ie8 fix
madison

Networking

Steven J. Vaughan-Nichols

Court rules Internet IP addresses are not people

By | May 4, 2011, 10:21am PDT

Summary: Mass lawsuits of copyright violators based solely on Internet Protocol addresses hits a legal roadblock.

“I am not an IP number, I am a free man!” OK, so that’s not exactly what actor Patrick McGoohan said in the classic TV show, The Prisoner, but Number 6 would have agreed that people aren’t numbers, and they certainly aren’t their Internet Protocol (IP) addresses. And, now a U.S. District Court has ruled that an IP address is not the same thing as a person’s identification.

This current decision came about because of a recent wave of copyright owners filing approximately 100,000 lawsuits against file sharers based on their IP addresses. Mind you, the organizations, such as the Motion Picture Association of America (MPAA) and the Recording Industry Association of America (RIAA) know that lawsuits don’t actually stop file piracy. In a recent statement to the Commerce Department these groups and their allies wrote, “The role of lawsuits in solving the online theft problem is clearly limited “For instance, bringing clear-cut claims against major commercial infringers is not by itself a solution in the long run. These cases take years to litigate and are an enormous resource drain.”

That hasn’t stopped them though from suing file-sharing services, such as Lime Wire for, I kid you not, $75 trillion in damages. This recent wave of lawsuits isn’t about taking a leading file-sharing service out behind the barn for a whipping. No, this recent lawsuit flood was designed to scare individual file sharers using services such as BitTorrent from sharing files.

One of their main tools, using IP addresses as unique personal identification tools, has just been ruled out in the case, VPR Internationale v. Does 1-1017. U.S. District Court Judge Harold Baker ruled that VPR, a Canadian adult film company, couldn’t subpoena ISPs for the personal information connected to their subscribers’ IP addresses. His logic was that just because an activity has been conducted from a specific IP-address doesn’t mean that the IP address’ owner has actually done anything wrong.

As Judge Baker wrote, “In this case, not a single one of the plaintiff’s 1.017 potential adversaries has been identified. … Moreover, VPR ignores the fact that IP subscribers are not necessarily copyright infringers.” He also said that even when the ISP does provide an IP address’ subscriber information that the subscriber may not be guilty of any crime.

In his decision, Baker cited the recent example of Federal agents arresting a couple and seizing their computer, iPhones, and iPads for child porn only to find out later that it was a neighbor who had used their Wi-Fi connection to download the illegal material. This kind of situation, where someone is arrested for what’s done without their knowledge or consent with their network connection, is not uncommon.

While Judge Baker’s decision will make it harder for copyright owners and their organizations to take a “guilty until proven innocent” approach, there’s another lesson here too. You need to secure your Wi-Fi connection. Sure, anyone piggy-backing on your Wi-Fi connection is probably just using it to check their e-mail, but there’s that one time in a thousand where they may be doing some illegal and it will be you, not them, explaining to a court that it wasn’t you who downloaded am illegal copy of The Hurt Locker.

Related Stories:

Mass US copyright lawsuits to reach 100,000 mark

Lime Wire’s day of reckoning is here

Take Wi-Fi Security Seriously

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Steven J. Vaughan-Nichols, aka sjvn, has been writing about technology and the business of technology since CP/M-80 was the cutting edge, PC operating system

Disclosure

Steven J. Vaughan-Nichols

Steven J. Vaughan-Nichols is a freelance writer. He does not own stocks or other investments in any technology company.

Biography

Steven J. Vaughan-Nichols

Steven J. Vaughan-Nichols, aka sjvn, has been writing about technology and the business of technology since CP/M-80 was the cutting edge, PC operating system; 300bps was a fast Internet connection; WordStar was the state of the art word processor; and we liked it.

His work has been published in everything from highly technical publications (IEEE Computer, ACM NetWorker, Byte) to business publications (eWEEK, InformationWeek, ZDNet) to popular technology (Computer Shopper, PC Magazine, PC World) to the mainstream press (Washington Post, San Francisco Chronicle, BusinessWeek).

75
Comments

Join the conversation!

Just In

Person named on the account should be responsible for its users
Patanjali 4th May
If YOUR vehicle is involved in an infringement for which the actual driver cannot be explicitly identified, YOU are fined, unless the driver owns up to it.

Same thing here. If you do not trust users of your data, don't let them, but you should not be able to avoid your obligations to ensure compliant use by all.
0 Votes
+ -
No you need to open your wifi internet connection, so that the mixture of data is from all sorts of local devices, phones, laptops and stuff. By opening our routers, while at the same time implementing firewalls between the wireless side of our network and our internal private net, we provide public service. Just like the light from our house lights spilling into the street to help people in the dark see where they are going. More stuff works more places when more routers are open. The challenge is to be less greedy, you can't save packets you never sent, and more sharing with the world. The part B of the challenge is for router makers to build firewalls between the public and private side of the firewall, or to run dual IP ranges with one secured and firewall-ed and the other open.
@jamesm@... This is already available. More and more wireless routers have a secured wireless channel and a "guest" channel.
0 Votes
+ -
Pretty cool, I don't mind sharing internet so we all have access everywhere but have been nervous about security. It has also been in the news that ISP's are beginning to cap data usage, so I might not be so generous in the future. happy
0 Votes
+ -
RE: Court rules Internet IP addresses are not people
boomchuck1 Updated - 4th May 2011
@jamesm@... sharing the light...

Actually having lights around your house that shine out into other people's areas is referred to as Light Trespass and is a problem, not a solution. Personally, I don't want your light shining into my bedroom. And the glare from unshielded lights actually makes walking at night less safe. Our eyes adjust to the brightness and then we can't see what may be in the shadows. http://www.darksky.org/

As for giving away Internet access, go pay for your own Internet. My wifi is not a charity.
0 Votes
+ -
@boomchuck1

Your problem is with improperly designed lighting. Well designed lighting will light an area without creating a glare problem. Veiling illuminence is also a potential problem. So is high level localized illumination. All of these are addressed in the proposed ordinance that the Dark Sky group advocates. As a lighting professional, and later, a City reviewer I have extensively dealt with this problem.

But, public spaces DO need to be lit. We pay for street lights for a reason. Moderate lighting from private property can help the public.

I think this is directly applicable to this discussion. I do not support the copying of commercial material, but I do think that copyright terms are insane. A reasonable term would be less than 20 years. After that, the work is paid for, as is the Artist (actually, a work has generally made 90% of what it will ever make after 5 years). If they want to keep getting paid, then keep working like the rest of us do.

Long copyright terms are just another corporate monopoly abusing the public (that's you and me). I ran an open wifi for years. It wasn't a problem until my son moved back in. Then, bandwidth dropped to a crawl. He insisted that it was a neighbor, but WEP didn't change the problem. We had to up the data plan to fix the problem. I guess the 24/7 online wargaming had an impact.
0 Votes
+ -
@jamesm@... I think you are right! BTW DD-WRT firmware loads can do virtual AP on the same wifi channel and have them isolated from your home net.
@jamesm@... Why would I want people using my bandwidth? I'd prefer to keep my bandwidth to myself instead of having someone else using what I pay money for.

I share my internet with my roommates, and that's about it.
0 Votes
+ -
Its a community thing, you share your internet and when you are away from home you might be able to share someone else's.
0 Votes
+ -
Well no S, the courts are captain obvious. But I guess you need to make it official to keep cops in check.
@jamesm@...
try fon.com

Millions of free WiFi hotspots around the world, in exchange for a little of your bandwidth in a secure manner.

One finger to the Robber Baron CellCo's.
0 Votes
+ -
I thought calling up an IP address would only indicate you local area, and nothing more . Please advise all of us.
0 Votes
+ -
@solivagant
Arin.net will give you the IP address space owner, which in turn can be traced to the subscriber who was assigned that IP if the owner can be given the exact time and date of the incident.
0 Votes
+ -
Contributr
@solivagant In general, an IP address will give you a broad area. But, the ISP can't nail it down to your exact address.

Steven
0 Votes
+ -
@sjvn@...

yes, they can, and have before under court orders and search warrants.

most ISPs maintain a log which address was connected to what IP address, particularly in broadband/DSL/cable, where a specific MAC address often must be "activated" on the ISP's network before the connection will even work
0 Votes
+ -
say what?
pgit 4th May 2011
@sjvn@... The cable modem has a unique MAC lika any other layer 2 device. When I pick one up from the ISP they mark it down as applying to my billing account. MAC + IP = positive ID of at least the name and address on the account.

I realize some ISPs NAT segments, if that's the case then yes, you're only traceable down to the neighborhood. But my ISP gives me a world routable address, and it hasn't changed in 6 or so years now.
0 Votes
+ -
@solivagant An IP does only indicate an area and not necessarily a specific computer. Cafes - Libraries etc will all show the same IP to outside world
0 Votes
+ -
@rjcahill65@...

Bingo. Another thing: what if someone has hacked into another person's wireless network? What if the person in question runs a 'unsecured' wireless router to share with other people?
Need I keep on going. Court finally got it right here.
@rjcahill65@...

Thats because the CAFE is using a NAT router. It is still traceable right up to that router.

ISPs know what customer account has been leased a given IP at any given time. Thats inherent in DHCP leasing. Otherwise you would lose your IP every time your router reset.

That the customer is running a NAT router at that IP and multi-plexing it to many computers on their lAN is irrellevent. The customer is responsible for all usage of that external IP. Read your terms of service.
0 Votes
+ -
Actually, what this means is that if you want to do something illegal, use someone else's internet connection!
0 Votes
+ -
Not necessarily illegal, think of people in Iran that want to organize without having government thugs dragging them off.
@Solivagant - ISP's can tell who they lease an IP address too. So although a general lookup of your IP Address whon't point to the Lat, Lon of your house, it will point to the ISP's Hub
0 Votes
+ -
As long as the internet is still dependent on IPv4 and not IPv6, IP addresses will NEVER be able to be used to identify individuals for one simple reason.

There are only about 4 billion IP addresses in the ENTIRE IPv4 address space. There are over 6 billion people in the world. Between this and the fact that many people own multiple internet-capable devices, it's physically impossible to identify an individual with IPv4 addressing.

http://en.wikipedia.org/wiki/IP_address
0 Votes
+ -
Contributr
@DreadWingKnight Not if the ISP is required by the court to give up your corresponding real space address. Then, you're hosed.

Steven
0 Votes
+ -
@sjvn@... Even with that, IPv4 doesn't have a large enough address space to have 1 IP == 1 person.

Until internet-wide IPv6 deployment, this precedent will stand.
@sjvn@... No doubt an ISP would have a record of the MAC address an IP was assigned to. You can always ID a unique device that way.
0 Votes
+ -
@DreadWingKnight
Dread, may I call you dread? .. Dread ... its not a mapping scenario of 1 ip address per one person (IPv4 OR IPv6). With very few exceptions, when you are on line, you present your connection with a single IP address that is tracible back to you at that time, through that connection provider.

A given is in cases of Multi User Nat ... which then ... would fall more heavily on the ISP to track down the user at a specific time more so than at any normal time, when an ISP can just identify .... "oh... that's this connection, thats this modem, and its registered at this physical mailing address".

Once they get to the physical location... it becomes a matter to prove its John Smith at that address, and that its John Smith's actions on the keys that are commiting the crime that was presented as reason to track down a specific individual.

Trojans, Viruses, Root kits ... etc.... if there's even ONE of them found on a computer *that* can be used as justification that it wasn't John Smith ... but someone else remotely controlling john smith's computer, thereby impersonating him on line.. etc...

Otherwise.. it won't matter if john is behind IPv4 or IPv6 only one device can use 1 ip address (and tcp/ip port) at any given point in time. Its only a matter of how quickly that IP address (and subsequent port) can be traced to the source.

added "port" to explain the 1 to many NAT situation ... ie. AOL dialup ... you'd be behind a 172.16.x.x ip space, and AOL's proxy would nat your 172.16.x.x to a real world AOL IP address, and keep track of the ports used, so that your commnication could go out, and come back, getting NATted back to you.
0 Votes
+ -
...to a "copyright holder" because it was alleged that a movie had been downloaded via my IP address. The only problem was that the IP address they listed as mine was literally 1600 miles away. (My ISP's customer database had my info cross-linked with someone else; when they stopped paying their bill, MY service would stop!) This was at the beginning of the RIAA-MPAA lawsuit hype, so at the time I would not have been surprised by a summons delivered on behalf of a MPAA lawyer.

I sent a short, concise letter to my ISP stating that if there were to be any consequences to me because of their little screw-up, I would make it my mission to decrease their shareholder value via whatever means available. That was the last I heard of it.
Actually, this case proves the opposite of what the writer claims.

According to the court decision, the fact that an Ip address might be used by someone else makes treating you as responsible for its use invalid.

if you totally secure your net, so that you and only you can ever use that IP address, you have just nullified that protection.
0 Votes
+ -
I agree
pvberg 4th May 2011
This ruling is a very good argument for not securing your router. As long as it is not secure no one can demonstrate that it was you that was actually connected. And given that we know certain people/companies have been collecting access point information by the truck load it would be possible to argue that anyone could have access to the IP address, not even just your close neighbors. Perhaps we should all remove the security on our routers, it might lead to more privacy, rather than less.
0 Votes
+ -
@pvberg to not secure your router

I would argue that of course, you do secure it. But anybody with the right software can eventually break the security and still use your router. Some security is better than others, but none is perfect.
0 Votes
+ -
@pvberg

or dual/split wireless access, highly secured for yourself inside, and a throttled open guest wireless that lets anyone and their brother, sister, niece, pet, etc, share

(i say throttled because while i do share my link with others, i choose not to let these others bog my access down beyond what i consider a reasonable amount)
0 Votes
+ -
RE: Court rules Internet IP addresses are not people
rustybear59@... Updated - 5th May 2011
@jeffpk
I don't believe your net can ever be totally secured . Unless it was locked up inside Ft. Knox behind a firewall that hasn't been invented yet . If a Hacker wants your network bad enough He or She will find a way in .
We get better Security they get better weapons ect. That's how it works .
I applaud the courts decision for once the Big Rich folks got a bit of a black eye !
Between The "Hollywood Machine" and the Oil companies the average person hardly ever gets a break . The Rich get richer as they say .
I have often wondered how they will tell who downloaded something on a local LAN. There are 5 computers connected through my HUB/Router and do they know which computer got the package?
Just curious
@Dogsnest "they" do not. The only information that could be given out by your ISP is typically going to be the IP address that they have issued to your cable/DSL/satellite modem.

If you have a router with a hardware firewall between your computer and the modem, then there is no link between what computer was used for any connection to the Net.

Which is why when the FBI raided that couples house they took every computing device that was internet capable.
@Dogsnest No, they can't tell which computer got the packet if you are using NAT (Network Address Translation). But, if your network is secured, then they have a pretty good idea it was one of them.
0 Votes
+ -
No -- we NEED open wifi
wcroth45 4th May 2011
Saying that we should all secure our Wifi because somebody bad might use it, is like saying we should all carry proof of citizenship when visiting Arizona.

The way to resist bad law and bad law enforcement is not to roll over. See EFF's opinion piece at https://www.eff.org/deeplinks/2011/04/open-wireless-movement
0 Votes
+ -
Actually...
John L. Ries Updated - 6th May 2011
@wcroth45
...I've thought about carrying my passport with me any time I drive through Arizona. I'm sure it would annoy any AHP officer that happened to pull me over, though.

Actually, unless it's immoral to obey (*very* rare, in my experience), I've always taken the position that the most likely ways for a bad law to be changed are for everyone to obey it and watch the negative consequences, or for it to be rigorously enforced (so the negative consequences are there for all to see).

Reply to Hameiri:

Not much of what I said above will apply to a police state. Fortunately, I don't live in one. The problem with hostile compliance in such circumstances is that the authorities will typically move against anyone thought hostile, whether they've done anything illegal or not.
@John L. Ries So, those living in a police state are rebelling by obeying.

Interesting.
0 Votes
+ -
Double post
John L. Ries Updated - 4th May 2011
Oops.
0 Votes
+ -
So I can stop paying parking tickets??
archetuthus 4th May 2011
The logic works!

If ill behavior from an IP-address can't attach to its owner, then my car and its license plate being parked illegally shouldn't allow parking police to give me a ticket.
0 Votes
+ -
@archetuthus They don't give "you" a ticket. They ticket the car.
@archetuthus
I recently got a ticket for a car I had sold some months ago. Then I got another. There was a procedure for excusing yourself (by mail), and then they could track down who now owns the car (and get him or her for some other things as well -- big bucks).
0 Votes
+ -
The reason for doing that is to keep people from accessing your files. I'm glad the court ruled the IP address isn't the person using it--or, in my family-any of the people using it--but we still don't want somebody else printing to my printer, saving to my server, looking at my documents, etc.
0 Votes
+ -
but arguing with fools about that is like trying to defend my right to make money by selling my own original music.
0 Votes
+ -
By all means, sell it
John L. Ries 7th May 2011
@paul.3d@...
Just understand that some distribution channels are riskier than others, and ultimately, the responsibility for enforcing your copyrights is yours, not the taxpayers' or anyone else's.

But even in civil suits, fishing expeditions are a bad thing, so I have in recent years thought that a lawsuit should be accompanied by sufficient documentation (contracts, affidavits, depositions, etc) to support the allegations made, though maybe courts should be allowed to issue search warrants in civil cases, as well as criminal ones (following the standard of probable cause).

Besides, unless you're a big name artist, few people will pirate your recordings.
Neither is your social security number. Social Security numbers was never was intended to be identifying people also since not everyone in the US is covered by Social Security and it benefits so this a not a "Universal National Identification" system.
0 Votes
+ -
An IP address is definitely not proof of guilt, but I think it's an intelligent reason to investigate further.

Secure your wireless; otherwise, you'll never know who's piggybacking off of your connection.
0 Votes
+ -
@John L. Ries but any system can be hacked and you would not even know it .some one can take your wifi .send back only a small part of it to you and still be using most of it to do bad things.but yes it helps.peace
Gee, officer, that's not my stolen goods on the floor of my house. A thief must have snuck in and put it there. Yeah, that's the ticket.
0 Votes
+ -
so that means the law enforces that broken down the guys door and accused him of something based on IP can no longer do that. good.
If YOUR vehicle is involved in an infringement for which the actual driver cannot be explicitly identified, YOU are fined, unless the driver owns up to it.

Same thing here. If you do not trust users of your data, don't let them, but you should not be able to avoid your obligations to ensure compliant use by all.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix