>opening up the filter program, using intuition, a disassembler,
>and a lot of skill and knowledge.
>
>--
>Peter D. Junger--Case Western Reserve University Law School--Cleveland, OH
>  EMAIL: junger@samsara.law.cwru.edu    URL:  http://samsara.law.cwru.edu
>          NOTE: junger@pdj2-ra.f-remote.cwru.edu no longer exists
 
 
***********
 
- --------------------------------------------------------------------------
POLITECH -- the moderated mailing list of politics and technology
To subscribe, visit http://www.politechbot.com/info/subscribe.html
This message is archived at http://www.politechbot.com/
- --------------------------------------------------------------------------