Judge orders YouTube to expose user viewing habits and history
Viacom sought access to user IDs, IP addresses and lists of videos in $1B suit
Computerworld - A federal judge yesterday ruled that Google Inc. must turn over a YouTube logging database containing 12TB of data that includes user log-in IDs, IP addresses and video viewing habits to Viacom International Inc. The media and entertainment firm had sought the data — recorded once a user starts to watch a YouTube video — as part of its $1 billion copyright lawsuit against Google's video unit.
However, Judge Louis Stanton of the U.S. District Court for the Southern District of New York denied Viacom's request for access to YouTube search source code. Viacom had claimed that it needed the data "to compare the attractiveness of allegedly infringing videos with that of non-infringing videos," the order noted.
Google had argued that disclosing the log-in IDs and other data would raise user privacy concerns; the company contended that Viacom could determine viewing and video uploading habits of YouTube users based on log-in data and IP addresses. However, Stanton said that Google did not cite any legal reason not to disclose such information in civil court proceedings. Stanton dismissed Google's privacy concerns as "speculative."
In addition, the order cited a blog post written in February 2008 by Google engineer Alma Whitten noting that in most cases, an IP address alone cannot identify a user.
Kurt Opsahl, a senior staff attorney at the Electronic Frontier Foundation noted in a blog post that the ruling is "a setback to privacy rights, and will allow Viacom to see what you are watching on YouTube."
He also asserted that the order erroneously ignored the protections of the federal Video Privacy Protection Act (VPPA), which was passed after a newspaper disclosed Supreme Court nominee Robert Bork's video rental records.
"YouTube is a 'video tape service provider' under [the VPAA], because it is 'engaged in the business [of] delivery of ... audio-visual materials.' The VPPA protects 'personally identifiable information,' which is defined to include 'information which identifies a person as having requested or obtained specific video materials or services,'" Opsahl wrote. "This is exactly what is in the logging database."
He went on to note that the VPAA prohibits a court from ordering the disclosure of personally identifiable information unless it can show that the information cannot be gained by any other means. Consumers must also be given reasonable notice of a disclosure order and be provided with an opportunity to contest the claim. "Today's court order made no finding that Viacom could not be accommodated by any other means, nor were the YouTube users provided with notice and an opportunity to contest the claim," he wrote.
This pilot fish is a contractor at a military base, working on some very cool fire-control systems for tanks. But when he spots something obviously wrong during a live-fire test, he can't get the firing-range commander's attention.
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Reduce federal infrastructure risk with compliance management and situational awareness
- IBM continuous monitoring and management solutions deliver real-time situational awareness to help federal agencies understand vulnerabilities, and protect the infrastructure.
- SANS: Next-Generation Datacenters = Next-Generation Security
- This whitepaper takes a look at some new technology that may allow security teams to implement more flexible and capable protection models in...
- SANS: Protecting Virtual Endpoints with McAfee Server Security Suite Essentials
- SANS review of McAfees Server Security Suite Essentials that address some of the emerging challenges of securing virtual platforms and cloud environments.
- Safeguarding the Next-Generation Data Center
- Use of virtual and cloud servers has exploded. Unfortunately, security often lags behind. McAfee recommends looking at innovative solutions in order to erect...
- Aberdeen: Securing the Evolving Datacenter
- This report highlights ways security technologies and services are evolving to provide the visibility and control needed to deploy workloads flexibly in the... All Government IT White Papers
- Is SQL Server AlwaysOn really as powerful? Tips and Tricks from the field With the introduction of AlwaysOn, Windows Clustering Services is now more critical than ever.
- What Does it Take to Deliver a Superior Customer Experience? The Two Top-Rated Online Retailers, B&H Photo and Crutchfield Electronics, Share Their Secrets Discuss practical CX tools and service methods such as contact center agents and the use of realtime speech analytics to help contact center...
- Keep Servers Up and Running and Attackers in the Dark An SSL/TLS handshake requires at least 10 times more processing power on a server than on the client. SSL renegotiation attacks can readily...
- On Demand: Mastering the Art of Mobile Content Management Mobile device usage in the enterprise has skyrocketed, and it continues to escalate. IT must answer to users who demand access to their...
- DevOps with PureApplication System: Reduce cost and speed delivery with an integrated IBM Cloud solution Join this webcast to hear what ING Netherlands has been able to achieve while deploying DevOps tools from IBM Rational. An ING executive...
- All Government IT Webcasts