Skip to content
Naked Security Naked Security

Judge lambasts porn company for spewing copyright lawsuits

A US court shielded ISP account holders from a request for expedited discovery to see whose IP addresses were used to share pirated videos.

For years, people have handed thousands of dollars to copyright trolls in order to avoid the embarrassment of getting dragged through court over charges of downloading pirated videos from BitTorrent sites.

The trolls have pounced on downloaders, filing copyright lawsuits over illegal downloads against “John Doe” defendants, whom they only know by IP address.

But last week, a court in the US state of New Jersey refused to play ball, instead coming down on the side of the privacy rights of the ISP account holders who are targetted.

A federal judge in New Jersey denied a prolific copyright-filing porn video company from getting the expedited subpoena it wanted in order to reveal the identities of internet users whom it claims illegally downloaded pirated content over BitTorrent.

The company is Strike 3 Holdings – the company behind the adult entertainment videos produced by the Vixen, Tushy and Blacked studios. According to TorrentFreak, Strike 3 is the most active filer of piracy lawsuits in the US.

Judge Joel Schneider didn’t just deny Strike 3 its request to see the identities of people whose IP addresses it had connected to illegal downloads, he also became the latest in a string of judges to criticize the company’s strategy of filing a massive number of copyright lawsuits against anonymous downloaders.

In January 2019, TorrentFreak reported that Strike 3 had filed 2,092 cases over the previous 12 months.

This is how these copyright cases work:

  1. The company claiming to be a victim of piracy gets a list of allegedly infringing IP addresses from BitTorrent swarms – i.e., a group of computers downloading and uploading the same torrent.
  2. The copyright holder requests a subpoena from the court that will compel ISPs to hand over the customer data associated with the IP addresses.
  3. Once the copyright holder gets hold of the identities of people behind the ISP accounts, it starts chasing them down for cash settlements.

It works. They’ve been pulling in big bucks. Last year, in one of the first cases to signal how sick and tired judges are of seeing their courts flooded by these cases, Judge Royce C. Lamberth called Strike 3 a “cut-and-paste” serial litigant whose lawsuits “smack of extortion” – a company that turns tail at the first sign of a defense and which, he said, had been using his court “as an ATM”.

Both that decision, from November 2018, as well as last week’s decision from District Court Magistrate Judge Joel Schneider, outline a slew of problems with the way that copyright trolls have been unleashing swarms of lawyers to hound people who allegedly watch their content through BitTorrent.

First, because BitTorrent masks users’ identities, Strike 3 can only identify infringing IP addresses. From an IP address it can identify the ISP that allocated it and, using geolocation, the likely jurisdiction the IP address resides in.

That method is “famously flawed,” Lamberth wrote, given the flimsy links between an IP address, a person and a location. Multiple people might share the same IP address: family, neighbors, guests, roommates, for example, and an IP address can be reallocated at the whim of the ISP.

An IP addresses might also point to virtual private network (VPNs) or Tor node, or a home computer compromised by malware and being used without its owner’s knowledge.

Geolocation has its issues too – it’s far from pin-point accurate and, in extremis, it might randomly assign an address to a default location.

Case in point on that last item: the couple whose quiet rural farmhouse became associated with the geographic center of the US and who, because of an internet mapping glitch, have been accused of being identity thieves, spammers, and scammers, and who’ve found on their doorstep FBI agents, federal marshals, IRS collectors, ambulances searching for suicidal veterans, and police officers searching for runaway children, and who have been wrongfully punished by irate people who’ve published their names and addresses or left a broken toilet in their driveway.

In short, as Judge Schneider said last week in his detailed, 47-page decision, the only thing that Strike 3 actually knows is that an IP address is associated with downloading copyrighted work. That doesn’t mean that the ISP account holder has infringed anything.

But even if the infringement claim were based on sturdier evidence, Judge Schneider wrote, the requests for expedited discovery would still be denied, due to these additional issues:

  1. Strike 3 bases its complaints on unequivocal affirmative representations of alleged facts that it does not know to be true.
  2. Strike 3’s subpoenas are misleading and create too great of an opportunity for misidentification.
  3. The linchpin of Strike 3’s good cause argument, that expedited discovery is the only way to stop infringement of its works, is wrong.
  4. Strike 3 has other available means to stop infringement besides suing individual subscribers in thousands of John Doe complaints.
  5. The deterrent effect of Strike 3’s lawsuits is questionable.
  6. Substantial prejudice may inure to subscribers who are misidentified.
  7. Strike 3 underestimates the substantial interest subscribers have in the constitutionally protected privacy of their subscription information.

The “other available means” that Strike 3 isn’t bothering to use in order to stop infringement are Digital Millennium Copyright Act (DMCA) takedown notices.

From the decision:

One would think that Strike 3 would be eager to notify ISP’s that its subscribers are infringing their copyrights, so that an infringer’s internet service would be interrupted, suspended or terminated and infringement would stop. However, Strike 3 does not take this simple step but instead files thousands of lawsuits arguing that it has no other recourse to stop infringement.

But why would it? Copyright trolls find it easy, and highly lucrative, to simply shake down alleged infringers, particularly when courts go along with their requests for expedited subpoenas to get the subscribers’ identities.

In fact, in August 2018, we saw a lawyer plead guilty to creating a porn honeypot so he could cash in on the easy money you can make from copyright trollery. He and another lawyer made porn films, seeded them to BitTorrent websites, and then extorted those who downloaded them, threatening to file lawsuits unless they paid $3,000 to stay out of court.

From 2011 to 2014, the (now debarred) lawyers made more than $3m from lawsuits.

Judge Schneider concedes that the court’s decision might make it tough for Strike 3 to identify copyright infringers. Be that as it may, he said: people’s right to privacy trumps that difficulty:

To the extent this is the price to pay to assure compliance with the applicable law, so be it. A legal remedy does not exist for every wrong, and it is unfortunately the case that sometimes the law has not yet caught up with advanced technology. This is not the first time, nor will it be the last, where a party who believes it was wronged was denied discovery.

3 Comments

I’m happy to see that the courts are finally opening their eyes to this abuse of the justice system.

I’m pretty sure lawyers are not using geolocation to determine the location of an IP address. What they are using are the logs that ISPs maintain of which user accounts have been given what IP addresses during the time/date in question. That is why the ISP subscriber often receives the lawsuit, not necessarily the homeowner/renter.

That is also why non-logging VPNs are so popular now, it’s not because they protect against geolocation (although they may be beneficial to users of location restricted streaming services) non-logging VPNs are popular because they specifically refuse to log what IP is connected to a specific user account at any time.

The geolocation is used to determine the legal jurisdiction.

From the decision:

“After Strike 3’s data analytics contractor identifies a serial infringer, Strike 3 runs the IP address through Maxmind, a geolocation technology. Maxmind gives Strike 3 an approximate location of where the IP address is located. Strike 3 uses the Maxmind result to identify the appropriate jurisdiction in which to file suit.”

Comments are closed.

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?