Feeds

Virus lab blogger collared by blundering copyright cop bot

Malware authors have rights too, says French legal droid

Beginner's guide to SSL certificates

A malware researcher's website was nobbled last week by an automated bot that accused her of breaching copyright law.

Web storage biz MediaFire, which is used by Mila Parkour to host dozens of downloads for her Contagio blog, pulled the plug on her account because it contained three files that were flagged up for copyright violations. The alleged infringements were reported by a software bot that uses algorithms to search for copyrighted works and demand their removal under the US's controversial Digital Millennium Copyright Act (DMCA).

It's believed the action was triggered by blog posts about a Microsoft security patch and "an old malicious PDF attachment" that was linked to phishing email attacks two years ago. Mediafire acted in response to takedown requests from a bot run by French copyright enforcement firm LeakID, and it's unclear who LeakID was acting for in this instance. It's been suggested that, unless the action was a mistake, LeakID is enforcing the copyright of malware authors. LeakID also failed to identify the infringing work, a requirement under DMCA rules.

Parkour's MediaFire account was restored soon after its suspension on Thursday, but only after her plight was highlighted by security biz Sophos. However, downloads have been suspended pending the outcome of Parkour's DMCA counter-claim, which LeakID is obliged to respond to before a 16 September deadline. The blogger took issue with this procedure in this missive, which covered the suspension of her storage box:

I understand that that the claims came from LeakID and I do understand that all claims must be checked and it takes time to check them. However, I do not appreciate auto-enforcement of American laws by foreign (and American) robots who do not even follow the filing laws. I think accounts should be suspended after the claims are proven to be true not before.

Parkour adds that she is considering moving the blog's encrypted downloads to an alternative host. Contagio, which is a popular resource among IT security bods, bills itself as a collection of the latest malware samples, threats, observations, and analyses.

Baseless software-generated takedown requests are not a new problem. The Electronic Frontier Foundation (EFF), among other organisations, has campaigned on the issue. Other recent victims of robo-takedowns have included US First Lady Michelle Obama and science fiction author Neil Gaiman. ®

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.