An Open Letter to John McCain

The Honorable John McCain
241 Russell Senate Office Bldg.
United States Senate
Washington, D.C. 20510

John_McCain@McCain.senate.gov

Dear Sir:

I am not one of your Arizona constituents, so I can't rant and rave about how I've voted for you in the past or will in the future. I can't rationally threaten to oppose your reelection. And, being a member of the great middle class, I can't offer to fill your campaign war chest like some special interest groups can (although I daresay that, in your particular case, it would be a bad move for them to attempt such a thing…).

But you are a national political figure. And you are the ranking minority member on the Senate Commerce Committee. Further, you seem like a reasonable fellow, rather unlike your esteemed colleague and committee chairman from South Carolina - and as a former pilot you obviously have some baseline understanding of engineering and technical issues. So, here goes …..

I am writing to you in regard to hearings held on 28 Feb 2002 in the Senate by Sen. Hollings in the Commerce Committee The subject of these hearings was essentially legislation drafted (but not yet introduced) by Sen. Hollings which would mandate the inclusion of copy protection mechanisms in all electronic devices (including software) manufactured or sold in the United States. I believe that you were in attendance at this hearing.

This is about the stupidest scheme to have emanated from the vicinity of the Capitol I have ever heard, and there have been some real doozies over the years.

I am a software engineer. Have been for over 20 years. And speaking as a professional programmer, I can assure you that the technical effort required to accomplish the objectives set forth in this bill would make the whole Y2K panic seem like a picnic. And it is doomed to fail.

Think about it with me, for a moment, and you'll see what I mean.

The entertainment industry has had the pants scared off it by Napster and its ilk. They are in an absolute panic because they realize that the digital world is inherently and by design an "open" world - a world where information does indeed, wish to be free. Digital documents (a digital document can be any type of file - text, music, video) can be very easily reproduced, and, with the assistance of the Internet, distributed.

Think of the digital universe as a language. This language has as the whole of its alphabet the digits one and zero. If you think about it, it's a basic law of nature. The one thing that can be said for certain about any electrical circuit is that there is either current flowing, or there is not. It's either on or off. One or zero. It is incredibly easy to reproduce ones and zeros. Thus, digital data has, by its very nature, the ability to be infinitely and perfectly copied. By simply interpreting this raw language, it is literally possible for me to print a copy of an MP3 music file onto paper. To a computer, everything is either a one, or a zero. Including movies that have been digitally encoded onto DVD, and music placed on CD.

Bits are made to be copied - every network transmission, every 'File Save' command, every operation of a microprocessor is, at some level, concerned with the copying of bits. In the words of Bruce Schneier, president of Counterpane Security, "Trying to make bits uncopyable is like trying to make water unwet.".

This is, in the view of the music and movie industries, a real cause for panic. For if all of their titles - all of their intellectual property- can be so easily duplicated, who will purchase their products?

There are only two ways to defend property of any sort. One is to guard it constantly, using guards, locks and alarms. The other is to mark the property indelibly as belonging to you, so that if stolen it can be less easily disposed of and more easily recovered. Let's look at these two approaches for digital data.

How would you guard digital data? Well, the most obvious way is to not make it digital in the first place! This would mean abandoning DVD and CD formats, and returning to analog formats such as tape and vinyl. Clearly not an acceptable solution: consumers would howl in rage and disbelief, and would simply stop buying the product.

OK, well maybe we can lock it up. And you could - but only by not releasing it! For once the lock was breached, presumably for a paying customer, a perfect copy would exist in digital form, which could then be infinitely copied. This was the point that the gentleman from Intel attempted to make. We're back to where we started.

Well, what about marking the data? Preferably with a sort of lock system all on its own? This was the approach recently taken by the Secure Digital Music Initiative. It took a group of researchers from Princeton less than a week to break the system. By their very malleability any alteration to a digital data set can be easily detected and removed. And even were this not the case, the data could simply be copied to a non-digital context and then re-digitized, stripping any 'watermark' or other identifying characteristic.

So maybe if we just throw the full weight of the Federal research bureaucracy behind it, our best computer scientists will find a way to securely do it.

Unfortunately, this is a delusion too. As described above, it is quite easy to move digital data to an analog format (i.e. playing the sound on your stereo or watching a movie on your television) and then re-digitize it. There is some minor loss of quality of signal in this process, but it's usually how first run movies such as 'Lord of the Rings' initially find their way onto the Internet. Using my Windows 98 computer I can create a digital image of any song simply by hooking the 'Line Out' jack on my sound card to the 'Line In' jack and starting a recording session. On my Unix machine it's even easier: just link a file to the proper device and anything rendered (or, in the case of audio or video, played) to that device will be saved to the file! A one line command in software, no wires needed!

So should we just ban CD burners on computers? Ban recording audio or video on computers? I'm not sure the public would sit still for these "solutions", and anyway, what do you do about all the burners and sound cards already in existence? What about their legitimate uses, such as saving movies I make of my grandchildren, or storing backups of my files?

So along comes Sen. Hollings draft legislation: the SSSCA.

"Sec. 101: Prohibition of Certain Devices
(a) In General -- It is unlawful to manufacture, import, offer to the public, provide or otherwise traffic in any interactive digital device that does not include and utilize certified security technologies that adhere to the security system standards adopted under section 104."

I'm a programmer, not a lawyer. But even I can read this - it would require every "interactive digital device" (defined later in the draft to include software) to have the same, mandated copy protection scheme embedded in it, and to refuse to render (play or display) content that was not marked with the requisite digital rights management scheme.

Every device. Every program.

My current employer makes digital telephony devices. We have a product line of some 50 different models. Each and every one of them would have to be either redesigned or re-coded to accept this new mandate. These are not general purpose computers, but they could certainly be used to digitally copy music and voice - in fact, that's what they're designed to do - copy music from memory to a phone line! Most of the devices have very, very small memory footprints - it's not unusual for devices such as ours to use less than 4 kilobytes (4096 characters) of actual code - MS Windows, by contrast now runs to several hundred megabytes of code. Unlike a general purpose computer, our devices have no hard disk drive - everything is stored in memory. Adding code means adding memory, and adding memory means adding cost.

We employ about 100 people - here in Indiana, in Minnesota and in North Dakota. There are six engineers - three hardware guys and three software guys. To actually implement this kind of mandated copy protection scheme for all of our devices would take us (conservatively) somewhere in the neighborhood of three to five years. In the meantime, of course, we would be forbidden to sell any product without such a scheme. Simply put, we would be out of business.

Extend our circumstances to our much larger cousins at Microsoft, Sun, Intel, Dell and others, and you'll immediately grasp why the industry as a whole, including people who are frequently at loggerheads over every other issue, are all together on this one. This bill, as written, would cause such a severe economic dislocation to the high tech industry as to come close to being an industry killer.

But the situation gets even worse. The bill, as written, would literally destroy any 'Open Source' software based on the GNU General Public License. This is because the GPL forbids inclusion of closed source, proprietary code in any code covered by the GPL, and the language of the draft legislation would mandate such an inclusion. This would place operating systems such as Linux and web server software such as Apache between a legal rock and a hard place. If they added in the code required by law, they would be violating the contract implicit in the license by which their software is distributed. Since the legislation would take precedence over private contractual agreements in the United States, the software would simply cease to exist here- it could not be maintained or distributed further. Since many Linux and open source developers are Europeans or Asians (Linux was developed by a Finn), that entire branch of our industry would move offshore. Including companies such as Red Hat. Close to 70% of Internet web servers use the Apache program. Linux is used extensively in academic and business infrastructure. Nearly half of all Internet servers run Linux or some form of Open Source Unix.

As if this weren't bad enough, the draft bill contains the seeds of its own failure in any case:

"(b) Exception -- Subsection (a) does not apply to the offer for sale or provision of, or other trafficking in, any previously-owned interactive digital device, if such device was legally manufactured or imported, and sold, prior to the effective date of regulations adopted under section 104 and not subsequently modified in violation of subsection (a) or 103(a)."

Obviously, without this provision, every computer and other "interactive digital device" that currently exists would have to be confiscated or otherwise rendered useless. I don't think this would fly with the American public - to suddenly find that their VCR has stopped recording, or to have the Federal Copyright Police show up at the door demanding they hand over their computers.

Yet with this provision, there can be no such thing as secure digital content, for some machine, somewhere, will have the ability to make perfect digital copies of material as it was originally designed to do, and will further have the ability to make these copies available to other machines.

The problem is only exacerbated if you extend this paradigm world-wide - what do you think the chances are that the 'Pirate Republic of China' would ever agree to building and designing such restrictions into computers or other equipment they manufacture for their own domestic consumption? And if one guy in Peking makes a copy and posts it on the 'Net ..... game over.

Over the course of the last several years, copyright law has been enhanced and extended several times, always at the behest of the entertainment or publishing industries. Our Founding Fathers envisioned copyright as a time limited monopoly - read the copyright clause in the Constitution and the writings of Thomas Jefferson on the subject - to insure that creators had a chance to get financial remuneration for their creations. It was never intended to be a permanent condition, yet that is effectively what this bill (along with other recent laws such as the infamous Digital Millenium Copyright Act) would create.

Assume that the draft legislation was in effect now, and that somehow, despite its evident impossibility, perfect protection were defined and achieved. If I created a new work, and placed it under the digital rights management schemes envisioned by the bill, my copyright would effectively never expire. How could it? It would be impossible to circumvent the copy protection. It would be illegal for anyone to attempt to remove the copy protection mechanism, presumably even 75 years after my death when my copyright expired. And that's assuming that the media on which my work was distributed could even be read by anyone at that time, for with the mandated copy protections in place, the work could not have been moved to a different format without the connivance of the copyright holder. When publishers of paper books to move to an electronic format, this bill would completely eviscerate the concept of the public library. How many publishers would grant to an institution an unlimited number of 'reader licenses' for a price which a non-profit, quasi-governmental agency such as a library could afford?

Imagine a world were books were equipped with thumbprint readers and retinal scanners. A world where removal or circumvention of these "protective" devices would get you a fine and jail time more severe than that imposed on many violent criminals. In such a world, a book would only allow itself to be opened and read by the "license holder" - i.e., the one who paid for the content. This is the world envisioned by Sen. Hollings proposal and by the entertainment industry. It is a world more akin to the nightmare visions of George Orwell than to the democratic aspirations of Thomas Jefferson.

Mozart was neither very popular or well-known in his time. How much poorer would Western civilization be if his work had been locked down under a digital rights management scheme and never heard? Would we know the works of William Shakespeare had Senator Hollings been a member of the Elizabethan Parliament rather than a US Senator? Once the owner of a "protected" work dies, or the key is lost, or the publisher goes under, the work is effectively lost forever. Unless, of course, some "criminal" programmer "cracks" or circumvents the protection - and doesn't land in jail!

Perhaps a couple of recent examples of the principles embodied in the draft bill would help. If you look back into the early 1980's, when Sony had just introduced the Betamax video recorder, you will find one of the main protagonists of today's debate, Mr. Jack Valenti of the MPAA, espousing many of the same arguments against the VCR as he is today against the world of digital information. Home video recording would undoubtedly lead to the utter destruction of Hollywood and the entire movie industry! Since the defeat of his position in the Congress and the courts, it is obvious that his dire predictions have not only failed to materialize, they have instead been reversed: Hollywood has never had it so good. Despite all the "time-shifting" and "fair use" recording, the entertainment industry continues to thrive and prosper.

Now, have you every heard of DAT - Digital Audio Tape? In the early 1990's, this technology was poised to allow perfect digital copies of material to a form of magnetic tape. Congress, in its infinite wisdom and at the request of Mr. Valenti and others in the entertainment industry, killed it before it was even born by the imposition of strict copy controls and a tax on every blank digital tape sold, under the presumption that every such tape would be used to make illegal copies of something. This tax is actually distributed to the "content producers" (the entertainment industry) as remuneration for their presumed losses.

It never took off. The units were clunky and expensive. The media was overpriced to cover the effects of the tax. The wags in the trade press remarked that "DAT is DOA".

Which example would you care to see applied to the Internet, arguably the greatest communication innovation of all time?

The rules of the world are changing. The models we have used for centuries are breaking down in the face of the new reality of the information age. There are powerful interests afoot that sincerely believe that their very survival is at stake in the maintenance of the status quo.

It is true that copyright law is in serious need of revision - but the SSSCA revises it in exactly the wrong direction. Creative artists need protection for their work for a limited time, as envisioned by the Constitution. Ideas cannot and should not be turned into "real" property, existing in perpetuity for their creators heirs and assigns. The original copyright term was 14 years: currently, it's up to 75 years past the death of the author! In the early days of our Republic it could literally take several years for a printed book to achieve "coast to coast" distribution, yet the framers limited copyright to 14 years. Given the speed with which information now moves, it makes sense now to reduce the term, not to increase it. Unfortunately, given the political clout shown by the entertainment industry, the trend in copyright and intellectual property law is obvious.

One must ultimately ask oneself why the entertainment industry is so adamant about this legislation. It would seem that existing protections are working: after all, Napster was shut down by a successful lawsuit for copyright infringement. It is obvious that digital copying cannot be stopped, only criminalized. But these illegal copies are already criminal! It is theft to illegally copy a work, whether you use a Xerox machine or a CD burner. Why the draconian extension into micromanaging the actual technology?

It must be concluded that the real purpose of this draft legislation is the ultimate extension of copyright to the realm of real property. Once a digital work is protected, it would remain so for all time, copyright expiration or not. This would insure the survival of the entertainment industry in perpetuity, using current business models and practices. Far from supporting innovations and new technology, this bill seeks to destroy the foundation on which innovation is built - it seeks to codify the current state of the art for all time, and forbid any innovation in content delivery that would fall outside the "protected" norms.

This flies in the face of the whole purpose of copyright, as expressed in the Constitution, to grant a monopoly for a limited time to authors and inventors. This substantially changes the face of intellectual property law. Rather than attempting to innovate new business models that would allow their continued success, the entertainment industry is seeking government sponsored protection from forces at work within the market, brought about by our increased understanding of the nature of the world and the various ways that we can represent it.

I close with a quote from a novel by Robert Heinlein titled 'Life Line', which seems entirely appropriate for the debate at hand:

"There has grown up in the minds of certain groups in this country the notion that because a man or corporation has made a profit out of the public for a number of years, the government and the courts are charged with the duty of guaranteeing such profit in the future, even in the face of changing circumstances and contrary to public interest. This strange doctrine is not supported by statute or common law. Neither individuals nor corporations have any right to come into court and ask that the clock of history be stopped, or turned back."

Sincerely,

Daithi M Haxton
1 March 2002

Copyright 2002 by Daithi M Haxton