Library of Congress Might Become a Piracy Hub, RIAA Warns

The U.S. Copyright Office is considering expanding the mandatory deposit requirement for publishers, so that record labels would also have to submit their online-only music to the Library of Congress. The Library would then allow the public to access the music. The RIAA, however, warns that this plan introduces some serious piracy concerns.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and ANONYMOUS VPN services.

cassetteWith an impressive collection of more than 160 million items, the Library of Congress is the second largest library in the world.

The Library also serves as a legal repository for the copyright office. By law, everyone who publishes a copyrighted work in the U.S. is required to deposit two copies at the library.

This also applies to music and videos but up until now, content produced in an online-only format has been exempted from this mandatory deposit requirement.

However, now that digital is becoming the standard for more copyrighted works, the Copyright Office is considering a change. As a result, music publishers will be required to submit all digital works to the Library of Congress.

These files will then become freely accessible to the public through a secured system.

“Under any rule requiring mandatory deposit of online-only sound recordings, the Library would provide public access to such recordings,” the Copyright Office writes in its proposal.

“The Library currently has a system by which authorized users can access and listen to digitized copies of physical sound recordings collected through other means at the Madison Building of the Library of Congress.”

This proposal has been met with scrutiny by the music industry group RIAA, which states that it has “serious concerns.”

According to the RIAA, there is a risk that content hosted by the Library may be exploited by pirates, who could copy the music and share it on various pirate sites. This could then crush the major record labels’ revenues.

“It is well-established that the recorded music industry has been inundated with digital piracy,” the RIAA writes.

“If sound recordings available through the Library – whether on-premises or online – were managed in a way that patrons could use those recordings for uploading to pirate web sites and unlicensed streaming services or if the Library’s collection of sound recordings were made electronically available to the public at large, that could have a devastating impact on our member companies’ revenues.”

The RIAA further states that the current proposal lacks information on what security measures would apply to the storage of and access to sound recordings.

In addition to a general concern that the public could copy sound recordings in the library, the RIAA notes that there’s also a risk that the entire Library of Congress database could be hacked if people are allowed to access it over the Internet.

Should this happen, millions of digital sound recordings may leak to the public.

“In an age where servers are hacked on a regular basis, no electronic server is secure. Government servers are no different,” the RIAA writes.

“Given the inherent vulnerability of servers believed to be secure, we question the need for anyone to have remote access to a server that stores commercially valuable digital sound recordings.”

Since people have so many options to enjoy digital music nowadays, the RIAA sees no reason for the Library of Congress to allow electronic copying or distribution of the sound recordings of its members.

If the Copyright Office goes ahead, the RIAA urges it to consult the record labels to make sure that state of the art technological protection measures are deployed to secure their work.

RIAA’s full comments are available here (pdf).

Source: TF, for the latest info on copyright, file-sharing, torrent sites and ANONYMOUS VPN services.

Mystic Vale review: Don’t just draw cards, craft them

A clever but basic deck-builder in which you literally assemble your cards.

Enlarge / A hand in Mystic Vale. In the upper left sit the advancements for purchase, sorted by strength (most powerful in the top row, weakest in bottom row) along with the always-available Fertile Soil cards. To the right are the vale cards, purchased not with mana but with nature symbols. At the bottom is my deck of cards. In this hand, I have stopped after revealing three spoil symbols (the red trees). I add up the symbols on all cards except the "on deck card" atop my pile and find that I have 6 mana (blue orbs), 4 victory points (blue shields), and two green plus one yellow symbols. (credit: Nate Anderson)

Welcome to Ars Cardboard, our weekend look at tabletop games! Check out our complete board gaming coverage at cardboard.arstechnica.com—and let us know what you think.

The land has fallen under a blight, and the only way for the four Druid clans to gain power from Gaia and restore balance to the Valley of Life is through the time-honored ritual of... adding up blue mana spheres on the cards before you and spending them to buy more cards with more mana spheres. And, sometimes, victory points.

Look—don't ask too many questions about the theme. Mystic Vale is a game about healing the land in the same way that Splendor is a game about crafting diamond rings for the nobility. Both titles are essentially pure efficiency engines; build up a pool of resources that will allow you to buy more expensive resources faster than anyone else at the table and you win. There are no extraneous mechanics here to distract from the dopamine drip-drip-drip of steadily increasing card combos, and Mystic Vale has learned the key lesson of these kinds of games: don't overstay your welcome.

Read 18 remaining paragraphs | Comments

Hacker who stole 2.9 million credit card numbers is Russian lawmaker’s son

Roman Seleznev, aka “Track2,” was found guilty of 38 counts relating to fraud and theft.

(credit: Wikipedia)

On Thursday, a federal jury in Seattle found Roman Seleznev guilty of stealing millions of credit card numbers and selling them online to other fraudsters. Seleznev, 32, is the son of Russian Parliament member Valery Seleznev.

Seleznev, who occasionally went by the moniker “Track2” online (a reference to one of the information strips on the back of a magnetic stripe card"), had been hacking into restaurant and retail Point of Sale (PoS) systems since at least October 2009 and continued until October 2013.

According to a 2014 indictment (PDF) from the Department of Justice, Seleznev and potentially others who are unknown to the investigators “developed and used automated techniques, such as port scanning, to identify computers and computer systems that were connected to the Internet [and] were dedicated to or involved with credit processing by retail businesses.”

Read 6 remaining paragraphs | Comments

Augmenting the FPS: How well does Tobii track your gaze in a video game?

$140 EyeX add-on has serious limits, but new Deus Ex shows off its potential.

Ars Technica tests the Tobii EyeX while playing Deus Ex. Video edited by Jennifer Hahn. (video link)

During Ars' review playthrough of the latest adventure in the Deus Ex series, I spied a curious option tucked into its Windows menus: "Tobii eye-tracking." None of Square Enix's press materials mentioned such a thing, which seemed strange for a series that revolves around human augmentation and sci-fi upgrades. Eye-tracking in an FPS? Sounds like some futuristic stealth-spy stuff!

The word "Tobii" perked up my coworkers' ears, as they'd tested simple prototypes of the eye-tracking doodad at various Consumer Electronics Shows. Deus Ex presented a great opportunity to test the add-on's full potential, and Tobii was kind enough to send loaner hardware. We wanted to find out: Just what does an eye-tracking sensor do for computer users—how does it translate the gaze of your eyes to real-world computer use—and does it work well enough to earn a $140 price tag?

Read 15 remaining paragraphs | Comments

Someone is porting Pokémon Go to the Dreamcast VMU

Also, did you know there’s a Dreamcast VMU homebrew scene?

Enlarge / Yup, this is a thing that's happening in the year 2016... (credit: guacasaurs_mex / Instagram)

I know a surprising number of people who desperately want to play Pokémon Go, but their phones are too old to run the game reliably. For those people, a cheap, used Dreamcast with a portable Visual Memory Unit might be the cheapest way to simulate the Pokémon Go experience until their next upgrade cycle. That's because of Pokémon Go VMU, a cheeky homebrew project from a VMU coder going by the handle guacasaurus_mex.

True, the Dreamcast's underpowered memory-card-with-a-screen-and-buttons doesn't feature the GPS antenna and augmented reality camera that help make Pokémon Go possible on smartphones. Still, guacasaurus_rex promises a randomly generated map grid to navigate on the 48x32 pixel monochrome LCD screen. There will even be a little timing-based mini-game for catching the little monsters in Pokéballs to fill in for those little touchscreen swipes.

The VMU "port" isn't planned for release until next year, though, because "it's going to take forever to draw all those damn Pokémon." Hopefully Pokémon Go will still be a relevant gaming phenomenon by then, eh?

Read 3 remaining paragraphs | Comments

Teilzeitarbeit: Amazon probiert 30-Stunden-Woche aus

In einem Versuch will Amazon komplette Teams inklusive Manager in Teilzeit arbeiten lassen – 30 Stunden pro Woche und mit den gleichen Rechten wie Vollzeitkräfte. Möglicherweise ist der Schritt eine Reaktion auf frühere Medienberichte zur Arbeitsbelastung bei Amazon. (Amazon, Internet)

In einem Versuch will Amazon komplette Teams inklusive Manager in Teilzeit arbeiten lassen - 30 Stunden pro Woche und mit den gleichen Rechten wie Vollzeitkräfte. Möglicherweise ist der Schritt eine Reaktion auf frühere Medienberichte zur Arbeitsbelastung bei Amazon. (Amazon, Internet)

Archos: Neues Smartphone mit Fingerabdrucksensor für 150 Euro

Mit dem 50f Helium bringt Archos ein günstiges Android-Smartphone mit Fingerabdrucksensor und LTE-Unterstützung auf den Markt. Die restliche Ausstattung des Smartphones bewegt sich im Einsteigerbereich. (Archos, Smartphone)

Mit dem 50f Helium bringt Archos ein günstiges Android-Smartphone mit Fingerabdrucksensor und LTE-Unterstützung auf den Markt. Die restliche Ausstattung des Smartphones bewegt sich im Einsteigerbereich. (Archos, Smartphone)

On appeal in LA Times defacement case, lawyers say there was no “damage”

“For there to be CFAA Damage, there must be actual harm to a computer system.”

(credit: Cyrus Farivar)

Attorneys representing Matthew Keys have filed their formal appeal to the 9th Circuit. Keys is the California journalist who was convicted of hacking-related crimes in 2015.

As Keys told Ars before he was sentenced, the appeal largely focuses on the argument that the government “constructively amended” the second count that he was charged with: 18 U.S. Code § 1030 (a) (5) (A). That law declares a crime has been committed if someone “knowingly causes the transmission of a program, information, code, or command, and, as a result of such conduct, intentionally causes damage without authorization, to a protected computer.”

During closing arguments at trial, one of Keys’ lawyers, Jay Leiderman, said that Keys’ December 2010 defacement of one Los Angeles Times article lasted only 40 minutes and therefore caused no damage.

Read 7 remaining paragraphs | Comments

Sicherheit: Operas Server wurden angegriffen

Der Browser-Hersteller Opera hat seine Nutzer über einen Angriff auf seine Server informiert. Von der schnell abgewehrten Attacke sei das Sync-System betroffen, möglicherweise wurden Passwörter und Nutzernamen abgegriffen. Sicherheitshalber wurden alle Passwörter zurückgesetzt. (Opera, Browser)

Der Browser-Hersteller Opera hat seine Nutzer über einen Angriff auf seine Server informiert. Von der schnell abgewehrten Attacke sei das Sync-System betroffen, möglicherweise wurden Passwörter und Nutzernamen abgegriffen. Sicherheitshalber wurden alle Passwörter zurückgesetzt. (Opera, Browser)

Maru: Quellcode von Desktop-Android als Open Source verfügbar

Der Macher des Android-ROMs Maru mit eingebautem Linux-Desktop-Modus hat sein Versprechen wahrgemacht: Der Quelltext ist als Open Source für alle verfügbar. Ziel soll eine größere Auswahl an kompatiblen Geräten sein – entsprechende Dev-Gruppen und einen Guide gibt es schon. (Android-ROM, Xfce)

Der Macher des Android-ROMs Maru mit eingebautem Linux-Desktop-Modus hat sein Versprechen wahrgemacht: Der Quelltext ist als Open Source für alle verfügbar. Ziel soll eine größere Auswahl an kompatiblen Geräten sein - entsprechende Dev-Gruppen und einen Guide gibt es schon. (Android-ROM, Xfce)