CNN Uses P2P Video & Adds Terrible EULA 254
Futurepower(R) writes "CNN's use of software called Octoshape presents an incredibly abusive EULA. If you agree to the EULA, you agree that CNN can use your bandwidth, and that you will pay any costs. Also, you lose the right to monitor your own network traffic. You can't even use information collected by your own firewall. Quoting the EULA:
'You may not collect any information about communication in the network of computers that are operating the Software or about the other users of the Software by monitoring, interdicting or intercepting any process of the Software. Octoshape recognizes that firewalls and anti-virus applications can collect such information, in which case you not are allowed to use or distribute such information.' "
good luck with that (Score:5, Insightful)
Does anyone actually believe that click-through licenses are valid? If asked, one could always say that they let their cat chase the mouse around until the software worked.
Comment removed (Score:5, Insightful)
Re:good luck with that (Score:5, Insightful)
Re:good luck with that (Score:5, Interesting)
Person A accepts EULA.
Person B owns network and watches packets through router.
Person B did NOT accept the EULA and thus is not bound by it.
That's like people saying 'You can't read out signs' as a parade or protest walks by your window.
Re:good luck with that (Score:4, Insightful)
Re:good luck with that (Score:4, Funny)
I hear the Interceptor is nigh-uncatchable.
Re: (Score:3, Informative)
Can't believe I fucked that up.
There's no ship as can match the Interceptor for speed.
I've heard of one. It's supposed to be fast. Nigh-uncatchable. The Black Pearl."
Re: (Score:3, Informative)
Here I was thinking of the Interceptor from Mad Max - known overseas by the looks of it as the Pursuit Special [wikipedia.org], but we Aussies will always call it by its real name :)
Now THAT was nigh-uncatchable!
The linked story says it's done with Adobe's help. (Score:5, Informative)
Also, there is another point. Slashdot editors change stories submitted to them seemingly at random, but retain the submitter's name.
The story as I wrote it [slashdot.org] mentions that Adobe is allowing Octoshape to use Adobe's Express Installer to install the software.
Basically, that means that if you allow rights to Adobe, you are also giving rights to anyone who pays Adobe. Adobe's updating software is very annoying, in my opinion, but this new situation takes the abusiveness to a much higher level. See the linked story, Watch a live video, share your PC with CNN [windowssecrets.com], at WindowsSecrets.com [windowssecrets.com].
Re:good luck with that (Score:5, Insightful)
The issue is privacy. Since they are "borrowing" user's bandwidth this exposes other users potentially personally identifying information to the first user. Now you can track other user's activities (within a fairly narrow scope) by using information that can be gathered on your own computer.
I suspect they had to put this in because of this potential. Would it fly if it was clearly exposed what was happening in EU countries? I doubt it. How about if they said:
By using the CNN service you will be receiving information about other user's online activities as they will be receiving information about your activities. This is an essential part of the service that cannot be disabled. By accepting this agreement you acknowledge that no part of your activities on the CNN web site or other related services may be private, secret, anonymous or in any way protected from every other user of the CNN web site or other related services.
Would that be better?
Re: (Score:2)
Oh no. Is my computer broadcasting an IP address again?
Seriously, that's all the personally identifying info it should be sending out. And rather than trying to stop other people from looking at such info, they should do the EULA the opposite way. Simply inform each user that other users may be able to determine which content they are watching (which the
It becomes illegal to read your own firewall logs. (Score:3, Informative)
The issue is that the EULA says you lose control over your network.
Re:It becomes illegal to read your own firewall lo (Score:5, Insightful)
No, I don't think I missed any point, but I think you missed mine? Why did they add this clause to the EULA? You think they did it to stop you from looking at your firewall logs? Huh? What do they have to gain from that?
cdrguru made a relevant point. The most likely explanation for why they did this was to "protect" the privacy of their other users, since this is something like a bittorrent application. I was simply pointing out that since they can't actually protect anything, they should have just notified users of the shared info rather than pretending like they can legalese such shared info out of existence.
I also was not saying you shouldn't worry about the EULA or anything. I was saying why their approach to setting up the EULA was backwards.
Re:good luck with that (Score:4, Informative)
Oh no. Is my computer broadcasting an IP address again?
Seriously, that's all the personally identifying info it should be sending out.
At the very least, you also have information on what content they are downloading.
Re: (Score:2)
Re:good luck with that (Score:4, Insightful)
Re: (Score:3, Insightful)
"Borrowing" implies they give it back after they're done using it. There is no such thing as "borrowing" bandwidth. They are "using" bandwidth, other people's bandwidth, to deliver their content without having to foot the bill.
Now I'm all for P2P and decentralized communities, but CNN does not fit the description. They are a corporate entity encroaching on other people's property.
Re:good luck with that (Score:4, Insightful)
I have no problems with corporations using P2P to cut costs.
Where I have a problem is when they also want to revoke rights.
If they just used BitTorrent to deliver streams, no problem, I applaud that. Maybe multicast would be better for some streams, but whatever. If it's really a problem, I can limit my upload, or block them from uploading at all.
However, when their EULA prevents me from reading my own logs (much less any of the above shaping), that's when I have a problem.
Re: (Score:2)
They gonna install DRM on my machine that makes sure I'm not capturing packets?
Given they specifically mentioned firewalls and not using/distributing the information, they should be aware that no DRM on the machine itself is going to work.
Another topic would be a network with firewall/monitoring systems run by a non-agreeing party. Let's say I'm running a coffeshop that offer free wireless. Customer A comes in with said CNN program installed. Not having agreed to the terms of the EULA, I'm free to analyze the heck out of the stream.
Or the usual fun - 'my 12 year old installed it',
Re: (Score:3, Informative)
Does anyone actually believe that click-through licenses are valid?
Who gives a shit if it's valid? Is the no-monitoring part enforceable? They gonna install DRM on my machine that makes sure I'm not capturing packets? They gonna push that DRM out to my gateway to make sure I'm not capturing them there?
This is what happens when you let the lawyers draft the EULA without even consulting with the techies.....
What are you talking about? It seems pretty self explanatory.
1. They are using a Bittorrent type protocol for some reason or other. P2P.
2. They don't want to get sued when some twit on a pay as you go Internet connection runs up a huge bill, presumably after leaving the client open (perhaps even overnight). This is the same reason MMORPG boxes say an Internet Connection is required and that yes, you have to pay the ISP bill, not Turbine/Sony/Blizzard/etc.
3. They don't want you sniffing the IP addresse
Re:good luck with that (Score:5, Insightful)
>>>Who gives a shit if it's valid? Is the no-monitoring part enforceable?
No it's not enforceable, because it's invalid. ;-) Yes I went-round in a circle, but let me back that up with a Supreme Court ruling, which invalidated Paypal's EULA back in 2006, and ultimately led Paypal o hand-out $50 or $200 refunds to its customers. The Justices determined that consumers can not sign-away their rights, and therefore large sections of the EULA were declared invalid/illegal. I suspect if the justices reviewed CNN's EULA, large portions of it would also be declared invalid because "citizens can not sign away their rights as protected by law".
It's your bandwidth. It's your computer. And it's your home. You have a right to monitor what passes into & out of your own home, and no EULA can override that legally-protected right. Therefore if I ever use CNN, I'll just keep running my bandwidth meter and counting how many megabytes I used today. Screw em.
Re: (Score:2, Informative)
Yes. The US Legal system believes that they are valid. Does anyone else matter? I know its "common knowledge" on slashdot that they aren't valid, but find one US case that says they aren't valid. There are many that say they are...
Re: (Score:3, Informative)
Yes. The US Legal system believes that they are valid.
Actually the US case law is inconsistent and have only ruled on the validity specific EULAs not about them in general. There have been cases where EULAs have been ruled enforceable and valid and others to the contrary. So your statement is actually misleading.
I know its "common knowledge" on slashdot that they aren't valid, but find one US case that says they aren't valid. There are many that say they are...
In this case, the U.S. Court of Appeals for the Third Circuit held that a EULA disclaimer waiving all express and implied warranties, printed on the outside of the box, was not binding.
http://en.wikipedia.org/wiki/Step-Saver_Data_Systems,_Inc._v._Wys [wikipedia.org]
Re:good luck with that (Score:5, Informative)
This post is wrongly moderated. It is not informative. It is misinformative, or uninformative at best. The argument that the recognition of particular EULAs is distinct from recognition of the validity of EULAs "in general" betrays an ignorance of the judiciary and of contract law. This is simply not the way that the legal system works; courts must rule on an actual case or controversy and are not permitted to announce "general" rules of law. Furthermore, Step-Saver is anachronistic and the Third Circuit is relatively unpersuasive. In fact, there are NO major legal markets and NO major software companies within the Third Circuit's jurisdiction. ProCD v. Zeidenberg, 86 F.3d 1447 (7th Cir. 1996), however, has higher persuasive authority because it is (a) newer, (b) out of a major circuit, (c) written by an enormously influential appellate judge. In addition, it is the law in the entirety of the Seventh Circuit, which includes Chicago. Others may point to Klocek v. Gateway, 104 F. Supp.3d 1332 (D. Kan. 2000), but Klocek is a district court case, and therefore has no precedential value beyond its persuasiveness, which is in turn less than that of ProCD.
Trial courts don't make law. The only U.S. Circuit Court of Appeals cases on point hold, unanimously, that EULAs are enforceable. The law is relatively clear here, and is unlikely to change unless and until the Ninth Circuit or the Supreme Court take up the issue. I'm sorry, but you're just wrong.
Re: (Score:2)
well... it depends. in some case some parts of EULAs have been allowed. That doesn't not mean ALL EULAs are legal or enforceable. Just like any contract.
Re: (Score:2)
So if I write a EULA that invalidates all other EULAS would that be valid?
Re: (Score:2)
Are you willing to pay a lawyer to argue that in court? That's what it will take to get rid of this sort of thing.
Re:good luck with that (Score:5, Insightful)
Contracts are legally binding
Only if it can be proven that both parties to the contract agreed to the contract. If you set up an agreement with a company over the phone, your recorded voice proves it's you. When you take out a loan your signature proves you agreed to it.
With a clickthrough EULA there is no proof. When I install software on someone else's machine, and I click the EULA, how can they be held to it? If the EULA is on the box, how can they prove who opened the box?
And therefore also understood it (Score:2)
Most users won't even know what the EULA was talking about and so are not capable of agreeing to it; and so I doubt there is actually a contract.
Re: (Score:2)
Re: (Score:2)
You signed it.
I think there's a difference, here.
Re: (Score:2)
Yes, firstly because the ignorance is not willful, and secondly the individual may *THINK* that they understand it, and thirdly it's not reasonable.
In many cases the individual will turn out to have been agreeing to something else, and thus there will be no contract.
Re: (Score:2)
Re:good luck with that (Score:4, Insightful)
So for free services like this, exactly what consideration am I putting up? They're giving me software/media/etc., but I'm not giving them anything. I'm pretty sure mutual consideration is one of the required elements of a contract -- am I missing something here?
CNN is putting up a website. Web sites are supposed to be accessable. What did I have to give up to read your post, to which you own copyright? To have a EULA for web content is antisocial at best.
Imagine putting a dollar bill in an envelope and writing a EULA for taking the free dollar on the envelope. Would you seriously expect that anyone would respect that EULA? Well, that's what CNN did, and the fact that they expect anyone to respect their EULA shows that they're not exactly living in reality.
Re: (Score:2)
I'm sorry what? Last time I checked what the website was supposed to be was up to the owner to decide, and plenty of owners have decided that accessibility at all costs isn't what they want.
Practically every website with any form of registered users has a user agreement, even if it is just to cover the admin's ass with regards to young children and membership. Regardless of whether an EULA is really enforceable or n
Re:good luck with that (Score:4, Insightful)
Last time I checked what the website was supposed to be was up to the owner to decide
And last time I checked if you can access a site, you can access it. A site owner can no more say "you can only access this site if" any more than a book publisher can tell you you can't resell the book or rip off the cover (which publishers have tried to do).
If you don't want your work seen, don't put it on the internet. It's up to the owner to decide what to post, NOT how I may or may not access it.
Practically every website with any form of registered users has a user agreement
Half of all married people commit adultery, too. That doesn't make it right. Antisocial behavior is antisocial behavior no matter how many people practice it.
Re:good luck with that (Score:4, Funny)
That's nonsense. Please, look up the definition of the verb 'to socialize'.
Married people who do NOT commit adultery are practicing antisocial behavior.
Now please excuse me, I'm off to socialize with my secretary.
Re:good luck with that (Score:5, Interesting)
I think this issue recently arose with some user writing bots for an online game. The problem is, if you don't agree to the EULA, then (ostensibly) you haven't met the copyright owner's terms for using their work. And thus, using the service/software/whatever is a violation of copyright law at that point.
Re: (Score:2)
A copyright owner doesn't have the right to issue terms of use, at least not in the US. The only thing you, as a copyright holder, can do is to keep me from making and distributing copies. Your copyright gives you no further rights than that.
Re: (Score:2)
A copyright owner doesn't have the right to issue terms of use, at least not in the US. The only thing you, as a copyright holder, can do is to keep me from making and distributing copies. Your copyright gives you no further rights than that.
I assume that terms of use can be a condition for them granting you a license to use that work. Isn't that the whole theory on which software EULAs rest?
Re: (Score:3, Insightful)
There are no terms of use for a hardbound book. No publisher can say on the cover "by opening this book I agree to...".
Licenses aren't for end-users, they are for publishers. If I buy a copy of Garage, Inc (with its Free Speech for the Dumb cut), I can do anything with it I damned well please short of distributing copies (or, since they have the DMCA, cracking its DRM if it has any).
Re: (Score:2)
A recording of your voice maybe, but a signature really doesn't prove a thing...
Re: (Score:3, Informative)
Re: (Score:2)
Next thing you know their EULA will say you must run the software for a minimum of 8 hours a day.
Please don't give them any ideas. They might think this would be a good way to get more seeders.
Re: (Score:3, Interesting)
You need to put it much more precisely. Here is an attemnpt.
Clauses in contracts entered into by click through may be binding and enforceable. You have, by clicking through, entered into the contract. So the question is, whether there is anything special about such contracts, and also, which clauses, even if they occur in contracts validly entered into, may not be enforceable.
All click through contracts are contracts of adhesion. That is they are take it or leave it contracts. You will mostly consent to
Re:good luck with that (Score:4, Insightful)
Except that that goes back to a situation we discussed in business law classes. Take the case where you've paid the seller for the goods, he's accepted your payment, and all that's left is for him to actually deliver the goods. If the goods are still in his possession, say on his loading dock, and he won't give you access to them, you have to go through the authorities to get them (or sue him for non-delivery, demanding your payment back). But if he's released the goods into your possession but is preventing your access, eg. he's shipped them to you but the shipping container's sealed with locks and he won't give you the keys, being owner and in possession of the goods you're allowed to call a locksmith to remove the locks and gain access to your property. You can't unduly damage the seller's property in the process, but you aren't helpless.
Applying that reasoning to the case where the seller delivers the goods sealed with a piece of tape saying "By breaking this seal you agree to additional terms contained inside.", breaking that tape would be legally meaningless. You own the goods, the seller has delivered the goods into your possession, the seller has no more legal right to demand agreement to terms regarding your property.
Another analogous situation: you pay for your groceries, take your bags and head to the door. On the way, a supermarket employee stops you and asks you to complete a survey. You refuse and he says "I'm sorry, we can't let you leave with your groceries until you do.". Not only can you ignore his demand, if he tries to stop you you can call the cops and have him arrested for unlawful restraint.
Which all comes to the question: if the seller has accepted your payment and delivered the software into your possession, does he have any legal right to demand you agree to additional terms at all? If he doesn't, what gives any legal force to the idea that doing what's neccesary for you to gain access to your goods constitutes agreement to a demand the seller has no legal right to make?
Re: (Score:2)
They are emphatically valid in most U.S. jurisdictions.
LOL. (Score:2)
Dear CNN, (Score:4, Informative)
No.
Re:Dear CNN, (Score:5, Funny)
No.
You misspelled "Fuck you."
Re: (Score:3, Funny)
the keys are like right next to each other. [bash.org]
Comment removed (Score:5, Funny)
Re:shit, I already broke the EULA..... (Score:5, Funny)
Who the hell knocks on your door, pushes you out of the way, pounds on they keyboard, types "NO CARRIER", and hits Submit?
Re: (Score:2)
See, there are two guys, with two different jobs.
One guy carries the victim out of the building to meet his fate.
The second guy wipes the computer (No carrying). As a warning to others, he always writes his name in ominous all-caps -- NO CARRIER.
---
Ba-dum-dum. How bad was that? To subtle? Contrived?
Re:shit, I already broke the EULA..... (Score:5, Funny)
What's a "NO CARRIER" joke?
Re: (Score:2)
what's a fail?
Re: (Score:3, Funny)
Re:shit, I already broke the EULA..... (Score:4, Funny)
Re:shit, I already broke the EULA..... (Score:4, Funny)
They don't even offer me the EULA! (Score:3, Funny)
I'm on Linux, and as a test, I just watched some [boring] live video on CNN:
1. CNN did not try to install a P2P application on my PC
2. I was not offered any EULA
3. My upstream data traffic did not change
Obviously, CNN hates Linux. Good news!
The EULA applies only to live video. Later...? (Score:2)
Re: (Score:2)
Yes, but does it run on Linux?
Re: (Score:3, Funny)
OK, then... (Score:5, Interesting)
OK, then. Install it on your machine (and agree to the EULA, if you wish), and then plug your machine in to my network. I certainly didn't agree to the EULA, so I can and will make use of that information.
Re: (Score:3, Funny)
But, but,... the license is viral. You are a slave of your users and especially big media.
Re: (Score:2)
Re:OK, then... (Score:4, Insightful)
What happens if you replace the EULA with your own terms before installing, and therefore never agree to anything they said at all? It occurs to me that the agreement not to modify the software is actually in the EULA, so what are they going to do about it?
Well it'll work great then. (Score:2)
Get out of EULA free card (Score:2, Funny)
Really? (Score:3, Insightful)
Does it really say "you not are allowed"?
Re:Really? (Score:5, Informative)
It sure does.
here is the official EULA [octoshape.com]
Half way down in section three. What is it about EULAs that, despite being universally hated and legally toothless, inspires companies to make fucking assholes of themselves when writing them?
Here's how it happened: (Score:2)
From the article: (Score:3, Funny)
Oh really.
Tin foil hat (Score:5, Funny)
Re: (Score:3, Insightful)
Well, they should have read my Eula (Score:5, Funny)
Safeguard?? (Score:2, Interesting)
I noticed this during the inauguration of Obama (Score:5, Interesting)
Re: (Score:2)
Please contact CNN and let them know you aren't going to use this.
Enough people contact them, they will change the EULA. Not that I think they could enforce the parts about what yu can do on your machine.
EU monitoring requirements (Score:2)
This language sounds good to me. (Score:3, Interesting)
2. Because of how P2P works, it is unavoidable that you get direct IP addresses of other video watchers.
3. Legal language is necessary just to prevent (or make less inviting) outside agencies or users from spying, collecting IP addresses, and otherwise abusing all the other users of their P2P network. Isn't this a good thing for privacy? Would you rather grant every person/agency on the internet full permission
Re: (Score:3, Informative)
3. Legal language is necessary just to prevent (or make less inviting) outside agencies or users from spying, collecting IP addresses, and otherwise abusing all the other users of their P2P network. Isn't this a good thing for privacy?
No, it's misleading. No privacy is ensured because of some ckick-through legalese.
Would you rather grant every person/agency on the internet full permission to abuse their video customers instead?
Say it otherwise: what's the risk for the Internet user? Maybe these risks should have been clearly indicated within a notice before the installation. In all cases, those risks are still there.
Re: (Score:3, Insightful)
Sorry, but multicast is the best way to scale video feeds to an unlimited number of viewers.
P2p is only marginally better at scaling because you can decentralize the connections. There is still a 1-to-1 relationship between the number of viewers and the number of data streams on the wire.
P2p gives you the same amount of traffic, in other words, just not all coming from one source. It's easy to imagine how that would be less efficient, since you're setting up many more connections per stream in order to disc
Any clue how to uninstall Octoshape? (Score:4, Funny)
Re: (Score:3, Interesting)
Re: (Score:2, Funny)
Unless that's a cute name your girlfriend came up with, the singular of "testes" is "testis", dude. You would have known this if you read CNN's EULA.
Simple solution... (Score:2, Informative)
Don't let CNN or any of its software into your computer/network. This just adds to the list of reasons why I deleted the channel from my TV listings.
No Eula on Linux (Score:4, Interesting)
Explains why my work banned it. (Score:4, Informative)
They need these permissions (Score:4, Informative)
Imagine you didn't agree to these conditions. How do you expect CNN to deliver the service?
If you agree to the EULA, you agree that CNN can use your bandwidth, and that you will pay any costs.
Its a P2P service - so if you use it, you are sharing your bandwidth with other users. Or, top put it another way, CNN are using your bandwidth to deliver their material to their customers.
So if some joker leaves it running in his hotel room and gets charged $1 per megabyte, he shouldn't sue CNN. Sounds fair.
You may not collect any information about communication in the network of computers that are operating the Software or about the other users of the Software by monitoring, interdicting or intercepting any process of the Software.
So if I collected data about the other CNN customers who are sharing my bandwidth via the P2P service, their IP addresses, what they were watching, and when and published it, that would be OK, would it?
We take these things as read when we use P2P, but obviously some lawyer at CNN has done a bit of due dilligence and covered his arse in case some troll comes along and sues them.
The fuss about this is a bit like the scare stories photo-sharing sites requiring permission to reproduce/modify/sub license your photos: they need these permissions to run their service.
Re: (Score:2)
So if I collected data about the other CNN customers who are sharing my bandwidth via the P2P service, their IP addresses, what they were watching, and when and published it, that would be OK, would it?
Why would it not be OK? Perhaps not morally justifiable, but it's no different from publishing web-server logs or putting a live webcam of your house on the internet. It's a legal way around something that's technically impossible to stop, and something which just happens to be an accepted part of every day life in the real-world.
The consent is implied when the other person accesses your computer, knowingly or unknowingly, that it may be logged and may well pop up somewhere in future, so why should this pro
Re: (Score:3, Interesting)
The consent is implied when the other person accesses your computer
Yes, but they didn't know they were accessing your computer. They thought they were accessing CNN. If they complain, they're going to complain to CNN, not you. The program they ran was branded "CNN" not "John Doe's PC".
This is defensive ass-covering from a big, deep-pocketed company which would be an attractive target for legal trolls. Nobody is going to be bothered to start a $20-million class action suit against your webcam.
So then CNN is taking responsibility for my system (Score:5, Insightful)
What If the router is mine? (Score:2)
And someone is running that software? I didn't agree to any EULA. I am not using the software. Those data packets are mine! I can monitor them all I want.
Is this correct?
Re:What If the router is mine? (Score:5, Funny)
Nope. You're completely liable for things outside of your control. This is thanks to the Because Act. This little known piece of international legislation is, in fact, at the heart of many of the most prominent legal actions in the world today. Much loved by the RIAA, MPAA and the US due to it's implicit allowal for random search and seizure, legal 'fishing trips', non-judicially warranted wire taps, and it's espousal of 'guilty until proven guilty' legislature; the entire text of the Because Act has been reproduced below:
Because Act
1. Because.
1.1. Just, because.
Basically just a no-reverse-engineering clause? (Score:2)
All it says is, while you may see exactly what's going on through means available to you like firewalls and antivirus programs, you are not allowed to look too hard through it because that's tantamount to working out how our P2P protocol works.
I guess, you're not going to see a WireShark module for Octoshape protocol any time soon. Or maybe you will..
Great EULA (Score:2, Troll)
Really, i dont understand most of the retards here. Kneejerk anybody?
The EULA ensues
a) that its a P2P service (you know, YOUR upload)
and
b) that you still have privacy when using it.
Both are required AND desireable.
True, you cannot really enforce it. But at least they did try to do the best for their customers.
Re: (Score:2, Insightful)
The problem is the wording. Essentially, the EULA prohibits you from doing any packet sniffing - on your own network - without CNN's express written consent.
Not a bad idea..too bad the EULA sucks (Score:2)
Why not use P2P if you can get the video faster?
I guess they want to protect themselves from privacy issues.
People that don't care about what's in the EULA probably don't want to know anything about IP traffic - they are the majority.
The people who do know about IP traffic and do care about the EULA (./ers) are the minority, and CNN can probably give a shit what we think of the EULA
I hope this license holds up in court. (Score:3, Funny)
Because then we can attach it to every P2P client on earth and it'd mean the RIAA was no longer allowed to collect any information on the files being shared whilst at the same time you could still just share CNN's content, win win!
Oh well, we can always dream ;)