bullies – Techdirt (original) (raw)
What3Words Sends Ridiculous Legal Threat To Security Researcher Over Open Source Alternative
from the never-use-what3words dept
A couple years we wrote about What3Words, and noted that it was a clever system that created an easy way to allow people to better share exact locations in an easily communicated manner (every bit of the globe can be described with just 3 words — so something like best.tech.blog is a tiny plot near Hanover, Ontario). While part of this just feels like fun, a key part of the company’s marketing message is that the system is useful in emergency situations where someone needs to communicate a very exact location quickly and easily.
However, as we noted in our article, as neat and clever as the idea is, it’s very, very proprietary, and that could lead to serious concerns for anyone using it. In our article, we wrote about a bunch of reasons why What3Words and its closed nature could lead to problems — including the fact that the earth is not static and things move around all the time, such that these 3 word identifiers may not actually remain accurate. But there were other problems as well.
And, apparently one of those problems is that they’re censorial legal bullies. Zach Whittaker has the unfortunate story of how What3Words unleashed its legal threat monkeys on a security researcher named Aaron Toponce. Toponce had been working with some other security researchers who had been highlighting some potentially dangerous flaws in the What3Words system beyond those we had mentioned a few years back. The key problem was that some very similar 3 word combos were very close to one another, such that someone relying on them in an emergency could risk sending people to the wrong location.
The company insists that this is rare, but the research (mainly done by researcher Andrew Tierney) indicates otherwise. He seemed to find a fairly large number of similar 3 word combos near each other. You can really see this when Tierney maps out some closely related word combos:
When this happens, you get cells with these offset areas *very* closely matched.
We can see that the row above the banding has a "q" (the value on "n" on the lower left) that is approximately 14,560,000 lower than the cell below. pic.twitter.com/pYumzdxyTh
— Cybergibbons (@cybergibbons) April 27, 2021
In a follow up article, Tierney detailed a bunch of examples where this confusion could be dangerous. Some of them are really striking. Here’s just one:
?I think I?m having a heart attack. I?m walking at North Mountain Park. Deep Pinks Start.? ? 1053m.
(Try reading both out)
https://what3words.com/deep.pink.start
Anyway, Toponce had been tweeting about Tierney’s findings, and talked about WhatFreeWords, which had been “an open-source, compatible implementation of the What3Words geocoding algorithm.” It was a reverse engineered version of the proprietary What3Words system. That tool was created back in 2019, but a week after it went online, What3Words lawyers sent incredibly overbroad takedown letters about it to everyone who had anything even remotely connected to WhatFreeWords, and had it pulled offline basically everywhere.
First up: this is ridiculous. While reverse engineering is unfortunately fraught with legal risk, there are many areas in which it is perfectly legal. And it seems like WhatFreeWords implementation should be legal. But it appeared to have been a fun side project, and not worth the legal headache.
Even though WhatFreeWords was disappeared from the world in late 2019, it appears that Toponce still had some of the code. So in tweeting about Tierney’s research, he offered up the tool to researchers to help investigate more problems with What3Words, similar to what Tierney had found.
And that’s when What3Words’ lawyers pounced. And, in pouncing, the mere chilling effects of the legal threat worked:
I've been served legal threats by @what3words. Both via email and post.
I am complying with all their demands. This is not a battle worth fighting.
Just let it be known however, they are evil.
— Aaron Toponce ?? (@AaronToponce) April 30, 2021
Toponce also admits he couldn’t even sleep after receiving the threat letter. This is an underappreciated aspect of the insanely litigious nature of many censorial bullies these days. Even if you’re in the right, getting sued can be completely destructive. Toponce was trying to help security researchers better research an application that is promoted for being safe and security researchers should be allowed to make use of reverse engineering to do exactly that. But, What3Words and their bullying lawyers made sure that’s impossible.
To be fair to their bullying lawyers, the threat letter is not as aggressive as some others, and they even make it explicit that they are not seeking that Toponce stop criticizing the company:
In this connection, and to be clear, our client does not require the deletion of your criticism of and feedback in respect of its service.
But… it still makes pretty stringent demands.
i) delete all copies of “What Free Words” and any other works derivative of W3W’s software and wordlist presently in your possession or under your control; ii) confirm, to the best of your knowledge, the identities of all parties / individuals to whom you have provided copies or derivations of the software and/or wordlist; iii) agree that you will not in the future make further copies or derivations of and/or distribute copies or derivations of the software and/or wordlist; iv) delete any Tweets or other online references made to the copies / derivations of our client’s software and wordlist and that are connected with or emanate from the “What Free Words”, and agree not to make similar representations in the future.
Of course, there are some questions about what intellectual property is actually being infringed upon here as well. When the company’s lawyers got the original WhatFreeWords site taken down, they claimed copyright and trademark rights, though extraordinarily broadly. They claim their own software is covered by copyright, but WhatFreeWords isn’t using their software. They also claim that all the 3 word combos are covered by copyright and… eh… it might be in the UK where W3W is based, but in the US, it would be harder to claim that three random word combos are creative enough to get a copyright. Also, in the US there would be a strong fair use defense. Unfortunately, in the UK, there is a ridiculous concept known as “database rights” that let you claim a right over a mere collection of things, even if you have no claim to the underlying rights. But, even so, it seems that there should be a fair use defense here. The UK has a fair dealing exception for research and private study, which seems like it should apply as well.
As for the trademark claims, well, no one’s going to get confused about it, since it’s pretty clear that WhatFreeWords was designed explicitly not to be from What3Words, and in this particular case, it’s not being offered widely, just to knowledgeable security researchers. Even more insane: the original threat letter over WhatFreeWords claimed that there could be criminal penalties for violating consumer protection laws, and that’s just insane.
Still, as Mike Dunford notes in his thread about this situation, W3W’s decision to focus on locking up and threatening everyone perhaps explains why so few people know about or use What3Words. Imagine if they had built this as an open tool that others could build on and incorporate into other offerings. Then they could have others experiment and innovate and get more people to adopt it. By making it proprietary, and locking it down with threats and asshole lawyers, there’s simply no reason to bother.
The only proper response to this is never, ever use What3Words for anything that matters. Beyond not giving in to censorial, abusive bullies, their legal reaction to a security researcher doing reverse engineering work to help find potentially dangerous problems with What3Words screams loudly to the world that What3Words has no confidence that it’s products are safe. They’re scared to death of security researchers being able to really test their work.
Both of these reasons means that What3Words should be remembered as little more than a failed.dumpster.fire rather than the cool.mapping.idea it could have been.
Filed Under: 3 words, aaron toponce, andrew tierney, bullies, copyright, location, open source, security, threats, trademark, whatfreewords
Companies: what3words
Be Careful What You Wish For: TikTok Tries To Stop Bullying On Its Platforms… By Suppressing Those It Thought Might Get Bullied
from the this-shit-ain't-that-easy dept
Be careful what you wish for when you demand that internet platforms police the internet for any and all bad stuff. There was a lot of fuss and cringing when this story broke that part of TikTok’s content moderation strategies included suppressing videos by disabled, queer, and fat creators.
Leaked documents reveal how TikTok hid videos of people with disabilities. Queer and fat users were also pushed out of view.
No matter how you look at it, this looks bad. And for good reasons. But, as the company itself claims, it had good intentions behind this, even if the execution was atrocious. There have been tons of reports of bullying on the platform — and like with so many social problems that are making themselves more widely known thanks to technology, the first reaction of many is to blame the tech platform, and to demand they “fix it.”
And, a la the infamous paperclip maximizer thought experiment, what’s the most efficient way to stop bullying? Some figured it might be to hide the likely-to-be-bullied rather than the actual bullies:
The relevant section in the moderation rules is called “Imagery depicting a subject highly vulnerable to cyberbullying”. In the explanations it says that this covers users who are “susceptible to harassment or cyberbullying based on their physical or mental condition?.
According to the memo, mobbing has negative consequences for those affected. Therefore, videos of such users should always be considered as a risk and their reach on the platform should be limited.
TikTok uses its moderation toolbox to limit the visibility of such users. Moderators were instructed to mark people with disabilities as “Risk 4”. This means that a video is only visible in the country where it was uploaded.
And, yes, there is a very reasonable argument that the content moderation team at TikTok/ByteDance should have recognized that this is a horrible way to deal with bullying, you can see how those desperate to deal with “the bullying problem” might end up thinking that this is the simplest path to get people to stop screaming at them about bullying.
This is a key point that we keep trying to raise in the mad dash currently happening to put responsibility on platforms to “clean up” whatever mess politicians and the media see. There’s this weird belief that the platforms can wave a magic wand and make bad stuff go away — when the “easier” solution (if a morally questionable one) is to just figure out a way to hide the real problems or sweep them under the rug.
This is why I keep trying to argue that if we’re highlighting societal problems that are manifesting themselves on social media, expecting tech platform companies to magically solve societal problems is not just going to fail, but it’s going to fail in spectacular and awful ways. This TikTok “hide the people we think might get bullied” is just one example of sweeping a societal problem under the rug to avoid having to improperly answer for it.
Unfortunately, I fear most people will just blame TikTok for it instead.
Filed Under: bullies, bullying, content moderation, content moderation at scale
Companies: tiktok
US TPP Negotiators Accused Of Bullying; Refusing To Budge On Ridiculous IP And Corporate Sovereignty Demands
from the i'm-sorry-for-my-country's-insane-negotiators dept
This is hardly a surprise, but more reports are coming out revealing that the US’s ongoing strategy in negotiating the TPP (Trans Pacific Partnership) agreement is to not take into account the many, many concerns about the US’s hardline, maximalist position on both intellectual property issues and efforts to give corporations sovereignty over national laws under the misleadingly named (and purposely boring) “investor state dispute settlements” (ISDS). You would think that with widespread dissection and concerns expressed about the leaked intellectual property chapter, that the USTR might possibly ease up on its crazy maximalist demands. Not so — but that’s to be expected when you have Stan McCoy as the lead negotiator on intellectual property issues. McCoy is a famed extreme maximalist on IP issues who has more or less admitted to having no interest at all in hearing from public interest groups, while lapping up any opportunity to parrot bogus claims from the industry. McCoy was the same guy behind the embarassing disaster known as ACTA, which flopped so miserably. You’d think he’d take a hint, but instead it appears he’s decided to dig in his heels and make sure the US continues to live up to its reputation as an obnoxious bully.
Multiple reports have called out the US (and McCoy in particular) for its aggression and “bullying” in the negotiations. Others have accused the US of engaging in a “negotiation by exhaustion,” in which US negotiators seem to figure if they just stand their ground forever, everyone will eventually be bullied into agreeing to the US’s positions.
‘The US has adopted a strategy of exhaustion in its bullying of negotiators on the crucial intellectual property chapter to force countries to trade away health in the Trans-Pacific Partnership Agreement negotiations in Salt Lake City’, according to Professor Jane Kelsey from the University of Auckland, New Zealand, who is monitoring the negotiations.
‘The US has stepped up its aggression as they move towards their “end point” of the TPPA ministerial meeting in Singapore from 7 to 10 December’, said Professor Kelsey.
[….] ‘This is a loaded game’, Professor Kelsey said. ‘McCoy sets the agenda and timetable. Negotiators are working from morning until late at night and preparing to work all night, if necessary.’
The second link above, from a publication in Australia, notes something similar and complains about the Australian government’s seeming willingness to side with the US on these issues:
The United States has been accused of negotiation by exhaustion in last-minute talks in Salt Lake City ahead of the final ministers’ meeting that will decide the makeup of the Trans Pacific trade deal between Australia and eleven other nations.
Information leaking from the closed official-level talks suggests the United States is giving no ground on questions of intellectual property and medicines and is insisting each nation sign up to so-called Investor State Dispute Settlement provisions that would allow global corporations to sue sovereign governments.
[….] “What is happening is not a negotiation,” said Patricia Ranald, Convenor of the Australian Fair Trade Network. “The United States is dictating the terms and it seems the Australian Government is not prepared to join other governments which are resisting these demands
While Stan McCoy plays out his own last stand game, pushing for policies that may help a few of his friends in the industry at the expense of the public, hopefully that last point — about other governments resisting McCoy’s attempt to bully them into a really bad deal — stays true. An analysis of the positions on the IP Chapter, done by Gabriel Michael, highlighted how the US’s position is a lot more isolated than it might like. That may explain the bullying behavior. It looks like the USTR is getting desperate, realizing its usual tricks and games aren’t fooling most of the other negotiators. As Michael’s analysis showed, the US and Japan (two of the strongest supporters of maximalism) appear to be fairly isolated — issuing a lot more proposals that no one else supports.
Of course, the USTR is somewhat famous for its ability to start horse trading, promising bogus sweetheart deals if people just agree to awful language that will do massive harm to the public, so it’s still something to be quite nervous about until any final text is revealed. Of course, just the fact that the USTR has still refused to reveal the text itself should be reason enough to recognize that this deal is a joke designed to screw over the public. Those acting in the interest of the public don’t hide their efforts from the public.
Filed Under: bullies, copyright, corporate sovereignty, intellectual property, isds, negotiations, public interest, stan mccoy, tpp, ustr
VCs Successfully Fund Lawsuit Against Best Buy After It Completely Screws Over Startup
from the stopping-bullies dept
I recently heard a story of yet another startup which had been hit by a bogus patent troll lawsuit. As always, it would be cheaper to just settle the lawsuit than to fight it in court, even though they knew that they would win. In this case, the CEO said he was going to fight it anyway because it was “the right thing to do” and to ward off future trolls. That, of course, is the worst part of troll lawsuits: the reason they work so well is that it’s cheaper to “lose” and pay the troll than to “win” in court. Obviously, the SHIELD Act looks to change some of that calculus by making trolls have to pay up for bogus lawsuits. However, in general, plenty of startups can tell stories (beyond just patent trolls) in which they “settled” some sort of legal dispute, rather than did what’s “right” and to win in court. Frequently, this is driven by the pressures from investors and venture capitalists, who don’t want to fund lawsuits but high growth companies.
Of course, many realize that settling or foregoing a legal response in such cases can often make the situation worse, because it attracts more such activity from companies who know they can get away with it. I’m thinking of that after reading this fascinating story by famed venture capitalist, Josh Kopelman, in which he discusses why he and another investor in the startup TechForward financed a lawsuit against Best Buy. You should read the whole thing, but the short version is that Best Buy approached TechForward about using its system to create a “buyback” program. They signed some non-disclosure agreements, leading TechForward to share a bunch of confidential info about their model with Best Buy. Best Buy proceeded to take that info, and then tell TechForward “no thanks.” Of course, it came out that the plan all along had been to get access to TechForward’s model to build Best Buy’s own. Due to the amount of resources (over a year) that went into trying to get the deal, having Best Buy pull it out from under them left TechForward in a bad position, and its assets were sold off. But the VCs kept funding the lawsuit:
Best Buy’s last minute actions posed a fatal blow. Techforward sued Best Buy – but it would take a very long time before the case made it through trial. And since Techforward had invested so much money working on the Best Buy deal, the cash position of the company was not looking good. The board ultimately had to make a horrible choice – they sold Techforward’s assets to a third party. BUT – they did not sell the lawsuit. Instead, First Round Capital (along with our co-investor, NEA) decided to keep funding the lawsuit. And over the last 18 months, we and NEA gave the lawyers hundreds of thousands of dollars to keep the suit going. This wasn’t an easy decision. We are in the business of funding companies – not lawsuits. But my partner, Howard Morgan, was a board member of Techforward – and he sat in those board meetings. And Howard was convinced that Best Buy shouldn’t get away with their behavior. We needed to send a message to Best Buy – and every other large company – that they can’t blatantly violate agreements and steal ideas from startups. And if big companies believe they can violate agreements with immunity because a startup can’t afford to sue them, it is bad news for every startup in the ecosystem.
The end result is that a jury sided with TechForward, awarding it a 22millionaward,alongwithanadditional22 million award, along with an additional 22millionaward,alongwithanadditional5 million in punitive damages as response to the action being willful and malicious. The details show that Best Buy employees were pretty blatant about their plan to lead TechForward along, get access to its model, and then copy it. In one email exchange between employees, they even said directly “…remove the Techforward reference in the file names…”
A couple of thoughts on this. It is incredibly rare and surprising to see VCs like Josh and Howard agree to do this kind of thing. I can’t recall a single instance of VCs agreeing to fund a lawsuit like this. However, as with the CEO fighting the patent troll, there’s an important signalling aspect to this decision. Letting companies know that they can’t just rely on VCs not wanting to fund such a lawsuit might lead some big companies to think twice before trying to take advantage of smaller companies. Hopefully more venture capitalists will agree to do similar things.
The second interesting tidbit: this kind of lawsuit got figured out without using a patent. We always hear about how patents are “necessary” to stop big companies from just copying small companies — but what this showed was that (1) it’s not always so easy to copy without more detailed knowledge and access and (2) even if such access is granted, it can be done so conditionally (such as with an NDA, as in this case) allowing for the sharing of information, without having to use a tool like a patent or a copyright. Hopefully more investors will do similar things, recognizing not just the wider social benefit, but in scaring off other companies from either filing bogus lawsuits of their own, or just taking questionable actions towards the companies.
Filed Under: breach of contract, bullies, howard morgan, innovation, josh kopelman, lawsuits, venture capital
Companies: best buy, techforward
Best Of The Trademark Bullies: Village Voice Sues Yelp Over 'Best Of' Lists
from the answer:-none dept
The latest in a long series of stupid trademark bullying lawsuits comes to us courtesy of The Village Voice (who should know better than to file bogus lawsuits). The Voice is suing Yelp for trademark infringement. The Village Voice somehow convinced the USPTO that it deserved a trademark on the phrase “best of [place name]” for certain locations — such as “Best of Seattle” or “Best of San Francisco.” Yelp, quite reasonably, also uses the term of “best of” to describe certain places:
Village Voice is claiming that Yelp’s infringement is “willful” because it notified the company, and Yelp apparently told them to go away. It’s also ridiculously claiming that Yelp’s usage has “irreparably harmed” the company. I realize that’s standard language used in such lawsuits, but seriously?
The EFF points out that the US Patent and Trademark Office is partly to blame for allowing registrations on such trademarks:
What is going on at the Patent and Trademark Office? For decades, folks have been complaining (with good reason) that the patent examiners need to do a better job of screening out bogus patent applications. It’s clear that the problem extends to the trademark side as well. The PTO has allowed companies and individuals to register marks in any number of obviously generic and/or descriptive terms, such as “urban homestead” (to refer to urban farms), “gaymer” (to refer to gay gamers), and “B-24” (to refer to model B-24 bombers).
Once a mark is registered, it is all too easy for the owner to become a trademark bully. And while companies like Yelp have the resources to fight back (as we expect it will), small companies and individuals may not. Just as dangerous, the trademark owner may go upstream, to intermediaries like Facebook who have little incentive to do anything other than take down an account or site that’s accused of infringement.
Separately, the EFF asks the most important question: who is actually being deceived here? There is no confusion. No one associates “best of” with the Village Voice. Everyone reads it as a perfectly normal descriptive term, rather than a trademark belonging to any single party.
Filed Under: best of, bullies, trademark, trademark bullies
Companies: village voice, yelp
Don't Blame Facebook For Some Kids Beating Up Another Student
from the missing-the-point dept
Pickle Monger alerts us to a CNN story suggesting that a Facebook group “may have lead to the beating of a 12-year-old” boy. Really? Facebook could do that rather than a group of kids who are bullies? The “group” in question was apparently a group (potentially inspired by a South Park episode) for a national “kick a ginger” (redhead) day. There was actually some controversy about this last year as well. It seems bizarre to blame Facebook (or, for that matter, South Park) for this at all, and so Pickle Monger went and checked out the actual Facebook group and noted: “There doesn’t seem to be any outrageous comments. In fact most comments are in good humor, some by readheads. The event has one confirmed guest – assumingly the creator, who seems to be readheaded (assuming it’s his photo on the profile). The event has two people awaiting reply.” Kids do stupid things, and sometimes the stupid things they do involve hitting other kids. That’s not the fault of Facebook.
Filed Under: blame, bullies, south park
Companies: facebook
Reporting Bullies Online: Helpful Or Not?
from the bullies-will-be-bullies dept
For years, there are a group of folks who regularly raise a stink about the rise of cyberbullying and how something needs to be done to “protect the children.” Of course, the solutions never make very much sense. At one end, you have things like people dressing up as Spiderman and telling kids to stop bullying each other, and at the other extreme, you have people saying that there should be laws outlawing cyberbullying.
But what about relying on the same technology that enables cyberbullying to potentially be a part of the solution? The AP is running a story about a website that lets kids anonymously report bullying activities (beyond just cyberbullying) to school officials, so that they can take care of it. It’s an interesting idea — and to be honest, my first reaction on reading it was more surprise that such things hadn’t existed for years. How hard is it to set up a form on a website that doesn’t require logging in and identifying yourself?
However, I wonder how well it actually works in practice. Perhaps it is effective, but it’s difficult to see how this actually solves the problem the article claims it solves: which is that whoever reports the bullying will be called a “snitch.” In plenty of cases, I would imagine that the bully would simply blame the bullied. And, depending on the situation (i.e., depending on how scared the bully is of further retaliation), it could just get them even more riled up against their victim, naturally assuming that’s who reported them. However, if it can be shown to be an effective solution to help stop bullying, then perhaps it does make sense. I certainly wouldn’t condone any kind of bullying, but at some point you have to realize that there are always going to be bullies of some kind, and while any solution that can alleviate the suffering of bullied individuals sounds good, they need to be grounded in reality.
Filed Under: anonymous reporting, bullies, cyberbullying