DeCSS:
A Tool For Piracy
Or
A Threat To Trade Restraint Practices?


Written April 24, 2000
    The growing desire of consumers to be entertained has brought about some changes in the movie industry in the last few years with the introduction of digital video mediums. At present, consumers are beginning to replace their old VCRs in favor of DVD players and the enhanced digital quality of the video and audio. However, most consumers are probably not aware that there is an ongoing legal battle concerning their much-adored video technology. Even fewer, due to poor reporting which fails to investigate claims, are individuals who understand the premise of these legal actions.

    In order to fully understand the background and effects of this legal situation, it is necessary to understand exactly what a DVD is and briefly how it works. A DVD, or digital video disc, can hold 4.7 gigabytes of data - nearly seven times more than a standard CD-ROM disc. Such a high storage capacity makes it ideal for archiving large databases of information such as encyclopedias, telephone books, and volumes of public records. It also functions equally well in delivering superb quality full-motion video and audio in excess of two hours per disc (Harris, 140). And that is the primary aspect of the DVD technology with which this situation is associated. DVD movies may be played in consumer level DVD units somewhat similar to video cassette players or in DVD drives designed for personal computers.

    DVDs became quite popular in the consumer market for the majority of general computer users who used Microsoft Windows or MacOS for their operating system. However, individuals who used alternative operating systems (such as Unix, Linux, BeOS, FreeBSD, etc.) found that they had no way to play the DVDs they had just purchased! There were not any programs designed to allow alternative operating systems to play DVDs, and those producing the DVDs did not see these computer users as a large enough market to be concerned with. Some individuals in this minority consumer market, filled mostly with computer professionals, sought to correct the problem by writing their own DVD software. The major issue they faced when trying to write the software was that it would be necessary to break the encryption used on DVDs in order to play them.

    By October 1999, a group of computer programmers from Norway claimed that they had defeated the encryption scheme used on DVDs and released the source code to a program named DeCSS. The encryption had been broken by someone using reverse engineering, while the source code was written by another person. The Motion Picture Association of America (MPAA) was outraged at this and tracked down the actual programmer involved, Jon Johansen. They claimed they were trying to protect DVD piracy. On January 25, 2000, this 16-year-old boy and his father, whose name was used for registering his son's website, were arrested in Norway because of the MPAA's claims that he broke intellectual property laws (Kroll).

    International copyright law became a key point in this circumstance when the MPAA crossed international borders. Many nations have entered into a pact, agreeing to the standards proposed by the Berne Convention for the Protection of Literary and Artistic Works, most recently revised in 1971. This agreement requires nations to give the same protection to foreign works as they give to their own domestic copyrighted materials. It is now the duty of the World Intellectual Property Organization (WIPO) to administer to the conditions set forth in the Berne Convention (Anderson, 11).

    Copyright owners have the ability to enforce their copyrighted material if they so choose by seeking out the companies or facilities involved in making the unlawful copies and selling them. Large publishers of pirated material may be easy to spot, but it is very difficult for the copyright owner to go after single individuals who are in violation of this law. A medium which becomes easy to reproduce will have widespread violators, and only partial, selective enforcement will be possible (Uzgalis).

    The MPAA's reported argument for their actions against Johansen and his DeCSS computer program was that they were trying to stop piracy. But what exactly is piracy, in legal terms? The unauthorized use or duplication of materials which are protected under copyright law is an acceptable legal way to clarify piracy (Harris, 160). However, there is a basic right of consumers to make authorized copies of copyrighted materials that was established by the Berne Convention. It is delegated as fair use and allows certain privileges to individuals who purchased something protected by copyright. As long as being used strictly for private purposes, backups copies of movies and music is allowed (Journalists). This is clearly valuable to the consumer if the original copy they purchased has been destroyed! Therefore, if DeCSS does indeed allow one to make copies (authorized or unauthorized) of DVDs, as the MPAA has proposed, should or should it not be outlawed if it could be used by lawful DVD owners to make backup copies of their discs?

    There is also additional, fairly recent copyright law which helps determine the validity for having computer programs such as DeCSS. Passed on October 12, 1998 by the U.S. Congress, the Digital Millennium Copyright Act (DMCA) explains the limitations and rights consumers have when dealing with digital or electronic mediums of copyright. Although it is a relatively complex work, it made major changes to U.S. copyright law by providing clarification and details in these areas. Explicitly described in Section 1201(f), those developing software are permitted to circumvent protection measures in various forms of technology, provided that the copyrighted material they are reverse engineering was lawfully obtained. It also allows the individual to distribute information necessary to overcome the protective measures (Band). And so in theory this not only allows software developers to purchase a DVD movie and attempt to "crack" its encryption (or any other protective measures it has) in order to achieve interoperability with an operating system, but also permits them to disseminate to others the methods used.

    Evidence exists to show that the encryption on DVDs is not related to copy protection as much as it is to access control. To begin with, the data contained on DVD movie discs is merely encrypted MPEG files. These are standard video files which, if unencrypted, can be played on any modern operating system, mainstream or alternative. Encryption does not prevent the copying of the files; they may easily be copied from one disc to another, regardless of encryption, because the end result will be a duplicate of the original disc, complete with encrypted files. DeCSS has nothing to do with any copying aspects at all. It is involved in decrypting the discs while they are being accessed to allow playback on operating system of your choice (Moen). On standalone DVD video players only capable of playing movies, the decryption process is done automatically in the background by the firmware (embedded chips) of the unit.

    In addition to DVD movies being encrypted, included in the design of the DVD is the ability of producer's and manufacturers to isolate in which geographical location a disc can or cannot be used. By breaking the world into six different marketing areas and assigning a code to each, they can produce DVD players which correspond to a particular region (Uzgalis). A person can usually expect to be able to order books, CDs, or magazines from another country, have them shipped to their domestic location, and expect the items to be useable there. But with DVD videos this has not been possible due to the use of region codes on the discs. In several countries, region coded DVDs have been outlawed since they represent trade barriers placed by the DVD trade associations, and many believe them to be contrary to World Trade Organization treaties. One of the nations outlawing the region coded DVDs, New Zealand, has also outlawed the sale of zoned DVD players. That is, those players which play DVDs from one region only. And in order for a DVD player to be legal in that nation it must specially modified to play discs from all regions (Regional).

    If the encryption scheme on DVD videos cannot be left intact, DVD producers will not be able to insert the region codes and keep them protected. It is the encryption which enables them to put the regional coding on the disc in the first place, determining in which part of the world the disc may be used. If the encryption is compromised, as DeCSS demonstrated it was capable of doing, the DVD trade groups would no longer be able to control in which player the discs will function (Kroll). So, someone in North America would be able to import cheaper but yet legal DVDs from a foreign nation where they are less expensive. Or a person in Europe would be able to watch a movie just as soon as it was released on DVD in the U.S., rather than being forced to wait many months and pay higher prices to purchase it in their own country.

    Up to this point, with the brief history of this legal situation given, it might be easy to foresee the possible legal solutions. However, there have been even more actions which have taken course after the arrest of Johansen, his father, and the forced removal of DeCSS from his website. The DVD Copy Control Association declared 2600 Magazine and several other individuals as defendants in a California-based lawsuit (MPAA). 2600 Magazine is a monthly publication geared towards computer "hackers" (a term given which now has a wide range of definitions, due mostly to improper use), programmers, technological enthusiasts, and solely curious individuals. The lawsuit initiated by the DVD Copy Control Association has been an effort to force 2600 Magazine and the other individuals being referred to as defendants to remove the source code of DeCSS from their website and remove any website they operate archiving the source code.

    Shortly after being aware of that impending lawsuit originating in California, 2600 Magazine's editor, Eric Corley (a.k.a. Emmanuel Goldstein), was exposed to the possibility of an injunction against him. The MPAA had filed for an injunction that would require Corley to remove the DeCSS source code from his magazine's website. By January 2000 a judge had granted the injunction. Reluctantly, the source code was removed from the website because Corley believed it was necessary to comply with the law, and that was the only action he saw for the circumstance when it had reached that point (MPAA).

    On April 5, 2000, the MPAA filed a second additional injunction against 2600 Magazine. It appears that not only do they wish for DeCSS to be removed from the magazine's website but also links to other websites which have it. Even though 2600 Magazine fulfilled the first injunction by removing the source code to the program, they continued to maintain a comprehensive list of links pointing to websites with DeCSS (Linking). The injunction has not yet been granted, but the judge will have 21 days from the time of its filing to decide.

    To perceive the broad scope which this current legal predicament concerns, consider that it involves international copyright and intellectual property law, fair use and reverse engineering, the possibility of trade restraint, and now even perhaps free speech issues. Furthermore, the members of the MPAA include: Universal City Studios, Paramount Pictures, Metro-Goldwyn Studios, Columbia Pictures, Tristar Pictures, Time Warner Entertainment, Disney Enterprises, and Twentieth Century Fox (Father). The MPAA is a compilation of some of the largest U.S. and foreign corporations related to the entertainment industry. They are corporations that already have a tremendous amount of resources at their individual disposal without even forming a bond with others.

    Examining a legal situation involving relatively new technology such as DVD is difficult when cases regarding the same technology have not been tried in the past. A judge must apply any relevant case law and interpret set laws and statutes to the best of his or her ability. Fortunately, there are at least a few instances of case law which are not directly similar to the MPAA DVD lawsuits but are still applicable nonetheless. The first case, Sony v. Universal Studios, was a U.S. Supreme Court case. It involved video cassette recorders and their possible use of unauthorized recording and piracy. The decision concluded in 1984 by the Supreme Court found that devices with "substantial non-infringing uses" are legal even if it is possible to use them for the purpose of copyright infringement (Stevens).

    Certainly that decision can be applied to Xerox machines, CD-ROM recorders, DVD recorders, and computer scanners. But a judge who recognizes that precedence could declare that it either does or does not play a role in the issue of DVDs, by examining the issue of whether or not the DeCSS program is considered a device or something else. If computer source code becomes the equivalent of a device under these circumstances, then it would be unlikely that it can be outlawed.

    The primary purpose of the DeCSS program has been indicated that it allows users of alternative operating systems to play DVDs. It removes the limitation that hinders playback on those computers. And when DeCSS was released in October 1999, the DVD trade associations (namely the MPAA) were no longer able to limit DVD videos to the Microsoft Windows and MacOS markets only - at that point they had lost their control over the industry. In addition, they also could not prohibit the playback of legally imported discs because the region coding could be circumvented (Moen). But was the circumvention protected as a consumer right under copyright law?

    To answer this, I refer to the recent case of Sony v. Connectix. Engineers for Connectix were involved in designing a computer program allowing one to play Sony Playstation video games on a personal computer, without the need of the Playstation console component. It was necessary for them to reverse engineer the operations of the Playstation and understand it, level-by-level, moving from the outside-in to gain an intricate knowledge of its functioning. When the Ninth Circuit U.S. Court of Appeals reached a decision on February 10, 2000, they found that Connectix was not guilty of infringement when their Virtual Game Station was released. Instead, their actions constituted as fair use according to copyright law (Canby).

    The most recent effort of the MPAA to remove DeCSS source code from circulation can be interpreted as an issue of free speech, according to Junger v. Daley. This very recent case (April 4th) shows that computer source code by its very nature contains ideas expressing the exchange of information. It is protected as free speech under the First Amendment, as decided by the Sixth Circuit Court of Appeals (Martin).

    Considering these few examples of case law, the outcome of the MPAA and DVD Copy Control Association lawsuits appears to be in favor of the defendants. How the injunction against them was granted in the first place is baffling. Clearly, as can be supported with previous case law, the method of reverse engineering is protected by Digital Millennium Copyright Act and the source code to DeCSS is protected as free speech. It may be distributed widely and freely if desired, as was done when it was posted on webpages and archived on various Internet servers.

    If the judge grants this second, most recent injunction filed by the MPAA, it will set a very precarious precedent. It would entail that website operators can be held responsible for the content on other websites to which they link. With it potentially stifling the free flow of communications and information on the Internet, website owners would have to be constantly cautious for fear liability (Linking). To give a more real life understanding of this, it would theoretically allow someone to place legal responsibility on the publisher of a chemistry textbook when a terrorist has used that book to increase his or her knowledge of bomb-making.

    In recapitulation, there are basic rights a consumer has of fair use, delegated by copyright law such as the Berne Convention and the Digital Millennium Copyright Act. Copyright owners have the authority to seek legal action against individuals or groups involved in making unauthorized copies of their copyrighted material. However, because reverse engineering of copyrighted materials has been determined as fair use, the copyright owners should have no reason to seek action against such individuals. In addition, distributing source code, even that which compromises protection measures of copyrighted items, is protected by the First Amendment.

    Personally, I do not believe this legal dilemma should have carried on as far and as long as it has. But I do realize the MPAA wields a substantial amount of political power, and a huge conglomeration of corporations could easily influence the decision of a judge. I believe that the injunctions against website owners posting the DeCSS source code should be appealed and revoked. In addition, I do not see any clear grounds for lawsuits against the claimed defendants. They were exercising their First Amendment rights by spreading information necessary for all computer users, not just those in the mainstream, to play DVDs. Furthermore, I also believe that the corporations involved in the MPAA should be thoroughly investigated for having participated in what appears to be trade restraining actions, by prohibiting the playback of imported DVDs and forcing consumers to pay a fixed price! While the image of competent, law-abiding computer experts has once again been tainted by poor journalism efforts, that can only be expected to happen due to a lack of technical understanding and a desire to make reporting oriented towards entertainment. With the Electronic Frontier Foundation now stepping in and providing a legal defense for the claimed defendants, this legal quandary will likely be resolved in the near future.


Works Cited

  1. Anderson, Judy.
         Plagiarism, Copyright Violation and Other Thefts of Intellectual Property.
         North Carolina: McFarland & Company, 1998.

  2. Band, Jonathan. "The Digital Millennium Copyright Act." November 25, 1998.
         American Library Association. April 2000.
         <http://www.ala.org/washoff/band.html>.

  3. Canby, Circuit Judge. "Sony v. Connectix." D.C. No. CV-99-00390-CAL.
         February 2000. United States Courts for the Ninth Circuit. April 2000.
         <http://www.ce9.uscourts.gov/web/newopinions.nsf/64ebd72fd6ca63e2882566fd0009...>.

  4. "Father and Son Arrested." January 25, 2000. 2600 Magazine. April 2000.
         <http://www.2600.com/news/2000/0125.html>.

  5. Harris, Lesley Ellen. Digital Property: Currency of the 21st Century. Canada:
         McGraw-Hill Ryerson, 1998.

  6. "Journalist's Fact Sheet." January 26, 1999. OpenDVD.org. April 2000.
         <http://www.opendvd.org/journalists.php3>.

  7. Kroll, Jason. "Crackers and Crackdowns." January 27, 2000. Linux Journal. April 2000.
         <http://www2.linuxjournal.com/articles/culture/007.html>.

  8. Martin, Jr., Boyce F., Chief Judge. "Peter D. Junger v. William Daley."
         2000 FED App. 0117P (6th Cir.). April 4, 2000.
         US Court of Appeal for the Sixth Circuit. April 2000.
         <http://pacer.ca6.uscourts.gov/cgi-bin/getopn.pl?OPINION=00a0117p.06>.

  9. Moen, Rick. "What DeCSS Is and Isn't." December 29, 1999. OpenDVD.org.
         April 2000.<http://www.opendvd.org/rickletter.html>.

  10. "MPAA Files New DVD Lawsuit Against 2600." January 15, 2000. 2600 Magazine.
         April 2000.<http://www.2600.com/news/2000/0115.html>.

  11. "MPAA Seeks to Outlaw Linking to DeCSS." April 4, 2000. 2600 Magazine. April 2000.
         <http://www.2600.com/news/2000/0406.html>.

  12. "Regional Codes." January 9, 2000. OpenDVD.org. April 2000.
         <http://www.opendvd.org/regioncode.php3>.

  13. Stevens, U.S. Supreme Court Justice.
         "Sony Corporation of America v. Universal City Studios, Inc."
         464 U.S. 417, 104 S.Ct. 774. May 11, 1998.
         Berkman Center for Internet and Society. April 2000.
         <http://cyber.law.harvard.edu/metaschool/fisher/integrity/Links/Cases/sony.html>.

  14. Uzgalis, Robert. "Is Copyright Law Dead?" 1998. ServeNet. April 2000.
         <http://www.serve.net/Editorials/01.98.html>.

<decss@plink.freeservers.com>

$HOME MISCELLANEOUS { WRITINGS }