Tuesday, April 28, 2020

TorrentFreak's Latest News

 

Piracy Should be Tackled With 'Carrot and Stick' USPTO Paper Suggests
Ernesto, 28 Apr 09:56 PM

Over the past years, hundreds of academic piracy studies have been published, all focusing on their own unique angle.

This resulted in a vast body of research that, with some skilled cherry-picking, can support pretty much any argument.

While the individual papers all contribute to the understanding of the piracy ecosystem and how this affects the entertainment industries, the results are often hard to translate into policy.

In an effort to obtain a broader perspective, last year the US Patent and Trade Office (USPTO) put out a proposal for a broad piracy landscape study. This project was awarded to a group of researchers from Chapman University and Carnegie Mellon University, who released their working paper this month.

The study doesn't research any new topics, but it does a good job of summarizing the existing findings and draws some strong conclusions, uniting opposing views.

In public piracy discussions, you often have two sides. The first, often the rightsholders, stress that stricter enforcement measures are needed. The other side, however, believes that affordable and accessible legal options are the cure to piracy.

The USPTO paper addresses both and concludes that no side is entirely wrong or right.

"Our analysis of the academic literature on anti-piracy strategies shows that firms can reduce piracy by making legal content more available and more appealing," the researchers write.

"Strategies such as making legal content available on convenient digital channels or reducing the release windows between different releases of the same product are both effective at changing consumption of pirated content."

Having great legal options alone is not the full answer though. Research has shown that this reduces piracy by 25 percent at most. While this is substantial, there is more that can be done.

This is where the enforcement side comes in. According to the researchers, the majority of the academic papers show that piracy results in some losses for rightsholders. Enforcement measures can help to limit these losses.

However, the researchers highlight that not all enforcement efforts work well. Blocking a single pirate site, for example, is not believed to be effective. The same is true for stringent anti-piracy laws that are barely enforced.

Strict enforcement works even better when there's risk involved. This includes the risk of getting caught, but also the risk of running into malware, which may explain the wave of malware-related warnings we've seen from copyright holders recently.

But, even when hundreds of pirate sites are blocked and piracy is seen as very risky, legal options should not be ignored. In fact, the researchers suggest that a combination of attractive legal options (carrot) and good enforcement measures (stick) probably works best.

"Making pirated content harder to find is likely to have a larger impact on consumer choice if legal content is readily available in a timely fashion than if the content that consumers want to enjoy is difficult to find on legal channels or is not available until long after it becomes available through piracy," the paper reads.

This theory also applies in the other direction.

"Similarly, making legal content available on convenient legal services is likely to have a stronger impact on consumer behavior if piracy is perceived as a costly, inconvenient, or risky alternative."

The overall conclusion is that the combination of a carrot and stick is the way forward. In other words, pairing the most effective enforcement efforts with the most attractive legal offerings is the optimal anti-piracy strategy.

"[T]he most natural conclusion one can draw from the peer-reviewed literature is that the combination of firm strategies to make high-quality legal content readily available and easy to use, and government and private actions to reduce the appeal of pirated content, is the most effective way to reduce piracy's impact on legal markets."

While this appears to be a sensible conclusion, this approach is yet to be studied in detail so will be an area for future academic research.

The paper also highlights some further shortcomings of the existing literature. For example, many studies were conducted during a time when most people bought media, while most entertainment consumption is subscription-based now.

While not mentioned in the paper, increased fragmentation in the legal streaming landscape may not be the best way forward, as it can drive people towards piracy sites.

Another area that hasn't been researched in detail is the effect of piracy on live streaming, including sports. These are all opportunities for future research.

A copy of the USPTO working paper titled Piracy Landscape Study: Analysis of Existing and Emerging Research Relevant to Intellectual Property Rights (IPR) Enforcement of Commercial-Scale Piracy, is available here.

From: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

Massive & Unprecedented Security Breach Takes Usenet Providers Offline
Andy, 28 Apr 10:27 AM

While the majority of people seeking movies, TV shows, music and other content obtain access via BitTorrent or streaming sources, huge numbers still use the newsgroups, otherwise known as Usenet.

In basic terms, the Usenet system is comprised of thousands of servers around the world where users can post discussions or content, otherwise known as binaries. These banks of servers share this information with other banks, allowing the data to propagate around the world. Having its roots in 1979, it is one of the oldest methods still around to share files on a large scale.

While most Usenet use flies under the radar these days, huge volumes of data are shared on a daily basis. To access this content, users can subscribe to Usenet providers which, for a fee, supply Usenet login credentials allowing often metered access to the 'newsgroups'. This weekend, however, signs of trouble became evident.

In a post on Obload, a web-based German-language Usenet discussion forum, an administrator alerted users to a serious situation involving the Momentum Usenet client, a software tool used to access Usenet. According to research carried out by a user called 'Tensai', Momentum – a relative new-comer to the Usenet scene – not only facilitates access to Usenet but also swipes Usenet users' login credentials and NZB data and uploads it to a site called Newzbee.

The immediate advice was to stop using Momentum and since users have to enter their Usenet providers' username and password into Momentum to have it work, immediately change their passwords at their Usenet provider. If true, and to put things another way, this situation is akin to users using a third-party application to access Netflix then have that application steal their Netflix username and password.

TorrentFreak contacted both Momentum and Newzbee on Monday but neither responded to our requests for comment. However, at the same time and quite unusually, another major development was breaking in the Usenet space.

On Usenet1, a site dedicated to Usenet matters, a post revealed that several major Usenet providers and tool operators were experiencing "massive problems". They included UseNext, Usenet.nl, Gigaflat, plus HolmeZ.com and Momentum Plus, the latter two sites being directly connected to the Momentum client.

Checking UseNext's and Usenet.nl's portals revealed both to be completely offline, which is extremely rare for such high-profile suppliers of Usenet access. With the latter reporting nothing, the former has now issued a major security advisory to its substantial customer base.

"Unauthorized persons have accessed our infrastructure via a security hole in a partner company. We are currently analyzing what damage may have occurred. For security reasons, all systems are currently offline," the company said in a statement.

At the time of writing there is no clear evidence to link the alleged misconduct of the Momentum client with the downtime at major Usenet providers. However, that two serious events have occurred almost simultaneously has set alarm bells ringing and for UseNext, which listed Momentum as a preferred Usenet client on its site (before it was taken down), the implications appear extremely serious.

"There could be a risk that attackers could gain access to your account information. Your name, billing address, payment data such as IBAN and account number and other data that we have processed to carry out your contract are potentially affected. Accessing your bank details puts you at risk of becoming a victim of fraud or identity theft," the company warns.

While UseNext is advising its users to change their passwords, the ability to do so on UseNext.de doesn't exist as the site is down. However, there are bigger problems too. If users have duplicated passwords on other sites, they may also be compromised.

"Change your account passwords immediately. Most important are the accounts that are needed to restore other accounts or passwords. If you also use these passwords for other sites, you should change them there too," UseNext advises.

"Check the settings of your accounts (e.g. automatic forwarding of messages). Any changes indicate unauthorized access. Correct the settings if necessary. If you find that someone is using your identity, please notify the provider of the affected account immediately and have the account blocked.

"Also let friends know about possible identity theft. As of now, watch out for suspicious debits on your accounts. Check your inbox for fraudulent phishing emails. Do not click on any links that appear suspicious to you, but report them," UseNext adds.

UseNext says it has reported the matter to the authorities but in the meantime, its service will remain down until the company can determine the scale of the breach. Users can contact the company for information via a dedicated hotline.

For now, and at least until the makers of the Momentum client issue a statement, the general advice is to stop using the client and consider any Usenet credentials entered into the software as compromised, including the related Usenet provider accounts. And any other services where passwords were duplicated, of course.

From: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

 
 
Powered by Mad Mimi®A GoDaddy® company

No comments: