See related files:
http://www.eff.org/IP/Video (EFF Archive)
http://cryptome.org/cryptout.htm#DVD-DeCSS
(Cryptome Archive)
http://www.2600.com/dvd/docs (2600 Archive)
http://eon.law.harvard.edu/openlaw/dvd/ (Harvard DVD OpenLaw Project)
612
1 UNITED STATES DISTRICT COURT
SOUTHERN DISTRICT OF NEW YORK
2 ------------------------------x
3 UNIVERSAL CITY STUDIOS, INC.,
et al,
4
Plaintiffs,
5
v. 00 Civ. 277 (LAK)
6
SHAWN C. REIMERDES, et al,
7
Defendants.
8
------------------------------x
9
July 20, 2000
10 9:00 a.m.
11 Before:
12 HON. LEWIS A. KAPLAN,
13 District Judge
14 APPEARANCES
15 PROSKAUER, ROSE, L.L.P.
Attorneys for Plaintiffs
16 BY: LEON P. GOLD
CHARLES S. SIMS
17 SCOTT P. COOPER
18 FRANKFURT, GARBUS, KLEIN & SELZ
Attorneys for Defendants
19 BY: MARTIN GARBUS
ERNEST HERNSTADT
20 DAVID ATLAS
21
22
23
24
25
613
1 (In open court)
2 MR. GARBUS: May we approach the bench?
3 THE COURT: Yes, you and Mr. Gold may approach the
4 bench.
5 (At the sidebar)
6 MR. GARBUS: I got the Court's opinion yesterday when
7 I got back to my office, and we will try and deal with it in
8 some way. I do want to point out that as I read the
9 transcript, I was asked to stop going into an area that I
10 thought was relevant to the lawsuit because the Court felt
11 that I was getting into a recusal issue. The Court then asked
12 the question that was specifically related to the recusal
13 issue. I think it's very difficult to try a case while this
14 is going on.
15 THE COURT: I hear what you said, and what you've
16 said is, regrettably, absolutely false. And the transcript so
17 reflects.
18 MR. GARBUS: Secondly --
19 THE COURT: I did not stop you from going into
20 anything. I raised a concern about whether you were doing it
21 for a different purpose. I said that. You then said you
22 weren't and therefore you would leave the subject. I said,
23 look, if you want to press it, it raises another issue and I
24 will deal with it. You then elected to stop.
25 MR. GARBUS: Thank you. With respect to the issue of
614
1 the press, the Court has already indicated in its previous
2 decisions some concern. I had 12 calls from the press
3 yesterday. I spoke to nobody. I do not fault Mr. Gold at
4 all. I do understand, and I could be totally wrong, and I am
5 not making criticism of any kind, that members of the
6 Proskauer firm have spoken to the press. If I'm wrong, then
7 I'm wrong.
8 MR. GOLD: I didn't hear what you said.
9 MR. GARBUS: That members of the Proskauer firm have
10 been speaking to the press, and I find nothing wrong with it,
11 I'm not even asking about it.
12 Are you saying --
13 THE COURT: Stop it, Mr. Gold.
14 MR. GARBUS: All I'm saying is if there is to be a
15 bar, or if there is to be any significance given to any
16 discussion by any member of the defense team or the
17 defendants -- I have also seen Mr. Valenti's statements and
18 statements by the MPAA -- then if the Court wishes to impose a
19 press bar on everybody, I will not object to it.
20 THE COURT: Are you asking for it?
21 MR. GARBUS: Absolutely not. But I don't want to be
22 the only one feeling the pressure of that restriction.
23 THE COURT: Mr. Garbus, any pressure you are feeling
24 in this regard is internally generated.
25 MR. GARBUS: Thank you.
615
1 THE COURT: I have imposed no bar, no one has asked
2 me to impose a bar, and so that the record is abundantly
3 clear, yesterday when you made a statement to the effect that
4 you had not been making certain sorts of out of court
5 statements or would not, or something to that effect, there
6 was comment on the fact that you were speaking only for
7 yourself.
8 MR. GARBUS: Absolutely.
9 THE COURT: And you made clear that you were speaking
10 only for yourself.
11 MR. GARBUS: Absolutely.
12 THE COURT: And you know we are not, all of us,
13 totally in a vacuum. It is perfectly obvious that others at
14 your table, or at least one other that I can identify, is
15 speaking to the press with immense regularity.
16 MR. GARBUS: Do you care to mention the extent to
17 which the other side is speaking to the press through press
18 releases and distributing information as well?
19 THE COURT: I have absolutely no idea. I suppose you
20 are both talking to the press a lot.
21 MR. GARBUS: I am not.
22 THE COURT: Those are generic you's. Both sides are
23 obviously talking to the press.
24 (In open court)
25 Do you have a witness, Mr. Gold?
616
1 MR. GOLD: Yes, we do, your Honor.
2 MR. HERNSTADT: I think we have agreed to do Mr.
3 Johansen first.
4 THE COURT: We will take Mr. Johansen out of order.
5 MR. HERNSTADT: Thank you very much, your Honor.
6 The defendants call Jon Johansen.
7 JON JOHANSEN,
8 called as a witness by the Defendants,
9 having been duly sworn, testified as follows:
10 DIRECT EXAMINATION
11 BY MR. HERNSTADT:
12 Q. Good morning, Mr. Johansen.
13 A. Good morning.
14 Q. Where do you live?
15 A. I live in Larvik, Norway.
16 Q. How old are you, sir?
17 A. I will be 17 in November.
18 Q. What is your educational background?
19 A. High school.
20 Q. Do you work now?
21 A. Yes, I do.
22 Q. Where do you work?
23 A. I work for WAP Factory in Oslo.
24 Q. What do you do for them?
25 A. I work in interactive TV.
617
1 Q. What does WAP Factory do?
2 A. We work with WAP, the Wireless Application Protocol, and
3 interactive TV.
4 Q. Does it produce programs?
5 A. We -- yes, but not for the general public.
6 Q. Thank you. What program languages do you use?
7 A. I use C, C++, Assembler and JAVA.
8 Q. And what operating systems do you use?
9 A. I use GNU/Linux, FreeBSD and Windows NT.
10 Q. How many computers do you have at home?
11 A. I have three computers.
12 Q. And what are the operating systems on those computers?
13 A. One has GNU/Linux, one has FreeBSD and one has GNU/Linux
14 and Windows NT.
15 Q. What do you use those machines for?
16 A. The Linux only machine is used as a router, which I use to
17 connect to the Internet, and the FreeBSD machine is used as a
18 file print server and the new Linux and Windows NT machine is
19 my desktop machine.
20 Q. How long have you used Linux programs?
21 A. I used Linux for about three years.
22 Q. What is your primary operating system that you use?
23 A. That would be Linux.
24 Q. When did you first -- do you know what a DVD is?
25 A. Yes, I do.
618
1 Q. When did you first see a DVD?
2 A. I first saw a DVD in 1997.
3 Q. Okay. As of October 1999 did you own any DVDs?
4 A. Yes, I did.
5 Q. How many?
6 A. About 15.
7 Q. How many do you have today?
8 A. Today I have about 40 DVDs.
9 Q. Okay. Did you buy them?
10 A. Yes, I did.
11 Q. How much does a DVD cost in Norway?
12 A. Region 2 DVDs for the European market are about 20 to $30,
13 but they lack -- they usually lack all the extra features that
14 are on the region 1 U.S. DVDs, so I buy imported U.S. DVDs,
15 which are about 40 to $50.
16 Q. Can you play an imported U.S. DVD in Norway?
17 MR. SIMS: Object to this whole line as irrelevant,
18 your Honor.
19 THE COURT: Sustained. No, I'm not sure. Overruled.
20 I will let it go a while.
21 MR. HERNSTADT: Thank you, your Honor.
22 A. Can you please repeat?
23 (Record read)
24 A. When a DVD comes from the factory it will only play the
25 European region, which is 2, but almost all DVD players in
619
1 Norway are modified to play DVDs from the whole world.
2 Q. Who modifies the DVD players?
3 A. The stores usually have a person who they send the DVD
4 players to to have them modified before they sell them.
5 Q. Do you have DVD a player in your home?
6 A. Yes, I do.
7 Q. How many?
8 A. I have a set up DVD player for my TV and I have a DVD
9 player on my computer.
10 Q. On which computer do you have the DVD player?
11 A. That would be Linux.
12 Q. Do you know a program called DeCSS?
13 A. Yes, I do.
14 Q. What is it?
15 A. It is a program which decrypts DVD movies and stores them
16 on your hard drive.
17 Q. Does DeCSS do anything else?
18 A. No, it does not.
19 Q. Who wrote DeCSS?
20 A. I and two other people wrote DeCSS.
21 Q. How did this come about?
22 A. In September, October, 1999 I met a person on the Internet
23 and he was also a Linux user. We decided to investigate and
24 find out how we could make a DVD player for Linux.
25 Q. Why did you want to do that?
620
1 A. Well, at the time I had a dedicated Windows machine, which
2 I used only for DVD playback, and if I could get a Linux
3 player I wouldn't have to have a machine just for DVDs.
4 Q. Okay. So what did you do?
5 A. Well --
6 MR. SIMS: Your Honor, object on relevance to this
7 whole line.
8 THE COURT: Tell me why.
9 MR. SIMS: Excuse me?
10 THE COURT: Tell me why.
11 MR. SIMS: Because the issue in the case has nothing
12 to do with why this person created an executable for DeCSS.
13 It has to do with what its function is and what Mr. Corley has
14 done.
15 THE COURT: I am going to hear the evidence, within
16 reasonable time limits, for what it's worth. Go ahead. I
17 mean the man is here from Norway, I might as well hear him.
18 MR. HERNSTADT: Do you want to hear the purpose of
19 the evidence or would you rather hear the evidence?
20 THE COURT: You are going to get the evidence in and
21 I will hear the argument later, unless we come to a point
22 where I think you have taken too much time and then you can
23 try to explain to me why we should take more.
24 Q. Mr. Johansen, what did you do next towards making DeCSS?
25 A. We agreed that the person who I met would reverse engineer
621
1 a DVD player in order to obtain the CSS algorithm and keys.
2 Q. Who was this person that you met on the Internet?
3 A. A person from Germany. I don't know his identity.
4 Q. Okay. What happened next?
5 A. About three days later when I was on line again, he
6 messaged me and told me that he had found the CSS algorithm.
7 He also sent the algorithm to me with the CSS authentication
8 source which are written by Eric Fawcus earlier. He also sent
9 me information on where inside the player he had found the
10 algorithm, and he also sent me a single player key.
11 Q. Why did he send you the information on how he found the
12 algorithm?
13 MR. SIMS: Objection.
14 THE COURT: Sustained.
15 Q. What did you do next?
16 A. Well, he had told me where inside the player he had found
17 the algorithm, so I disassembled the DVD player myself to see
18 where he had found it.
19 Q. Was this a software DVD player?
20 A. Yes, this was a software DVD player, the Xing DVD player.
21 Q. What did you do next?
22 A. Well, at the time -- the UDF is a file system which is
23 used on DVDs, and at the time Linux did not have the proper
24 support. It was currently in development. It was being developed
25 so I could not get it to work, so in order to test the
622
1 decryption, if the decryption algorithm found worked, I
2 created a Window executable which would use the CSS algorithm
3 to decrypt the CSS content.
4 Q. You said you got the CSS authentication program from Derek
5 Fawcus?
6 A. Yes, I believe the CSS authentication had been posted
7 anonymously in Assembler language on the Internet, and Derek
8 Fawcus had picked that up and rewritten it in C language and
9 posted it on his website.
10 Q. How do you know that it was Derek Fawcus?
11 A. He told me.
12 MR. SIMS: Judge, move to strike. Hearsay.
13 THE COURT: Strike what Mr. Fawcus told him.
14 Q. Were there any other indications that Mr. Fawcus might
15 have been connected to the program?
16 A. The CSS-authentication?
17 Q. Yes.
18 A. Well, it was posted on his website so I presume he put it
19 there.
20 Q. All right. Tell us what happened next.
21 A. Well, after I had created the DeCSS executable, I posted
22 it on my website, I made an announcement on the LiViD mailing
23 list. I posted a link to my website.
24 Q. Why did you make an announcement on the LiViD mailing
25 list?
623
1 A. Well, I wanted them to know that we had successfully
2 reverse-engineered a DVD player and obtained the algorithm we
3 needed to make a DVD player.
4 Q. Why did you want the LiViD mailing list to know that?
5 A. That's what LiViD is about, it's about making a DVD player
6 for Linux.
7 Q. Were you able to play DVDs on a Linux machine using DeCSS?
8 A. Well, yes. After I had decrypted a movie, I used the NIST
9 MP-2 player to successfully play a DVD. I wouldn't have
10 access to the DVD features but I could play the actual movie.
11 Q. Have you looked at any other programs that do
12 substantially the same thing as DeCSS?
13 A. Yes, I have. Before I created DeCSS, I had analyzed a
14 program called DVD Rip, which I had found on the Internet.
15 Q. Why did you need to make DeCSS if you had found a program
16 that did essentially the same thing?
17 A. Well, DVD Rip, it takes a decrypted DVD movie from memory
18 and stores it on your hard drive. It did not come in source,
19 and in order to make a DVD player we would need to have
20 source, and the DVD republication didn't contain the CSS
21 algorithm and it was dependent on a DVD player for Windows.
22 Q. Did the DVD Ripped program decrypt DVDs?
23 A. No, it actually stole, if you would like to use that term,
24 the DVD movie from memory after it had been decrypted by the
25 Xing DVD player and then you save that stream on your hard
624
1 drive.
2 Q. Were the files created by DVD Rip and DeCSS the same?
3 A. Not exactly, but the files created could easily be
4 compressed using another compressed algorithm.
5 Q. And did DVD Rip, the file created by DVD Rip, was the
6 audio and video together or separate?
7 A. They were together.
8 Q. And how about with DeCSS?
9 A. Well, they are still together with DeCSS as well.
10 Q. Okay. Is there anything -- I'll move on. What happened
11 to you after --
12 THE COURT: Let me get clarification of that. With
13 DeCSS was there any need, is there any need to synchronize the
14 audio files with the video files in order to see the movie in
15 the form you would normally see a movie?
16 THE WITNESS: Well, if you make a DivX, is that what
17 you mean? Or if you want to play the DVD movie after it has
18 been decrypted?
19 THE COURT: Either way.
20 THE WITNESS: After we decrypt a movie with DeCSS,
21 you can simply play it in your DVD player. You don't need to
22 do anything.
23 THE COURT: What if you then want to compress it and
24 transfer the compressed file to someone?
25 THE WITNESS: Well, that you would need -- I haven't
625
1 actually performed that procedure, but I believe there are
2 steps needed to resynchronize the video and audio.
3 THE COURT: What is the basis for your belief in that
4 regard?
5 THE WITNESS: I have read several articles on the
6 Internet that describe those procedures.
7 THE COURT: All right. Go ahead.
8 Q. If you use DVD Rip to decrypt or to get a decrypted DVD
9 file, is there a need to synchronize the audio and visual if
10 you are going to compress it thereafter?
11 A. Well, I haven't performed that procedure myself, but I
12 believe there would be.
13 THE COURT: Mr. Johansen, if you would sit back about
14 another six inches, the audio will be a lot clearer.
15 MR. SIMS: Move to strike. No foundation to the last
16 part of that.
17 THE COURT: I will take it for what it's worth. If
18 he hasn't done it, he hasn't done it.
19 Q. After you posted the link to the DeCSS program on the
20 LiViD site, what happened then?
21 A. Well, I had some small increase in visitors, not much.
22 After the press started releasing articles and linked it to my
23 site, I received a substantial increase in visitors.
24 Q. Was anyone on the LiViD site critical of you posting a
25 link to CSS?
626
1 A. Yes, there was at least one person who felt that we should
2 have released the source with the Xing key at the same time we
3 released the executable.
4 Q. Did you release the source at the same time?
5 A. No, we did not.
6 Q. Why didn't you?
7 A. Because the source we had contained the Xing player key.
8 If we were to release that source, the Xing would be harmed,
9 the player key would be revoked and no new DVD movies would
10 work with the Xing DVD player or the player we would have
11 created.
12 Q. Did you intend never to release the source?
13 A. Before we created DeCSS we sent the source to Derek
14 Fawcus. He was supposed to rewrite the source without the
15 need for the Xing player key and then release that onto the
16 Internet.
17 Q. Did any event occur to you personally as a result of your
18 writing DeCSS?
19 MR. SIMS: Objection. Irrelevant.
20 THE COURT: Sustained.
21 Q. What happened next?
22 MR. SIMS: Objection. Irrelevant.
23 THE COURT: Well, look, we all know the story, don't
24 we? What's the harm? Go ahead.
25 A. Well, in January, on January 25, I had to go to the local
627
1 prosecutor's office because of charges filed by the MPAA in
2 Norway, and in February I received an award, a national
3 student award which is awarded to students who are in high
4 school and have achieved excellent grades and also achieved
5 something outside of school in culture, sports, art.
6 Q. Why did you receive that award?
7 A. I believe I received the prize because of my part in the
8 writing DeCSS.
9 Q. Did you get a prize?
10 A. Yes, I did.
11 Q. Did you get any money?
12 A. I received about $2,000.
13 Q. What did you do with the money?
14 A. I used $1200 and bought a high-end Sony DVD player for my
15 TV.
16 MR. HERNSTADT: Thank you very much, Mr. Johansen.
17 THE COURT: Mr. Sims. Thank you, Mr. Hernstadt.
18 CROSS-EXAMINATION
19 BY MR. SIMS:
20 Q. Good morning, Mr. Johansen.
21 A. Good morning.
22 Q. Now, you understood when you created DeCSS executable that
23 DVD movies were encrypted using the CSS encryption algorithm,
24 correct?
25 A. Yes, I did.
628
1 Q. And you first learned of CSS in about June or July of
2 1999?
3 A. Yes, I did.
4 Q. You understood that CSS required three sets of keys to
5 play back a DVD?
6 A. Yes.
7 Q. And you understood that certain of those keys were
8 themselves encrypted?
9 A. Well, I believe I understood that the CSS license requires
10 anyone who makes a DVD player to encrypt their algorithm and
11 key inside the DVD player.
12 Q. The program you created, DeCSS, that you posted, is a
13 Windows program, correct?
14 A. Yes, that's correct.
15 Q. And you came up with the name DeCSS?
16 A. Yes, I did.
17 Q. What does the De in DeCSS stand for?
18 A. It stands for decrypt.
19 Q. DeCSS has no playback functionality, is that correct?
20 A. Yes, that's correct.
21 Q. Once a decrypttive VOB file is copied to the user's hard
22 drive, he can do anything with that file that he can do with
23 any other computer file?
24 A. Yes, that's correct.
25 Q. He can copy it again?
629
1 A. Yes, that's correct.
2 Q. Compress it?
3 A. Yes.
4 Q. He can copy it to a VCD? I'm sorry. He can copy it to a
5 video compact disk?
6 A. Well, not in its original decrypted form. The size is too
7 high.
8 Q. But if he compresses it, it can be copied to a video
9 compact disk?
10 A. Yes, if he uses sufficient compression.
11 Q. And to a CD-ROM?
12 A. Yes.
13 Q. And it can be uploaded on to the Internet -- it could be
14 uploaded to the Internet, correct?
15 A. Yes, just as any other file.
16 Q. Now, am I correct that someone in a chat room advised you
17 two months ago that he or she had downloaded a decrypted
18 DivX'd DVD movie from the Internet?
19 A. No, I believe someone told me that they had downloaded a
20 movie. They didn't tell me what form it was or which movie it
21 was.
22 Q. They didn't tell you that it was DivX'd?
23 A. No, they did not.
24 Q. What was the chat room, by the way, where you had that
25 communication?
630
1 A. That would be #PC DVD.
2 MR. HERNSTADT: I object and move to strike the last
3 several questions and answer on the grounds of hearsay.
4 THE COURT: I'm not going to take it for the truth.
5 Q. Now, Mr. Johansen, did you testify last night that you
6 were told by this person that he had downloaded a DivX'd
7 movie?
8 A. No, I believe I told last night that he had told me that
9 he had downloaded a movie. He didn't say which kind of movie
10 it was.
11 MR. SIMS: I don't quite remember the approach you
12 want, but that testimony appears on page 10 of the --
13 THE COURT: I don't have it. Just read it. Give the
14 page and line number and just read it. If there is a dispute
15 over the accuracy of the reading or of the transcript, we'll
16 deal with it.
17 MR. SIMS: Page ten, line 3.
18 "Q. Okay. What has that person told you?"
19 A. I believe he told me he had downloaded a movie from the
20 Internet.
21 THE COURT: I'm sorry. There is no reason you would
22 be any more familiar with U.S. courtroom procedure than I
23 might be with Norwegian. At this moment counsel is going to
24 read from the transcript of what you said last night. When he
25 says "question," what that indicates is that he is about to
631
1 read what you said last night and we will let you know when
2 you are to answer again.
3 THE WITNESS: Okay.
4 MR. HERNSTADT: I can see that it's hearsay.
5 THE COURT: Well, now it goes to credibility. Go
6 ahead.
7 BY MR. SIMS:
8 Q. The transcript says:
9 "Q. Okay. And what has that person told you?" And the
10 reporter wrote down the following answer:
11 "A. He told me that he had downloaded a DivX movie."
12 Is that correct?
13 THE COURT: Mr. Sims, your question is unclear. If
14 you are asking him if it's correct that that's what the
15 transcript says, we don't need that testimony. If you are
16 asking him whether what he said last night is true, that's an
17 appropriate question.
18 MR. SIMS: That's an appropriate question?
19 THE COURT: Yes. Mr. Hernstadt?
20 MR. HERNSTADT: Your Honor, actually the first
21 question is not entirely inappropriate. This is not a final
22 transcript.
23 THE COURT: Are you disputing its accuracy in this
24 regard? Do we have to bring the court reporter in to testify
25 as to the accuracy of the transcript?
632
1 MR. HERNSTADT: No, sir.
2 THE COURT: Go ahead, Mr. Sims.
3 Q. Is it true that you were told by this person that he had
4 downloaded a DivX'd movie?
5 A. No, it is not.
6 Q. And did you testify last night that he did tell you that?
7 A. No, I believe I testified that he had said he had
8 downloaded a movie, not which kind.
9 Q. Now, this conversation you had, what was the name of the
10 chat room again?
11 A. Pound PC DVD.
12 Q. Is that the precise chat room where you had announced your
13 creation of the Windows DeCSS utility?
14 A. Yes, that is correct.
15 Q. And how many months after you made that announcement in
16 that chat room did you have this conversation with this
17 person?
18 A. Excuse me? Could you please repeat?
19 Q. Yes. How long was it after you had made the announcement
20 about the Windows DeCSS utility did you have this conversation
21 with this person in which the person told you that they had
22 downloaded a movie from the Internet?
23 MR. HERNSTADT: Object to the form.
24 THE COURT: Overruled.
25 A. I don't recall, but I believe it was about a month.
633
1 Q. And am I correct that the Pound PC DVD chat room is not
2 limited to Linux users?
3 A. The Pound PC DVD channel is open for all users of PCs and
4 DVDs.
5 Q. Thank you very much. Now, you testified on direct that a
6 German person, I think, had reverse-engineered the Xing DVD
7 player, is that correct?
8 A. Yes, that is correct.
9 Q. And that person goes by the nick Ham?
10 A. Yes, that's correct.
11 Q. And it's Ham who wrote the source code that performed the
12 authentication function in DeCSS, is that correct?
13 A. No, that is not correct. He did not write the
14 authentication code. He wrote the decryption code.
15 Q. He wrote the encryption code?
16 A. Decryption code.
17 Q. Decryption.
18 A. Yes.
19 Q. Ham is a member of Masters of Reverse Engineering or MORE?
20 A. That's correct.
21 Q. And are you also a member of MORE?
22 A. Yes.
23 Q. There are other members in Germany and Holland, is that
24 correct?
25 A. Well, the third member is in the Netherlands.
634
1 Q. And it was Ham's reverse engineering of the Xing DVD
2 player that revealed the CSS encryption algorithm, am I right?
3 A. Yes, that's correct.
4 Q. Reverse engineering by Ham took place in or about
5 September 1999?
6 A. Yes, I believe it was late in September of 1999.
7 Q. And you testified that it was this revelation of the CSS
8 encryption algorithm and not any weakness in the CSS cipher
9 that allowed MORE to create DeCSS, is that correct?
10 A. Yes, that's correct.
11 Q. You obtained the decryption portions of the DeCSS source
12 code from Ham, correct?
13 A. Yes, that's correct.
14 Q. You then compiled the source code and created the
15 executable?
16 A. Well, in the form I received it, it was not compatible.
17 Q. Well, you testified the operation of DeCSS on a Windows
18 machine initially, correct?
19 A. Actually, I tested it under -- it was under Windows.
20 Q. And in performing your tests on DeCSS, which DVDs did you
21 decrypt?
22 A. Well, I don't recall which DVD I tried first, but the
23 second DVD I tried was the Matrix.
24 Q. And how many times did you decrypt DVDs?
25 A. Well, each time I watch a movie I decrypt a DVD. I don't
635
1 recall how many times I watched the DVD movie on my computer.
2 Q. When you posted the Microsoft Windows executable version
3 of DeCSS, you had no knowledge that the program would run
4 under Linux, correct?
5 A. No, that's not correct.
6 Q. Had you run it under Linux at that time?
7 A. No, I had not, but in theory it should work using an
8 application called wine, W-I-N-E.
9 Q. When you posted the DeCSS executable on your web page, you
10 did not post the source code, correct?
11 A. That is correct.
12 Q. You testified a moment ago that you thought it would work
13 under wine, is that correct?
14 A. That is correct.
15 Q. Have you ever actually tried that?
16 A. No, I have not.
17 THE COURT: Mr. Garbus, would you have a seat,
18 please.
19 Q. Now, you first posted the DeCSS executable utility where?
20 A. I posted it on my website.
21 Q. And after that, you announced that it was available on
22 your website in two different forums or two different places,
23 correct?
24 A. Yes, that is correct.
25 Q. And what were those two places?
636
1 A. LiViD mailing list and the Pound PC DVD IRC chat room.
2 Q. Which did you do first?
3 A. That would be the Pound PC DVD chat room.
4 Q. Am I correct that when you posted the announcement to the
5 LiViD mailing list that you just testified about, that was the
6 very first time you had ever posted anything or sent any
7 message to the LiViD mailing list?
8 A. Yes, that is correct.
9 Q. And did your announcement say anything about which
10 operating systems it had been tested on?
11 A. Yes, I believe it did.
12 Q. And which operating systems did it identify?
13 A. I believe the message said it had been tested on Windows
14 95, 98 and Windows NT.
15 Q. Any others?
16 A. I believe Windows 2000 was mentioned, but I don't recall
17 if it had been tested on that or not.
18 Q. And were there any other operating systems you identified
19 as having tested it under?
20 A. No, I don't.
21 Q. So they were only Windows operating systems.
22 A. Yes.
23 Q. Now, you testified last night that your web page was a
24 support page or Sigma Designs hardware-based DVD player, am I
25 correct?
637
1 A. Yes, that is correct.
2 Q. What is Sigma Designs?
3 A. Sigma Designs is a company in California which has several
4 years of experience in MPEG.
5 Q. To your knowledge, do they manufacture a CSS-licensed DVD
6 player that runs under Microsoft Windows?
7 A. Yes, they do.
8 Q. What is it called?
9 A. It's called Hollywood Plus.
10 Q. Hollywood Plus.
11 A. Yes.
12 Q. And you are also aware that Sigma Design has announced
13 plans to release a Linux-based DVD player?
14 A. Yes, I am.
15 Q. Do you understand that Sigma Designs has a license from
16 the DVD-CCA to do that?
17 A. Well, I would assume they have or else they wouldn't be
18 making it.
19 Q. And have you provided some assistance to the French
20 programmer for Sigma Designs who is working on that Linux DVD
21 player, correct?
22 A. Not direct assistance, but I have e-mailed him.
23 Q. You have?
24 A. E-mailed him.
25 Q. And have you provided any technical information to him?
638
1 A. No, I have not.
2 Q. Before you posted the DeCSS executable onto your web page
3 and made the announcement that you testified about, have you
4 ever had any communications with the defendant in this lawsuit
5 Eric Corley?
6 A. No, I have not.
7 Q. You never communicated with him at all until after this
8 lawsuit was filed, correct?
9 A. Yes, I believe that's correct.
10 Q. And you never saw Mr. Corley post a message to the LiViD
11 mailing list prior to that time, correct?
12 A. Yes, that is correct.
13 Q. In fact to your knowledge -- strike that.
14 Do you have any knowledge that Mr. Corley has ever
15 been a member of the LiViD group?
16 A. No, he has not.
17 Q. Now, at the time you posted your message onto the LiViD
18 mailing list that you mentioned, you did not have the DeCSS
19 source code on your page, correct?
20 A. That is correct.
21 Q. And am I correct that some members of the LiViD group
22 expressed anger at you for not providing the source code with
23 the utility?
24 A. Yes, that is correct.
25 Q. What is a flame war?
639
1 A. A flame war is when two or several people engage in a
2 discussion which gets out of hand.
3 Q. Am I correct that you got involved in a flame war with at
4 least one member of the LiViD group over the fact that you
5 didn't post the DeCSS source code?
6 A. I did get involved in a flame war, but I am not aware if
7 he was a member of the LiViD group or not.
8 Q. Where did the communication you had with respect to this
9 take place?
10 A. Some of it took place on the LiViD mailing list and some
11 of it was sent directly.
12 Q. And it began on the LiViD mailing list?
13 A. Yes, that is correct.
14 Q. Now, Mr. Fawcus created the css-auth source code that you
15 used in creating the utility, correct?
16 A. Yes, that is correct.
17 Q. And the dispute centered around the fact that the German
18 member of MORE, Ham, had used Mr. Fawcus's code but had
19 removed Fawcus's name and copy left notification, is that
20 correct?
21 A. Yes.
22 Q. What is copy left, as you understand it?
23 A. Copy left is when you use basically a copyright that gives
24 the user freedoms instead of taking them away.
25 Q. And the dispute centered around someone's complaint that
640
1 MORE was not playing by the -- I'm sorry. What is GPL?
2 A. GPL is a copy left license provided by the Free Software
3 Foundation.
4 Q. Was MORE's failure to credit Mr. Fawcus a violation of the
5 GPL license, as you understood it?
6 A. Yes, I believe so.
7 Q. In a nutshell, MORE was not playing by the GPL rules that
8 the LiViD group normally plays by, correct?
9 A. Yes, that is correct.
10 Q. And it was your understanding that Mr. Fawcus could sue
11 you for that, correct?
12 A. Well, yes, that is correct.
13 Q. And you eventually settled your difference with
14 Mr. Fawcus?
15 A. Yes, that is correct.
16 Q. You got a special license from him to use his source code
17 without credit, correct?
18 A. Well, he agreed that we didn't have to do anything to
19 provide new copies of the source with the original header.
20 Q. And your reason for doing that was to avoid making DeCSS's
21 source code fully open source.
22 A. That's not correct. It was already an open source at that
23 time.
24 Q. Am I correct that you didn't want it to be open source so
25 that you could keep the secrecy of the Xing key?
641
1 A. Yes, that is correct.
2 Q. The Linux community, as you understand it, believes in
3 free source code, open source code, correct?
4 A. Yes, that is correct.
5 Q. And MORE didn't make DeCSS available with open source code
6 to the entire Linux community when it posted the utility,
7 correct?
8 A. Yes, that is correct.
9 Q. When you announced to the LiViD mailing list in October
10 that DeCSS.exe was available on your web page, you said that
11 it works with the Matrix, DoD Speed Ripper doesn't, correct?
12 A. Yes, that's correct.
13 Q. It's your belief, I take it, that DeCSS is superior to
14 Speed Ripper?
15 A. Excuse me. Can you please repeat.
16 Q. Do you believe that DeCSS is superior to Speed Ripper?
17 A. Not directly superior, but it does decrypt some movies
18 that the Speed Ripper did not decrypt at that time.
19 MR. SIMS: I have no more questions. Thank you.
20 THE COURT: Mr. Hernstadt.
21 MR. HERNSTADT: Thank you.
22 REDIRECT EXAMINATION
23 BY MR. HERNSTADT:
24 Q. You were asked if you had used DeCSS to decrypt a DVD.
25 Have you ever used a decrypted file from a DVD to make a DivX?
642
1 A. No, I have not.
2 Q. Have you ever placed a decrypted DVD on the Internet,
3 transmitted it in some way?
4 A. No, I have not.
5 Q. Have you ever made it available on the Internet for
6 someone to download?
7 A. No.
8 Q. Have you ever sold a decrypted DVD in any form?
9 A. No, I have not.
10 Q. Have you ever traded a decrypted DVD with anyone?
11 A. No, I have not.
12 Q. Have you ever downloaded a DivX movie?
13 A. No.
14 Q. Have you ever made a DivX movie available for uploading?
15 A. No, I have not.
16 Q. Have you ever made a DivX movie available for someone else
17 to download from your website?
18 A. No, I have not.
19 Q. Have you ever used DeCSS for anything other than viewing
20 DVDs that you purchased?
21 A. No, I have not.
22 Q. You mentioned the Sigma Designs player. Is that a
23 software player?
24 A. Well, it's a soft -- it's hardware-based. It comes with a
25 piece of hardware but you also need the player that comes with
643
1 it, a piece of software.
2 Q. Does that mean you have to buy two pieces?
3 A. The product contains two pieces.
4 Q. You testified that you did not release the source code on
5 the DeCSS executable when you made the program a available on
6 your website.
7 A. Yes, that is correct.
8 Q. Did you make the source code available to Derek Fawcus?
9 A. Yes, that is correct.
10 Q. And did Derek Fawcus write that source code -- rewrite the
11 source code?
12 A. Yes, I believe he did.
13 Q. What operating system did he rewrite it for?
14 A. He wrote it for Linux.
15 Q. Why did you not want to release the source code for DeCSS?
16 A. Because the DeCSS source code contained the Xing player
17 key. If we were to release that source, the Xing key would be
18 revoked, Xing would probably have their license revoked, and
19 new DVDs which would be released later would not work with
20 Xing's player nor the player we would have created.
21 Q. You said that the German member of MORE found the CSS
22 algorithm by reverse-engineering the software. Did he say to
23 you whether it was difficult to do?
24 A. No, he said it was not difficult.
25 Q. Okay. You said that you did the same thing based on what
644
1 he informed you about how he had done it?
2 A. Yes, I did.
3 Q. Did you find it difficult to do?
4 A. No.
5 MR. SIMS: Objection. Irrelevant.
6 THE COURT: Sustained.
7 Q. How long did it take you to find the algorithm?
8 MR. SIMS: Objection. Irrelevant.
9 THE COURT: Why is it relevant, Mr. Hernstadt?
10 MR. HERNSTADT: Well, Mr. Sims brought it out on
11 cross-examination, and I am merely trying to clarify the
12 record with respect to the reverse-engineering process.
13 THE COURT: Did you raise it, Mr. Sims?
14 MR. SIMS: Certainly not in terms of effectiveness,
15 which is where we're going now.
16 THE COURT: Did you raise it, whether it was
17 subjectively in terms of effectiveness or not?
18 MR. SIMS: I don't think I did.
19 THE COURT: Let me look at my notes then.
20 MR. SIMS: I did ask questions about the obfuscation
21 about the Xing key, but ...
22 THE COURT: Mr. Hernstadt, I don't see it quickly. I
23 mean, is there something that you remember that will prompt my
24 memory?
25 MR. HERNSTADT: I believe it was something about that
645
1 the key was hidden. I don't recall exactly what it is. I
2 just had it in my note.
3 THE COURT: It will take less time to hear it then.
4 Overruled.
5 THE WITNESS: Can you please repeat the question?
6 THE COURT: Did you find it difficult to do, was the
7 question.
8 THE WITNESS: No, I did not.
9 Q. You discussed a dispute with Derek Fawcus about taking his
10 name off the source code that he had provided. Were you aware
11 of that?
12 A. No, I was not aware of that.
13 Q. When did you find out that his name had been taken off the
14 source code?
15 A. I found that out when he posted a message to the LiViD
16 mailing list saying that one of the files we had in our source
17 was actually his, but it did not contain the GPL header on his
18 name.
19 Q. What did you do when you read that posting to the LiViD
20 list?
21 A. I e-mailed him and tried to sort out a solution.
22 MR. HERNSTADT: Thank you very much, Mr. Johansen. I
23 have nothing further.
24 MR. SIMS: Nothing more, your Honor.
25 THE COURT: All right. Mr. Johansen, thank you very
646
1 much.
2 Mr. Gold?
3 MR. GOLD: I'm going to call Mikhail Reider to the
4 stand.
5 THE COURT: Is Mr. Young back there? We are working
6 on your request, but in the interim I can tell you that you
7 are able to buy from the court reporters a floppy that has the
8 day's proceedings by about 7 o'clock every night.
9 MR. COOPER: Good morning. Your Honor, plaintiffs
10 call Mikhail Reider.
11 MIKHAIL REIDER,
12 called as a witness by the Plaintiffs,
13 having been duly sworn, testified as follows:
14 MR. GARBUS: May I just ask one thing? There is some
15 question about whether or not the plaintiffs will rest after
16 this witness or call another witness. Could we know that so
17 we can decide how to arrange our witnesses?
18 THE COURT: That's a reasonable request.
19 Mr. Gold?
20 MR. SIMS: I don't know the answer to that. The
21 short answer is if we have completed a stipulation, and we
22 sent our work over to Mr. Hernstadt -- let me go find out.
23 THE COURT: I take it the answer is in your hands at
24 the moment, Mr. Garbus.
25 MR. SIMS: I don't believe it will be necessary,
647
1 but --
2 MR. GOLD: Your Honor, this will be our last witness
3 and we will rest after she leaves the stand.
4 THE COURT: Whether or not you get the stipulation?
5 MR. GOLD: Yes.
6 THE COURT: Okay. You have your answer, Mr. Garbus.
7 Proceed, Mr. Cooper.
8 MR. COOPER: Thank you, your Honor.
9 DIRECT EXAMINATION
10 BY MR. COOPER:
11 Q. Good morning, Ms. Reider.
12 Q. Who is your employer?
13 A. The Motion Picture Association.
14 Q. What is your current job position?
15 A. I am manager of worldwide Internet antipiracy operations.
16 Q. What is your education background?
17 A. I have an undergraduate Bachelors in international
18 relations taken from the California State University of
19 Northridge, and an M Phil. in international conflict
20 resolution from the University of Dublin, Trinity College.
21 Q. What is your employment background?
22 A. From 1985 through '89 I was with the Rand Corporation, a
23 governmental think tank as a research assistant. Subsequent
24 to that, I took my M Phil. and joined the banking interest
25 Great Western Financial Corporation as a legislative and
648
1 regulatory analyst. After that, I joined the Department of
2 Justice Drug Enforcement Administration as an intelligence
3 research specialist.
4 Q. When were you with the Department of Justice for the DEA?
5 A. From 1992 through '95.
6 Q. And what did you do with the DEA?
7 A. As an intelligence research specialist I collected and
8 analyzed intelligence as it related to federal narcotics
9 trafficking investigations.
10 Q. And after the Department of Justice, what did you do next?
11 A. I was briefly with the United States State Department
12 Peace Corps in Thailand.
13 Q. And how long were you with the Peace Corps in Thailand?
14 A. Five to six month.
15 Q. And after you returned to the United States, what was your
16 next position?
17 A. Again with the U.S. Department of Justice, this time in
18 the Federal Bureau of Investigation.
19 Q. What did you do for the F.B.I.?
20 A. Intelligence research specialist.
21 Q. And that was during what period?
22 A. 1995 through '97.
23 Q. After your position with the F.B.I., what was your next
24 position?
25 A. I joined the California State Bar Association as an
649
1 investigator.
2 Q. And how long were you with the California State Bar?
3 A. Only eight months.
4 Q. Why was that?
5 A. The Governor of California vetoed the fee bill which
6 funded the state bar.
7 Q. Okay. And after that you took a position with?
8 A. The Motion Picture Association.
9 Q. I see. And your position with the MPAA began when?
10 A. In spring of 1998.
11 Q. Okay. Did you use computers in connection with the job
12 positions you just described?
13 A. Yes. Yes, through all of the jobs.
14 Q. In what ways?
15 A. Both in research on the Internet and specialized data
16 bases, as well as using proprietary software programs for
17 analyzing large volumes of electronic data.
18 Q. Do you have any specialized training in Internet
19 investigations?
20 A. Yes, I do.
21 Q. What is that training?
22 A. Both through the Department of Justice through
23 intelligence schools and also through HTCIA.
24 Q. What is HTCIA?
25 A. The High Technology Crime Investigators Association. It's
650
1 a worldwide body comprised of state, local, federal law
2 enforcement from around the world as well as private industry
3 security officials who are dedicated to fighting cyber crime.
4 Q. Do you have any computer program experience?
5 A. Yes, I do.
6 Q. How extensive is that?
7 A. It's limited. UNIX, BASIC, does.
8 Q. Was that also received in the course of your various prior
9 employments?
10 A. Yes, it was.
11 Q. What are your current job responsibilities at the MPAA?
12 A. I oversee all Internet investigations around the world and
13 coordinate between our worldwide offices.
14 Q. Since the beginning of your employment by the MPAA in 1998
15 has the MPAA been monitoring the Internet for infringement
16 activity?
17 A. Yes, actively.
18 Q. Can you generally describe what has been done?
19 A. Well, we monitor and search routinely website, FTP sites,
20 FSUs, file swapping utilities, IRC, the Internet relay chat
21 channels, news groups or Usenet.
22 Q. Could you briefly describe what file swapping utilities
23 are?
24 A. They are basically glorified FTPs. They allow individuals
25 to directly transfer files between one another, music or
651
1 movies.
2 Q. Can you give me the name of any file swapping utility that
3 you are currently monitoring?
4 A. Sure. IMESL, Gooey, Hotline, ScourNet, FileShare,
5 FileSwap, Freenet.
6 Q. Is Napster also a file sharing utility?
7 A. Napster also is an FSU.
8 Q. Would you just tell us what Internet relay chats are?
9 A. It's basically the CB radio of the Internet. It was
10 created in the mid to late 80s. It allows people to talk in
11 real time on line to one another no matter where they are, or
12 near real time. They have a number of networks and within
13 that channels.
14 Channels are created by any user whenever they feel
15 like it, so channels can go up and go down in a matter of
16 minutes or hours, or channels can be kept alive for years if
17 the operators of that channel so deem.
18 Q. Once these channels are set up, are they all accessible to
19 the public?
20 A. No, some of them are members only.
21 Q. How often does the MPAA monitor the Internet?
22 A. Daily.
23 Q. And how do you identify sites to monitor?
24 A. It's a combination of factors. Our member companies will
25 send up sites they wish us to monitor. The public will call
652
1 or write in to us with sites as well as through our own
2 intelligence gathering and investigations we have sites that
3 routinely lead us to other plays that harbor piracy on line.
4 Q. Have the MPAA come aware of any instances of member
5 companys' DVDs being decrypted and made available in any form
6 on the Internet prior to October 1999?
7 A. No.
8 Q. When was the first time you heard of the existence of a
9 utility that defeated CSS and decrypted the content of one of
10 the studio's DVDs?
11 A. Early to mid-October of 1999.
12 Q. What was that utility?
13 A. DeCSS.
14 Q. What was the source of the original information you
15 received in the existence of DeCSS?
16 A. I found it on a news posting on Slashdot.
17 Q. What did you do about the information regarding the
18 existence of DeCSS?
19 A. I followed their links and ultimately downloaded a copy of
20 DeCSS.
21 Q. And did you test it to see if it worked?
22 A. Yes, I did.
23 Q. Did it?
24 A. Yes, horrifyingly simple to use.
25 Q. How long did it take you to download DeCSS?
653
1 A. A matter of minutes.
2 Q. And how long did it take you to decrypt a DVD using DeCSS?
3 A. Approximately five minute.
4 Q. What operating system were you using?
5 A. Windows.
6 Q. Was DeCSS a Windows program?
7 A. Yes, it was.
8 Q. What did you do next?
9 A. I notified our legal department and Ken Jacobson, who is
10 my direct supervisor, and began to request the issuance of
11 cease and desist letters. Ultimately we filed this lawsuit.
12 Q. Now, have you ever heard of a program called DiVX?
13 A. Yes, I have.
14 Q. And when did you first become aware of that program?
15 A. Late February, early March of 2000.
16 Q. Did you download it?
17 A. Yes, I did.
18 Q. And did you examine it?
19 A. Yes, I did.
20 Q. What is it?
21 A. It's a codec or compression, decompression algorithm that
22 allows one to take the rather substantial files from the DVD
23 and highly compress them to make it easy for distribution or
24 manipulation.
25 Q. Did there come a time when the MPAA became aware of the
654
1 availability of decrypted DVDs on the Internet?
2 A. Yes, we did.
3 Q. When was that for the first time?
4 A. Late April, early May of 2000.
5 Q. How did you become aware of that?
6 A. Through our routine monitoring some of the pirate sites we
7 routinely look at, we began to see evidence of these decrypted
8 DVDs.
9 Q. How many titles initially did you see being available?
10 A. A handful.
11 Q. How many sites?
12 A. I'm sorry?
13 Q. How many sites initially?
14 A. Again, a handful.
15 Q. Since late April or early May, has the MPAA become aware
16 of any increase in the availability of encrypted DVDs?
17 A. Absolutely. The number has certainly surged upward.
18 Q. On what types of sites have you seen these DVDs being
19 available?
20 A. It runs the gamut from website to FTP sites, offering on
21 IRC channels, FSUs.
22 Q. Do all of the sites offer decrypted DVDs for download or
23 hard goods through barter or sale?
24 A. No, not all of them.
25 MR. GARBUS: I would object unless we have the
655
1 windows or the pictures of the site that she is referring to.
2 Other than that, it's hearsay.
3 THE COURT: What do you say, Mr. Cooper?
4 MR. COOPER: Your Honor, the windows or site, if you
5 will, are on the Internet and are constantly changing. I
6 don't believe that there are any screen shots other than those
7 we have produced in the discovery. We have produced some of
8 those, and we are eliciting general testimony regarding this
9 witness's experience and activity in connection with what the
10 MPAA knew about these activities and when. And for that
11 purpose I think it's competent.
12 MR. GARBUS: I will object to any testimony that's
13 not related to particular screen shots. Any testimony that
14 she wants to talk about that has screen shots related to it or
15 marked in as exhibits, I would have no objection to.
16 THE COURT: Is it your position, Mr. Garbus, that the
17 plaintiffs in this case and the MPAA knew and did nothing
18 about cracks of CSS for a long time? Haven't you been singing
19 that refrain?
20 MR. GARBUS: Yes.
21 THE COURT: And that's not a pejorative comment, but
22 since the opening of the trial?
23 MR. GARBUS: Yes.
24 THE COURT: Why isn't it relevant to that?
25 MR. GARBUS: Anything is relevant if there is
656
1 admissible evidence with respect to it.
2 THE COURT: It's state of mind. It's offered not for
3 the purpose of the truth. It's offered for the purpose of
4 state of mind.
5 MR. GARBUS: I object to it. I think it's offered --
6 THE COURT: Why isn't it relevant to state of mind?
7 Is state of mind relevant, in your estimation?
8 MR. GARBUS: I think the state of mind is not
9 relevant. I think what's relevant is what the truth is.
10 THE COURT: Mr. Cooper, what do you say to that?
11 MR. COOPER: Well, we agree that state of mind is not
12 relevant, although we are trying to respond to what we
13 understood the defendants' position was. This information is
14 being offered as testimony of what Ms. Reider saw in
15 connection with her activity for the MPAA. It's competent
16 testimony with respect to that.
17 Whatever Mr. Garbus might want to ask her regarding
18 what an individual site may have said, I think the issue is
19 what the MPAA was doing in connection with its investigations
20 in response to Mr. Garbus's prior positions that it wasn't
21 doing enough.
22 THE COURT: Look. Haven't the plaintiff's taken the
23 position -- I mean, isn't this a precise turnabout? Mr.
24 Garbus spent a couple of days trying to establish that this
25 CSS system had been cracked a long time ago, the studios knew
657
1 it, they didn't protect themselves, and you folks constantly
2 objected that none of that was relevant on the ground that the
3 effectiveness or robustness of your security system was not
4 material here, and I sustained those objections. Right?
5 MR. COOPER: Yes, your Honor.
6 THE COURT: All right. So now comes turnabout. You
7 want an answer on all of that, and I previously ruled it out
8 when he tried to put it in. Why shouldn't I do the same thing
9 for the same reason when you try to put it in?
10 MR. COOPER: Your Honor, what you are suggesting
11 about the proper scope of the issues that are reasonably and
12 in material dispute in this case, we agree with. The question
13 here is a little different than the one you earlier ruled
14 upon.
15 THE COURT: Tell me how it's different.
16 MR. COOPER: The earlier question went to the
17 efficacy of CSS as a security system.
18 THE COURT: Right.
19 MR. COOPER: This I believe addresses Mr. Garbus's
20 second point, which we also believe is irrelevant, and that is
21 that the MPAA, once the circumvention device became known, did
22 too little or otherwise failed to react to the threat imposed
23 by DeCSS quickly enough. And while I believe that that is
24 also irrelevant, we are attempting to respond to that to the
25 extent the Court is interested in the issue.
658
1 THE COURT: Well, let's find out. Mr. Garbus, what
2 Mr. Cooper describes as your second point, are you in fact
3 making that argument, that is to say, that the MPAA was too
4 slow getting here?
5 MR. GARBUS: What she is testifying to, as I
6 understand it, is that --
7 THE COURT: Mr. Garbus, I will let you say what you
8 want to say, but I really would like an answer to the question
9 first.
10 MR. GARBUS: Can I hear the question again.
11 (Record read)
12 THE COURT: Are you making that argument?
13 MR. GARBUS: The answer is yes.
14 THE COURT: Overruled. I am not taking it for the
15 truth. I am taking it on the issue of whether the MPAA's
16 right to relief, if it has any, is in any way affected by
17 undue delay in getting to the courthouse.
18 Go ahead, Mr. Cooper.
19 BY MR. COOPER:
20 Q. Do all of the sites you have just described offer
21 decrypted DVDs for download or hard goods through barter or
22 sale?
23 MR. GARBUS: Let me see if can I make it clear. Our
24 point is --
25 I'm prepared to do this at the sidebar.
659
1 THE COURT: Go ahead, Mr. Garbus.
2 MR. GARBUS: It's our point that once they knew about
3 DeCSS, two things happened. One is they did nothing about it;
4 two, that prior to the time that they knew about DeCSS, they
5 knew about other utilities that ripped DVDs, and as I
6 understand what her testimony is, it is that she saw sites
7 that said it's from the DVD. These are not sites that say, as
8 I understand her testimony, it's from a DVD that's deencrypted
9 through DeCSS. So just let me parse out our position a little
10 more precisely, if I can. Again, I am prepared to do it at
11 the sidebar unless the Court is comfortable.
12 THE COURT: Mr. Garbus, you can stop repeating that.
13 If I find I need a sidebar, I will let you know.
14 MR. GARBUS: Thank you.
15 It is our position that last year they knew about a
16 number of procedures that could be utilized with respect to
17 DVD movies, that the only procedure that in any way related to
18 Linux or, if you want to call it a competitive technology, was
19 DeCSS. What they did is they did not go after any of the
20 technologies, they only went after DeCSS. So the delay deals
21 with their knowledge prior to DeCSS that there were other
22 rippers and other utilities and their failure to do that. At
23 least that's our position.
24 THE COURT: My ruling is the same. Go ahead,
25 Mr. Cooper.
660
1 I'm not taking it for the truth. I'm taking it as I
2 indicated.
3 MR. COOPER: Would you read back the pending
4 question, please?
5 (Record read)
6 THE COURT: That is, the truth of anything that was
7 on the websites.
8 A. No, not all of the sites. Some of them point in the
9 direction of where to locate them but they don't actually
10 offer distribution themselves.
11 Q. And has the MPAA followed those pointers from one site to
12 another?
13 A. Yes, we have.
14 Q. And approximately how many of these site have you become
15 aware of in the last two and a half months?
16 THE COURT: Be specific about what sites you are
17 talking about. So far we have ones that offer to barter and
18 sell and you've got ones that point.
19 Q. Can you distinguish between the ones that offer for
20 barter, sale or download on one hand and the ones that point?
21 A. Yeah. Approximately over 40 sites.
22 Q. Of which type?
23 A. Those which offer for barter or sale, distribution as
24 opposed to just pointing in the direction.
25 Q. What is the MPAA currently doing about these sites?
661
1 A. We have ongoing investigations.
2 Q. And can you, without going into the investigative details
3 of any of those investigations, tell me anything about them?
4 A. We have investigations currently active with federal law
5 enforcement here in the U.S. and worldwide.
6 Q. Which U.S. agencies?
7 A. U.S. Customs, Secret Service and F.B.I.
8 Q. Do you have information regarding any connection between
9 the recent availability on the Internet of decrypted DVDs and
10 the utility DeCSS?
11 A. Absolutely.
12 Q. What is that information?
13 A. Well, prior to the appearance of DeCSS we had seen no
14 decrypted DVDs anywhere on the Internet, and thereafter we
15 watched DeCSS proliferate alarmingly. It was simple to use.
16 We saw decrypted DVDs appear for sale and distribution not
17 long thereafter.
18 MR. GARBUS: I object to the question. She was asked
19 what information she had and then she responded with
20 speculation.
21 THE COURT: Where was the objection before she
22 answered, Mr. Garbus?
23 MR. GARBUS: It was only after she answered that it
24 was clear.
25 THE COURT: You know better than that, with all due
662
1 respect, but I think part of this testimony --
2 MR. GARBUS: Look at the answer. See where the
3 answer comes in.
4 THE COURT: Part of this answer has no foundation, at
5 least to the extent it's offered for the truth. The portion
6 in which the witness said that prior to the appearance of
7 DeCSS they had seen no decrypted DVDs anywhere on the
8 Internet, I think that is perfectly admissible. It relates to
9 her personal knowledge.
10 The part of the answer that speaks of watching it
11 proliferate at an alarming rate I take to be that she saw lots
12 of sites on the Internet offering movies, but I have heard no
13 evidence based on personal knowledge that what was on the
14 Internet, that is to say, offers to sell or barter or
15 whatever, are properly considered for the truth of those
16 statements.
17 The part of the answer that says we saw decrypted
18 DVDs appear for sale and distribution not long thereafter, I
19 guess I need to hear more about in order to find out on what
20 basis the witness is telling me that.
21 MR. COOPER: Just to understand that last point, I
22 believe the witness testified that DeCSS was first on the
23 Internet in October and that the first appearance --
24 THE COURT: Here is your problem, Mr. Cooper. Your
25 problem is whatever was said a few minutes ago that you are
663
1 trying to prove, that in fact since October there are lots of
2 movies being bought and sold over the Internet that were
3 decrypted through DeCSS, you are trying to prove it by saying
4 that there were none before October. Then DeCSS appeared, all
5 of which I think is relatively -- at least the second point is
6 uncontroversial. And the first point is evidence to support
7 your position, although it's disputed.
8 The third point depends on the truth of whatever was
9 on the Internet. That is to say, if the witness saw 40
10 website offerings to sell DVD movies, you would like me to
11 conclude that in fact those websites were, as they said on the
12 Internet, offering to distribute decrypted movies, that is,
13 they would perform as they indicated they would perform; and
14 then you are asking me further to draw the inference from the
15 timing that whatever they were selling or offering to sell
16 came from the DeCSS.
17 Now, the link you are having a problem with here is
18 that I think Mr. Garbus's objection is that it would be
19 inappropriate for me to assume that simply because you see on
20 the Internet a page that says "come get your copy of the
21 Matrix from us" means that in fact if somebody went to that
22 site a decrypted copy of the Matrix would be forthcoming.
23 That is essentially your argument, right, Mr. Garbus?
24 MR. GARBUS: Yes, or that there is any reason to
25 believe that it comes from DeCSS or any other source.
664
1 THE COURT: Well, I understand that point as well,
2 but they are asking me to infer that from the timing.
3 MR. GARBUS: Yes, your Honor, you stated our
4 position.
5 THE COURT: Okay. Now, he is making what I take to
6 be essentially a hearsay and/or a competence argument,
7 probably more hearsay than competence, about my considering,
8 or the purpose for which I consider Ms. Reider's testimony
9 about what is available on the Internet.
10 The situation would be the same if we were trying a
11 trademark case and you were trying to prove the availability
12 in the marketplace of counterfeit Levi jeans from newspaper
13 articles that indicated that somebody was offering counterfeit
14 Levi jeans. Now, there is perhaps a legal issue that you may
15 want to brief, both of you, as to whether that's appropriate
16 evidence, but I think that analogy is exactly what we're
17 talking about. Right, Mr. Garbus?
18 MR. GARBUS: Yes, sir.
19 MR. COOPER: That's Mr. Garbus's analogy, your Honor.
20 We don't believe --
21 THE COURT: No, that was my analogy.
22 MR. COOPER: We don't believe that's the correct
23 analogy in this case. This is not a case in which we are
24 pursuing for the relief sought in this case, the relief that
25 would be sought in a case in which the bootleg --
665
1 THE COURT: No, of course you're not. But the whole
2 purpose of this line of testimony, putting aside responding to
3 this sort of quasi laches argument, is to persuade me that
4 this is a real problem. And whether it's a real problem
5 depends, at least in part, on whether it's out there in the
6 marketplace. And the way those kinds of issues are usually
7 handled in a trademark case is that the investigator comes in
8 and says that I went to the store on Fordham Road and I bought
9 these six pairs of counterfeit jeans and here they are, and a
10 witness shows up from Levis and says we didn't make them,
11 they're counterfeit.
12 MR. COOPER: Your Honor, this goes to the question of
13 the appropriateness of relief and the question of a reasonable
14 apprehension of harm in the absence of that relief.
15 We are not attempting to prove here or indeed seek
16 the relief associated with copyright infringement per se. We
17 are not attempting to adduce the kinds of hard evidence that
18 would be necessary for a case that involved those issues.
19 What we are doing is attempting to provide to you our
20 reasonable apprehension that in the absence of the release
21 sought we will be harmed.
22 THE COURT: Well, you know, I hear the words but I'm
23 not sure I understand the symphony, to mix my metaphors very
24 badly. I really am not.
25 Look, I will hear the testimony, Mr. Garbus, but you
666
1 clearly know I understand the point, and if you want to brief,
2 either or both sides, the issue of what I'm supposed to
3 consider, that aspect of the testimony we have just narrowly
4 focused on, the witness's testimony about what's available
5 over the net, you are welcome to brief it. And in order to
6 decide this case, if I find I have to decide it, I'll decide
7 it. For now I'll hear the evidence.
8 MR. COOPER: Thank you, your Honor. Let me just
9 conclude with this witness then, your Honor, based on what you
10 have said, with two areas of questions.
11 BY MR. COOPER:
12 Q. First, I believe that we left off with this question of
13 the connection between DeCSS and the decryption of movies.
14 Have you seen any direct connection between DeCSS and
15 the decrypted DVDs on the Internet in your investigation?
16 MR. GARBUS: I object on the grounds of lack of
17 foundation.
18 THE COURT: Let me just go back to one or two more
19 thoughts that just occurred to me about the last question
20 before you go on, Mr. Cooper.
21 Among the things that you ought to consider, if you
22 are going to brief this point, and then I will consider
23 whether you brief it or not, are these:
24 First of all, I suppose it might be argued that when
25 somebody posts on the Internet saying, "Come to me, I'll sell
667
1 you a copy of the Matrix," that is a statement of a state of
2 mind, or a present intention or something like that from which
3 one is entitled to infer conduct. I'm not sure about that,
4 but that's why I put it on the table.
5 Secondly, maybe this notion of a verbal act as it
6 relates to the hearsay rule is implicated.
7 I'm really not sure about either one of those points,
8 but I want to let you know I'm thinking about them so you can
9 respond in due course.
10 Okay, Mr. Cooper.
11 MR. COOPER: Thank you, your Honor.
12 BY MR. COOPER:
13 Q. Do you have the question in mind, Ms. Reider?
14 A. Could you repeat it, please?
15 Q. Let me restate it.
16 Has there been in your investigation any direct
17 connection in the information that you have seen between DeCSS
18 and the decryption of the movies on the Internet?
19 A. Yes, there have been.
20 Q. What is that information?
21 A. I have seen sites where they suggest the use --
22 MR. GARBUS: I assume I have a continuing objection.
23 THE COURT: Look, I think you should make your
24 objections, but if it's the same objection, if you would be so
25 kind as to say "the same objection," then I will simply know
668
1 it's the same thing, we don't have to pause, I will take it
2 subject to what I just indicated.
3 MR. GARBUS: I think I will say the same thing.
4 THE COURT: Okay. Same ruling. If it's something
5 new, let me know it's something new.
6 Go ahead, folks.
7 THE WITNESS: May I continue?
8 I have seen sites that have suggested the use of
9 DeCSS in order to then use the DivX codec against DVDs that
10 also offer DivX-made movies on their sites.
11 Q. Ms. Reider, given the wide proliferation of DeCSS on the
12 Internet, what help would the issuance of a permanent
13 injunction in this action do in your enforcement activity for
14 a number of companies?
15 MR. GARBUS: I object.
16 THE COURT: Well, I am going to take that answer as
17 well. Let it be added to my list of things that counsel
18 should consider with respect to the stuff of the Internet,
19 Rule 803(17) and how it applies in the electronic age. Rule
20 803(17).
21 Okay. Ms. Reider, I realize I'm stepping on your
22 lines constantly here this morning. Do you need the question
23 read back?
24 A. Yes, please.
25 (Record read)
669
1 MR. GARBUS: Your Honor, it seems to me, unless I'm
2 missing the point, that this sounds like a legal conclusion.
3 THE COURT: I don't think it's a legal conclusion. I
4 mean, that's kind of like asking somebody who lives downstream
5 of a damn that's about to be destroyed what effect a permanent
6 or preliminary injunction against tearing down the damn would
7 have on his property. The answer is a perfectly practical one
8 about preventing the river from flowing across the property.
9 I think that's what the question asks for.
10 MR. GARBUS: Okay. I have stated my position.
11 THE COURT: I understand.
12 MR. GARBUS: I'm not moved by the analogy between a
13 damn and a flowing river.
14 THE COURT: I know. I have given you lots of
15 analogies to think about in this case.
16 Go ahead, Mr. Cooper.
17 A. It would send a very strong message to both those that
18 would engage in illegal behavior and to law enforcement to
19 enforce it. It will make my job certainly, hopefully, easier
20 in terms of enforcing the right of our member companies for
21 the safety and security of their intellectual property.
22 Q. Let me ask you the same question with respect to the
23 effect, if the Court does not issue a permanent injunction,
24 what effect will that have on your activity to enforce the
25 interests of the member companies?
670
1 THE COURT: Believe me, that's not a useful question
2 either. There is another component that needs to be in that
3 question for it even to be relevant.
4 MR. GARBUS: Can we ask how upset she would be if you
5 deny the injunction?
6 THE COURT: We will have you testify about how upset
7 you will be if I grant it.
8 MR. COOPER: You mean if the Court concludes that
9 there is a violation here that determines not to issue the
10 injunction?
11 THE COURT: I don't know what the point of all this
12 is. Obviously the case isn't over, and if there is more
13 evidence that sheds light on the subject, I will certainly
14 consider it, but it seems to me that there is a reasonably
15 strong case to be made for the proposition that the barn is
16 unlocked and this horse is out.
17 Now, it seems to me also that what the MPAA wants is
18 a legal determination that unlocking this barn was illegal,
19 and so the next guy who considers unlocking another barn is
20 going to have something serious to think about. I suspect you
21 are also asking me to issue an injunction against the guy who
22 unlocked this barn not to unlock it again even though there is
23 no horse in it. So, you know, I don't know that this witness
24 has any light to shed on that subject.
25 MR. GARBUS: I must say I'm now finding your
671
1 analogies much more to my liking.
2 MR. COOPER: If I may, let me just say that our
3 position is obviously that the analogy that you referred to is
4 not apt, as Mr. Garbus has pointed out in his prior responses.
5 I recognize now is not the time to argue that issue. And
6 under the circumstances, if the witness's testimony about her
7 own experiential ability to deal with this issue and what aid
8 the Court's injunction might have in her enforcement
9 activities is not something that the Court is interested in
10 receiving at this time, then I would say that our --
11 THE COURT: That was not my point. This whole little
12 discussion got started because you asked her what the effect
13 of my not issuing an injunction would be, and I assume that I
14 am going to hear a tale of woe, obviously just like I've heard
15 a tale of woe on the other side if I do issue the injunction.
16 But the critical ingredient is that the witness has
17 just told me that what this is all about is to send a message.
18 And there are various ways to send messages if indeed the
19 message is one you are entitled to have sent. And the
20 concerns I expressed yesterday and today on this subject have
21 addressed the form of any message to which you might be
22 entitled. That's what that was addressed to.
23 So, when you leave out of your question to the
24 witness about an injunction the fact that if you are entitled
25 to prevail, you might get relief short of an injunction, it
672
1 seems to me it's just a waste of everybody's time, with all
2 due respect, counsel.
3 You can ask the question with both components if you
4 want.
5 Q. Ms. Reider, in the event that the Court determines that
6 the plaintiffs are entitled to some relief, and the Court
7 determines that the relief would not include a permanent
8 injunction, would that have an impact on your ability to
9 enforce the interests of the member companies?
10 MR. GARBUS: Same objection.
11 THE COURT: Overruled.
12 A. Yes, it will have a huge impact.
13 Q. What is that impact?
14 A. There won't be any teeth, if you will, in it. We will
15 have no way to enforce that injunction.
16 Q. In the absence of an injunction?
17 A. In the absence.
18 THE COURT: If there is no injunction, there is
19 obviously no injunction to enforce, Ms. Reider.
20 Q. The question is what impact would the absence of the
21 injunction have in connection with your attempt to enforce the
22 member company's rights?
23 A. It will have a huge impact.
24 Q. In what way?
25 MR. GARBUS: I have a continuing objection.
673
1 THE COURT: Overruled.
2 A. We would have no ability to stop this. It would grant a
3 license to anyone in the world to do what they would with our
4 intellectual property, not just in this respect but in future
5 events.
6 THE COURT: I won't say what I was just about to say,
7 but, look, Ms. Reider, let's get down to the facts of this
8 case as opposed to the rhetoric.
9 If I understand it correctly, DeCSS is everywhere on
10 the Internet. I realize that's a hyperbolic statement, but
11 it's all over the play, right?
12 THE WITNESS: It's prevalent, yes.
13 THE COURT: Now, if I issue an injunction that says
14 that Mr. Corley can't put it on his website, how does that
15 affect DeCSS being everywhere else?
16 THE WITNESS: It affects it in that we can get
17 enforcement of other sites that are offering it, refusing to
18 take it down.
19 THE COURT: Because of what?
20 THE WITNESS: Because there is precedent.
21 THE COURT: Suppose the result were -- and I am not
22 saying it will be -- but just hypothetically suppose the
23 result were that the judgment recited that there was clearly a
24 controversy between the plaintiffs and this defendant as to
25 the legality under the DMCA of posting this utility, that the
674
1 controversy is persisting, that the posting of this utility
2 violates the Act, that you are entitled to a judicial
3 declaration of whether the conduct is lawful or not and the
4 court declares it is unlawful, the question of whether to
5 issue an injunction, invoke the discretionary power of the
6 court, courts have said for 300 years, at least that courts of
7 equity ought not to use the equitable power of injunction to
8 try to accomplish the impossible or to perform something which
9 is entirely futile, and therefore, in the exercise of
10 discretion, given the broad prevalence of this particular
11 utility, this time the court declines to issue the injunction
12 because it would do no practical good.
13 Now, it seems to me that perhaps there is an argument
14 in those circumstances that when you go to somebody and say,
15 look, it's on your website but it is in fact illegal, you've
16 got something to talk about, and it certainly sends a message
17 to the next guy with the next version of DeCSS that it's a
18 whole new ball game. Now, I don't understand your argument
19 given that set of hypotheses.
20 MR. GOLD: May I address the Court for a second, your
21 Honor?
22 THE COURT: No. I'm obviously going to hear
23 everybody on this at great length, all the lawyers, before
24 this is all over, but Ms. Reider is if not the chief, one of
25 the top enforcement people for the industry. She is offered
675
1 as a witness about what the practical significance of
2 different kinds of relief in this case might be, and before I
3 hear the lawyers' argument, I would like to hear what the
4 person in charge of performing the function has to say about
5 that. That's why you brought her here, as I understand it.
6 So, Ms. Reider, you know, I would like you to answer
7 that. One of the great things about a nonjury trial is the
8 judge gets to ask questions that are bothering him.
9 THE WITNESS: Well, your Honor, in our experience
10 thus far, trying to get prosecution at least on the criminal
11 side of things for failure to comply under existing law, it's
12 very difficult without being able to show damages or qualify
13 that damage, quantify it. If you just tell people, gee, you
14 shouldn't do that, but there is no penalty for having done
15 that --
16 THE COURT: But, look, this is a criminal statute.
17 This is not a criminal case, but it's a criminal statute, it
18 says any person who violates Section 1201 or 1202 willfully
19 and for purposes of commercial advantage or private financial
20 gain can go to jail perhaps for as long as ten years.
21 Now, if the United States courts determine that
22 posting a utility like this is a crime and you hand a copy of
23 that decision to the person who is posting it, don't you think
24 there is some evidence maybe that if it doesn't come down off
25 the website it is a willful violation?
676
1 MR. COOPER: Your Honor, is that a question posed to
2 Ms. Reider from a factual standpoint?
3 THE COURT: Yes. She is making an argument that
4 without an injunction there is no effective remedy, and I want
5 to hear why.
6 THE WITNESS: Do you think I could get an AUSA or a
7 DA to take that case and enforce it?
8 THE COURT: It beats me. I mean, they haven't
9 indicted anybody in this case as far as I know.
10 Okay. Mr. Cooper, go ahead.
11 MR. COOPER: Nothing further of this witness, your
12 Honor.
13 THE COURT: Thank you. Mr. Garbus?
14 MR. GARBUS: Just one question.
15 CROSS-EXAMINATION
16 BY MR. GARBUS:
17 Q. Did you say you hadn't seen a movie on the Internet until
18 this year?
19 A. Can you repeat your question?
20 Q. When for the first time did you see a movie on the
21 Internet?
22 MR. COOPER: Objection, your Honor. It misstates the
23 testimony.
24 THE COURT: Well, it didn't purport to state any
25 testimony, so it can't misstate it.
677
1 A. Can you clarify, Mr. Garbus?
2 Q. When for the first time did you see a movie on the
3 Internet?
4 A. What type of movie, Mr. Garbus? I'm not clear on what
5 you're asking.
6 THE COURT: The question is very ambiguous.
7 Q. Any kind of movie on the Internet.
8 THE COURT: What do you mean, watched the movie?
9 MR. GARBUS: Yes.
10 A. Any kind of movie?
11 Q. Yes.
12 A. A couple of years ago.
13 Q. In 1998.
14 A. That's correct.
15 Q. And since 1998 how many movies did you watch on the
16 Internet?
17 A. I don't know.
18 Q. Were these movies that you bought to play on the Internet?
19 A. Can you play a movie on the Internet, Mr. Garbus?
20 Q. On your personal computer.
21 A. No, this is in the capacity of my job.
22 Q. Now, did you at any time learn -- let me go back to the
23 beginning of the process. As I understand it, you were given
24 at some point in time these LiViD documents which we have
25 referred to as Plaintiffs' Exhibit 9.
678
1 A. I need to see the documents that you are referring to.
2 MR. COOPER: Your Honor, I believe this is beyond the
3 scope of the direct.
4 THE COURT: Let me see where it's going.
5 Q. Do you remember when you looked at the LiViD group of
6 documents -- withdrawn.
7 At some point in time did either Mr. Jacobsen or
8 Litvak give you a group of documents which were downloaded
9 from the LiViD site?
10 A. No, they did not.
11 Q. Did you at any time go on the net to find any LiViD
12 documents?
13 A. Yes, I did.
14 Q. When was that?
15 A. As I recall, October or November of '99.
16 Q. And at whose direction was that done?
17 A. Under my own direction. I'm the supervisor of antipiracy.
18 Q. By the way, are you a lawyer?
19 A. No, I'm not.
20 Q. Now, what did you do after you downloaded those documents?
21 A. I reviewed them and turned them over to legal.
22 Q. And who was that?
23 A. Our legal department, Mark Litvak.
24 Q. To the best of your memory, was Mr. Goldstein or 2600.com
25 mentioned in any of those LiViD documents?
679
1 MR. COOPER: Objection, your Honor. Hearsay and
2 plainly beyond the scope of direct.
3 THE COURT: The hearsay objection is just wrong. Why
4 isn't it beyond the scope, Mr. Garbus?
5 MR. GARBUS: I'm trying to find out what she did.
6 She winds up saying she has a lot of information. I'm trying
7 to find out the basis for that information.
8 THE COURT: Sustained.
9 A. Can you repeat question, please?
10 THE COURT: I sustained the objection.
11 THE WITNESS: Sorry.
12 Q. Do you know what a DOD Speed Ripper is?
13 A. Yes, I do.
14 Q. Let me show you a document UP.
15 MR. COOPER: Your Honor, we object to the
16 introduction of this document.
17 THE COURT: It hasn't been offered yet.
18 MR. COOPER: It's attorney/client privilege, your
19 Honor.
20 THE COURT: Well, somebody should give me a copy of
21 the document.
22 MR. GARBUS: This is one of the --
23 THE COURT: Just give me a minute, please.
24 (Pause)
25 THE COURT: Pose your question and I will ask the
680
1 witness not to answer until I have had an opportunity to hear
2 an objection, and please pose the question in a way that
3 doesn't disclose the content of the document, Mr. Garbus.
4 BY MR. GARBUS:
5 Q. Did you learn at some time in December of the existence of
6 a utility called DOD Speed Ripper?
7 THE COURT: Answer the question, please.
8 A. I don't recall.
9 Q. Let me show you this document and see if it refreshes your
10 recollection.
11 THE COURT: Go ahead.
12 MR. COOPER: Your Honor, are you ruling on the
13 privilege issue?
14 THE COURT: So far there is nothing that, in my view,
15 implicates a privilege. She is being shown a document for the
16 purpose of refreshing her recollection as to her state of mind
17 in December.
18 MR. COOPER: It's the use of the document which is an
19 attorney/client communication, to which we object.
20 THE COURT: I understand. You said that in the first
21 place.
22 MR. COOPER: I understand that. The question is
23 whether they are entitled to use a document which is an
24 attorney/client communication.
25 THE COURT: I understand your point. To that extent,
681
1 I'm offering your point.
2 MR. COOPER: Thank you, your Honor.
3 THE COURT: What's the question, Mr. Garbus?
4 Q. Does it refresh your recollection that you were told back
5 in December of 1999 about the DOD Speed Ripper?
6 A. No, it does not.
7 Q. Did you ever see that document before?
8 A. I don't recall it.
9 Q. Do you see your name on it?
10 A. I do see me copied, but the date of the missive was during
11 a time I was not in the office.
12 Q. Did you ever see that document at any time?
13 A. I don't recall.
14 Q. When for the first time, if ever, did you hear the term
15 "DOD Speed Ripper"?
16 A. I don't recall the exact date.
17 Q. Was it in 1999?
18 A. I don't recall the date, sir.
19 Q. Did you ever go to a site to see what a DOD Speed Ripper
20 was?
21 A. I have looked at it, yes.
22 Q. And tell me when you went to that site for the first time.
23 A. I don't recall the date.
24 Q. Was it in December of 1999?
25 A. I don't recall the date, sir.
682
1 Q. Any time in the last eight month?
2 A. I don't recall the date, sir.
3 Q. Now, you said before that you worked together with the
4 F.B.I., the U.S. Customs and who else?
5 A. That I worked for?
6 Q. The MPAA works together in its antipiracy investigations,
7 you said before, with the F.B.I., U.S. Customs and who else?
8 A. Secret Service.
9 Q. Has anybody ever shown you a document that indicates one
10 particular film was taken off the Internet that had been
11 deencrypted through DeCSS?
12 THE COURT: Didn't you have a stipulation the object
13 of which was to avoid this litany with every witness?
14 MR. GARBUS: Well, I think we are trying now to get
15 into what her investigation was. She is coming to certain
16 conclusions, and you have permitted, subject to the
17 qualifications that you have made, her testifying about
18 information. I am prepared to accept that when she speculates
19 that the stuff that's on the Internet, whatever it is that she
20 sees, that she doesn't know the source of anything that's on
21 the Internet, namely, whether it comes from DeCSS, DOD Ripper.
22 THE COURT: So I understand your point. Let's make
23 this simple. You're saying, Ms. Reider, that you have seen
24 various films, decrypted films offered on the Internet, right?
25 THE WITNESS: That's correct.
683
1 THE COURT: Do you have any way of saying whether any
2 particular one of the ones you have seen offered was decrypted
3 by DeCSS as opposed to some other technology apart from
4 whatever inference you draw from the timing?
5 THE WITNESS: No, my investigations are still
6 ongoing.
7 THE COURT: Okay. You have your "no," Mr. Garbus.
8 Let's go.
9 MR. GARBUS: Thank you. You asked the question
10 better than I could have.
11 Q. Now, you also indicated that there were various -- did you
12 ever look to see whether or not 2600.com sells any pirated
13 copies of DVDs?
14 THE COURT: I take it there is no such contention in
15 this case, right, Mr. Cooper?
16 MR. COOPER: That's correct, your Honor.
17 THE COURT: Okay. Next.
18 Q. And there is no contention that they barter, sell it or
19 point to anybody who does sell it?
20 THE COURT: Mr. Cooper?
21 MR. COOPER: If the "it" is decrypted DVDs, yes, your
22 Honor.
23 THE COURT: Okay.
24 Q. Do you know what a Speed Ripper is, by the way?
25 A. I know what it alleges to be.
684
1 Q. What does it allege to be?
2 A. It alleges to decrypt DVDs. It's a DeCSS clone.
3 Q. DeCSS clone?
4 A. Um-hum.
5 Q. Do you know if DOD Speed Ripper was available before
6 DeCSS?
7 A. Not to my knowledge.
8 Q. What is the basis of that? When for the first time did
9 you know that Speed Ripper was available?
10 MR. COOPER: Asked and answered, your Honor.
11 THE COURT: Overruled.
12 A. I don't recall the date.
13 THE COURT: Okay. We will take our morning break.
14 15 minutes.
15 (Recess)
16 THE COURT: You may proceed.
17 BY MR. GARBUS:
18 Q. You said that, as I understand it, once you learned --
19 when did you learn of DeCSS for the first time?
20 A. Early to mid-October of '99.
21 Q. What did you then do after you learned it?
22 A. I pursued an investigation and downloaded it and then
23 notified our legal team.
24 Q. Now, have you ever used a DoDs Ripper?
25 A. Not all the way through.
685
1 Q. Tell me what you have done with it.
2 A. I have downloaded it and I have extracted a single VOB
3 file with it.
4 Q. And have you ever used a DOD Ripper?
5 MR. COOPER: Ambiguous.
6 THE COURT: What is the ambiguity?
7 MR. COOPER: I think it's the same question he asked
8 before.
9 THE COURT: Is there a different --
10 Q. Do you know of anything separately called the DOD Ripper
11 rather than a DoDs Ripper?
12 A. No, I don't.
13 Q. How about Power Ripper?
14 A. I have heard of it.
15 Q. Have you ever utilized it?
16 A. No, I have not.
17 Q. Have you ever heard of DOD Speed Ripper?
18 A. I was under the impression that is what we were speaking
19 about.
20 Q. In other words, to you, Power Ripper and DOD Speed Ripper
21 are the same thing?
22 A. No, your earlier question regarding DoDs Ripper was my --
23 Q. Excuse me a minute. Go ahead.
24 A. It was my impression we were discussing the DOD Speed
25 Ripper.
686
1 Q. Have you ever tried css-auth?
2 A. Yes, I have.
3 Q. And what have you done with it?
4 A. Just looked at the code.
5 Q. Have you ever tried css-cat?
6 A. Only looked at the code.
7 Q. Have you ever seen the end product, in other words, a
8 movie that is made, that has been started with the process of
9 a DOD Ripper, Power Ripper, Speed Ripper, css-auth or css-cat?
10 A. You want me to break those down?
11 Q. Sure.
12 A. I have seen the end product of movies that have been
13 decrypted.
14 Q. And have you ever issued a report, have you ever compiled
15 a report about any of your work with respect to these
16 utilities and the movies that have then been downloaded?
17 A. Not that I recall.
18 Q. With respect to your investigation of DeCSS, have you ever
19 prepared a report of that investigation?
20 A. I'm sorry. Can you repeat the question?
21 Q. With respect to any work that you did on DeCSS, Did you
22 ever prepare a report for the MPAA in any investigation you
23 did?
24 A. Not that I recall.
25 Q. Did anyone at the F.B.I. or U.S. Customs or the Secret
687
1 Service or the MPAA ever ask you to prepare any report about
2 any investigation you made concerning DeCSS?
3 A. I wouldn't be at liberty to tell you if any of those
4 federal agencies requested such a report.
5 MR. GARBUS: Your Honor, I would like to know if this
6 woman has ever prepared a report relating to DeCSS.
7 THE COURT: You can answer yes or no at least.
8 THE WITNESS: Not that I recall.
9 MR. GARBUS: We got past that pretty quickly.
10 Q. Now, Ms. Reider, you've talked about you being the chief
11 investigator at the MPAA to determine the piracy consequences
12 of DeCSS, is that right?
13 A. That is not my only function.
14 Q. Is that one of your functions?
15 A. That's one of many, yes.
16 Q. And you're telling me that you never prepared a report for
17 the MPAA concerning your investigation of DeCSS, is that
18 right?
19 A. Not that I recall.
20 Q. When you say not that you recall, just sit back for a
21 moment, take your time. Did you prepare such a report or did
22 you not?
23 MR. COOPER: Argumentative.
24 THE COURT: Overruled.
25 A. Not that I recall.
688
1 Q. Is there any document that I might conceivably show you
2 that would help you remember whether you prepared such a
3 report?
4 A. Well, if I knew that -- I don't know what you're asking.
5 Q. Is there any document that I could show you, or that
6 anybody in the world could show you, that could refresh your
7 recollection as to whether or not you ever prepared a report
8 for the MPAA concerning DeCSS?
9 MR. COOPER: Argumentative. Calls for speculation.
10 THE COURT: I'm going to allow it one more time. You
11 would think you were trying a medical malpractice case. Once
12 more.
13 A. I don't know.
14 Q. Did you ever produce a memo -- forget about the word
15 report -- for the MPAA or any other governmental agency
16 concerning DeCSS, the proliferation of it, the use of it, or
17 the consequences of the films that it would produce after that
18 DeCSS application was DivX'd?
19 A. I don't recall.
20 THE COURT: Mr. Garbus, you took her deposition,
21 right?
22 MR. GARBUS: Yes.
23 THE COURT: And I know that at least one whole box of
24 documents from her file was given to me for in camera
25 inspection on a claim of privilege that were subsequently
689
1 turned over to you.
2 Now, this is not the time to be either doing
3 discovery or whatever else this is. If you have a document,
4 let's go to it. If you don't have a document, ask something
5 else.
6 MR. GARBUS: I understand --
7 Shall we approach the bench?
8 THE COURT: No.
9 MR. GARBUS: -- that there is no such document, that
10 she never prepared a report for the MPAA. Now, we have been
11 through a series of discussions where we have asked them to
12 produce lists of documents that we were promised that we have
13 never gotten. I can go through that now, but I don't think
14 it's an appropriate time.
15 THE COURT: Neither do I. So, you're complaining
16 they didn't give you the document that she says doesn't exist.
17 Is that the net of the complaint?
18 MR. GARBUS: No. Let me just go on.
19 Q. I'd like to learn something about what your investigation
20 consisted of. After you gave the Linux document to someone at
21 the MPAA in October or November, what did you then do in the
22 course of your investigation?
23 A. I'm sorry. Which Linux documents are you referring to?
24 Q. Did you testify that you downloaded some documents in
25 October, November and December from the LiViD group?
690
1 A. I don't know. They would have to read it back to me.
2 Q. Did you download -- let's start at the beginning. Did you
3 at any time download any documents from the LiViD group in
4 1999?
5 MR. COOPER: Your Honor, Mr. Garbus already elicited
6 testimony about what the witness downloaded and I think you
7 then sustained the objection with respect to this questioning
8 regarding the LiViD group and the documents downloaded with
9 respect to it.
10 MR. GARBUS: Your Honor, I would like to get into
11 what her investigation consisted of. She has come in here
12 allegedly as a witness to give information about that
13 investigation.
14 THE COURT: One question at a time. You already
15 asked her -- you first started off from the mistaken premise
16 that Mr. Jacobsen or Litvak gave her documents from the LiViD
17 site. She said, no, that hadn't happened. You then asked her
18 whether she went onto the site, and she testified she went
19 onto the net and found LiViD documents in October or November,
20 that she downloaded, reviewed them and turned them over to
21 legal, specifically to Mark Litvak. Now, I don't know why we
22 have to do it all over again.
23 MR. GARBUS: Because she said she didn't remember
24 that.
25 THE COURT: No, she didn't.
691
1 MR. GARBUS: Let me go on, if I can.
2 Q. After you turned these documents over to Mr. Litvak, then
3 what happened?
4 MR. COOPER: Ambiguous.
5 THE COURT: Overruled.
6 A. Then what happened in respect to what?
7 Q. Your investigation. Everything is directed now towards
8 your investigation. What did do you with respect to your
9 investigation after you turned these documents over to
10 Mr. Litvak?
11 A. I continued to look for evidence of piracy.
12 Q. Tell me what you did.
13 A. In respect to what, sir?
14 Q. DeCSS.
15 A. I continued to look for sites offering DeCSS and to
16 request the issuance of cease and desist letters.
17 Q. And were you also looking for sites relevant to DOD Ripper
18 or Power Ripper or Speed Ripper?
19 A. Our investigations are ongoing.
20 Q. Were you, at that time that you were looking for DeCSS
21 sites, also looking at sites for DOD Speed Ripper, Power
22 Ripper -- and Power Ripper? Excuse me.
23 A. I don't recall a time frame.
24 Q. When did you start looking at DeCSS sites?
25 A. Early to mid-October of '99.
692
1 Q. And can you tell me to the best of your recollection
2 whether that was before or after you were looking at sites for
3 DOD Ripper, if in fact you were?
4 MR. COOPER: Objection, your Honor. I think it has
5 been asked and answered repeatedly and it's plainly beyond the
6 scope of direct.
7 THE COURT: It's certainly sustained as to form.
8 Let's start with that. Try another question.
9 Q. After you started looking at the DeCSS site, did you make
10 any notes of any site you saw?
11 A. Can you clarify "make notes"?
12 Q. Did you write anything down on a piece of paper?
13 A. I imagine we downloaded those sites that we found.
14 Q. And do you recall now which sites that you found?
15 A. Not specifically.
16 THE COURT: Isn't that precisely the carton of
17 document that was submitted to my chambers that was then
18 turned over to you, Mr. Garbus, like maybe 5,000 pages of it?
19 MR. GARBUS: I don't know if that was all the
20 documents. What Mr. Schumann testified was that he had gotten
21 a part of the documents. I'm trying to find out now what the
22 documents were that she downloaded.
23 Can we approach the bench?
24 THE COURT: No.
25 MR. GARBUS: Let me tell you where I would like to
693
1 go, and if there is an issue about it, I just don't want to go
2 there.
3 I think I'm entitled to know -- she is the only
4 witness for the MPAA thus far produced. I understand she is
5 their last witness. We have been told about this awesome
6 threat of DeCSS, and I would like to find out what the MPA has
7 done since they first learned about it, and I would like to
8 find out during the course of this investigation or this
9 discussion with her what she has done, because she is the head
10 of piracy, with respect to the other utilities that allegedly
11 cause piracy, and whether or not she or anyone can tell
12 basically, if something is on the screen, which utility it
13 comes from --
14 THE COURT: You already got that stipulation, didn't
15 you, early this morning?
16 MR. GARBUS: The last part I have.
17 THE COURT: Right.
18 MR. GARBUS: Now I would like to go to the
19 investigation. What I have said before is if they were
20 serious at all about DeCSS, that there were many, many ways
21 that they could have learned in October, November exactly who
22 had DeCSS, what was being done with respect to it, and I think
23 what they would have concluded, at least I would have
24 concluded, is that it was being used for the Linux machine and
25 that these other utilities may be appropriate "illegal copying
694
1 or piracy tools," but DeCSS, for precisely the reasons that
2 Mr. Shamos testified, is not.
3 Now, whether or not your Honor feels that makes DeCSS
4 still prohibitable by the statute is something for an
5 appropriate time, but it seems to me I'm entitled to go
6 through that with this witness.
7 THE COURT: What is on the table are questions
8 nit-picking about documents that you know full well were
9 produced to you, piles of them.
10 MR. GARBUS: Let me tell you some of the documents we
11 did not get. Shall we go through that now?
12 THE COURT: Mr. Garbus, no.
13 MR. GARBUS: May I ask my question?
14 THE COURT: You can ask a new question.
15 MR. GARBUS: Thank you.
16 Q. Now, when you say you were monitoring sites for DeCSS in
17 November of '99 --
18 THE COURT: By the way, if we do get to that subject,
19 I'm still waiting for the affidavit about your client's hard
20 drive. Just keep that in mind. Let's go on.
21 MR. GARBUS: May I have the last question asked
22 repeated to me?
23 (Record read)
24 Q. Did you ever tell anybody from October until today that
25 you had ever seen a pirated copy of a digital movie, a
695
1 specific movie?
2 A. Yes.
3 Q. And did you ever tell anybody, or write a report, or
4 furnish a document indicating that it related in any way to
5 DeCSS?
6 A. As I stated before, I don't recall any report on DeCSS.
7 Q. Putting aside report, any e-mails?
8 A. I don't recall specifics.
9 Q. What has been your training as an investigator? You
10 worked for the F.B.I. for a period of time?
11 A. That's correct.
12 Q. Were you trained there as an investigator?
13 A. That's correct.
14 Q. And did the F.B.I. have some practice with respect to
15 making reports?
16 A. Yes, they do.
17 Q. Tell me what that practice was.
18 MR. COOPER: Relevancy, your Honor.
19 THE COURT: Sustained.
20 Q. Did the training include --
21 THE COURT: Sustained.
22 Q. You indicated that -- let me ask this. When you say you
23 are monitoring websites, did you ever call any website in
24 order to determine the name, address or identification of any
25 individual who had been allegedly selling movies on any of
696
1 these file sharing sites?
2 A. Excuse me. You'll need to clarify your question. You
3 have asked about websites and FSUs all in the same sentence.
4 Q. Did you ever call anybody as part of your investigation,
5 or to your knowledge, if it's not confidential, the F.B.I.,
6 Secret Service, U.S. Customs?
7 THE COURT: The question is lost with the digression.
8 Start the question again.
9 Q. Did you ever call anybody at anybody website that had file
10 sharing to determine where the films came from?
11 A. Do you mean did I telephone anyone?
12 Q. Yes.
13 A. Not personally.
14 Q. Did you ever make any investigation with respect to any of
15 those file sharing sites as to where the films came from?
16 A. Yes, we routinely investigate.
17 Q. And what did that investigation indicate?
18 MR. COOPER: Objection, your Honor. It's not only
19 confidential, ongoing investigations. Much of the information
20 she has on this subject is privileged and it is plainly beyond
21 the scope.
22 THE COURT: Well, you better come to sidebar. Mr.
23 Garbus and Mr. Cooper.
24 (At the sidebar)
25 THE COURT: Let's deal with scope first. Mr. Garbus,
697
1 why is it within the scope?
2 MR. GARBUS: My position is that they know that DeCSS
3 is not a pirating tool. My information. And I believe that
4 they may have made an attempt to determine that and may have
5 concluded what I have just said is so. Whether or not that
6 goes to your ultimate question about whether or not the DeCSS
7 is an appropriate or inappropriate circumvention is something
8 else. But it seems to me what I am entitled to know is this.
9 There are ten different utilities that with respect
10 to, let's say, the nine others, as I understand it, they did
11 no investigation, and that basically what you are dealing with
12 is an attempt to take a product away from, let's say, the
13 Linux source group, and that I think that what the MPA was
14 doing was basically protecting the licensing arrangement and
15 that this entire investigation had little and nothing to do
16 with piracy. And I think they are aware of the fact that the
17 stuff that's up on the Internet is not DeCSS material. Not
18 only the negative of it, but that they know that it's not.
19 THE COURT: So that's why it's within the scope of
20 the direct, is that right?
21 MR. GARBUS: If you want, I will make her my witness
22 at an appropriate time, keep her in court and I'll make her my
23 witness.
24 MR. COOPER: Your Honor, my principal concern -- I
25 don't think it's necessary --
698
1 MR. GARBUS: I don't think it's within the scope of
2 the direct based on the conclusions that they drew. She is
3 the chief investigator. They put her on the stand. She comes
4 to assert conclusions. I think the facts contradict her
5 conclusions.
6 THE COURT: What conclusion?
7 MR. GARBUS: Well, I must tell you every one of the
8 conclusions is that DeCSS is a contributing factor or is one
9 of the reasons they are very concerned. One of the critical
10 parts of her testimony, as I understand it, is the spiking or
11 the enormous increase in material on the net since DeCSS first
12 comes about.
13 THE COURT: Um-hum.
14 MR. GARBUS: And I think the truth of it is you have
15 nine other utilities that lead to that spiking, and the one
16 utility that does not is DeCSS because it has a different
17 function.
18 THE COURT: You are certainly entitled to ask her
19 about the question of whether these other utilities could have
20 led to the spike. There is no question about that.
21 MR. GARBUS: Okay. And I want to know.
22 THE COURT: But I don't think that's what you have
23 been asking her.
24 MR. GARBUS: I have been trying to get the background
25 for it. I have been trying to find out her investigation. If
699
1 you are asking me to ask a conclusory question, I'm prepared
2 to do that. I wanted to know what her investigation
3 indicated. It seems to me I'm entitled to do that.
4 THE COURT: Mr. Cooper?
5 MR. COOPER: Our concern, your Honor, is that the
6 question that I think Mr. Garbus last asked her has the
7 potential for eliciting information regarding the specifics of
8 investigations of other potential actions and ongoing
9 investigations in cooperation with law enforcement.
10 I will say, for instance, that the MPAA member
11 companies are among the plaintiffs in an action filed today
12 against ScourNet, and to the extent that Mr. Garbus's question
13 is potentially going to elicit privileged information
14 regarding the investigation leading up to that action, I
15 believe we are entitled to protection from having to answer
16 that question under a variety of privileges.
17 I don't think it's necessary for Mr. Garbus's right
18 to question the witness on any relevant information she might
19 have, but I am concerned that it's privileged information and
20 information regarding ongoing investigations not be divulged
21 in connection with such a response.
22 MR. GARBUS: I am here to represent a client. My
23 understanding is that, of all of the utilities, the one that
24 is not being used for piracy is DeCSS because of the amount of
25 time it takes to do a variety of things. What is being used
700
1 for piracy are these other utilities, that the investigation
2 into DeCSS is solely related to the fact that there is a
3 competitive machine out there called Linux. That's what I'm
4 trying to get to.
5 If we can do all that with a stipulation, if we can
6 do all that -- not the last part about Linux -- but if we can
7 do it with a stipulation, I will try to craft one and I would
8 try and ask it in one question, but I was trying to get into
9 the investigation concerning it.
10 MR. COOPER: I don't even know how to respond to
11 that. The only information we have on any of those assertions
12 are from Mr. Garbus's mouth. This witness isn't able to
13 testify to that factual information because it's simply
14 nonexistent.
15 MR. GARBUS: She is the chief investigator. She may
16 contradict everything I said. She may say everything I just
17 said is wrong.
18 THE COURT: Look, Mr. Garbus is entitled to
19 cross-examine her on the subject of whether this spike in the
20 apparent availability of pirated movies on the Internet after
21 October or November is attributable to the appearance of
22 DeCSS. I think there are other ways of doing it.
23 MR. GARBUS: I could ask her one question.
24 THE COURT: We will take it one question at a time.
25 There are other ways of doing it. Let's try.
701
1 MR. GARBUS: Judge, you are an experienced trial
2 lawyer. If you can think of a better way for me to formulate
3 a question so we don't have a problem, I will do it.
4 THE COURT: I'm not getting your rate anymore to
5 formulate the questions, Mr. Garbus.
6 (In open court)
7 MR. GARBUS: You may be exagerating.
8 THE COURT: I don't think so.
9 MR. GARBUS: May I have the last question, please?
10 (Record read)
11 THE COURT: I am going to sustain the objection to
12 that question, because it's much too broad in the
13 circumstances, and it does implicate privileges. It
14 implicates legitimate confidentiality concerns beyond
15 privileges, but there is some appropriate area here that I
16 have indicated at the sidebar, and counsel can pursue it.
17 New question.
18 BY MR. GARBUS:
19 Q. Have you ever seen any documents that indicate whether or
20 not all of the films that are on these file sharing programs
21 do or do not come from Power Ripper?
22 A. No.
23 Q. Have you ever seen any documents --
24 MR. GARBUS: Judge, if you have a better way of
25 formulating the question, I will take it.
702
1 THE COURT: As I said to you, I'm not getting paid
2 the rate you are getting for formulating questions. Once upon
3 a time I was, but not anymore. That's your job.
4 MR. GARBUS: Did we get an answer?
5 THE COURT: There is not a question.
6 Q. Can you tell by looking at any of the file sharing
7 programs what percentage of the films that are described on
8 those file sharing programs come from any particular utility?
9 A. You want to know what compression was used on them or --
10 THE COURT: Let's try to make this simpler. I can't
11 resist, Mr. Garbus. I'm sorry. Think of it as pro bono.
12 I understood from a previous witness that when you
13 see a film listed on a website or an FSU that has been
14 decrypted and is available for sale or exchange, that you
15 can't tell from the listing itself what mode of decrypting the
16 film was used. Is that consistent with your understanding?
17 THE WITNESS: Yes, it is.
18 THE COURT: All right. Are there other ways that you
19 can ascertain by what means a film offered on the Internet or
20 an FSU for exchange or sale has been decrypted?
21 THE WITNESS: I don't know.
22 THE COURT: Back to you, Mr. Garbus.
23 Q. Who would know at the MPAA, if anybody?
24 A. I don't know.
25 Q. Do you know who Brad Hunt is?
703
1 A. Yes, I do.
2 Q. What is his job?
3 A. He is our chief technology officer.
4 Q. Have you ever had any discussions with him about the two
5 questions that the judge has asked you?
6 A. No, I have not.
7 Q. And who is Rick Hirsch?
8 A. He is the head of antipiracy for the IDSA.
9 Q. To your knowledge, does anyone at the MPAA have the
10 answers to the two questions that the judge posed?
11 A. I don't know.
12 Q. To your knowledge, does anybody in law enforcement have
13 the answers to the two questions the judge has posed?
14 A. I don't know.
15 THE COURT: Has anybody on the Cincinnati Reds? Come
16 on. Don't you think there is an easier way to do this, Mr.
17 Garbus?
18 MR. GARBUS: You tell me. Your questions are not
19 objectionable. Mine can be. Go ahead if your Honor wants to
20 formulate the question.
21 THE COURT: Mr. Sims has offered.
22 MR. SIMS: I will pose the question if you want, your
23 Honor.
24 THE COURT: It's Mr. Garbus's examination.
25 Q. Now, we have heard about a surge in Internet piracy, is
704
1 that right, over the last six months?
2 A. In respect to decrypted DVDs.
3 Q. Right. Can you tell whether or not that surge comes as a
4 result of the utility Power Ripper or DeCSS or DOD Ripper or
5 any other utility?
6 A. Not definitively.
7 Q. Has anyone at the MPAA ever made any investigation to
8 determine what the utility is or was being used to create that
9 surge?
10 A. I don't know.
11 Q. Have you ever made any investigation to determine which
12 utility leads to that surge?
13 A. As I stated before, it's an ongoing investigation.
14 THE COURT: Maybe we can get at it a little bit
15 better this way. If you were to download the file of a
16 decrypted movie obtained over the Internet or through an FSU,
17 are you aware of any means by which you can examine the code
18 and the data file of the download and determine through that
19 examination how the movie was decrypted?
20 THE WITNESS: I don't have that answer yet.
21 THE COURT: You don't have it yet.
22 THE WITNESS: No.
23 THE COURT: I take it the answer is that you hope to
24 find out some day, but you don't know it now, is that correct?
25 THE WITNESS: I hope to find out soon, yes.
705
1 THE COURT: All right.
2 Q. So, as of now, nobody knows the answer to my question?
3 THE COURT: As of now, Ms. Reider doesn't know the
4 answer.
5 THE WITNESS: That's correct.
6 Q. As of now, do you know if anybody in the MPAA knows the
7 answer?
8 A. I don't know.
9 Q. To your knowledge does anyone in law enforcement know the
10 answer?
11 A. I don't know.
12 Q. Now, has anyone ever said to you --
13 THE COURT: Let me ask another question, because I
14 think it may short-cut this a lot. Would I be correct in
15 assuming, Ms. Reider, that there are other investigative
16 techniques that you have and are pursuing in an effort to find
17 out by what means any movies that may be offered on the
18 Internet were decrypted, out of conventional law enforcement
19 type techniques?
20 THE WITNESS: That's correct, your Honor.
21 THE COURT: Okay. Let's go.
22 Q. What are those techniques, and what is it that you're
23 doing?
24 A. We regularly try to determine the source, the author's
25 identity, location.
706
1 MR. GARBUS: Can I hear the answer again?
2 (Record read)
3 Q. During that course of investigation, have you ever
4 determined that DeCSS was ever used to send a film over the
5 Internet?
6 THE COURT: Well, on that you already have your
7 stipulation, Mr. Garbus. They have no direct evidence that
8 that ever occurred. They are asking you to infer it from
9 other things.
10 Q. Have you ever tried to determine whether or not any --
11 from your investigation -- any of the films on the file
12 sharing programs came from DeCSS?
13 MR. COOPER: Asked and answered, your Honor.
14 THE COURT: Yes, I think it was.
15 MR. GARBUS: Your Honor, can I have five minutes?
16 Could I just have a five-minute break?
17 THE COURT: Yes, sure.
18 (Recess)
19 BY MR. GARBUS:
20 Q. During the course of your investigation, when you have
21 gone to these file sharing sites, have you ever learned that
22 the information posted on the site is false, namely, that they
23 don't have the movies that they say they have?
24 A. On occasion the download does not come through.
25 Q. And when you say "on occasion the download does not come
707
1 through," what does that mean?
2 A. There is some sort of error in the transfer.
3 Q. Do you know whether the film is on the site or it's just a
4 dud, that they say they have a film?
5 A. I don't know.
6 Q. Do you have any reports or records concerning the number
7 of duds on these file sharing sites?
8 A. Not to my knowledge.
9 Q. To your knowledge, does any law enforcement agency have
10 any information concerning the duds on these file sharing
11 sites?
12 A. I don't know.
13 MR. GARBUS: Excuse me, your Honor. We are just
14 trying to go through all these document now. It's a little
15 rough.
16 Q. This is document CO, which also has attached to it --
17 well, let me show you this first. I show you Defendants'
18 Exhibit AT?
19 MR. GARBUS: May I approach the bench?
20 THE COURT: Yes.
21 Q. And I ask you whether or not you have ever seen this
22 document before. Have you ever seen that document before?
23 A. You showed it to me at the deposition.
24 Q. Prior to the deposition had you ever seen it before?
25 A. Not that I recall.
708
1 Q. Let me show you a document entitled CO.
2 MR. COOPER: Your Honor, this is a privileged
3 document.
4 THE COURT: Mr. Knight is who?
5 MR. COOPER: Mr. Knight is one of the attorneys, a
6 former regional director for the MPAA.
7 Mr. Litvak, as you know, is counsel for the MPAA.
8 And, your Honor, I believe that this goes to efficacy and is
9 not properly within the scope of direct.
10 THE COURT: Mr. Garbus?
11 MR. GARBUS: As I said, I'm prepared to make this
12 witness -- rather than get into scope or not scope at some
13 point -- I'm willing to make her my witness as a hostile
14 witness.
15 THE COURT: And what about the rest?
16 MR. GARBUS: Can I hear the rest again?
17 THE COURT: Privilege, relevance.
18 MR. GARBUS: This is the Macrovision report.
19 THE COURT: Please do not describe what it is. There
20 is a privilege claim.
21 MR. GARBUS: I don't see why it's privileged.
22 THE COURT: You don't see it.
23 MR. GARBUS: It's a public document.
24 THE COURT: CO is a memorandum from Mr. Hunt to Mr.
25 Knight, who was just identified as an attorney. We are
709
1 laboring under some difficulty here, and I appreciate that
2 that affects everyone, because in an effort to get this case
3 to trial, you have seen probably 95 percent of the plaintiff's
4 privileged documents on a "no waiver" basis with the
5 understanding that admissibility would be determined at trial.
6 In other circumstances, a determination would have been made
7 as to privilege, and if it was determined to have been
8 privileged, you never would have seen the document in the
9 first play. So please don't announce its contents while we
10 are discussing whether there is a proper privilege claim.
11 Now, would you address the privilege claim and the
12 relevance argument.
13 MR. GARBUS: With respect to relevance, it refers to
14 the document, which I don't perceive to be privilege.
15 THE COURT: No, AT is not. But by saying this refers
16 to it, you, of course, have already disclosed part of the
17 content of CO. But let's go on.
18 MR. GARBUS: Judge, shall we do this at the bench?
19 THE COURT: I think you are fully capable of
20 discussing the relevance and the privilege issues without
21 discussing the contents.
22 MR. GARBUS: I would like to ask her whether looking
23 at that document, to which there is an objection with respect
24 to privilege, refreshes her recollection as to whether she saw
25 a document that was not privileged.
710
1 THE COURT: For that limited purpose, you may show
2 her CO.
3 MR. GARBUS: Thank you.
4 THE WITNESS: He already has.
5 THE COURT: You have already seen it, Ms. Reider?
6 THE WITNESS: He just gave it to me.
7 THE COURT: He just gave it to you. All right. Ask
8 her the question.
9 Q. Does reading that document refresh your recollection as to
10 whether or not you saw a document entitled "Macrovision"?
11 A. No, it does not.
12 Q. Did you ever have any discussion with anyone at the MPAA
13 concerning any Macrovision analysis of the DVD CSS hack.
14 A. Not that I recall.
15 Q. Were you told by anyone at the MPAA that Macrovision had
16 determined that the DeCSS hack has no commercial significance?
17 A. I don't recall.
18 Q. Were you ever told by anybody at the MPAA -- by the way,
19 do you know who Macrovision is?
20 A. Vaguely.
21 Q. Tell me who they are.
22 A. They are a company that provides content protection for
23 videotape.
24 Q. Were you ever told by anyone at the MPAA either that a
25 Merdan report or a Macrovision record had determined that the
711
1 DeCSS hack has proven to be more difficult and complicated to
2 use than the average consumer is willing to put up with?
3 A. No.
4 Q. Did you have any conversations with anyone at the MPAA
5 concerning the differences in the use of the DeCSS utility and
6 the other utilities we have talked about, the DOD Ripper, the
7 Power Ripper, the Speed Ripper, with respect to their
8 efficacy, with respect to illegal copying?
9 A. Can you read back that whole question, please?
10 (Record read)
11 A. Not that I recall.
12 Q. Did anyone at the MPAA ever tell you that DeCSS was not
13 consumer or user friendly and would not pose a problem with
14 respect to illegal copying?
15 A. Not that I recall.
16 Q. Did anybody tell you the contrary?
17 A. I don't recall.
18 Q. Did you ever see any MPAA report that said that DeCSS is
19 not a utility that is appropriate for piracy or copying?
20 A. Not that I recall.
21 Q. Do you know if the MPAA ever made a determination that
22 DeCSS is not a copying or pirating utility?
23 A. Not that I recall.
24 Q. Did they ever come up with any contrary conclusion?
25 A. I don't know.
712
1 Q. When for the first time did you learn about Linux?
2 MR. COOPER: It assumes facts not in evidence, but
3 it's beyond the scope.
4 THE COURT: Sustained as -- pardon me?
5 MR. COOPER: And irrelevant.
6 THE COURT: Sustained as to form. Rephrase it.
7 Q. You previously talked about downloading material from the
8 LiViD group site. Is that right?
9 A. That's correct.
10 Q. Prior to that time, had you ever heard of Linux?
11 A. As an operating system?
12 Q. Yes.
13 A. Yes.
14 Q. When did you hear about it for the first time?
15 A. I don't recall the date.
16 Q. Was it in 1999?
17 A. I don't recall the date.
18 Q. Did anyone at the MPAA ever tell you about Linux or did
19 you learn it on your own?
20 MR. COOPER: Your Honor, relevancy. I recognize that
21 Mr. Garbus is entitled to cross-examine the witness on proper
22 matters, but I get the impression we are engaged in a
23 filibuster.
24 MR. GARBUS: Engaged in what?
25 THE COURT: A filibuster is what he said.
713
1 Overruled for the moment.
2 A. I don't recall.
3 Q. When for the first time did you ever hear the term "LiViD
4 group"?
5 A. I don't recall having heard that specific title.
6 Q. How did you know to go to the LiViD website, download the
7 material you downloaded in October and November?
8 A. I'm an investigator. I followed a trail there.
9 Q. Tell me what the trail was.
10 A. I read about it on Slashdot.
11 Q. And, by the way, do you know or anyone at the MPAA have
12 any reason to believe that 2600.com has anything to do with
13 the surge in Internet piracy?
14 MR. COOPER: Your Honor, to the extent that Mr.
15 Garbus is asking the witness of her knowledge from attorneys
16 in connection with this lawsuit, it would be privileged.
17 THE COURT: I just don't even begin to see the
18 relevance of it.
19 Q. Take aside the question --
20 MR. GARBUS: Unless you are ruling on relevancy.
21 THE COURT: I am ruling on relevance. There has been
22 no clam here. They don't have to establish what you are
23 suggesting you were provided.
24 MR. GARBUS: It certainly goes to the question of
25 damage, doesn't it?
714
1 THE COURT: There is no damage claim in this case,
2 whatever you say in your papers. They amended their complaint
3 to delete it.
4 Q. Other than DeCSS, do you know what other ways there are to
5 copy DVDs?
6 A. Only what I have read.
7 Q. And what is it that you've read?
8 A. The drink or die Speed Ripper claims.
9 Q. Tell me what that is.
10 A. With all due respect, sir, you have been asking me about
11 the DOD Speed Ripper.
12 Q. So that's the only thing that you know of that is used to
13 decrypt DVDs other than DeCSS, is that right?
14 A. To my knowledge.
15 Q. Has anyone ever told you that any of these other utilities
16 that we have talked about can be used to decrypt DVDs?
17 MR. COOPER: Ambiguous, your Honor.
18 THE COURT: I don't think so.
19 THE WITNESS: Could you read the question back,
20 please?
21 (Record read)
22 A. Not that I recall.
23 Q. In response to Mr. Cooper's question before, you stated
24 that you tested DeCSS. Do you remember that?
25 A. That's correct.
715
1 Q. You didn't mention whether you were alone or with other
2 people. Were you alone?
3 A. No.
4 Q. Who was with you?
5 A. To the best of my recollection, Brad Hunt, Rick Hirsch and
6 Richard Kroon.
7 Q. And you have identified Brad Hunt as the chief. Rather
8 than go through it again, tell me who those three people are.
9 A. Brad Hunt is our chief technology officer, Rick Hirsch at
10 the time was director of worldwide antipiracy, and Richard
11 Kroon is a manager in our MIS department.
12 Q. What is Brad Hunt's background, to the extent you know it?
13 A. I don't know.
14 Q. Who did the actual downloading?
15 A. I did.
16 Q. And were you doing it under their supervision?
17 A. No, I was not.
18 Q. Did you then, after you downloaded it, watch a movie?
19 A. We decrypted a DVD.
20 Q. Which one?
21 A. As I recall, it was a Star Trek movie.
22 Q. Did you watch the movie?
23 A. We watched segments of it.
24 Q. How much?
25 A. In total, approximately five minutes.
716
1 Q. Is it fair to say that there is no report or memo
2 concerning that?
3 A. I can't speak for others.
4 Q. Did you ever make a report or memo concerning that?
5 A. Not that I recall.
6 Q. You said before that you hoped to have an answer soon
7 about whether a movie file reveals the decryption technique.
8 Who have you asked for this answer?
9 A. I have not yet asked anyone.
10 Q. You hope to have an answer soon, you haven't asked
11 anybody. Can you tell me whether or not anyone to your
12 knowledge is studying whether or not a movie file can
13 reveal -- that's been downloaded -- can reveal the decryption
14 technique?
15 A. I don't know.
16 Q. When do you hope to get an answer to the question you
17 didn't ask?
18 THE COURT: You think that's a proper question, Mr.
19 Garbus?
20 Q. When do you hope to learn when there will be information
21 about whether a movie file reveals a decryption technique?
22 MR. COOPER: Objection, your Honor.
23 THE COURT: Overruled.
24 A. In the near future.
25 Q. Is the near future sometime this year or next year?
717
1 A. I would say that was subjective as to what you would
2 qualify "near."
3 Q. You used the word. What do you mean by that?
4 A. Hopefully within the year.
5 Q. Now, do you know of any techniques that are being
6 developed by the movie studios or the MPAA to stop the
7 transmission of unauthorized movies over the Internet?
8 A. I have no specific knowledge.
9 Q. Does the word "digital transmission" mean anything to you?
10 MR. COOPER: Relevancy and scope, your Honor.
11 THE COURT: Sustained.
12 Q. By the way, do you in the course of your investigation use
13 informants?
14 A. Yes, I do.
15 Q. And are these informants used to determine facts for your
16 investigation?
17 A. They contribute intelligence.
18 Q. And has any of the intelligence that has been contributed
19 indicated to you that DeCSS is used in any way for any illegal
20 copying?
21 A. Yes, it does.
22 Q. Where is that found, that intelligence?
23 MR. COOPER: Your Honor --
24 Q. Is that in any documents?
25 THE COURT: What is it, Mr. Cooper?
718
1 MR. COOPER: We had an understanding with respect to
2 the specifics of investigations and, in particular, the
3 informants, at least I understood we did with opposing
4 counsel. I am just wanting to make sure that that last
5 question is limited to whether the witness has copies of
6 informing as opposed to what the details of the investigation
7 are.
8 Q. Let me make it clear, I am not interested in any
9 informants's names and I don't want to you give me any
10 informants's names.
11 Have you ever soon a document from an informant -- by
12 the way, how many informants do you use in the New York
13 office?
14 A. In the New York office?
15 Q. Yes.
16 A. There are no informants in the New York office.
17 Q. How about Washington?
18 A. Informants in the Washington office?
19 Q. How many informants does the MPAA have in the United
20 States?
21 A. I don't know.
22 Q. How many informants does the MPAA have in Encino,
23 California?
24 A. Zero in Encino, California.
25 Q. Where are the informants located? I don't want to know
719
1 cities, just general areas.
2 A. They are around the world.
3 Q. Have any of these informants ever given you a written
4 document that shows that a DeCSS film was ever on the Internet
5 or was ever sold or copied?
6 A. Not specifically.
7 Q. How much money does the MPAA spend each year in its piracy
8 efforts?
9 A. I don't know.
10 Q. How many people -- by the way, where are you located?
11 A. Encino.
12 Q. And how many people are there in your office?
13 A. Approximately 120 or so.
14 Q. And how many of those people do you supervise?
15 A. Directly?
16 Q. Yes.
17 A. Four or five.
18 Q. How many people do you supervise indirectly?
19 A. It depends on the investigation.
20 Q. With respect to the DeCSS investigation.
21 A. It depends on which site offering DeCSS.
22 Q. Is there any investigation that the MPAA is making of
23 2600.com?
24 A. To the extent we filed this lawsuit.
25 Q. Other than that?
720
1 MR. COOPER: Your Honor, I believe the witness's
2 testimony has been that after a certain point in her
3 investigation she turned it over to legal and this lawsuit
4 resulted. He is asking outside of this lawsuit?
5 MR. GARBUS: I will now go before the lawsuit.
6 Q. Prior to January 13, was there an investigation of
7 2600.com?
8 A. Under the direction of the legal department.
9 Q. And do you know when that investigation began?
10 A. I can't give you an exact date.
11 Q. Now, you say, as I understood it -- where did you get
12 DeCSS from in the first instance?
13 A. I don't recall.
14 Q. Did you say you got it off Slashdot?
15 A. No, I did not.
16 Q. Do you know why 2600.com was the only person sued in this
17 lawsuit? Is there anything that you know, as a result of any
18 conversations you had prior to January 13, why Mr. Goldstein
19 and 2600.com, along with the other two defendants, were being
20 made the subject of this suit?
21 MR. COOPER: To the extent the witness has any
22 information on this subject, it is plainly privileged.
23 THE COURT: Sustained.
24 Q. What is the budget of your department?
25 A. I don't know.
721
1 Q. What is the budget of the antipiracy department of the
2 MPAA?
3 A. I don't know.
4 THE COURT: Mr. Garbus, I have let you go on for a
5 long period of time because it is now reasonably clear to me
6 that the object of this morning's exercise, in at least some
7 part, is simply to fill up hours that you want to fill up.
8 That's my perception of it anyway. We have gotten down nearly
9 to the color of the carpet in the office and what brand of
10 coffee is in the coffee machine. I don't see the relevance of
11 any of it. If there is any, I would like to hear it now.
12 MR. GARBUS: I would like to know -- I think it's
13 relevant. The MPAA has made allegations about DeCSS as a
14 piracy tool. As I understand it, DeCSS is used primarily for
15 the Linux machine; that with respect to piracy or illegal
16 copying, that it is the other utilities that are used, and
17 that the reason that DeCSS is the subject of this lawsuit is
18 not so much related to piracy but it related to the use by
19 Linux and other open source people of DeCSS which allows it to
20 play DVDs.
21 In other words, the argument that we have been making
22 since the beginning of this case is that this is not a piracy
23 case, this is not an illegal copying case. Rather, this is a
24 monopoly case where the DVD licensees control who shall play
25 DVD hardware.
722
1 THE COURT: And would you point to the pleading that
2 you have filed that makes this a monopoly case, Mr. Garbus.
3 MR. GARBUS: My memory is it's in the answer. I
4 don't have the answer before me.
5 THE COURT: Yes. Well, I have looked at it since
6 yesterday, and it is not there. What you allege in the answer
7 is that Congress's enactment of the DMCA and the application
8 of that statute, presumably by the courts of this country,
9 violates the antitrust laws.
10 MR. GARBUS: If --
11 THE COURT: Excuse me. That is the only antitrust
12 allegation you have made in any pleading in this case. Now, I
13 suspect that you know, but in any case, I will say, that it is
14 impossible as a matter of law for the Congress of the United
15 States, by enacting a statute, or for a court of the United
16 States, by applying it, to violate the antitrust laws.
17 If there were an inconsistency between the DMCA and
18 the antitrust law, standard principles of law that have been
19 established in this country for 200 years, require the result
20 that because the Sherman Act was enacted in 1890, the Clayton
21 Act in 1914 and the Robinson-Patman Act in 1936, and the DMCA
22 in 1998, that the antitrust laws, to whatever extent they may
23 be inconsistent with the DMCA, are repealed.
24 Now, I don't see any inconsistency, and if there
25 were, it's not an issue in this lawsuit and let's just get on
723
1 with this lawsuit.
2 MR. GARBUS: I don't think it's an appropriate
3 response at this time. We have submitted briefs to you on
4 that question. I don't believe that the DMC --
5 THE COURT: What brief is that, Mr. Garbus? Could
6 you bring my attention to it, please?
7 MR. GARBUS: Yes. We have a brief where we talk
8 about Sega, Betamax and the Connectix case. I think it's the
9 reply brief, and it's my memory that in that brief we talk
10 about the holdings in those three cases, and we discuss the
11 issue of whether or not the DMCA has in effect overruled those
12 three case.
13 It is our view that it has not. And in each of those
14 three cases, as I interpret the cases, they had arguments
15 about fair use, but they also had arguments under general
16 copyright discussion about monopoly, and we have cited those
17 cases in our brief and that has been part of our argument.
18 THE COURT: I stand fully by everything I said.
19 Let's move on. And if there is any relevance to this line of
20 examination, I still haven't heard it, and it is now 12:25,
21 and I am warning you now that your time with this witness is
22 running out. And if you don't get to something relevant, I
23 will simply terminate the examination after fair warning. You
24 have had part of that warning now.
25 MR. GARBUS: I will stop examining this witness.
724
1 THE COURT: I have not terminated your examination.
2 If you wish to stop now, that's your choice.
3 Do you wish to stop now?
4 MR. GARBUS: I will ask two or three questions.
5 BY MR. GARBUS:
6 Q. When you tested DeCSS, did you apply DivX?
7 A. No.
8 Q. Have you ever applied DivX?
9 A. No, I have not.
10 Q. Do you know what DivX is?
11 A. Yes, I do.
12 MR. GARBUS: Excuse me. I have no further questions
13 at this time.
14 THE COURT: Are you through with the witness, Mr.
15 Garbus?
16 MR. GARBUS: Yes, I am.
17 THE COURT: Is there any redirect?
18 MR. COOPER: No, your Honor.
19 THE COURT: The witness is excused.
20 (Witness excused)
21 THE COURT: Your next witness, Mr. Gold?
22 MR. GOLD: As I said before, this was our last
23 witness. However, there are some disputes about documents
24 still, we hoped, would have been resolved last night, but I'm
25 told they weren't. So prior to the resolution of those
725
1 document issues, which we would like to put in on our case, we
2 are not finished with the complaint, we are prepared to
3 address them.
4 MR. SIMS: I have an informal agreement with
5 Mr. Hernstadt and Mr. Atlas that, subject to your Honor's
6 permission, we have given them last night a list of the
7 exhibits, a subset of those we had marked, that we would like
8 to move in. They can't get to their objections until either
9 tomorrow or, they said this morning, more likely Monday.
10 So I think what Mr. Gold is saying is that we would
11 like to close subject to the offering of that evidence. I
12 believe that they will agree to much of it and then that will
13 narrow the amount of argument over the remaining arguments
14 that would be made at the time that we offer that evidence.
15 THE COURT: Is that satisfactory, Mr. Garbus?
16 MR. GARBUS: I have to speak to Mr. Hernstadt. I was
17 not part of these conversations.
18 MR. ATLAS: We were provided by Mr. Sims with their
19 exhibit list this morning. I have gone through and taken some
20 notes. I have narrowed down the issues. I would agree that
21 you should keep their eyes open. To the limited extent that
22 they will submit certain exhibits and certain deposition
23 designations, that's fine with us. We will try and work those
24 issues out tomorrow and over the weekend.
25 THE COURT: Okay. Plaintiff rests subject to
726
1 deposition excerpts and exhibits.
2 MR. GOLD: Thank you, your Honor.
3 THE COURT: Mr. Garbus?
4 MR. GARBUS: We would be prepared to put on a witness
5 after lunch.
6 THE COURT: 2 o'clock.
7 (Luncheon recess)
8 (Continued on next page)
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
727
1 A F T E R N O O N S E S S I O N
2 2:00 p.m.
3 THE COURT: We are missing somebody. I guess not.
4 Counsel, I gather you filed a motion in the Court of
5 Appeals yesterday to stay the trial on the ground that I
6 should not sit. Does anybody know what the status of that is?
7 MR. GARBUS: It has been denied.
8 THE COURT: It has been denied. All right. Call
9 your first witness.
10 MR. HERNSTADT: Defendants call Edward Felten.
11 MR. GOLD: Your Honor, may I make a motion with
12 respect to this witness?
13 THE COURT: Yes.
14 MR. GOLD: Your Honor, it would appear that
15 Mr. Felten is a distinguished professor of computer sciences
16 at Princeton and he has submitted one and a half page
17 declaration, six lines of which talk about what he is going to
18 testify about.
19 I would rather hand this up to you so you could see
20 the six lines for yourself.
21 THE COURT: Mr. Felten, why don't you have a seat for
22 a second anywhere you like.
23 MR. GOLD: May I approach, your Honor?
24 THE COURT: Yes.
25 MR. GOLD: This is the declaration. I'm referring to
728
1 page 2.
2 THE COURT: Okay. I have read it.
3 MR. GOLD: This is one of several cryptographers who
4 have submitted affidavits and the subject listed here I
5 respectfully submit, and as we set forth in our motion in
6 limine, have nothing to do with the charges we have made
7 against the defendant.
8 THE COURT: The very first item, the function
9 similarities and/or differences between source and object
10 code, I take it that that really is a foundation of the whole
11 case, right? I mean unless you know that, you don't know
12 anything about this case.
13 MR. HERNSTADT: Yes, your Honor.
14 MR. GOLD: The second, third and fourth, your Honor?
15 THE COURT: Well, let me hear from Mr. Hernstadt.
16 MR. HERNSTADT: About the relevance of this witness,
17 your Honor?
18 THE COURT: The relevance of items 2, 3 and 4 on this
19 statement.
20 MR. HERNSTADT: The relevance of items 2, 3 and 4 go
21 into two parts of our case, one is the First Amendment
22 argument that we make. All of this is testing, all of the
23 research that comes out of this testing is stuff that is
24 material that is published and discussed and part of a
25 discourse. DeCSS is an example of the type of program that
729
1 fits into the categories as set forth here.
2 THE COURT: That fits into?
3 MR. HERNSTADT: The categories that are set forth
4 here, 2, 3, 4. If a law is passed that permit the silencing
5 of discussion about a program because it does one thing, if
6 it's speech, then the First Amendment is violated. That's an
7 argument we have made. I think in order to understand that,
8 it is important that you understand the nature of the
9 research, the nature of the interaction, the accelerated
10 sessions. It's not just publications. It is a more
11 complicated interaction. And also, the benefit to the public
12 of the discourse, of the open public discourse.
13 MR. GOLD: Your Honor, one of the exhibits we were
14 handed during lunch, that I assume they gave us because they
15 were going to try to present in court, is a letter that a
16 bunch of scholars presented to Congress before they passed the
17 statute. I think the defendants are mistaking this for a
18 legislative body. They don't like the statute --
19 THE COURT: We know they don't like the statute.
20 MR. GOLD: Well, that's what 2, 3 and 4 --
21 THE COURT: I never met a defendant that liked the
22 statute under which they were being sued. Most drug dealers
23 have a problem with the narcotics laws. I didn't mean to
24 compare these people to drug dealers by any stretch. Perish
25 the thought. Just to illustrate the point. Most corporations
730
1 don't like the antitrust laws. Do you like that better?
2 MR. GOLD: If we get into 2, 3 and 4, you will be
3 into a lot of things I think you'll find have no relevance at
4 all.
5 THE COURT: Well, look, I'm prepared to be educated
6 to a point, and if I find that it's relevant and useful, I
7 will hear more. If the only objection here is relevance, I am
8 prepared to go a little bit of a way to find out whether I
9 think there is really something to it.
10 MR. GOLD: It's relevance, and it's the fact that
11 under the statute, on the face of the statute as we have set
12 forth, your Honor, there can be no cryptographic research
13 exception for these defendants.
14 THE COURT: No, but it is fair to say that in my
15 preliminary injunction ruling on the basis of no record at all
16 other than what you have told me, I came to the conclusion all
17 by myself that given the assumption that code has some
18 expressive content, there needs to be at some point
19 potentially a balancing with respect to constraining the
20 publication, because any constraint on the publication, given
21 the assumption, involves a First Amendment value.
22 Now, I think, therefore, that I need to hear
23 potentially evidence of this character in order to come to an
24 informed judgment about how to balance, instead of being in
25 the position that I found myself in in January, through no
731
1 fault of the plaintiffs, of basically having on the one side
2 your contention that this program did nothing but rip off your
3 product and the defendants' position that it didn't matter,
4 the First Amendment was a complete obstacle.
5 MR. GOLD: In terms of the sole purpose of the
6 product, the defense has admitted that the sole purpose was to
7 serve DeCSS.
8 THE COURT: I understand that, but there are other
9 issues here, and I am going to allow the witness to testify.
10 I'm not sure until I hear it how much of what he has to say is
11 useful, but I'm certainly going to start listening.
12 MR. GOLD: Thank you.
13 MR. HERNSTADT: Your Honor, just to make the record
14 clear, we have never submitted that the sole purpose is to
15 circumvent. We have submitted evidence that one of its
16 purposes is to decrypt. But that's not the same thing as
17 circumvent.
18 THE COURT: I know. You are a good lawyer,
19 Mr. Hernstadt.
20 MR. HERNSTADT: Thank you, sir.
21 THE COURT: It certainly doesn't serve the purpose of
22 allowing people to play Space Invaders. Okay. Let's go with
23 the witness.
24 EDWARD FELTEN,
25 called as a witness by the Defendant,
732
1 having been duly sworn, testified as follows:
2 DIRECT EXAMINATION
3 BY MR. HERNSTADT:
4 Q. Good afternoon, Professor Felten. Could you tell us what
5 your education in the area of computer science is?
6 A. Sure. My education in general, I received a bachelors
7 degree from CalTech in 1985 and in 1991, a masters degree, in
8 1993, a Ph.D. in computer science, both of those at the
9 University of Washington.
10 Q. And in the course of your studies, were you awarded any
11 honors?
12 A. Yes. My graduation from CalTech was a graduation with
13 honors, and I received an award for the -- for outstanding
14 research outside the classroom at CalTech, and when I was in
15 graduate school, I received an AT&T graduate fellowship and
16 also a Mercury 7 fellowship.
17 Q. What was the AT&T graduate fellowship?
18 A. This is a merit-based fellowship awarded by AT&T to a few
19 computer science students at top schools, and it is basically
20 a full ride through graduate school.
21 Q. After you completed graduate school, where did you go?
22 A. I joined the faculty at Princeton.
23 Q. Where are you teaching now?
24 A. Still at Princeton, the computer science department.
25 Q. What is your present position?
733
1 A. I'm an associate professor of computer science.
2 Q. What courses are you teaching?
3 A. The courses I have taught in the last few years include
4 introduction to information security, a course on computer
5 networks and distributing computing, and some special topics
6 courses related to computer security and some other topics.
7 Q. Do you know what DeCSS is?
8 A. Yes.
9 Q. Do you teach, use DeCSS in any of your classes?
10 A. Yes, I used it in my introduction to information security
11 course this last spring.
12 Q. What are your primary areas of research?
13 A. I do research in a number of areas. The main one is
14 computer security. I also do research related to operating
15 systems, to Internet software and some research related to
16 computer networks.
17 Q. Have you been given any honors or awards in connection
18 with your research?
19 A. Yes. These include some fellowships, a Sloan fellowship,
20 a National Young Investigator Award from the National Science
21 Foundation, and also some "Best Paper" awards at conferences.
22 For example, at the symposium on operating system principles
23 in 1997, which is the most prestigious conference in operating
24 systems which meets every two years, I received the "Best
25 Paper" award at that in 1997, so that indicates -- that is
734
1 said to indicate that I had written one of the two or three
2 best papers in the area of operating area research in that
3 area.
4 Q. Have you authored or coauthored a number of publications?
5 A. Yes. At least 50 articles in the scholarly -- at least 50
6 scholarly publications in the form of articles plus two books
7 and some magazine articles.
8 MR. HERNSTADT: Your Honor, may I approach the
9 witness?
10 THE COURT: Yes.
11 Q. Professor Felten, I have handed you Exhibit I believe BBP?
12 A. Yes.
13 Q. Could you identify that?
14 A. This is a declaration that I filed earlier in this case
15 and attached to it is a copy of my CV.
16 Q. Does your CV list your publications and articles?
17 A. Yes, it does.
18 MR. HERNSTADT: Your Honor, rather than spending more
19 time with that, I would move this into evidence.
20 MR. COOPER: No objection, your Honor.
21 THE COURT: Are you including within the offer the
22 attached paper on Protocol Failure Analysis in Applied
23 Cryptography Curriculum?
24 MR. HERNSTADT: Yes, your Honor.
25 THE COURT: Mr. Cooper?
735
1 MR. COOPER: Your Honor, I'm not familiar with that
2 article as having been part of the declaration. Certainly I
3 don't have a copy in what I have here from Dr. Felton's --
4 THE COURT: I will receive that part of the exhibit
5 which consists of the declaration itself and the attached CV
6 but not at this point the article.
7 MR. HERNSTADT: Very good, your Honor. Actually I
8 don't have it either.
9 MR. COOPER: I don't believe it was attached.
10 THE COURT: It sure is, stapled to the one
11 Mr. Hernstadt just handed me.
12 MR. COOPER: We have never seen it, your Honor, to
13 the best of our knowledge.
14 THE COURT: That just happened. Let's go.
15 (Defendant's Exhibit BBP received in evidence)
16 Q. Do you do any other work outside of teaching and research?
17 A. I do consulting for a number of companies and others.
18 Some of that consulting is technical consulting, advising
19 companies, particularly in the security field. I serve on
20 technical advisory boards for six or seven companies, most of
21 them start-ups in the security area, and I also do some
22 consulting related to litigation.
23 Q. Have you ever testified in a case in connection with your
24 consulting?
25 A. Yes, I testified twice in the Microsoft antitrust case in
736
1 front of Judge Jackson, and in that case, I also was deposed
2 twice and filed two declarations.
3 Q. And did the court take your testimony as an expert?
4 A. Yes. The Department of Justice designated me as an expert
5 and Microsoft did not object, so the judge accepted my
6 testimony on that basis.
7 Q. What were the subject matters of your testimony in that
8 case?
9 A. I testified in general about operating systems, web
10 browsers and Internet software. I testified specifically
11 about the Microsoft products that were at issue in that case,
12 Windows 95, Windows 98 and Internet Explorer, the relationship
13 among them. I testified about general issues relating to the
14 design of software and how software could have been designed
15 in ways other than what Microsoft did and a few other topics.
16 I should also add that I also testified about the
17 security implications of what Microsoft had done in the design
18 of their products.
19 Q. In case anyone in the room doesn't know, what was the
20 result of that case?
21 A. The --
22 MR. COOPER: Relevancy, your Honor.
23 THE COURT: Sustained.
24 Q. Are you familiar with the Linux operating system?
25 A. Yes.
737
1 THE COURT: Before we get to that, I want to ask the
2 witness one question.
3 I had another lawsuit at some point in which I
4 thought about but ultimately did not appoint a court expert in
5 a computer science area, and I remember that somebody referred
6 me to somebody at Princeton. I never engaged any "expert."
7 Was that you?
8 THE WITNESS: I don't recall ever being contacted.
9 THE COURT: I don't remember the name either.
10 MR. GARBUS: It was another one of our experts.
11 THE COURT: Okay.
12 Q. Do you use the Linux operating system?
13 THE COURT: Who was it, Mr. Garbus?
14 MR. GARBUS: I think it is Larry Peterson.
15 THE COURT: I don't remember the name.
16 MR. GARBUS: I don't think you and he ever spoke.
17 THE COURT: I think that's probably right. I think
18 there may have been an e-mail or two.
19 Go ahead.
20 Q. Do you use the Linux operating system?
21 A. Yes, I do on a regular basis. I have one in my home, in
22 my office, and I have at least two in the lab that my research
23 group uses.
24 Q. And do you also have a Windows computer?
25 A. Yes, I also have Windows computers in each of those places
738
1 as well.
2 Q. Is one of those two operating systems your preferred
3 operating system?
4 A. I think it depends what your purpose is. I think that in
5 general, Linux is faster, more stable and more flexible than
6 Windows, and so if that's what I'm after, then that's the
7 system of choice.
8 The big advantage of Windows is that it has support
9 for a lot more applications, and if you need one of those
10 applications that's not available on Linux, then I would
11 choose Windows for that reason. I think that if both
12 operating systems had equivalent sets of applications, I would
13 choose Linux.
14 Q. What programming languages do you use in your work?
15 A. A number of them. Like most computer scientists, I use
16 whatever language fits the job, and so this would include
17 languages like C, C++, Java, Pearl, NL and a number of others.
18 Q. And is there a connection between programming languages
19 and what has been referred to as case, source code and object
20 code?
21 A. Sure. Source code, I think of it as a general term
22 referring to certain kinds of computer languages. The form in
23 which the person typically writes the code directly is often
24 referred to as source code, so think of source code as being
25 one kind of computer language.
739
1 MR. HERNSTADT: Your Honor, the defense would offer
2 Professor Felten as an expert.
3 THE COURT: Just as I told the other side, it's not
4 necessary. If there is an objection to an opinion he offers,
5 we will deal with it then.
6 MR. HERNSTADT: Very good. Thank you, your Honor.
7 Q. You said earlier that one of your primary areas of
8 research is security.
9 THE COURT: Does that mean you're leaving source code
10 and object code?
11 MR. HERNSTADT: No. I'm coming back.
12 Q. What is your main focus of scholarship and teaching in the
13 area of security?
14 A. I, in my research group, do two things that I think
15 distinguish us from -- there are two ways in which we try to
16 distinguish our work. One is in focusing on the security of
17 widely used software, software that is deployed on a lot of
18 people's computers and that a lot of people are relying on.
19 The other is in trying to take a sort of holistic approach, to
20 consider the whole picture of what is involved in security at
21 a system level as opposed to focusing on the microlevel on
22 particular components.
23 Q. Does this research involve any reverse engineering?
24 A. Yes, we use reverse engineering quite a bit. One of the
25 things that we do is do detailed security studies of products
740
1 that are deployed in the field, and in doing that, one needs
2 to understand how the product works, what it does, whether the
3 things that the manual says are actually true, and so on. To
4 do that, you need to examine the software while it is running
5 in a sort of bit-by-bit fashion, and that is reverse
6 engineering.
7 Q. Does it involve encryption research as well?
8 A. Yes, many of the systems that we study involve encryption
9 and do encryption, so encryption is part of that holistic
10 picture that I talked about.
11 Q. You described taking apart programs, looking at programs
12 very precisely. Is that what is known as hacking?
13 A. We, the term "hacking" has been used in a lot of different
14 ways. Back when I started out in computer science, the term
15 "hacking" would have been almost universally applied to that.
16 In other words, hacking at one time was a term that was used
17 just to refer to playing around with computer systems, trying
18 to get them to do things, sort of analogous to tinkering if
19 you will. A person who was particularly good at that would be
20 called a hacker.
21 Then at some point in time, people who used computers
22 for criminal purposes started to call themselves hackers,
23 tried to apply that complimentary word to themselves, and the
24 press picked it up and now you hear the word used especially
25 in the public and the press in a negative way. So when I hear
741
1 someone use that word, I really have to look at the context to
2 see what they mean.
3 Q. Could you give us an example of a security research
4 project -- before you get to that, before when you were
5 talking about the work you were doing you used the word "we."
6 What did the "we" refer to?
7 A. We refers to a research group which consists of myself and
8 at various times a number of graduate students, perhaps some
9 undergraduate students, sometimes faculty colleagues get
10 involved. So what it means is really a group of people headed
11 by me.
12 Q. Could you give an example of a security research project
13 that you have worked on?
14 A. Sure. One project that we spent a number of years on
15 is -- started out with a study of the security of JAVA. Java
16 is a programming language and a system which was deployed by
17 itself and also in conjunction with web browsers, and because
18 of technical reasons, which I'll skip -- unless you really
19 want to hear them -- the security of Java was important for
20 the overall security of web browsers and, hence, the security
21 of people browsing the web, and so we started out in this
22 project by doing a detailed study of Java to try to understand
23 whether it provided the security guarantees that the vendors
24 of Java systems said it did and, if not, why not. And then we
25 moved on from there to deal with the implications of what we
742
1 had found.
2 Q. Which vendor's version of Java did you look at first?
3 A. We started out looking at the version from Sun
4 Microsystems because at the time we started, that was by far
5 the most popular version. Later on Netscape came out with
6 their own version of Java and we began to study that and
7 Microsoft came out with their own version and we began to
8 study that. For most of the project, we were looking at all
9 three implementations because those formed by far the bulk of
10 the systems that were actually deployed.
11 Q. Do researchers request the permission of a vendor in
12 advance before they start looking at a program?
13 A. No. We did not feel that we needed permission from anyone
14 to do what we were doing, and certainly we were happy to talk
15 to the vendors about what we were doing if they wanted to
16 engage us in a dialog, but we did not feel we needed their
17 permission to do it.
18 Q. Did your research reveal vulnerability in the various
19 implementations of Java?
20 A. Yes, quite a few. Over the course of about two to three
21 years, we found roughly a dozen of what I would consider
22 serious security vulnerabilities in various versions of Java.
23 Q. What did you do with the results you found?
24 A. We do a number of things. We discuss and publish the
25 results publicly. We discuss these results with the vendors
743
1 in order to help the vendors improve their products. We --
2 and we use them to feed into and motivate our research in the
3 future, and I also use them in teaching.
4 Q. Where are the results published?
5 A. They are published in a number of places and in a number
6 of different ways. Because there are a number of audiences
7 who we would like to reach and who I think are interested in
8 hearing about this, ranging from the public, the average user
9 of this technology, on up to the sort of very advanced
10 research community, so we use the method that in each case
11 makes sense for talking to that constituency.
12 For the research community, we will publish papers in
13 journals and so on, give talks at conferences. For the
14 public, we will put articles on your website, talk to the
15 press, whatever we think will help convey the information we
16 have learned to the people who need to know it.
17 Q. When you describe the vulnerabilities, do you do so in a
18 specific way, detailing what is wrong with the program?
19 A. Yes, we think it is important that the information about
20 the vulnerabilities is available to people who have an
21 interest in knowing about it. We think the public benefits
22 from that kind of discussion in a number of ways, and so in
23 each situation, we are as specific as we think we need to be
24 in order to fully inform the public in the research community.
25 Q. Do you include code sometimes when you release the
744
1 results?
2 A. Sometimes. Sometimes we do. It depends really on the
3 circumstances. It depends on what we think is necessary and
4 appropriate in order to communicate our results.
5 Q. Now, looking at the Java project, did you disclose to the
6 vendors whose products you looked at the result you found
7 before you published them to the general public?
8 A. Well, we tried in every case. We were not always able to
9 establish a communication with the vendor that was useful. In
10 at least one instance, we tried to reach the vendor, tried to
11 communicate to the vendor. What we found was we couldn't get
12 through the public relations protective screen that they put
13 up in front of their engineers. In other instances, we did
14 disclose to the vendor because we thought under the
15 circumstances that was the -- that was an effective way to
16 proceed in order to serve the public interest. But we always
17 disclosed the results of our research to the public very
18 promptly.
19 Q. Why do you do that?
20 A. Well, we think we have a responsibility to do it. Early
21 on in the process of our discovering these vulnerabilities and
22 dealing with them, I was concerned about what was the right
23 way to behave, what was the -- what was the ethical thing to
24 do in this situation. And so I went and I spoke to an
25 ethicist at the university, a philosopher who studies ethics,
745
1 and I had lunch with her a few times and tried to sort through
2 what was the right thing to do in these type of situations.
3 The one message I took away from that was our prime
4 responsibility ethically in this situation was to the public,
5 to make sure that the public had the information they needed
6 in order to make good decisions about what to do. And so my
7 belief for a number of reasons is that the public is served by
8 the disclosure of this information to all of the community
9 that I talked to, ranging from the public itself down to
10 researchers.
11 Q. Okay. What other benefits are there from publishing the
12 result of your research?
13 A. I think there are a bunch of benefits that accrue to the
14 public as a result of this. First of all, there are the more
15 direct benefits. The public, after all -- first, the public,
16 after all, is using these systems, and they -- and the public
17 is making decisions about whether to use a particular
18 technology, and I think the public benefits from making those
19 decisions based on accurate information.
20 That is, if someone is deciding whether to deploy --
21 whether to install a Java virtual machine on their computer,
22 they would benefit from knowing about the security of it. If
23 someone is deciding whether to buy a DVD player, they would
24 benefit from knowing about the security of the -- about the
25 strength of the security mechanisms installed in it.
746
1 For example, if I know that the DVD players have weak
2 security in them, I might decide that maybe I don't want to
3 buy a DVD player now, maybe some new technology with better
4 security is going to come along in a year and I will have to
5 throw my DVD player away.
6 So knowing about the security, knowing about whether
7 the security representations made by the vendors of these
8 systems is accurate, and knowing about what are the risks of
9 deploying a particular product, and understanding how things
10 are likely to play out in the future, all help the public.
11 And that comes from having accurate information about the
12 security level of the product that they are using.
13 That principle really applies to anyone who is
14 thinking about investing in a technology in any way. So it
15 might be the member of the public who is thinking about buying
16 something which is going to use that technology. It might be
17 someone who is thinking of releasing content in the DVD
18 format. It might be someone who is making a movie in the case
19 of DVDs, understanding what they are doing when they sign away
20 to someone the right to make DVDs with their work on it. It
21 might be someone who is thinking of going into a partnership
22 with a company who is using a particular technology. All of
23 these people can make better decisions and more informed
24 decisions if they actually know what are the implications of
25 the decisions they are making.
747
1 An additional benefit to the public along the same
2 lines is that over time, the public learns which products tend
3 to have problems, which companies tend to release products
4 that have problems, and they tend to develop a sense of which
5 kinds of technology are likely to have good security and which
6 are not, and that in the long run helps people understand what
7 to do. If they can see the next security problem coming, then
8 they can also make better decisions.
9 Q. Do you use the results you publish in teaching?
10 A. Yes. I believe rather strongly that in teaching students
11 about computer security, how -- to design secure systems, you
12 have to understand how systems really fail in practice, and I
13 think there is a good analogy here to the engineering of
14 buildings to stand up to earthquakes. If you are going to
15 design a building that can stand up to an earthquake and not
16 fall down, or you want to teach someone to do that, you have
17 to understand how buildings actually fall down in earthquakes,
18 which parts break and why, which of the engineering practices
19 in building the buildings tend to lead to strong buildings and
20 which don't. You have to look at that experience because
21 that's the only way you can keep your education, your
22 understanding from drifting off into theoretical irrelevance.
23 You need to understand how things actually break in practice
24 so you can avoid it in the future.
25 Q. Now, in publishing your results, have you ever published
748
1 code for a program that would exploit the vulnerabilities you
2 have discovered in your research?
3 A. Well, I make a distinction here between publishing code
4 that demonstrates the existence of a vulnerability and
5 publishing code that actually lets you harm someone. That is,
6 if you can demonstrate that a vulnerability exists, that that
7 system does not do what the people selling it say it does,
8 then that is a public good. And if you can do that without
9 providing all of the steps that someone needs to actually hurt
10 someone, then so much the better. So there is an important
11 distinction here. We do and have published code that
12 demonstrate the existence of vulnerabilities, but we have not
13 published code that takes all the steps necessary to harm
14 someone.
15 Q. Now, you mentioned before that you know what DeCSS is.
16 A. Yes.
17 Q. Could you tell us, what is DeCSS?
18 A. The DeCSS is a program that allows material on a DVD
19 encrypted with the CSS system to be decrypted essentially.
20 Q. When did you learn about DeCSS?
21 A. I learned about DeCSS -- I don't recall the exact date --
22 I would estimate it was maybe in January roughly. And I
23 learned about it from reading reports in the press and also
24 from seeing Frank Stevenson's paper about it.
25 Q. Did you examine DeCSS to understand what it did?
749
1 A. Yes. At the time I got a copy of Frank Stevenson's paper,
2 I got a copy of DeCSS, I read them both side by side to
3 understand what was going on, to verify for myself that what
4 Mr. Stevenson had said and what was reported in the press was
5 generally accurate.
6 What Mr. Stevenson said was precisely accurate. What
7 was said in the press was generally accurate. Just to
8 understand what was going on, it was another one of those
9 examples I talked about, about how systems fail.
10 Q. When you refer to Mr. Stevenson's paper, are you talking
11 about Frank Stevenson's cryptoanalysis of the CSS algorithm?
12 A. Yes, that's what I meant.
13 Q. Did you learn anything about CSS upon examining DeCSS and
14 Mr. Stevenson's paper?
15 A. Yes, I learned a number of things about it. First of all,
16 I learned about how it worked, but I also learned about the
17 level of -- relative level of security that it offered. I
18 learned about what mistakes the people designing it had made,
19 and that let me move on and think about the implications of
20 those mistakes.
21 Q. Did you identify any particular flaws?
22 A. Sure.
23 MR. COOPER: Relevancy, your Honor.
24 THE COURT: No, I understand the relevance.
25 Overruled. This does not go -- at least I'm not taking it on
750
1 the issue of robustness. Go ahead.
2 A. Okay. There are a number of mistakes that the designers
3 of CSS made, starting out with designing their own
4 cryptosystem, instead of using a standard well-established one
5 that was known to be strong. That is a common beginner's
6 mistake and something that I advise my students against.
7 Beyond designing their own cipher, using a 40-bit key
8 is also a very significant mistake. It allows the system to
9 be broken by a brute force attack. In addition to that, there
10 was a third, more technical error that the designers made that
11 Frank Stevenson describes in his paper. That allows the keys
12 to be extracted with considerably less work even than a brute
13 force search.
14 Q. Based on your experience, would you describe CSS as a
15 security system?
16 A. Yes, it's a security system in the sense that I use the
17 term. I use the term broadly meaning that it's any kind of
18 system that's intended to control or restrict the use of
19 anything, so in that sense, it is a security system.
20 Q. What does CSS protect?
21 A. What it does or what it was intended to do is to -- it was
22 really two things. First of all, it was designed to prevent a
23 CSS-encoded DVD from being played in any player which did not
24 have the CSS algorithm in it. Second, it has the effect of
25 preventing any use other than playing of the material on the
751
1 DVD.
2 Q. Did it have any -- was it designed or intended to protect
3 the material in the DVD from being copied?
4 A. It did not -- it certainly did not, nor could it have
5 prevented the encrypted content from being copied to somewhere
6 else to our disk, to another DVD.
7 THE COURT: Could you sit back about five more inches
8 from the microphone, because whether you get too close, it
9 reverberates.
10 THE WITNESS: Sure.
11 THE COURT: Thank you.
12 Q. You mentioned before that it prevents a person from having
13 access to the material on the disk. Why would a person who
14 has purchased a DVD want to have access to the material on the
15 disk?
16 MR. COOPER: Objection, your Honor. It's not
17 relevant.
18 THE COURT: Sustained.
19 MR. HERNSTADT: Your Honor, I think this goes to the
20 various exemptions and other noninfringing uses.
21 THE COURT: Maybe it does, but this gentleman is an
22 expert on computer science, not an expert on why somebody else
23 might want to have access to a DVD file.
24 MR. HERNSTADT: Very good. May I approach the
25 witness?
752
1 THE COURT: You may.
2 Q. Professor Felten, I am giving you Exhibit BBS which is the
3 declaration of Professor Appel. I would ask you to turn to
4 Exhibit B at the very back. Is that an article that you
5 coauthored with Professor Appel?
6 A. Yes, it is, it's an article the two of us coauthored which
7 we submitted to the copyright office in response to a request
8 for comments related to the copyright office's opinion
9 regarding the DMCA, and also a slightly modified version of
10 this will appear -- I should say this, along with a little bit
11 of explanatory material explaining what the DMCA is and so on,
12 will appear in the Communications of the ACM Magazine in the
13 September issue.
14 Q. What is that magazine?
15 A. Communications of the ACM is sort of the flagship magazine
16 of the ACM which is the primary professional society for
17 computer scientists. Every member of the ACM gets the
18 magazine.
19 Q. What does ACM stand for?
20 A. Association for Computing Machinery.
21 Q. What do you discuss in this article?
22 A. The article discusses the -- the article discusses a
23 number of reasons why scholars in various disciplines,
24 including computer science, would want to, and in fact need to
25 in order to do research, have access to the raw bits, the raw
753
1 text, if you will, of a copyrighted work in order to do
2 various kinds of scholarship that do not infringe copyright.
3 MR. COOPER: Your Honor, if I may. If this testimony
4 is going to proceed in this direction, it seems to me that
5 it's outside of the scope of the expertise for which this
6 witness is offered. It seems to me to address the drafting of
7 the DMCA and the desire to have access to material protected
8 by encryption rather than to the science of cryptography.
9 MR. HERNSTADT: I think this article addresses the
10 scholarly uses to which he would put a program like DeCSS, and
11 in all of its permutations, the research that he discussed
12 earlier as well as the need for access to materials, in order
13 to conduct research. I also -- it goes to an argument that we
14 have made and will continue to make that fair use is exempted
15 and protected activity by the DMCA.
16 THE COURT: The question of whether fair use is
17 exempted by the DMCA requires the reading of the words
18 Congress put on the piece of paper. It's not a matter for
19 each side to bring in witnesses to testify as to their beliefs
20 on the subject. So to that extent, I don't think it's a
21 appropriate.
22 MR. HERNSTADT: If I may, I'm not presenting
23 Professor Felten to discuss his beliefs, but, rather, examples
24 of the types of activities that he would and has in his
25 professional life undertaken.
754
1 MR. COOPER: Your Honor, it's not any of the four
2 topics for which this witness has been identified and it's
3 plainly outside of the scope for which he has been offered.
4 THE COURT: Well, what about that, counsel?
5 MR. HERNSTADT: Your Honor, this is within the scope
6 of his discussion of the relationship between -- excuse me --
7 of scholarship, the importance of disseminating and making
8 available information concerning the subject of such tests and
9 methodology and results of testing. I think that this is
10 addressing the needs of scholarship in perhaps a broader sense
11 but it is certainly within the scope of what he was to talk
12 about. The harm of scholarship that would result from not
13 being able to undertake certain practices I think is part of
14 the methodology of scholarship.
15 MR. COOPER: I don't think that's a fair
16 characterization of what he is being asked to testify about.
17 We accept that he is an appropriate witness to testify about
18 issues with respect to publishing security analyses and so on,
19 but I think this questioning goes to entirely different
20 subjects, none of which go to the question of whether the
21 defendants in this case have any potential fair use defense.
22 MR. HERNSTADT: Your Honor, I am prepared to move
23 into evidence or request to move into evidence Exhibit B of
24 the Appel declaration and allow you to make your own
25 assessment of how it fit into this.
755
1 THE COURT: I think that's the appropriate course.
2 I take it, Professor Felten, that what you said in
3 Exhibit B to Defendants' Exhibit BBS in fact represents your
4 genuinely held views, correct?
5 THE WITNESS: Yes, it does.
6 THE COURT: All right. Well I'm going to receive it
7 for whatever it's worth, but, Mr. Hernstadt --
8 MR. HERNSTADT: I'm going to move on.
9 THE COURT: Let me finish making the point. So what
10 is received is just Exhibit B to Defendants' Exhibit BBS.
11 (Defendant's Exhibit B to Exhibit BBS received in
12 evidence)
13 MR. HERNSTADT: I would request that we separate it
14 and put it in as BBS-1.
15 THE COURT: Let's deal with that later. I would like
16 to finish what I'm trying to say to you.
17 I think it is probably self-evident, or if not, close
18 to self-evident that scholars could make use of some materials
19 that might appear in digital form -- and I don't limit myself
20 to motion pictures -- if they were free to circumvent whatever
21 technological protections there might be that stand between
22 them and the digital form of the material.
23 You now have this witness's view that that is so, and
24 you have his article. I don't think you have to beat a dead
25 horse on that point. You know, it goes or doesn't go wherever
756
1 you want it to go, and eight or nine more witnesses on the
2 same point -- and I don't know whether that's what your plan
3 is -- would be a little bit cumulative. Okay?
4 MR. HERNSTADT: Thank you, your Honor.
5 THE COURT: All right.
6 BY MR. HERNSTADT:
7 Q. Professor Felten, let me move on. Professor Felten, based
8 on your experience and expertise in the area of security
9 research, do you have an opinion as to whether the disclosure
10 of the DeCSS program was good?
11 THE COURT: Sustained. Good?
12 Q. Whether there is a value, a public value to the disclosure
13 of the DeCSS program?
14 THE COURT: Sustained. I have a lot of respect,
15 based on what I've read of his CV and what I have seen here,
16 for Professor Felten. But the last time I've looked he is not
17 an expert on what the public values are and whether they are
18 expert or not, the people who make those judgments in this
19 society are called Congressmen and Senators.
20 Q. Professor Felten, do you have an opinion as to the impact
21 of the disclosure -- the impact on the CSS of the disclosure
22 of the DeCSS's program?
23 MR. COOPER: Your Honor, it's vague and I believe, if
24 I understand it, beyond the scope of the expertise of this
25 witness.
757
1 THE COURT: Look, Dr. Felten, would I be right in
2 assuming that in your judgment, the disclosure of DeCSS code
3 has been of some value to you and in your opinion others who
4 follow the same line of work as you do from a scholarly point
5 of view?
6 THE WITNESS: Yes, I think it has meaning in my
7 research and in my teaching.
8 THE COURT: Is that what you wanted, Mr. Hernstadt?
9 MR. HERNSTADT: Yes.
10 Q. Could you explain how it has helped you?
11 A. Sure, I talked about in general about the benefits to
12 research that come from a discussion of real system failures
13 and why they fail and so on, and all of that holds true for
14 DeCSS. I think it's a very instructive example for
15 researchers. It's a benchmark against which we can hold up
16 research which claims to improve practices or to improve
17 designs. We can ask would this new method really have
18 prevented this kind of problem. It has been useful to me in
19 teaching. I have used it as an exam in my course, for
20 example, as one thing students can study where they can see a
21 real failure and think about why and how it happened and think
22 about what they might do differently.
23 Q. Turning back to source code and object code, Professor
24 Felten, what is source code?
25 A. I think of source code and object code as being sort of
758
1 two ends of a spectrum. There are lot of different languages
2 in which you can express computer programs, and there are
3 different styles of languages and computer scientists argue
4 endlessly about which ones are better. There are also
5 different levels of programming, like one talks about high
6 level or low level.
7 Generally high level is referring to things which are
8 closer to the level at which people tend to write programs.
9 Low level means closer to the level at which computers execute
10 them. But I don't think there is a clean distinction
11 necessarily between source code and object code. It's kind of
12 a continuum on which all of the different forms of computer
13 languages can be placed.
14 THE COURT: Can I try it this way? This isn't the
15 first computer case I have ever dealt with, and the
16 understanding that I have always had runs something along
17 these lines, and I would like you to tell me to what extent it
18 is right and to what extent it is wrong.
19 My first proposition, computers operate in a binary
20 environment; that is, everything is a one or a zero, right?
21 THE WITNESS: Yes.
22 THE COURT: That derives from the fact that various
23 bit of silicon in the computer either have a positive
24 electrical charge or a negative electrical charge, am I right?
25 THE WITNESS: Yes.
759
1 THE COURT: So in order for a computer to understand
2 any instructions or data that a human being wishes to enter
3 into a computer, it must be received by the computer in the
4 form of a string of positive or negative charges or to put in
5 common parlance, ones or zeros, right?
6 THE WITNESS: Yes.
7 THE COURT: Object code consists of that
8 machine-readable sequence of yes/no, one/zero impulses, true?
9 THE WITNESS: Yes, that's the strict definition of
10 object code.
11 THE COURT: Okay. Now people have a hard time
12 understanding strings of ones and zeros in potentially almost
13 infinite length. So source code is a language, whichever
14 particular one it may be, that is less abstract and easier for
15 human beings to understand than a string of ones and zeros,
16 correct?
17 THE WITNESS: Yes, generally.
18 THE COURT: Okay. And whether through the process
19 known as compilation or through some other process, whatever a
20 programmer writes in source code gets transformed for the
21 computer to operate upon into object code, i.e. the string of
22 ones and zeros or positive and negative charge, true?
23 THE WITNESS: That transformation does happen but it
24 doesn't always happen in one step. There are sometimes
25 intermediate steps, intermediate languages, for example.
760
1 THE COURT: When you spoke of a continuum, there are
2 computer languages that involve modes of expression or
3 conveying information or instructions that are at one end of
4 the spectrum close to English or some other spoken or written
5 human language, and other types of languages that are much
6 farther away from spoken and written language and much closer
7 to but not quite get at the machine readable binary format?
8 THE WITNESS: Yes, that's the distinction between
9 high level and low level.
10 THE COURT: Okay. Let's go, Mr. Hernstadt.
11 BY MR. HERNSTADT:
12 Q. Okay. Judge Kaplan identified source code as less
13 abstract than object code. Is it in fact less abstract?
14 A. That's a hard question. I would say they are abstract in
15 different ways. There are certainly some things which you can
16 learn more fruit any from source code. I talked about high
17 level and low level. There are sort of high level ideas about
18 how the program is structured in general, sort of the
19 architecture of it which you can generally get more easily
20 from source code. But there are other things which you can
21 learn more easily from object code.
22 Q. Can you read object code?
23 A. Yes, it's not as easy -- it's not the easiest language to
24 read certainly. We teach students to read it and write it as
25 part of their education.
761
1 Q. Are there parts of your research where you rely on your
2 ability to read object code to get the information you need?
3 A. Yes. I should add that we do things other than read
4 object code. We also execute it and you can learn a lot by
5 doing that.
6 Q. You talked about the different programming languages. Is
7 there -- is source code and object code, are they also types
8 of languages?
9 A. Well, object code in the sense of the thing that the
10 computer directly executes it. For types of microprocessors
11 there is a single language. There are many different
12 languages that you would classify as source code or sort of
13 intermediate things. There is a huge variety of languages.
14 Q. What did you mean when you discussed source code and
15 object code being on a continuum?
16 A. What I meant is that different levels -- different
17 languages might, you might write programs that might be at
18 different levels. Some are easier to read and write, some are
19 closer to what the machine executes, and that in the creation
20 of programs, you sometimes work with languages that are at a
21 sort of intermediate level. You might translate a program
22 from the language in which you wrote it into some other
23 language, then read and modify it in that intermediate
24 language, and then translate it again into the final object
25 code. So it's not -- it's not a binary distinction between
762
1 source code and object code. It's not just it's this or that.
2 There are in between stages, in-between levels of expression.
3 Q. And based on your experience with source code and object
4 code, is it your opinion that object code is expressive?
5 A. Certainly.
6 MR. COOPER: Your Honor, in a legal sense, he plainly
7 doesn't have that experience.
8 THE COURT: I don't take it in the legal sense. I
9 obviously want to hear what he means by that.
10 A. So the way I interpret the question is can one computer
11 scientist communicate to the other by the medium of object
12 code. I think certainly the answer is yes. You can learn a
13 lot from reading and analyzing and executing object code if
14 you know how to do it, and so can you learn about what the
15 author of the code, what the person who made that code
16 intended the program to do, you can learn about how the
17 program was constructed, you can learn about aesthetic and
18 engineering decisions that the person made, and from all of
19 that, you can learn things that the person who created the
20 program put in there.
21 THE COURT: Dr. Felten, let me ask you this: Can one
22 locksmith communicate information about a lock to another by
23 providing a key to the lock?
24 THE WITNESS: I think you could -- I think in that
25 instance, you could get some information about the lock from
763
1 the key, less information than you could get by taking apart
2 the lock.
3 THE COURT: Go ahead.
4 MR. HERNSTADT: Your Honor, in fact I'm done. Thank
5 you very much, Professor Felten.
6 THE COURT: Let's take our afternoon break. 3:15.
7 (Recess)
8 THE COURT: Okay. Mr. Cooper.
9 CROSS-EXAMINATION
10 BY MR. COOPER:
11 Q. Professor Felten, now you testified that your practice in
12 the security analyses in which you have been involved has been
13 to publish an initial report regarding the flaws you
14 discovered and followed later by a more scholarly report,
15 correct?
16 A. That's right, yes.
17 Q. And on occasion, you have included in your initial reports
18 portions of source code to the extent necessary to explain
19 your analysis, correct?
20 A. That's right. That's part of informing the public, as I
21 described before. Sometimes in order to do that, you have to
22 publish code, and so that people can look at what you've done
23 so that they can evaluate whether what you are saying is true,
24 and so that they can understand the implications of the flaw
25 that you found.
764
1 Q. Am I correct that you have been personally involved in
2 approximately 12 analyses where you discovered a flaw in an
3 encryption or security system?
4 A. About 12 flaws, yes.
5 Q. Okay. And of the reports you published with respect to
6 those 12, you found it appropriate to include portions of
7 source code in your initial reports on three of those, is that
8 correct?
9 A. Yes, approximately three. Those were the cases where we
10 thought it was appropriate, where what we needed to
11 communicate was best communicated in the form of code.
12 Q. And in every one of those instances, you were able to
13 publicly and professionally discuss and demonstrate the flaws
14 without providing people with the tools to take advantage of
15 those flaws, correct?
16 A. Without providing people with all of the tools, yes.
17 Without providing people, as I said, with all of the tools for
18 actually harming someone. That's not to say that we did not
19 provide code to demonstrate the existence of security flaws,
20 which we did. I also should point out that we are talking now
21 about the initial disclosure. Later we did scholarly
22 publications and other kinds of publications and those more
23 often included code and more detailed discussion of the flaws.
24 Q. Professor, you have never included the entirety of the
25 source code of the exploitation of a flaw in any of your
765
1 publications, have you?
2 A. Exploitation in the sense of allowing someone to be
3 harmed, no; but demonstration, yes.
4 Q. But you have never included in any of your publications
5 the entirety of the source code in the exploitation outlined
6 to defeat the security system you were discussing, isn't that
7 correct?
8 A. I think I explained it as well as I could in my previous
9 answer.
10 Q. But you are not answering my question, which is you have
11 never had occasion in any of the analyses in which you have
12 been engaged to publish the entirety of the source code which
13 represented the exploitation of the flaw you were studying,
14 isn't that correct, sir?
15 MR. HERNSTADT: Objection.
16 THE COURT: Sustained. I think there is a problem
17 with the question.
18 Q. Do you know what an exploitation is in the encryption and
19 cryptology area?
20 A. It's a term I've heard. I don't understand a precise
21 definition of it.
22 Q. Do you have your own definition of that term?
23 A. It's sometimes used to refer to a demonstration.
24 Sometimes it's used to refer to what I'll call a fully
25 damaging piece of code.
766
1 Q. Okay. So let's use it in the latter instance, a fully
2 damaging piece of code. You would agree, would you not, that
3 in either source or object code form a utility that was
4 designed to actually exploit a discovered flaw in a security
5 system would fall into that latter category?
6 MR. HERNSTADT: Objection to the form of the
7 question.
8 THE COURT: Overruled.
9 A. Something that was designed to actually say reformat
10 someone's hard disk or to actually infringe someone's
11 copyright, no, I have never actually -- I would put either of
12 those in the latter category and I've never released that kind
13 of code.
14 Q. Okay. In source or object form, correct?
15 A. In source or object form, I've never released code which
16 allows someone to take all the steps needed to harm someone.
17 Q. In fact, in all of the instances in which you were
18 involved in encryption analysis, you deliberately avoided
19 providing people with the tools necessary to break the system
20 you were studying, correct?
21 A. Yes. I made -- in all these instances, I made a
22 deliberate decision not to provide all of the steps to harm
23 someone. To connect this to DeCSS, my understanding of DeCSS
24 is that it is more in the line of a demonstration as I've used
25 the term. It does not distribute code which has been -- which
767
1 has been -- I'm sorry -- not code -- it does not distribute
2 content that has been taken from a DVD.
3 Q. No, it defeats the encryption on the CSS system and that's
4 all it does, isn't that true, Professor?
5 A. What it does is it allows material to be decrypted, and
6 I'm obviously not here to talk about whether that's legal.
7 But in a sense that I understand the distinction between
8 demonstration and exploitation as you defined it, I think it
9 falls in the demonstration area, because it does not copy and
10 distribute copyrighted material.
11 Q. No, it circumvents the certain security system that's
12 intended to protect that material, doesn't it?
13 MR. HERNSTADT: Objection.
14 THE COURT: Sustained. It's argumentative.
15 Q. Professor, in your view, the distribution of a fully
16 functional set of code that allows one to break a security
17 system is unethical, correct?
18 A. I think it depends on the circumstances. As I said
19 before, you have to look at the circumstances and understand
20 what it is necessary to communicate in order to inform the
21 public, in order to inform the research community, and I can
22 imagine situations in which the only way to do that was to
23 distribute code which was a full exploitation in the sense
24 that you determined, and then I think you'd have to face a
25 sort of balancing decision. So I can't say that it would
768
1 always be unethical in my view to do that.
2 Q. Didn't you testify at your deposition to the effect that
3 you never provide a tool which lets someone take all of the
4 steps in breaking into someone's computer and doing damage as
5 a result?
6 MR. HERNSTADT: Can we have a page and line?
7 THE COURT: Come on, Mr. Cooper, follow the rules.
8 MR. COOPER: I'm referring to Exhibit AZL, page 69,
9 line 15 through 18.
10 THE COURT: Read it.
11 "Q. We did not provide, we never provided a tool
12 which let someone, which gave someone all of the steps of
13 breaking into someone's computer and doing damage."
14 A. Could you repeat the question about that passage, please.
15 "Q. But in all of the 12 instances where you were
16 the discoverer of the flaw and you were involved in one way or
17 another in the ultimate public disclosure of that flaw, in no
18 instance did you find it necessary to provide people with the
19 tool to take advantage of the flaw in order to describe it,
20 discuss it, illustrate it or analyze it, right?"
21 You did testify in that fashion, didn't you,
22 Professor?
23 MR. HERNSTADT: Objection.
24 THE COURT: I don't get it, Mr. Cooper. What you
25 just read, if I understood it, it was a question, and
769
1 witnesses don't usually testify by asking questions.
2 MR. COOPER: His answer, if I may repeat the answer:
3 "We did not provide, we never provided a tool which let
4 someone, which gave someone all of the steps of breaking into
5 someone's computer and doing damage."
6 THE COURT: Answer?
7 MR. COOPER: That was the answer.
8 THE COURT: That was the answer. Okay. Got it.
9 Q. Next question:
10 "Q. And you, you deliberately avoided doing that, isn't
11 that true?
12 "A. That's correct."
13 THE COURT: Next question, counselor.
14 Q. You were also able to teach and discuss security flaws in
15 your classroom with your students regarding CSS without at any
16 time operating DeCSS as an executable utility, isn't that
17 correct?
18 A. Yes. In order to do the teaching that I did in that
19 course, I did not execute DeCSS as an executable utility.
20 Again that's not to say that in general one would never need
21 to execute something in order to teach about it, but given
22 what I decided to teach those students in that limited time
23 about, I did not need to do that.
24 Q. It wasn't necessary for you to use the executable utility
25 in order to discuss what you chose to discuss regarding those
770
1 flaws, correct?
2 A. I didn't use the software in the classroom in the sense of
3 executing it. What I did was I got DeCSS and I got Frank
4 Stevenson's paper, I read them myself, I understood the
5 situation, and based on my access to those materials and my
6 understanding, I was able to teach the students about CSS and
7 DeCSS.
8 I informed the students that this code was available
9 on the network and I informed them that if they wanted to
10 study it, they could study it. I don't know what they did as
11 a result of that. Certainly, as with everything in my course,
12 it was obviously not okay for the students to infringe
13 copyright, but I would not be at all surprised if some of the
14 students chose to do that kind of investigation themselves
15 based on my telling them that the code was available.
16 Q. Now, it's possible for you in your work to communicate
17 with other interested parties in your field regarding subjects
18 that you are researching and to maintain an ongoing dialog
19 with those parties through other means than posting material
20 to the public Internet, isn't that correct?
21 A. It is true that once I know about someone and once we have
22 established a sort of relationship, I can communicate with
23 them by e-mail. But as I discussed before, it's not the case
24 that there is a small community of people, all of whom know
25 each other, who are interested in this material and who are
771
1 doing research on it the way that the people working in this
2 field discover each other is to read each other's
3 publications. That's the way science works. You publish
4 openly and many people who you know read what you publish.
5 Some people you don't know read it. The only way to reach
6 that audience, the only way to find those other people out
7 there working on that topic is to publish in such a way that
8 they can read it.
9 And can I certainly tell you that I read my
10 colleagues', at other universities and companies, I read their
11 website to learn what they're up to.
12 Q. And if you have a particular interest in any of the areas
13 in which they are involved, you communicate with them directly
14 to get further information, correct?
15 A. In general, yes, but I don't know that it would be
16 fruitful to ask someone about something until I have seen what
17 is on their website.
18 And I should add I may be in an unusual position. If
19 this is a person I know and I send them some question, some
20 comment on their research, they are likely to take it
21 seriously, read it, and give me an answer. But if it's
22 someone who doesn't know me, they are going to -- they are
23 going to -- if it's someone who doesn't know me, and I want to
24 comment on their work, they are not necessarily going to be
25 willing to spend an afternoon on the phone with me explaining
772
1 their work. The reason that stuff is put out there on the web
2 is to be read. It's to be read by a lot of people, and I
3 frankly don't want to have to explain to everyone who asks
4 over the phone or by e-mail all of the details of the research
5 that I've done. It's not efficient. It doesn't make sense.
6 MR. COOPER: I don't have any further questions at
7 this point, your Honor.
8 THE COURT: All right. I have one, I guess two.
9 You've got networks at Princeton?
10 THE WITNESS: That's correct.
11 THE COURT: You've got networks for the faculty in
12 the academic buildings, and then is there a separate one for
13 the dormitories?
14 THE WITNESS: Yes, there is are networks in the
15 dorms.
16 THE COURT: What are the speeds?
17 THE WITNESS: The dorm networks are generally ten
18 megabits per second to each desktop. In the computer science
19 department, I can speak to what our network is for the
20 researchers. We generally have within the building 100
21 megabit per second links. Of course there are links between
22 the buildings and links between the university and the outside
23 world which have to be shared among all those people. So, for
24 example, in the computer science building from point A to
25 point B in the building we might have 10 megabits per second
773
1 on a really good day, but there is a link going from the
2 computer science department to the outside world which has to
3 be shared with everybody else in the building.
4 THE COURT: What is the speed of that?
5 THE WITNESS: I don't recall. I better not guess.
6 THE COURT: Okay.
7 THE WITNESS: If that's helpful, my colleague,
8 Professor Peterson is going to testify later. He knows all
9 this stuff much better than I do.
10 THE COURT: You were last at the University of
11 Washington how long ago?
12 THE WITNESS: 1993.
13 THE COURT: I guess any questions about the speed of
14 their network seven years ago is kind of like asking about
15 dinosaurs, right?
16 THE WITNESS: Well, seven years ago what we had in
17 our research building was 10 megabits per second inside the
18 building.
19 THE COURT: You are familiar with speeds at any other
20 universities in the last year per se?
21 THE WITNESS: Not particularly any other university.
22 I know generally what the technologies that are used, but I
23 can't speak to any specifically to any other university.
24 THE COURT: Generally.
25 THE WITNESS: Generally the technology within a
774
1 building is going to be either 10 megabits per second or 100
2 megabits per second on the ethernet. That's the most commonly
3 used technology.
4 THE COURT: Okay. Thank you.
5 Any further examination Mr. Hernstadt?
6 MR. HERNSTADT: No, your Honor, thank you very much.
7 THE COURT: Okay. The witness is excused. Thank
8 you.
9 THE WITNESS: Thank you.
10 (Witness excused)
11 THE COURT: Next witness, please.
12 MR. HERNSTADT: Our next witness is Mr. Goldstein.
13 ERIC CORLEY,
14 a defendant herein, having been duly sworn,
15 testified as follows:
16 DEPUTY CLERK: Please state your name for the record.
17 THE WITNESS: My pen name is Emanuel Goldstein.
18 My given name is Eric Corley.
19 THE COURT: What is it?
20 THE WITNESS: My pen name, writing name.
21 THE COURT: So the record is going to reflect, Steve,
22 that the witness's name is Eric Corley, which is the name he
23 is captioned under.
24 DIRECT EXAMINATION
25 BY MR. GARBUS:
775
1 Q. Mr. Corley, tell me something about your background.
2 A. I'm an English major. I graduated from the State
3 University of New York in 1982. I have worked --
4 MR. GARBUS: Excuse me. Can we have a small bench
5 conference just for a moment?
6 THE COURT: Yes. You and Mr. Gold. Is this your
7 witness, Mr. Gold?
8 MR. GOLD: Yes, sir.
9 (At the sidebar)
10 MR. GARBUS: Mr. Corley has, as I understand it, an
11 arrest when he was a child as a juvenile which was dismissed,
12 an ACD case, I have never been able to find the file of it.
13 He testified to it at some length because I permitted it at
14 deposition, but I would make a motion that that be excluded at
15 this time. I don't know whether Mr. Gold intended to get into
16 it or not.
17 MR. GOLD: In the deposition there was testimony
18 about -- I think it was an indictment, was it not? I think
19 so.
20 MR. GARBUS: I don't know what it was.
21 MR. GOLD: I did not get the impression that he was a
22 youthful offender or he was below 18, but the nature of the
23 offense I think is one that reflects --
24 THE COURT: Let me just find out something. Do you
25 propose to use this?
776
1 MR. GOLD: On cross, yes, but there was a
2 confidentiality agreement and I --
3 THE COURT: What in particular do you propose to use
4 on cross? Was there a conviction?
5 MR. GARBUS: Do you have a record of a conviction?
6 MR. GOLD: I think there was a plea, wasn't there?
7 MR. GARBUS: As I understand it, he was treated as a
8 youthful offender and it was an ACD, it was an adjournment in
9 contemplation of dismissal and there is no criminal record.
10 THE COURT: Is there a conviction?
11 MR. GOLD: I think there was a plea, your Honor, and
12 I would have to check the transcript. If you give me two
13 minutes. But it was for breaking into a company computer
14 system, and I think it has relevance.
15 THE COURT: How long ago is it?
16 MR. GOLD: I don't remember.
17 MR. GARBUS: It was back -- he was I think about in
18 his early 20s.
19 THE COURT: How old is he now?
20 MR. GARBUS: I think he is in his mid 40s. I don't
21 remember exactly. I would have to ask him.
22 THE COURT: He is obviously going to be on the stand
23 more than the next hour, right?
24 MR. GARBUS: I think so.
25 THE COURT: Well, you guys figure out what the facts
777
1 are tonight. Rule 609 governs this as to the conviction, and
2 if memory serves, Rule 608 deals with the prior bad act issue.
3 This is not terra incognita.
4 MR. GARBUS: Can I hear the last question, please.
5 (Record read)
6 A. I will just take it from the top. I graduated from the
7 State University of New York at Stonybrook 1982 with a
8 Bachelors of Arts in English. I have worked in various
9 newspapers, including campus newspapers, community newspapers.
10 I have written numerous opinion pieces and other such articles
11 for newspapers such as Newsday, and since 1984, I have been
12 publishing 2600 Magazine. I have worked in radio since going
13 to the State University of Stonybrook since 1977, and I
14 currently work for WBAI in New York.
15 Q. How old are you?
16 A. I'm 40.
17 Q. Did you work for the Stonybrook Press?
18 A. Yes, that was one of the newspapers I worked for, one of
19 the campus newspapers.
20 Q. And have you ever been a broadcast journalist on WUSB?
21 A. Yes, WUSB is the university station at the State
22 University at Stonybrook.
23 Q. And how long have you been publishing the Hacker
24 Quarterly?
25 A. Since 1984, which I guess is 16 years.
778
1 Q. And do you know approximately the circulation of that?
2 A. Presently, including newsstands and subscribers together,
3 I would say probably about 60 to 65,000.
4 Q. And do you have any sense of who your readers are?
5 A. From meeting them at various gatherings, 2600 meetings,
6 conferences, I would say they are all kinds of different
7 people from 12 year olds to CIA agents, to foreign
8 intelligence to corporate executives, all kinds of people seem
9 to be fascinated with this.
10 Q. Now, did you serve as the music director for WUSB?
11 A. Yes, in 1980 to '81 school year, I was music director.
12 The year after that, I was program director of the radio
13 station.
14 Q. And in 1984, did you organize a Convention of alternative
15 presidential candidates in Stonybrook?
16 A. That's correct. We invited everybody who had registered
17 to run for president to gather in one place at the same time.
18 There were something like 219 candidates and about two dozen
19 of them accepted.
20 Q. Did you ever write a play?
21 A. I have written -- among the things that were publicly, no.
22 I have written a lot of things that haven't been released.
23 But the one major thing that was publicly released was a radio
24 play called Shadow of Long Island.
25 Q. What did it deal with?
779
1 A. It was kind of an H.G. Wells type of a thing where in
2 realtime, people dealt with the effects of an accident at a
3 nuclear power plant and since at the time, I believe it was
4 1985, that was a big controversy on Long Island, it was
5 something that got a lot of attention, a lot of interest.
6 Q. And with respect to the Hacker Quarterly, why did you
7 create it?
8 A. Well, I saw the need for information to be spread beyond
9 computer nerds, people who are just simply calling into
10 bulletin boards. Back in 1984, which is when the magazine
11 actually started, in order to take part in this kind of a
12 thing, you would have to call what is known as a BBS system,
13 and they could only handle one caller at a time which means
14 many times you would spend the better part of a day just
15 waiting for a busy signal to go away. You would have to keep
16 trying. There was no repeat dialing function. You would have
17 to keep dialing over and over again, and the speed was very
18 slow, something like 300 baud.
19 So I thought it would be nice, because these people
20 had so much to say, if there is way a forum for them to say it
21 and actually read it on paper, and since nobody else was doing
22 that, I figured why not.
23 Q. And has the Hacker Quarterly been quoted or featured in
24 any other newspapers?
25 A. Yes, we have been quoted quite a bit.
780
1 Q. Where?
2 A. I couldn't even begin to tell you all the places. Every
3 major newspaper and magazine I could think of, Time, Newsweek,
4 the New York Times, Wall Street Journal. I'm sure we are in
5 quite a few this week. We are always being quoted for our
6 opinion on various things that are happening in the world of
7 technology, whether it be things like the Melissa Virus, a
8 case like this, a conference like we've just had. There is
9 always something going on in the world of technology, and our
10 view seems to be something that's of interest.
11 Q. You say a conference you just had. Can you tell me what
12 that was?
13 A. We just had a conference this past weekend uptown at the
14 Hotel Pennsylvania where we had people gathering from all over
15 the planet to talk about the newest technological issues an
16 just basically to trade information, learn, and I think it was
17 a big success, we had something like 2300 people show up.
18 Q. This was run which by the hackers? This was sponsored by
19 2600 --
20 A. Yes.
21 Q. Have you also been on a major broadcast and cable network?
22 A. Yes.
23 Q. Do you remember which ones?
24 A. All of them I think. Basically I was on Good Morning
25 America, Nightline, CBS Morning News, Charlie Rose. I can
781
1 keep going on with lists, but I think most of them I seem to
2 have been on at one point or another.
3 Q. Do you recall what the Washington Post, back in February
4 of 2000, said about you after were you sued in this case?
5 A. I think they referred to us as, I might be confusing it
6 with another story, but I think they referred to us as the
7 hacker's bible or something, along those lines.
8 THE COURT: I hope we are not going to get into an
9 assortment of what various people have said about the
10 defendant, since he has been sued in this case.
11 MR. GARBUS: We are past it. I don't think so.
12 Q. And how long have you been at BAI?
13 A. I first walked into WBAI in 1988 and I haven't left since.
14 Q. When you were on these various television shows, Charlie
15 Rose and cable, what was the subject of your discussion?
16 A. Like with the newspaper articles, different things
17 depending on what was happening in the news that particular
18 time, such as the Michelangelo Virus which was in the early
19 90s, or some panic over some possible security hole in a
20 computer system, or even something like an area code change
21 can, for some reason -- people come to us for explanations on
22 things like that. So depending on what was in the news at
23 that time, we get calls virtually every day from media people
24 wanting us to comment on one thing or another, and depending
25 on my schedule, I try to answer as best I can.
782
1 Q. Is it fair to say that you are called on those shows as an
2 expert in the computer area and the technology areas?
3 A. That's what they call me. I don't consider myself a
4 computer expert. I consider myself a journalist. But they --
5 I've never taken a computer course or anything like that. I
6 majored in English, so I answer the questions as best I can,
7 but there are people with infinite amounts of knowledge in the
8 technical field beyond what I could imagine.
9 Q. When you posted DeCSS, did you know whether it would work
10 or not?
11 A. No, I had no idea if it would work. The reason we posted
12 the source code and the accompanying story is because it was
13 already a story. I believe it had already been out a month at
14 that point, and we saw this and the reaction to it, people
15 having their websites shut down, their pro Internet service
16 providers being threatened, their schools being threatened, we
17 saw that as a fascinating story, and we printed that story, we
18 printed what the story was about, which was our source, our
19 primary source, here is what they are talking about, here is
20 the source code.
21 Honestly, if someone had given me 20 random numbers
22 and said this is the program, we would have printed the 20
23 random numbers, if that's what everybody was talking about. I
24 have no knowledge if the program worked or not, but that
25 wasn't the story. The story was the reaction it was causing.
783
1 Q. And as of today, do you know whether DeCSS works?
2 A. I have heard conflicting things, even in this courtroom.
3 I don't know anybody myself who has gotten it to work, and I
4 don't know very many people who have even tried to get it to
5 work. I believe it can work if you spend a lot of time on it,
6 but I'm sure there are much easier ways to accomplish bad
7 things, if that's what you're trying to do.
8 MR. GOLD: Your Honor, I move to strike the answer.
9 It was full of speculation and he is not an expert witness as
10 he admits.
11 THE COURT: Strike everything after "I've heard
12 conflicting things."
13 Q. Now, have you ever sold a copy of a DVD disk that has been
14 de-encrypted through DeCSS?
15 A. No.
16 Q. Have you ever sent out a movie on the Internet as a result
17 of your having used DeCSS?
18 A. No.
19 Q. Now, you talked about working on WBAI. How long have you
20 been there?
21 A. Since 1988.
22 Q. And is the name of that program "Off the Hook?"
23 A. I started doing the program later that year in 1988 as a
24 special broadcast. It became a series in 1991, I believe. I
25 have also worked in the news department and as an engineer
784
1 over there.
2 Q. What does that program deal with?
3 A. It pretty much deals with similar things that the magazine
4 deals with, new developments in technology, security holes,
5 Orwellian aspects of today's society, people's privacy being
6 abused from all different angles. And what I like to do with
7 the program is reach people who have absolutely no background
8 in technology as opposed to the magazine. When I go on the
9 radio, anybody could be listening, and I find that many people
10 find it very fascinating to be hearing our perspective, and we
11 believe in explaining things to whoever will listen. So
12 people call into the radio show, we explain exactly what we're
13 talking about, sometimes they feel moved to come to one of our
14 meetings, which are once a month, and we make friends that
15 way. We explain how technology works from our perspective.
16 THE COURT: When you say you worked at WBAI as an
17 engineer, did you work there as a broadcast engineer who ran a
18 panel or some sort or some other kind of engineer?
19 THE WITNESS: A broadcast engineer, someone who
20 actually controls the board in the control room.
21 THE COURT: Thank you. Go ahead, Mr. Garbus.
22 Q. Now, have you participated in any panel discussions on
23 computers and the Internet-related issues?
24 A. Yes, numerous ones over the years.
25 Q. Tell me some of them.
785
1 A. There are the annual computer freedom and privacy
2 conferences. There was one I believe called Open Source
3 Solutions in Washington D.C. There was -- I don't recall the
4 names of the ones overseas that I attended. I know there was
5 one in Amsterdam and a couple of them in London as well.
6 Q. Have you also been on NPR, All Things Considered and World
7 News Now?
8 A. Yes, I have.
9 Q. Have you ever lectured at any university?
10 A. I have been a guest, a guest lecturer for various classes
11 at New York University, Seton Hall, the State University of
12 New York at Stonybrook.
13 Q. Have you ever testified before any committee of the House
14 of Representatives?
15 A. Yes, I testified before the house committee on technology
16 and finance, I believe, and that was in the early to mid 90s.
17 I don't have an exact date.
18 Q. Other than the conference you just mentioned before, have
19 you organized any other conferences?
20 A. Yes, that was our third conference. The first one was in
21 1994. The second one was in 1997.
22 Q. And can you tell me the title of the first one?
23 A. The title of the first one was called HOPE. That stood
24 for Hackers On Planet Earth, and we had -- it was the first
25 time ever that this country actually a conference like that
786
1 had been organized. I had drawn inspiration from some of the
2 conferences I had seen in Europe where people gathered
3 together and exchanged ideas in a free and open manner and
4 learned from each other and were guided in positive ways, at
5 least in my view, and in 1994, I thought it was a great
6 success as far as that went, and then it takes time to
7 organize these thing so we only do it every three years.
8 Q. And what was the second one?
9 A. The second one was a sequel to HOPE and we called it
10 Beyond HOPE and basically it was a continuation, the same kind
11 of a thing. We like to stress international cooperation. We
12 have people come over from different parts of the world and
13 tell us what is your phone system like, what do you dial to
14 make things work and connect to various things, how does your
15 billing system work, do they -- in what ways does the phone
16 company do evil things to you, you know, various things like
17 that as far as technology and privacy invasion and things that
18 we find ordinary people are concerned with increasingly today.
19 So, we just basically get these people together, trade
20 information, invite the public.
21 Q. And the sponsors of both of these conferences and the
22 third conference was 2600?
23 A. Yes, that's right.
24 Q. Where did you get 2600 from?
25 A. 2600 was a frequency that was used a long time ago back in
787
1 the 1960s and basically anyone who would transmit a 2600 hertz
2 tone over a long distance trunk connection would find
3 themselves put into what is known as operator mode where they
4 could then explore the entire phone system, and basically
5 route themselves to operators, to all kinds of mysterious
6 things that were out there. It doesn't work anymore, but it's
7 kind of a mystical thing from the past that people still talk
8 about.
9 Q. And your pen name, Emanuel Goldstein, where does that come
10 from?
11 A. Emanuel Goldstein was a character in 1984, the book by
12 George Orwell. He was supposedly the leader of the
13 underground, and it was kind of a cool name to take back in
14 the mid 80s, although I should point out in the end of the
15 book, it turned out he is actually a figment of the government
16 and he is entrapping everybody. That's another story.
17 Q. Did you take the name before you finished the book or
18 after you finished the book?
19 A. Actually I read the book about four times when I took the
20 name.
21 Q. Now, tell me some of the people who have spoken at the
22 conferences that you have organized?
23 A. We have had people like ex-CIA Agent Robert Steele,
24 cryptologist Bruce Snyder. At the most recent conference, we
25 had Jon Johansen who is here from Norway. We have had many,
788
1 many people. My mind is kind of drawing a blank when I try to
2 call them all up, but we have had journalists, people from
3 major television networks talk about how they cover stories
4 and how they might get misperceptions about what hackers are
5 all about.
6 And we try and bring these people together, whether
7 they are representatives of the government, people from
8 different countries, 12-year-old kids who are just learning
9 something, we try to bring them all together in the same room
10 so they can share information and bring something out of that,
11 and we find that many relationships are forged from this that
12 last for very long time.
13 Q. You mentioned Bruce Snyder. Can you tell me who he is?
14 A. He is an encryption expert. He has written several books.
15 Unfortunately he wasn't at the most recent conference. He was
16 here in 1997. And I understand his knowledge could fill a
17 room as far as what encryption is all about.
18 Q. Have you seen his affidavit in this case?
19 THE COURT: At what level of compression?
20 THE WITNESS: Any level I think.
21 A. He is one of those people that I'm in awe of, and many of
22 the people who come to the conferences are like gods to me.
23 They are people that just have so much knowledge and have done
24 so much, and I'm just -- I'm honored that they come to my
25 conference and share their information.
789
1 THE COURT: Mr. Garbus, I think we would save time if
2 we didn't just have testimonials to one's witnesses. I can
3 imagine the rebuttal case.
4 Q. Now, have you also written freelance pieces for magazines?
5 A. Yes, I have written pieces occasionally for local
6 newspapers, the New York Times, Newsday, and a couple of
7 foreign magazines as well. I wrote something for a Japanese
8 magazine a few years ago, something for magazines in England
9 and Holland, I believe as well.
10 Q. Now, do you in your magazine tell your readers about the
11 acts that -- the Hackers Act and the consequences of those
12 acts?
13 A. I'm sorry. I don't understand the question.
14 Q. In other words, in the Hacker Quarterly, do you tell your
15 readers the kinds of things they should and shouldn't do?
16 A. Well, we try not to be too moralistic. What we mostly do
17 is print information. We have an editorial at the beginning
18 of every issue where we expound on various thoughts, which is
19 something that I write, and also in the replies to letters in
20 the magazine, which is also printed every issue. If we give
21 any kind of moral guidance or judgment, that's where it is,
22 but in the actual articles themselves, it is more or less a
23 compilation of material that is already out there, and we kind
24 of present it to the people to show them this is what people
25 are saying, this is the information that's out there, this is
790
1 how systems supposedly work or don't work. And people write
2 in with corrections, they write in with additions, and we have
3 a dialog going based on that.
4 Q. Now does the name Mark Trapenhagen mean anything to you?
5 A. Not offhand.
6 Q. When did you start to put up the website?
7 A. Our website I believe first went up in 1995.
8 Q. Tell me about that. Why did you put it up?
9 A. Well, back in 1995, websites were just pretty much
10 starting to become popular, and we figured, you know, we are a
11 computer magazine, we really should be doing this. We had
12 just had our first conference the year before, so we had
13 enough money lying around so we could buy a machine and put it
14 up on the net. It was an extremely slow connection, but we
15 realized quickly that a lot of people came to our site to see
16 what we had to say. So we did our best to make it
17 interesting.
18 Q. Now, can you tell me at the present time how many hits
19 that site receives, how many unique visits?
20 A. Well, I can only estimate because we haven't kept logs
21 since last summer on that kind of a thing. We have what is
22 known as a counter on the front page and what we would do is
23 run statistics on it once a week, and that would take such
24 massive amount of memory that it would wind up crashing the
25 machine every Sunday night at midnight.
791
1 So we figured it wasn't that important to know
2 exactly how many people were hitting us. We had a general
3 sense that we had something on the order of 10,000 unique hits
4 a day. That means 10,000 different visitors coming to our
5 site, maybe seeing a few different pages but only being
6 counted once.
7 Q. Now at some point in time, there was an order entered by
8 this Court that you take down the DeCSS code. Do you recall
9 that?
10 A. Yes, I do.
11 Q. Prior to that time, did you print source and object code?
12 A. Of the DeCSS?
13 Q. Yes.
14 A. Yes.
15 Q. And when the Court ordered you to take it down, did you
16 take it down?
17 A. Yes, we did.
18 Q. And after you took it down, did you continue to have links
19 to other site?
20 A. Yes, the links remained up.
21 Q. And did you increase -- were the number of links increased
22 after the court order?
23 A. We had a large number of people submit new links and we
24 tried to keep up with it, but after a while it just became too
25 much and we just kind of left it in whatever state it was in
792
1 at that time.
2 Q. Whether you say submit new links, what do you mean by
3 that?
4 A. Well, we had a facility for people to tell us if they knew
5 other sites or if they were running a site and they wanted to
6 be included on the list, we had that on our main page, and
7 people were submitting that from the very beginning, ever
8 since it first went on line I think back in November or
9 December, and after we took the material off of our website,
10 it increased 20-fold at least and we just didn't have the
11 resources to continuously update things like that, and we felt
12 pretty much if people wanted to find DeCSS, they could easily
13 do it. It wasn't an issue anymore.
14 Q. Now, by the way, do you own some domain names?
15 A. I own quite a few domain names, yes.
16 Q. What are some of those names?
17 A. Well, gee, all the 2600 possibilities, .net, .org, .com.
18 I also own the WUSB site. I maintain their web page. And
19 there are also some rather humorous ones with some nasty
20 language in it, and I should explain why that is. NSI is the
21 registrar, Network Solutions Incorporated and up until last
22 summer, they were the only registrar in this country. You had
23 to submit your domain names through them. They had a policy
24 on language. They wouldn't allow certain words to be used as
25 domain names and some people objected to that, they thought it
793
1 was a form of censorship, but what was interesting was late
2 last summer, all of a sudden, there were new registrars. It
3 was opened up to all different companies, and many of those
4 company allowed you to register whatever name you wanted to.
5 So there was kind of a race for about two days, people
6 registering every possible four-letter word they could think
7 of, and I admit I was part of that race, because I basically
8 thought it was kind of interesting. But we never tied it into
9 the magazine in any way. That was more a personal hobby for
10 me.
11 Q. Can you give us some of the domain names, because they
12 will ask you on cross, we may as well get rid of it now. Go
13 ahead.
14 A. Well, gee, many of these I haven't even looked at in
15 several months, but I know fuckingmorons.com is one of them.
16 We put some -- before the names of various famous
17 corporations, I think Microsoft might have been one of them,
18 but I'm not sure, somebody beat us to that one, there were a
19 few others. I really have to look at the list because I don't
20 want to misspeak and say somebody else's name is mine, but
21 there are quite a few. There were maybe a dozen or so.
22 Q. Now, let me show you, if I can, documents marked as
23 Plaintiffs' Exhibits 113, 114, 115, 116, this looks like 1.11,
24 1.1, 1.2, 1.4, 1.6, 1.8, 1.7, 1.5, 1.3 and 1.12. I don't
25 think that there are other copies around. Are there? I think
794
1 these are the only copies.
2 And I would ask you to just briefly go through the
3 magazines, look at the green tags and tell me what those
4 relate to.
5 THE COURT: Are you offering them in evidence?
6 MR. GARBUS: I would, your Honor, yes.
7 MR. GOLD: I have no objection.
8 THE COURT: They are not offered for the truth, I
9 take it.
10 MR. GARBUS: They are offered -- right.
11 THE COURT: They are offered as examples of the
12 magazine.
13 MR. GARBUS: Yes.
14 THE COURT: They are received on that basis.
15 (Plaintiffs' Exhibits 113, 114, 115, 116, 1.11, 1.1,
16 1.2, 1.4, 1.6, 1.8, 1.7, 1.5, 1.3 and 1.12 received in
17 evidence)
18 A. Do you want me to go through all of these?
19 Q. Just briefly go through where the green stamps are. Those
20 are the places where you discuss things at your deposition.
21 By the way, are real names or true names used in the magazine?
22 A. That's entirely up to the author. If the author want to
23 submit their real name, we will print their real name. If
24 they want to submit an alias of some sort, we will print that.
25 It's not our decision to make. It's entirely up to them.
795
1 Q. Whether they submit letters to you and articles, is that
2 the same thing?
3 A. Yes.
4 Q. Do you in any way check out the accuracy of the
5 information?
6 A. Only to the point of if they are talking about a
7 particular operating system, does that operating system exist,
8 is the theory that they are expounding somewhat sound. It's
9 impossible with our staff to test out every single theory we
10 get, which is why a lot of what is printed is theoretical in
11 nature. It's something that this is how I believe the system
12 works and we present it. Invariably, we get people writing
13 back saying, no, this is really how the system works and then
14 we have a dialog going on different theories as to operating
15 systems, computer networks, telephone systems, whatnot.
16 Q. When you say -- who is the 2600 staff -- by the way, you
17 are located out in Long Island?
18 A. Yes.
19 Q. Who is the staff out there?
20 A. Well, we actually -- I am the editor and publisher.
21 THE COURT: Mr. Corley, can you back away from the
22 mike a couple inches. Thank you.
23 A. I am the editor and publisher. I have an office manager,
24 and I have someone who works on technical things on the system
25 occasionally.
796
1 Q. Is it fair to say this is basically a one-man operation?
2 A. I wouldn't say it's entirely a one-man operation, but me
3 being in the city actually has made it slow down to a trickle,
4 so I'm definitely the person that does things out there, and
5 everything else kind of is part of that in one degree or
6 another.
7 Q. And are you one of the people who write the materials that
8 goes up on the website?
9 A. The website, yes. I write some of the material that goes
10 up on there.
11 Q. Tell us just now by looking at the green tabs some of the
12 stories that are in the Hacker Quarterly?
13 A. There is a story called Cellular Interception Techniques
14 which basically goes into how cellular telephones work, how
15 cellular calls can be intercepted. It goes into the
16 Electronic Communications Privacy Act which makes such
17 interception illegal. It goes into how anyone with a
18 television set from the 1970s can use that television set to
19 intercept cellular phone calls. It's not exactly an advocacy
20 piece in any way. It's very technical in nature, and I think
21 you come out of this with an understanding of the law and the
22 understanding of the technology and an understanding of the
23 risk if you choose to use this particular type of cellular
24 phone. This is from 1995. It's not used very frequently
25 anymore. I like to think maybe this had something to do with
797
1 it, because the way cellular phone calls had been made in the
2 past was extremely insecure, and there wasn't enough being
3 done to protect people's privacy.
4 Q. And by the way, with respect to companies or utilities
5 that you have written about, have officers from those
6 companies ever contacted you concerning the materials that
7 have been written?
8 A. Well, I would have to say I've gotten more personal
9 contact such as at conferences and meetings with people who
10 say they love our magazine and they read it to find out all
11 the latest possible problems with their systems. Occasionally
12 we get people that threaten us and say you can't print this,
13 but upon challenging them, they have always backed down.
14 Q. And have any corporate executives ever told you that they
15 read your magazine for the first time and found out about
16 flaws in their product?
17 A. Yes, but also a lot of network engineers and they are the
18 ones who actually make the changes.
19 Q. Go ahead, continue.
20 A. I'm not sure if this is the article you wanted me to read.
21 It's entitled Imaginary Friends, and I'm not really sure -- is
22 this from 1996?
23 THE COURT: It's very high tech.
24 THE WITNESS: Yeah.
25 A. I think this is going into how to tell the phone company a
798
1 different name to list on your account. Basically this is for
2 people who are paranoid about being on any kind of a list, and
3 this is a way that you can make up a fake name, not for
4 purposes of fraud but for purposes of privacy, so that when
5 people call you on the phone, they ask for the fake name and
6 you know because they do that that they are looking at a list
7 of names and they are not really trying to call you. So this
8 article goes into how TRW compiles information, what the phone
9 company does when they open up an account for you, how to have
10 an unlisted phone number be really unlisted so your name isn't
11 on any list anywhere.
12 Q. Did you write either of these two articles?
13 A. No, I didn't. If I wrote them, I would remember them, but
14 I just remember them vaguely.
15 Q. Is it fair to say that the magazine is basically an
16 anthology of articles that you received?
17 A. Yes, I was looking for that word before. Anthology is
18 probably the best way. Probably the Readers Digest of the
19 hacker's world. We don't say that everything that is in these
20 articles is 100 percent correct. We have guidelines for the
21 articles, such as we don't print articles that espouse
22 destruction or immature acts or just various bad things.
23 MR. GOLD: Your Honor, I am having a lot of trouble
24 finding out what question the witness is answering in most of
25 these. There are long speeches going on. I was wondering if
799
1 the Court would request that the witness answer the question
2 that was asked.
3 MR. GARBUS: Let me see if we can help.
4 Q. Have you described the article that -- are we still on the
5 same article?
6 A. I had put that one down, but can I go back to it more in a
7 moment.
8 Q. Let's go to the next article. Tell me what the next
9 article deals with?
10 A. Snooping Via MS Mail. This is from 1996 as well. I
11 believe what this does, this describes a product known as MS
12 Mail which various companies use, and how people's mail can be
13 intercepted on that and spied upon. And this is an example of
14 an article that can be used in two ways. We print the
15 information. It can be used in a good way; that is, users can
16 learn about privacy, they can figure out ways to prevent them
17 from happening. Or it can be used in a bad way, someone can
18 take this an actually start spying on people.
19 We don't have a big moral discussion about what is
20 going to happen with the information we print, because the
21 information is already out there. As I said, we are more or
22 less an anthology of what is being distributed and we like to
23 think that by printing this information, we wake people up.
24 Q. Let's go to the next article.
25 A. This is similar to one before, Tips on Generating Fake ID.
800
1 This more or less goes a little bit outside the boundaries of
2 what we usually talk about because it's not really related to
3 computers or telephones, but it does have relevance in that it
4 talks about how people fool the system, how people get around
5 restrictions, and the article is written in kind of an
6 interesting tone.
7 It starts off, so you want to get drunk this weekend
8 or buy some cigarettes, etc., like that. This kind of is on
9 the boundary of what we print, the guidelines I mentioned. I
10 saw this as rather humorous, as a person being somewhat
11 sarcastic because, yeah, the only thing can you possibly do
12 with fake ID is buy cigarettes and get drunk. But I also saw
13 a lot of really good technical information here, websites that
14 are referenced, and if you are looking for somebody who is
15 doing this, this article will tell you what they're up to and
16 how it works. And I think it's something that is widespread
17 enough that you can't just ignore it and pretend it's not out
18 there. So that's the reason we printed that.
19 Q. Go to the next one.
20 A. This is more recent, so I should remember this one. Okay.
21 This is an editorial entitled, The Next Chapter from our
22 Spring 2000 issue. This basically deals a lot with the MPAA
23 case. I'm not exactly sure if you want me to read the entire
24 thing. It's rather large.
25 Q. Just tell me what it's about.
801
1 A. It's an editorial that I wrote and it kind of brings
2 together various issues that were going on at the time,
3 including the case of Kevin Mitnick who was a computer hacker
4 who was in prison for five years. That has drawn to a close
5 at almost the exact same time as this case has started.
6 We also touch upon various other laws that are being
7 passed that we see as being a bad thing, such as California's
8 three strikes laws which allows people who have committed
9 three crimes, even if they are not violent crimes, to be
10 imprisoned for life. So the piece is kind of more of an
11 editorial which covers it all and ties it together in a nice,
12 neat little package.
13 Q. Turn to the cover of the magazine.
14 A. Oh, yes, this is our kind of spoof cover of the MPAA
15 screen.
16 Q. Do you sell T-shirts?
17 A. Yes, we have T-shirts that are similar to this. In fact,
18 we used them to raise money for the defense, and we don't mean
19 any offense by it, it's just kind of a political cartoon that
20 we came up with, and I think most people see the humor in it.
21 Q. Can we go to the next one.
22 A. I think there is another one in the same issue.
23 THE COURT: How many more, Mr. Garbus?
24 MR. GARBUS: Do you want Mr. Goldstein to hand it to
25 the Court so the Court can see it after he has been describing
802
1 it?
2 THE COURT: When he is all done, the clerk will take
3 them.
4 MR. GARBUS: Go ahead.
5 THE COURT: How many more, Mr. Garbus?
6 MR. GARBUS: About half a dozen. These are the ones
7 that he was cross-examined on in the deposition, so we are
8 going to deal with it now.
9 A. I'm not sure if there is a green tag here, but these are
10 two articles. It's either AT&T's Gaping Hole or a Cellular
11 Network Detailed. I'm going to guess it's Gaping Hole, where
12 basically someone outlines a glitch in AT&T wireless service
13 that allows a user to receive free phone service. I remember
14 this particular article was something that the article -- that
15 the person had notified AT&T about and nothing had happened,
16 and the result was they sent us this article with the details
17 of exactly how it worked. And I understand that it doesn't
18 work anymore, so I think that speaks for itself.
19 Q. By the way, if the Court orders you to take down the links
20 to other sites, would you do that?
21 A. Absolutely, if the Court orders it, yes.
22 Q. Were you in Court, by the way, when the Court said it
23 would consider linking at a different time? Did you read the
24 transcript?
25 A. I read the transcript. I don't believe I was in court
803
1 that day.
2 This article is called How Domains Are Stolen, and
3 this is of particular interest to anyone who operates a
4 website. It's possible for people to go and hijack your site.
5 In fact, it happened to us only two weeks ago where someone
6 took advantage of a security hole in Network Solutions and
7 took our domain name, 2600.com and registered it to a site
8 somewhere overseas, and that would have been a real pain to
9 deal with to get back if we hadn't caught it. This article
10 gives one method of how such things are possible, and I would
11 like to think that this article coming out will wake up the
12 people at NSI so that it doesn't happen anymore.
13 Q. By the way --
14 THE COURT: Excuse me, Mr. Garbus. You do
15 understand, do you not, that this is the time when the Court
16 is considering the linking issue, this trial?
17 MR. GARBUS: I understand that.
18 THE COURT: Okay. It wasn't clear from the way you
19 made your comment.
20 Q. Go ahead.
21 A. This is another article on cellular service, spoofing
22 cellular service. This is from 1996, before the onset of
23 digital cellular, so it was a much bigger issue then for the
24 electronic serial number to be grabbed literally as you were
25 driving down a highway by a cellular thief, I guess is the
804
1 best way to describe him, someone sitting on the side of a
2 road with a particular type of scanner who would simply grab
3 your numbers and just by grabbing your numbers, that would be
4 enough for them to become you and start making phone calls
5 under your phone number, and this is another gaping security
6 hole that we felt needed to be known, and I understand that
7 this kind of system is increasingly rare and is probably not
8 going to be around much longer at all.
9 Q. Are there other individuals who use the name 2600.com
10 other than you?
11 A. We are the only people who can use 2600.com. There are
12 other 2600 names in other countries. There is really no way
13 for us to register every single country name, nor would we
14 want to. And it is also possible for somebody to register a
15 machine as 2600. They could register 2600.Microsoft.com for
16 instance, so basically we are happy with having our website
17 2600.com and making sure that people know that's us.
18 Q. Are there other websites out there using a name or
19 something like that which people to your knowledge think are
20 associated with you?
21 A. Yeah, the only site associated with us are the sites we
22 run. The other types of association, it's more of an
23 emotional type of association where they may support the
24 magazine or agree with our basic philosophy and them might put
25 2600 in their name and that's something that really doesn't
805
1 concern us. We don't see that as a copyright issue or
2 something that's necessarily evil. The only time it would
3 concern us if they were doing something in our name that we
4 considered to be wrong.
5 Q. But you have no control over it?
6 A. We have no control over it.
7 Q. There are separate people using 2600?
8 A. Right, in that context, it would be an incredible waste of
9 time to try and control everybody who used that.
10 Q. Go ahead.
11 A. This article is entitled the Backyard Phreaker,
12 P-H-R-E-A-K-E-R.
13 And this goes into some detail on people who
14 literally climb telephone poles and hook into phone lines and
15 make phone calls. This happens quite a bit in unsecured
16 locations. It happens in New York City in the basements of
17 apartment buildings where the phone lines come into the
18 building and are left unsecured. What we find in many cases
19 is that unsuspecting people get these large phone bills and
20 the phone company says it was dialed from your phone number,
21 therefore, you had to have done it. We are showing here that
22 there are many ways people can make these phone calls on your
23 phone line without you ever knowing about it. And many
24 people, including a lot of the WBAI listeners, have used this
25 kind of information to battle the phone company and say, you
806
1 know, there are many other ways somebody could have used this
2 phone number to place this fraudulent call. And we also like
3 to think that this might encourage people to lock those boxes
4 so that everybody in the world can't get access to them.
5 Q. Continue.
6 A. This is actually --
7 THE COURT: Mr. Garbus, I think we have heard enough.
8 You have the magazines in evidence. I can look at the
9 magazines. I don't need anymore summaries.
10 MR. GARBUS: I have no more questions of this
11 witness.
12 THE COURT: Okay. Mr. Gold?
13 Just so we are clear, Mr. Garbus, if you had other
14 questions, you are welcome to continue. I just don't need
15 more summaries of magazine articles. Do you understand?
16 MR. GARBUS: Yes.
17 THE COURT: Mr. Gold?
18 MR. GOLD: May we have the exhibits, the magazines?
19 THE COURT: Yes.
20 MR. GOLD: May I approach the witness for that
21 purpose?
22 THE COURT: Yes.
23 MR. GOLD: Thank you, sir.
24 CROSS-EXAMINATION
25 BY MR. GOLD:
807
1 Q. Good afternoon, Mr. Goldstein.
2 A. Good afternoon.
3 Q. Nice to see you again. Mr. Goldstein, in 1999, did your
4 2600.com site mirror DeCSS?
5 A. That's correct.
6 Q. When did you start?
7 A. I believe we started in late November. I don't have the
8 precise date.
9 Q. The posting that you've just referred to was done by who?
10 A. Who specifically posted the -- it was either myself or my
11 webmaster.
12 Q. And was this a webmaster you preapproved?
13 A. Yes, I take responsibility for everything that's on the
14 site.
15 Q. Is it true that prior to the preliminary injunction, any
16 member of the general public was able to download DeCSS
17 directly from the 2600.com website?
18 A. Any member who had a computer and a net connection could
19 do that, yes.
20 Q. Is it true that 2600.com is currently linking to other
21 sites that post DeCSS?
22 A. Yes, we have been linking from the beginning.
23 THE COURT: Let me ask this, I think I know the
24 answer to this, but I think it ought to be in the record.
25 What does mirror mean as you understood it when you
808
1 answered Mr. Gold's question?
2 THE WITNESS: Mirror is basically a link to another
3 site. Actually, mirror is a duplicate of your site, so it's
4 not entirely correct. I think Mr. Gold is referring to links.
5 A mirror is, say, our site goes down, you go to a site B and
6 it's the exact same thing, so in that particular case, it's
7 not the same. I believe you're referring to links.
8 THE COURT: But he asked you right at the beginning
9 of his examination whether in 1999 your site was mirroring
10 DeCSS and you said it was. What did you mean by that?
11 THE WITNESS: That refers to the specific program
12 DeCSS, so that, yes, that program was mirrored on our site.
13 The site itself, we were not mirroring the entire other site,
14 just the program.
15 THE COURT: Yeah, but I asked you what mirroring
16 means.
17 THE WITNESS: Mirroring means duplicating material
18 that's on another website, whether it be one file or an entire
19 site.
20 THE COURT: Thank you.
21 Q. In 1999, on the 2600.com site, did you encourage people
22 who were interested in supporting you to mirror DeCSS?
23 A. We gave people various constructive ways of expressing
24 themselves and that was one of them, yes.
25 Q. And did you continue to do that in 2000?
809
1 A. Yes, it's still up to this day.
2 Q. Is it true that with the links you have provided and you
3 do provide on the 2600.com site, someone, anyone, can go to
4 the 2600 site, click once on a mouse, which takes you directly
5 to another site that is posting DeCSS?
6 A. Yes, they could do that. They could do it in many other
7 ways as well.
8 Q. In all the time that you were posting and all the time
9 that you have been linking, did you know that DeCSS is
10 designed to circumvent the encryption technology that protects
11 the digital content stored on a DVD?
12 A. I knew that it did one thing and that it was --
13 MR. GARBUS: I object.
14 THE COURT: Ground?
15 MR. GARBUS: Use of the word "circumvent."
16 THE COURT: I take it in the colloquial rather than
17 the legal sense.
18 A. We knew that DeCSS basically got around CSS, got around
19 the encryption that was not holding up to the stress.
20 Q. Is it true, Mr. Goldstein, that DeCSS exists to decrypt
21 CSS?
22 A. That's what it was written to do, yes.
23 Q. Is it true that in a write-up or article that appeared on
24 the 2600.com site, DeCSS was described as a free DVD decoder
25 that allows people to copy DVDs?
810
1 A. Yes, that was on our site, and I have since said that part
2 of that statement is inaccurate, that it was not written
3 solely to copy DVDs. It was written to decrypt CSS. I wasn't
4 aware of the difference myself. I didn't write that piece at
5 the time that it came out. I believed that was completely
6 accurate, but it turns out that it's a bit more complicated
7 than I had at first thought. It's not simply about copying.
8 It's about access control.
9 Q. You recall that you made that statement in your
10 deposition, sir?
11 A. I'm sorry?
12 Q. You recall, sir, that you made that statement in your
13 deposition?
14 A. Yes, I believe I clarified that.
15 Q. And when you say you have just gotten some other evidence,
16 when did you get that?
17 MR. GARBUS: I object if we are going to the
18 deposition. If he wants to read in the question and the
19 answer, he can do that.
20 THE COURT: I will sustain the objection as to form,
21 because I think the question is muddy. But let's see if we
22 get another question.
23 Q. You indicated that you got some new information since the
24 time of your deposition about your last answer, the one that
25 you --
811
1 A. No, that's not what I said.
2 MR. GARBUS: I object.
3 Q. Could you tell me what was you said?
4 THE COURT: The objection is overruled. He said he
5 thought the statement was accurate when made it and now he
6 thinks it's inaccurate.
7 MR. GARBUS: No, no, I think there are two different
8 time frames we are talking about.
9 THE COURT: Obviously. The deposition and now.
10 MR. GARBUS: No, no. From the writing of the
11 article, the deposition and now are three different time
12 frames.
13 THE COURT: We are going to break for the day at this
14 point anyway. I will see you all at 9 o'clock tomorrow
15 morning.
16 MR. HERNSTADT: Your Honor, could we address a
17 scheduling matter?
18 THE COURT: Sure. Address it.
19 MR. HERNSTADT: May we approach?
20 THE COURT: No.
21 MR. HERNSTADT: Fair enough. Tomorrow, your Honor,
22 we have one witness. I know your Honor said that we have to
23 keep the witnesses coming. Unfortunately, every other witness
24 we have, one of them has informed us that he couldn't come at
25 all, and all the other ones are out of state. We've got them
812
1 lined up for Tuesday and Wednesday. Depending on
2 cross-examination we expect, if you permit us to continue, we
3 expect to complete the witnesses by the end of Wednesday.
4 MR. GOLD: Your Honor, I was hoping that we would be
5 finished with this case before Wednesday, and I would like to
6 go to San Francisco Wednesday to try to present a part of the
7 argument being made in court that day on Napster.
8 THE COURT: You better get your people here.
9 MR. HERNSTADT: Your Honor, unfortunately it's not
10 possible.
11 THE COURT: I gave you a lot of advanced warning of
12 this. Do your best.
13 MR. GARBUS: Can I get some kind -- can Mr. Gold tell
14 me how long he expects the cross-examination to be?
15 THE COURT: Tell them what you think.
16 MR. GOLD: I can't imagine it would take as long as
17 as an hour and a half, and I think it will be shorter, but
18 something like that, best guess.
19 THE COURT: Okay. 9 o'clock.
20 MR. COOPER: Your Honor, what we have been told, so
21 that we are all clear, is that Mr. Peterson is available for
22 tomorrow. The other names we have been given are for Tuesday.
23 THE COURT: Who were the other people?
24 MR. GARBUS: Can I just say one thing?
25 MR. HERNSTADT: Your Honor, we have on Tuesday
813
1 Olegario Craig.
2 THE COURT: Say the name again.
3 MR. HERNSTADT: Olegario Craig. He is a systems
4 administrator at the University of Massachusetts. He can't
5 get off from his job until then. He is taking two days of
6 vacation to come down for it. Matthew Pavlovich who is the
7 director of the LiViD project lives in Dallas, Chris DiBona
8 who works with Linux and he is addressing the Linux operating
9 system, he is in Palo Alto. Peter Ramadge who is at
10 Princeton, but he is going to do a demonstration and we were
11 unable to get the monitors to do the demonstration until
12 Monday. Michael Einhorn who is in New Jersey. Dave Touretzky
13 is in Holland and Andrew Appel is in Hawaii.
14 MR. GOLD: I think none of our witnesses were from
15 this area and they all disturbed their plans to meet their
16 obligations to be in court.
17 MR. HERNSTADT: Your Honor, all of our witnesses are
18 volunteers, pro bono, coming at their own expense. We are
19 doing the best we can to get them here. We don't have -- we
20 don't control them. I apologize.
21 THE COURT: Look, Princeton, New Jersey, the last
22 time I looked was about an hour from here. Dallas is a three-
23 and-a-quarter-hour airplane ride. And there are planes this
24 evening. You do what you can. I'm not making any ruling now,
25 but I remind you that you were told there would be no gaps,
814
1 both sides were told, you were warned about it, you were told
2 that the plaintiff expected to rest on Thursday. They did
3 rest on Thursday. There have been no surprises.
4 Thank you, folks.
5 (Trial adjourned to July 21, 2000, at 9:00 a.m.)
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
815
1
2 INDEX OF EXAMINATION
3 Witness D X RD RX
4 JON JOHANSEN.............616 627 641
5 MIKHAIL REIDER...........646 676
6 EDWARD FELTEN............731 763
7 ERIC CORLEY..............774 806
8
9 PLAINTIFF EXHIBITS
10 Exhibit No. Received
11 113, 114, 115, 116
12 1.11, 1.1, 1.2, 1.4, 1.6, 1.8,
13 1.7, 1.5, 1.3 and 1.12 ................... 794
14
15 DEFENDANT EXHIBITS
16 Exhibit No. Received
17 BBP .........................................735
18 B to Exhibit BBS ............................755
19
20
21
22
23
24
25