Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
posted by Fnord666 on Saturday October 24 2020, @04:10AM   Printer-friendly
from the bound-to-happen dept.

https://news.ycombinator.com/item?id=24872911
https://old.reddit.com/r/youtubedl/comments/jgttnc/youtubedl_github_repository_disabled_due_to_a/
https://github.com/github/dmca/blob/master/2020/10/2020-10-23-RIAA.md

Now when you go to their site, it reads:

Repository unavailable due to DMCA takedown.

This repository is currently disabled due to a DMCA takedown notice. We have disabled public access to the repository. The notice has been publicly posted.

If you are the repository owner, and you believe that your repository was disabled as a result of mistake or misidentification, you have the right to file a counter notice and have the repository reinstated. Our help articles provide more details on our DMCA takedown policy and how to file a counter notice. If you have any questions about the process or the risks in filing a counter notice, we suggest that you consult with a lawyer.

Also at 9to5Google

[2020-10-25 01:01:09 UTC: Updated title to more accurately reflect notice was given to GitHub, not to youtube-dl. --martyb]


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
  • (Score: 5, Interesting) by Anonymous Coward on Saturday October 24 2020, @04:13AM (15 children)

    by Anonymous Coward on Saturday October 24 2020, @04:13AM (#1068158)

    https://gitea.eponym.info/Mirrors/youtube-dl [eponym.info]

    The developers were careless and made the unforced error of including test cases that downloaded copyrighted music. It may not be a good idea to file a DMCA counterclaim because the RIAA may use the test case to argue that the primary purpose of youtube-dl is copyright infringement. I agree that the DMCA is a horrible law, but complaining about it on internet forums won't convince Congress to pass repeal or replace it.

    The code is easy to obtain. The issue is that sites like Youtube have a tendency to make modifications, which can break functionality. Unless youtube-dl is updated, it is a matter of time before its functionality is broken. In the case of Youtube, the supposed infringement is referred to as the "rolling cypher" in the DMCA notice. This is simply code that converts the video ID string from the URL into another URL with the actual location of the video data. I would say this is a similar situation to DeCSS except that the code to "decrypt" the string is Javascript that is served by Youtube and executed in a Javascript interpreter, whether in a browser or youtube-dl.

    It's not an issue with the RIAA claiming they own youtube-dl code. They didn't claim that. Instead, they claimed that youtube-dl violated the anti-circumvention provisions of the DMCA. The notice is legally valid, though the underlying basis is dubious. It still might be enough to convince a court to side with the RIAA, despite that the "rolling cypher" is trivial if it's considered DRM.

    This has drawn a lot of outrage on /. and HN. I predict this will actually backfire for the RIAA. People who weren't likely to contribute code to youtube-dl are particularly irked by this action. It may well motivate some of those people to help keep youtube-dl updated or to build solutions that are more resilient to the RIAA's continued game of whack-a-mole. I expect that youtube-dl or a replacement tool will continue to be updated, perhaps by many more people than who would have contributed in the past, and will be stored in a location that is beyond the reach of the RIAA lawyers. The RIAA probably won this battle but hurt their cause in the long term.

    • (Score: 0) by Anonymous Coward on Saturday October 24 2020, @05:19AM (6 children)

      by Anonymous Coward on Saturday October 24 2020, @05:19AM (#1068162)

      The problem here is less about RIAA and more about relying on GitHub. Get the code off there and get it onto some clone that ignores DMCA. I'm surprised at some of the stuff that's still on there, but it won't last forever.

      • (Score: 5, Informative) by fakefuck39 on Saturday October 24 2020, @07:25AM (5 children)

        by fakefuck39 (6620) on Saturday October 24 2020, @07:25AM (#1068180)

        They don't rely on github. Their own site is up, completely unaffected, and that's where people should get their shit anywise - from the developer, not from some 3rd party facebook for devs. it's not youtube-dl who got the takedown notice - it's github, a party they chose to have secondary hosting on. forget riia - it's a 3rd party, they can rightfully take down your shit for any reason. need version control? run your own server. youtube-dl.org does.

        • (Score: 0) by Anonymous Coward on Saturday October 24 2020, @11:28AM (4 children)

          by Anonymous Coward on Saturday October 24 2020, @11:28AM (#1068204)

          need version control? run your own server. youtube-dl.org does

          Currently our dev repository is taken down due to DMCA takedown notice by RIAA.

          • (Score: 5, Insightful) by canopic jug on Saturday October 24 2020, @01:19PM

            by canopic jug (3949) Subscriber Badge on Saturday October 24 2020, @01:19PM (#1068225) Journal

            Currently our dev repository is taken down due to DMCA takedown notice by RIAA.

            The RIAA used a lot of weasel words. Microsoft's GitHub read too much into the warning. Observe that the wording of the DMCA takedown notice supplied only has the RIAA attesting that, under penalty of perjury, they are representing some copyright owners. Their notice does not attest to either the accuracy or the truthfulness the rest of their statement about why the source code should be taken down. There needs to be 1) a processing fee for each such takedown notice and 2) a large deposit to be forfeit should the request turn out to be invalid in any way, shape, or form or flat out rejected. With zero cost to produce and zero repercussions for false reports, the RIAA has no disincentives to keep it from spamming sites with shake downs.

            --
            Money is not free speech. Elections should not be auctions.
          • (Score: 2, Flamebait) by fakefuck39 on Saturday October 24 2020, @07:47PM (2 children)

            by fakefuck39 (6620) on Saturday October 24 2020, @07:47PM (#1068312)

            youtube-dl.org which has source and binaries is not down, and is their own server. it's amazing someone could be dumb enough to not understand that simple thing. github is not their only repository, nor is it the primary repository. what exactly is it you're not getting here?

            tell me, when you upload a video from your laptop to youtube, and youtube takes it down, do you think you lost your video? boy does geek squad at best buy have some things to teach you.

            • (Score: 0) by Anonymous Coward on Saturday October 24 2020, @09:50PM (1 child)

              by Anonymous Coward on Saturday October 24 2020, @09:50PM (#1068351)

              The download source link redirected to Github which returned a 451 error, today it works. The page looks different, only 3 rectangles on the right side and a note about the takedown. See by yourself how it looked days ago http://web.archive.org/web/20201019094729/http://youtube-dl.org/ [archive.org]

              Anyway, the git repo has multiple clones all over the world. Just a matter of youtube-dl coders to continue in a place that is not affected by DMCA or similar laws. Currently the tar.gz seems to be served from Germany, and I read somewhere that could be tricky too. They better checke soon, and change if needed.

              • (Score: 2) by fakefuck39 on Sunday October 25 2020, @06:03AM

                by fakefuck39 (6620) on Sunday October 25 2020, @06:03AM (#1068460)

                ok, maybe I'm just confused, and if you logically correct me, I can admit I'm wrong.

                yes, their github link on the front page is down. The tarball - the primary copy of the program, is served from their server, not from github, and downloads just fine.

                I'm not sure wtf you mean by "download source." It's written in python. the program is the source. it's a script.

    • (Score: 5, Insightful) by shortscreen on Saturday October 24 2020, @06:27AM

      by shortscreen (2252) on Saturday October 24 2020, @06:27AM (#1068174) Journal

      youtube-dl works on hundreds of sites other than just Youtube. If someone posts a new project called eg. webmedia-dl and removes all references to Youtube in the code/docs, does RIAA have any grounds to complain then?

      Would the rolling cypher have to serve a specific purpose to count as DRM? Because I don't really see the copyright distinction between using youtube-dl or using a browser. The content gets transferred to my computer either way. Whatever the copyright holder's opinion about what happens to that data while it's on my computer may be, I'm not party to any agreement with them, Youtube is. And Youtube presumably has consent to distribute these files, so it makes no sense to say that a user of youtube-dl is somehow infringing.

      It's funny that the RIAA would be the ones to make a stink about this though, considering that anyone who wants a local copy of music can easily get it via the analog hole and doesn't even need youtube-dl.

    • (Score: 0, Offtopic) by Anonymous Coward on Saturday October 24 2020, @11:50AM

      by Anonymous Coward on Saturday October 24 2020, @11:50AM (#1068209)

      n/t

    • (Score: 3, Interesting) by Zinnia Zirconium on Sunday October 25 2020, @01:43AM (4 children)

      by Zinnia Zirconium (11163) on Sunday October 25 2020, @01:43AM (#1068405) Homepage Journal

      Running the JavaScript like a browser is one reason youtube-dl is ten times slower than youtubedown.

      JWZ has been preprocessing the JavaScript and publishing a full history of the YouTube signature cipher algorithm since 2013.

      Is JWZ going to get sued next? Is JWZ going to get sued because I'm talking about youtubedown? Am I going to have to abandon my fork of youtubedown after youtubedown ceases to exist? Don't care.

      Irony is JWZ is enamoured with denying access to his website based on user agent and referer. As JWZ himself says in his comments, "Total dick move." So I circumvent his anti-circumvention every time I download his circumvention tool using curl.

      I hope I get banned from the DNA Lounge because San Fran can suck it.

      • (Score: 1, Interesting) by Anonymous Coward on Sunday October 25 2020, @03:42PM (3 children)

        by Anonymous Coward on Sunday October 25 2020, @03:42PM (#1068534)

        Are you sure it does that? If you are, you should report that to the FSF directory.

        Richard Stallman said youtube-dl is okay to be in the Directory because it does not actually execute nonfree JS as we first suspected.

        https://directory.fsf.org/wiki/Youtube-dl [fsf.org]

        • (Score: 3, Informative) by Zinnia Zirconium on Sunday October 25 2020, @07:21PM (2 children)

          by Zinnia Zirconium (11163) on Sunday October 25 2020, @07:21PM (#1068614) Homepage Journal

          youtube-dl parses JavaScript code and uses a JavaScript interpreter to translate it into Python code and executes the Python code.

          [youtube] {18} signature length 106, html5 player 4a1799bd
          [youtube] Extracted signature function:
          if tuple(len(p) for p in s.split('.')) == (106):
              return s[105:32:-1] + s[2] + s[31:2:-1] + s[32]

          youtubedown parses JavaScript code and translates it into a cipher language and interprets the cipher language.

          '4a1799bd/player_ias.vflset/en_US/base' => '18557 s2 w30 r',    # 22 Oct 2020

          JWZ documents the cipher language.

          # So far, only three commands are used in the ciphers, so we can represent
          # them compactly:
          #
          # - r  = reverse the string;
          # - sN = slice from character N to the end;
          # - wN = swap 0th and Nth character.

          I think for this simple cipher I prefer not using a JavaScript interpreter and not executing Python code.

          But let's do what you want and make this political by getting the FSF involved.

    • (Score: 1) by jman on Sunday October 25 2020, @12:47PM

      by jman (6085) Subscriber Badge on Sunday October 25 2020, @12:47PM (#1068494) Homepage
      I concur this will backfire on the hired muscle known as the RIAA.

      Youtube's TOS says: "Content is the responsibility of the person or entity that provides it to the Service."

      It then states: "You may view or listen to Content for your personal, non-commercial use."

      Then (sic): "You are not allowed to access, reproduce, download, distribute, transmit, broadcast, display, sell, license, alter, modify or otherwise use any part of the Service or any Content except as expressly authorized by the Service."

      Would seem the second statement covers the third, and the first says RIAA is complaining to the wrong entity.

      This is super-weak on the part of the RIAA, but par for their kind of strong-arm, "let's start a frivolous lawsuit and see what happens" game.

      All youtube-dl's authors need to do is update the example links in youtube.py (Icona's is around line 588) to those of folks that would be happy to have the increased traffic, rather than bitch about stuff they can't control.

      Alternatively, RIAA could post a DCMA takedown notice to Google regarding Youtube ID # UxxajLWwzqY (the Icona song), and try to have her whole channel deleted on the grounds she's hosting copyrighted material. Who cares if the material in question is actually hers?
  • (Score: 2, Insightful) by Subsentient on Saturday October 24 2020, @05:23AM (8 children)

    by Subsentient (1111) on Saturday October 24 2020, @05:23AM (#1068165) Homepage Journal

    Well that figures. I've used it for downloading my own videos on YouTube from time to time to back them up, since I often stream my Warzone 2100 games directly to YouTube rather than pre-record them. Now that tool is gone, lovely. Right now, youtube-dl is in the Fedora repos, you know, a distro that insists on no legal dubiousness for code in their repos. I imagine it will be pulled soon. Wtf were they thinking, putting copyrighted videos as examples in the readme? How did they not see this coming back to rape them in the asshole? Whoever did that has singlehandedly destroyed this project.

    --
    "It is no measure of health to be well adjusted to a profoundly sick society." -Jiddu Krishnamurti
    • (Score: 5, Insightful) by canopic jug on Saturday October 24 2020, @06:23AM (1 child)

      by canopic jug (3949) Subscriber Badge on Saturday October 24 2020, @06:23AM (#1068172) Journal

      Just to nitpick, it's not illegal to download copyrighted material if the copyrighted material's owner grants permission. That's the whole premise behind Free and Open Source Software, Creative Commons, and Open Access. However, those are also intentional collateral damage in these actions. Furthermore, in some countries it is determined to be legal to download copyrighted material even if the owner objects as long as their is no redistribution and it is for personal use.

      The real risk is that the data stream is encoded in triple-ROT13 or some similarly strong DRM. Then "breaking" that DRM will be considered a felony circumvention. Not too long ago corporations were pushing to have EULAs considered as legally binding. That failed, but now they can put in farsical technical countermeasures and then when kids walk around the flimsy barriers, pile on enough felony charges to bankrupt them into accepting a plea "deal" and thus reinforcing the situation with the precedent of a confession + conviction. It's a way of making corporate policy law without needing either further bribes to legislators, additional time, or fighting pushback from the one or two enlighted people following the politicians' activities.

      --
      Money is not free speech. Elections should not be auctions.
      • (Score: 2) by jasassin on Tuesday October 27 2020, @03:36AM

        by jasassin (3566) <jasassin@gmail.com> on Tuesday October 27 2020, @03:36AM (#1069170) Homepage Journal

        The real risk is that the data stream is encoded in triple-ROT13 or some similarly strong DRM.

        Nah it's encoded in double ROT13.

        --
        jasassin@gmail.com GPG Key ID: 0xE6462C68A9A3DB5A
    • (Score: 3, Insightful) by loonycyborg on Saturday October 24 2020, @06:35AM (3 children)

      by loonycyborg (6905) on Saturday October 24 2020, @06:35AM (#1068176)

      That's what RPMFusion is for. This situation won't be an end to this tool, far from it.

      • (Score: 3, Insightful) by Subsentient on Saturday October 24 2020, @08:39AM (2 children)

        by Subsentient (1111) on Saturday October 24 2020, @08:39AM (#1068196) Homepage Journal

        It will be an end to the tool's legitimacy, and it will not only taint any forks, but almost as severely taint any project that attempts to directly replicate this functionality
        . Before, youtube-dl had a certain legal credibility, and that has now evaporated, making it a liability for anyone who deals with it.

        --
        "It is no measure of health to be well adjusted to a profoundly sick society." -Jiddu Krishnamurti
        • (Score: 2) by loonycyborg on Saturday October 24 2020, @09:45AM

          by loonycyborg (6905) on Saturday October 24 2020, @09:45AM (#1068200)

          It will not affect its legitimacy in the slightest since all people who use it already know that copyright law as understood by RIAA and their workflows are in irreconcilable clash already. And I don't think that this takedown will actually legally hold in case if a counter-notice will be sent.

        • (Score: 2) by Deeo Kain on Saturday October 24 2020, @09:06PM

          by Deeo Kain (5848) on Saturday October 24 2020, @09:06PM (#1068337)

          It would only evaporate if a judge ruled in favour of RIAA.

    • (Score: 4, Informative) by fakefuck39 on Saturday October 24 2020, @07:33AM (1 child)

      by fakefuck39 (6620) on Saturday October 24 2020, @07:33AM (#1068182)

      nothing's gone. the git repository hosted by the 3rd party is gone. youtube-dl is still around, still downloadable from their website (which is youtube-dl.org, not fuckhub). who gives a crab what's on github. having a popular project removed from github is a loss for github, not youtube-dl or anyone else. there are a thousand other code management suites.

      • (Score: 0) by Anonymous Coward on Sunday October 25 2020, @12:54PM

        by Anonymous Coward on Sunday October 25 2020, @12:54PM (#1068497)

        Oh jeez, you're in every subtree of the comments repeating this drivel :(

        ytdl's home page offers two links: 1 - their full development tree, with source control metadata and everything (a link to their github project, now censored), and 2. a snapshot thereof, in the form of a "release tarball", directly from their site.

        If all you have is the snapshot, you're dead but just don't know it yet -- that snapshot will bitrot, and will be made useless by google screwing around with their site. Unless a reputable clone of their git repo will pop up somewhere soon, having their latest snapshot won't do anyone much good.

  • (Score: -1, Offtopic) by Anonymous Coward on Saturday October 24 2020, @06:14AM (2 children)

    by Anonymous Coward on Saturday October 24 2020, @06:14AM (#1068170)

    This is all Runz-a-wayz fault! Bastard.

    • (Score: -1, Offtopic) by Anonymous Coward on Saturday October 24 2020, @08:09AM (1 child)

      by Anonymous Coward on Saturday October 24 2020, @08:09AM (#1068191)

      What did Runaway do this time? Dogwhistle racist shit? Pass on Pamela Geller anti-semitic propaganda? Or try downloading all the porn off of youtube? Runaway! We told you that if you kept it up, we would all go blind!

      • (Score: -1, Offtopic) by Anonymous Coward on Saturday October 24 2020, @11:29AM

        by Anonymous Coward on Saturday October 24 2020, @11:29AM (#1068205)

        Last I heard, he'd copyright violating aristarchus, in the IRC! Cold, stupid, heartless bastard! Enemy of free software, he is.

  • (Score: 2) by inertnet on Saturday October 24 2020, @12:11PM (3 children)

    by inertnet (4071) on Saturday October 24 2020, @12:11PM (#1068215) Journal

    I didn't know about this handy tool. I even had it on my system already, I just needed to install the GUI. Great tool, now I don't have to use browser extensions for video downloads, thanks.

    Let's hope they find an easy way around the takedown, like renaming the project and removing the bits that this RIAA is upset about.

    • (Score: 3, Informative) by canopic jug on Saturday October 24 2020, @01:24PM (2 children)

      by canopic jug (3949) Subscriber Badge on Saturday October 24 2020, @01:24PM (#1068228) Journal

      At least for Youtube, that utility seems to either scrape or use an unstable API for fetching the videos. I haven't looked at the source, but it is one or the other. So while the current code works now, it will only continue to work for some days or weeks or maybe months until Google breaks the brittle scraper or changes the API, again. At which point the source will have to be tweaked and the changes propagated out to the various distros and other packagers.

      --
      Money is not free speech. Elections should not be auctions.
      • (Score: 3, Interesting) by Zinnia Zirconium on Saturday October 24 2020, @09:51PM

        by Zinnia Zirconium (11163) on Saturday October 24 2020, @09:51PM (#1068352) Homepage Journal

        I have read the source and it's both scraping and undocumented API. Seems to break monthly in my experience.

      • (Score: 0) by Anonymous Coward on Saturday October 24 2020, @11:04PM

        by Anonymous Coward on Saturday October 24 2020, @11:04PM (#1068365)

        They use a JavaScript interpreter for YouTube and other websites. 'from ..jsinterp import JSInterpreter' being the key import. They parse the JavaScript code downloaded from the site, extract the variables and json data, evaluate it using a mapping of operators, and then return that as Python objects. One thing different websites do is constantly push out changes to the code. Most of them don't change the result but every so often the element name changes, or the new URL misses a regex, or algorithm changes enough that they get caught.

        And that is where the real power of this DMCA notice comes in. If you read it, they also characterize the tool as an anti-circumvention tool in addition for one to enable piracy. The reason is the interpreters. The tool isn't accessing the videos in the intended manner. Instead, it is circumventing it using the interpretation engines and arguable circumventing the protections put in place to protect the videos. True, it is different from the precedents of DeCSS and similar that use stolen keys and libdvdcss and similar that brutes keys, in that it is evaluating JS provided to it using key data provided to it in a way analogous but not identical to the intended user agent. The real question is whether that is legally close enough. And I expect the EFF to chime in eventually on that question with a better analysis.

  • (Score: 3, Informative) by PinkyGigglebrain on Saturday October 24 2020, @06:13PM (4 children)

    by PinkyGigglebrain (4458) on Saturday October 24 2020, @06:13PM (#1068291)

    A link to the still open for business youtube-dl homepage

    https://youtube-dl.org/ [youtube-dl.org]

    Your welcome.

    --
    "Beware those who would deny you Knowledge, For in their hearts they dream themselves your Master."
    • (Score: 0) by Anonymous Coward on Saturday October 24 2020, @07:18PM

      by Anonymous Coward on Saturday October 24 2020, @07:18PM (#1068301)

      no it's not the same, now when you click on links it wants to go to a regular HTTP connection/domain which points to openmandriva.

      Say whaaaaaaaaaaaaat?

      That is not the same.

    • (Score: 0, Offtopic) by Anonymous Coward on Saturday October 24 2020, @08:41PM

      by Anonymous Coward on Saturday October 24 2020, @08:41PM (#1068329)

      NT

    • (Score: 0, Offtopic) by Anonymous Coward on Saturday October 24 2020, @09:44PM (1 child)

      by Anonymous Coward on Saturday October 24 2020, @09:44PM (#1068348)

      "Your welcome."

      My what???

  • (Score: 2) by Zinnia Zirconium on Saturday October 24 2020, @09:03PM (2 children)

    by Zinnia Zirconium (11163) on Saturday October 24 2020, @09:03PM (#1068334) Homepage Journal

    youtubedown is still up

    youtubedown is faster than youtube-dl

    https://www.jwz.org/hacks/youtubedown [jwz.org]

    • (Score: 0) by Anonymous Coward on Sunday October 25 2020, @09:01PM (1 child)

      by Anonymous Coward on Sunday October 25 2020, @09:01PM (#1068644)

      Thanks. Additional merit is that it's in Perl and not Python.

      • (Score: 1, Funny) by Anonymous Coward on Monday October 26 2020, @05:30PM

        by Anonymous Coward on Monday October 26 2020, @05:30PM (#1068981)

        Ah, and since no-one can read PERL code the RIAA can't issue any takedowns against it. Brilliant!

  • (Score: 2, Interesting) by Anonymous Coward on Saturday October 24 2020, @10:10PM

    by Anonymous Coward on Saturday October 24 2020, @10:10PM (#1068357)

    Both curl and youtube-dl accept --proxy as an argument.

    Create a VPN with a local port that connects to a Tor server. The download will occur over the Tor network. On your system, run:

    youtube-dl --proxy vert_ip:port -o vidname youtube_url

    Update youtube-dl using curl with the same vert_ip:port

    Helps avoid RIAA dragging you into their fight.

(1)