612 1 UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF NEW YORK 2 ------------------------------x 3 UNIVERSAL CITY STUDIOS, INC., et al, 4 Plaintiffs, 5 v. 00 Civ. 277 (LAK) 6 SHAWN C. REIMERDES, et al, 7 Defendants. 8 ------------------------------x 9 July 20, 2000 10 9:00 a.m. 11 Before: 12 HON. LEWIS A. KAPLAN, 13 District Judge 14 APPEARANCES 15 PROSKAUER, ROSE, L.L.P. Attorneys for Plaintiffs 16 BY: LEON P. GOLD CHARLES S. SIMS 17 SCOTT P. COOPER 18 FRANKFURT, GARBUS, KLEIN & SELZ Attorneys for Defendants 19 BY: MARTIN GARBUS ERNEST HERNSTADT 20 DAVID ATLAS 21 22 23 24 25 613 1 (In open court) 2 MR. GARBUS: May we approach the bench? 3 THE COURT: Yes, you and Mr. Gold may approach the 4 bench. 5 (At the sidebar) 6 MR. GARBUS: I got the Court's opinion yesterday when 7 I got back to my office, and we will try and deal with it in 8 some way. I do want to point out that as I read the 9 transcript, I was asked to stop going into an area that I 10 thought was relevant to the lawsuit because the Court felt 11 that I was getting into a recusal issue. The Court then asked 12 the question that was specifically related to the recusal 13 issue. I think it's very difficult to try a case while this 14 is going on. 15 THE COURT: I hear what you said, and what you've 16 said is, regrettably, absolutely false. And the transcript so 17 reflects. 18 MR. GARBUS: Secondly -- 19 THE COURT: I did not stop you from going into 20 anything. I raised a concern about whether you were doing it 21 for a different purpose. I said that. You then said you 22 weren't and therefore you would leave the subject. I said, 23 look, if you want to press it, it raises another issue and I 24 will deal with it. You then elected to stop. 25 MR. GARBUS: Thank you. With respect to the issue of 614 1 the press, the Court has already indicated in its previous 2 decisions some concern. I had 12 calls from the press 3 yesterday. I spoke to nobody. I do not fault Mr. Gold at 4 all. I do understand, and I could be totally wrong, and I am 5 not making criticism of any kind, that members of the 6 Proskauer firm have spoken to the press. If I'm wrong, then 7 I'm wrong. 8 MR. GOLD: I didn't hear what you said. 9 MR. GARBUS: That members of the Proskauer firm have 10 been speaking to the press, and I find nothing wrong with it, 11 I'm not even asking about it. 12 Are you saying -- 13 THE COURT: Stop it, Mr. Gold. 14 MR. GARBUS: All I'm saying is if there is to be a 15 bar, or if there is to be any significance given to any 16 discussion by any member of the defense team or the 17 defendants -- I have also seen Mr. Valenti's statements and 18 statements by the MPAA -- then if the Court wishes to impose a 19 press bar on everybody, I will not object to it. 20 THE COURT: Are you asking for it? 21 MR. GARBUS: Absolutely not. But I don't want to be 22 the only one feeling the pressure of that restriction. 23 THE COURT: Mr. Garbus, any pressure you are feeling 24 in this regard is internally generated. 25 MR. GARBUS: Thank you. 615 1 THE COURT: I have imposed no bar, no one has asked 2 me to impose a bar, and so that the record is abundantly 3 clear, yesterday when you made a statement to the effect that 4 you had not been making certain sorts of out of court 5 statements or would not, or something to that effect, there 6 was comment on the fact that you were speaking only for 7 yourself. 8 MR. GARBUS: Absolutely. 9 THE COURT: And you made clear that you were speaking 10 only for yourself. 11 MR. GARBUS: Absolutely. 12 THE COURT: And you know we are not, all of us, 13 totally in a vacuum. It is perfectly obvious that others at 14 your table, or at least one other that I can identify, is 15 speaking to the press with immense regularity. 16 MR. GARBUS: Do you care to mention the extent to 17 which the other side is speaking to the press through press 18 releases and distributing information as well? 19 THE COURT: I have absolutely no idea. I suppose you 20 are both talking to the press a lot. 21 MR. GARBUS: I am not. 22 THE COURT: Those are generic you's. Both sides are 23 obviously talking to the press. 24 (In open court) 25 Do you have a witness, Mr. Gold? 616 1 MR. GOLD: Yes, we do, your Honor. 2 MR. HERNSTADT: I think we have agreed to do Mr. 3 Johansen first. 4 THE COURT: We will take Mr. Johansen out of order. 5 MR. HERNSTADT: Thank you very much, your Honor. 6 The defendants call Jon Johansen. 7 JON JOHANSEN, 8 called as a witness by the Defendants, 9 having been duly sworn, testified as follows: 10 DIRECT EXAMINATION 11 BY MR. HERNSTADT: 12 Q. Good morning, Mr. Johansen. 13 A. Good morning. 14 Q. Where do you live? 15 A. I live in Larvik, Norway. 16 Q. How old are you, sir? 17 A. I will be 17 in November. 18 Q. What is your educational background? 19 A. High school. 20 Q. Do you work now? 21 A. Yes, I do. 22 Q. Where do you work? 23 A. I work for WAP Factory in Oslo. 24 Q. What do you do for them? 25 A. I work in interactive TV. 617 1 Q. What does WAP Factory do? 2 A. We work with WAP, the Wireless Application Protocol, and 3 interactive TV. 4 Q. Does it produce programs? 5 A. We -- yes, but not for the general public. 6 Q. Thank you. What program languages do you use? 7 A. I use C, C++, Assembler and JAVA. 8 Q. And what operating systems do you use? 9 A. I use GNU/Linux, FreeBSD and Windows NT. 10 Q. How many computers do you have at home? 11 A. I have three computers. 12 Q. And what are the operating systems on those computers? 13 A. One has GNU/Linux, one has FreeBSD and one has GNU/Linux 14 and Windows NT. 15 Q. What do you use those machines for? 16 A. The Linux only machine is used as a router, which I use to 17 connect to the Internet, and the FreeBSD machine is used as a 18 file print server and the new Linux and Windows NT machine is 19 my desktop machine. 20 Q. How long have you used Linux programs? 21 A. I used Linux for about three years. 22 Q. What is your primary operating system that you use? 23 A. That would be Linux. 24 Q. When did you first -- do you know what a DVD is? 25 A. Yes, I do. 618 1 Q. When did you first see a DVD? 2 A. I first saw a DVD in 1997. 3 Q. Okay. As of October 1999 did you own any DVDs? 4 A. Yes, I did. 5 Q. How many? 6 A. About 15. 7 Q. How many do you have today? 8 A. Today I have about 40 DVDs. 9 Q. Okay. Did you buy them? 10 A. Yes, I did. 11 Q. How much does a DVD cost in Norway? 12 A. Region 2 DVDs for the European market are about 20 to $30, 13 but they lack -- they usually lack all the extra features that 14 are on the region 1 U.S. DVDs, so I buy imported U.S. DVDs, 15 which are about 40 to $50. 16 Q. Can you play an imported U.S. DVD in Norway? 17 MR. SIMS: Object to this whole line as irrelevant, 18 your Honor. 19 THE COURT: Sustained. No, I'm not sure. Overruled. 20 I will let it go a while. 21 MR. HERNSTADT: Thank you, your Honor. 22 A. Can you please repeat? 23 (Record read) 24 A. When a DVD comes from the factory it will only play the 25 European region, which is 2, but almost all DVD players in 619 1 Norway are modified to play DVDs from the whole world. 2 Q. Who modifies the DVD players? 3 A. The stores usually have a person who they send the DVD 4 players to to have them modified before they sell them. 5 Q. Do you have DVD a player in your home? 6 A. Yes, I do. 7 Q. How many? 8 A. I have a set up DVD player for my TV and I have a DVD 9 player on my computer. 10 Q. On which computer do you have the DVD player? 11 A. That would be Linux. 12 Q. Do you know a program called DeCSS? 13 A. Yes, I do. 14 Q. What is it? 15 A. It is a program which decrypts DVD movies and stores them 16 on your hard drive. 17 Q. Does DeCSS do anything else? 18 A. No, it does not. 19 Q. Who wrote DeCSS? 20 A. I and two other people wrote DeCSS. 21 Q. How did this come about? 22 A. In September, October, 1999 I met a person on the Internet 23 and he was also a Linux user. We decided to investigate and 24 find out how we could make a DVD player for Linux. 25 Q. Why did you want to do that? 620 1 A. Well, at the time I had a dedicated Windows machine, which 2 I used only for DVD playback, and if I could get a Linux 3 player I wouldn't have to have a machine just for DVDs. 4 Q. Okay. So what did you do? 5 A. Well -- 6 MR. SIMS: Your Honor, object on relevance to this 7 whole line. 8 THE COURT: Tell me why. 9 MR. SIMS: Excuse me? 10 THE COURT: Tell me why. 11 MR. SIMS: Because the issue in the case has nothing 12 to do with why this person created an executable for DeCSS. 13 It has to do with what its function is and what Mr. Corley has 14 done. 15 THE COURT: I am going to hear the evidence, within 16 reasonable time limits, for what it's worth. Go ahead. I 17 mean the man is here from Norway, I might as well hear him. 18 MR. HERNSTADT: Do you want to hear the purpose of 19 the evidence or would you rather hear the evidence? 20 THE COURT: You are going to get the evidence in and 21 I will hear the argument later, unless we come to a point 22 where I think you have taken too much time and then you can 23 try to explain to me why we should take more. 24 Q. Mr. Johansen, what did you do next towards making DeCSS? 25 A. We agreed that the person who I met would reverse engineer 621 1 a DVD player in order to obtain the CSS algorithm and keys. 2 Q. Who was this person that you met on the Internet? 3 A. A person from Germany. I don't know his identity. 4 Q. Okay. What happened next? 5 A. About three days later when I was on line again, he 6 messaged me and told me that he had found the CSS algorithm. 7 He also sent the algorithm to me with the CSS authentication 8 source which are written by Eric Fawcus earlier. He also sent 9 me information on where inside the player he had found the 10 algorithm, and he also sent me a single player key. 11 Q. Why did he send you the information on how he found the 12 algorithm? 13 MR. SIMS: Objection. 14 THE COURT: Sustained. 15 Q. What did you do next? 16 A. Well, he had told me where inside the player he had found 17 the algorithm, so I disassembled the DVD player myself to see 18 where he had found it. 19 Q. Was this a software DVD player? 20 A. Yes, this was a software DVD player, the Xing DVD player. 21 Q. What did you do next? 22 A. Well, at the time -- the UDF is a file system which is 23 used on DVDs, and at the time Linux did not have the proper 24 support. It was currently in double opt. It was being double 25 opted so I could not get it to work, so in order to test the 622 1 decryption, if the decryption algorithm found worked, I 2 created a Window executable which would use the CSS algorithm 3 to decrypt the CSS content. 4 Q. You said you got the CSS authentication program from Derek 5 Fawcus? 6 A. Yes, I believe the CSS authentication had been posted 7 anonymously in Assembler language on the Internet, and Derek 8 Fawcus had picked that up and rewritten it in C language and 9 posted it on his website. 10 Q. How do you know that it was Derek Fawcus? 11 A. He told me. 12 MR. SIMS: Judge, move to strike. Hearsay. 13 THE COURT: Strike what Mr. Fawcus told him. 14 Q. Were there any other indications that Mr. Fawcus might 15 have been connected to the program? 16 A. The CSS-authentication? 17 Q. Yes. 18 A. Well, it was posted on his website so I presume he put it 19 there. 20 Q. All right. Tell us what happened next. 21 A. Well, after I had created the DeCSS executable, I posted 22 it on my website, I made an announcement on the LiViD mailing 23 list. I posted a link to my website. 24 Q. Why did you make an announcement on the LiViD mailing 25 list? 623 1 A. Well, I wanted them to know that we had successfully 2 reverse-engineered a DVD player and obtained the algorithm we 3 needed to make a DVD player. 4 Q. Why did you want the LiViD mailing list to know that? 5 A. That's what LiViD is about, it's about making a DVD player 6 for Linux. 7 Q. Were you able to play DVDs on a Linux machine using DeCSS? 8 A. Well, yes. After I had decrypted a movie, I used the NIST 9 MP-2 player to successfully play a DVD. I wouldn't have 10 access to the DVD features but I could play the actual movie. 11 Q. Have you looked at any other programs that do 12 substantially the same thing as DeCSS? 13 A. Yes, I have. Before I created DeCSS, I had analyzed a 14 program called DVD Rip, which I had found on the Internet. 15 Q. Why did you need to make DeCSS if you had found a program 16 that did essentially the same thing? 17 A. Well, DVD Rip, it takes a decrypted DVD movie from memory 18 and stores it on your hard drive. It did not come in source, 19 and in order to make a DVD player we would need to have 20 source, and the DVD republication didn't contain the CSS 21 algorithm and it was dependent on a DVD player for Windows. 22 Q. Did the DVD Ripped program decrypt DVDs? 23 A. No, it actually stole, if you would like to use that term, 24 the DVD movie from memory after it had been decrypted by the 25 Xing DVD player and then you save that stream on your hard 624 1 drive. 2 Q. Were the files created by DVD Rip and DeCSS the same? 3 A. Not exactly, but the files created could easily be 4 compressed using another compressed algorithm. 5 Q. And did DVD Rip, the file created by DVD Rip, was the 6 audio and video together or separate? 7 A. They were together. 8 Q. And how about with DeCSS? 9 A. Well, they are still together with DeCSS as well. 10 Q. Okay. Is there anything -- I'll move on. What happened 11 to you after -- 12 THE COURT: Let me get clarification of that. With 13 DeCSS was there any need, is there any need to synchronize the 14 audio files with the video files in order to see the movie in 15 the form you would normally see a movie? 16 THE WITNESS: Well, if you make a DivX, is that what 17 you mean? Or if you want to play the DVD movie after it has 18 been decrypted? 19 THE COURT: Either way. 20 THE WITNESS: After we decrypt a movie with DeCSS, 21 you can simply play it in your DVD player. You don't need to 22 do anything. 23 THE COURT: What if you then want to compress it and 24 transfer the compressed file to someone? 25 THE WITNESS: Well, that you would need -- I haven't 625 1 actually performed that procedure, but I believe there are 2 steps needed to resynchronize the video and audio. 3 THE COURT: What is the basis for your belief in that 4 regard? 5 THE WITNESS: I have read several articles on the 6 Internet that describe those procedures. 7 THE COURT: All right. Go ahead. 8 Q. If you use DVD Rip to decrypt or to get a decrypted DVD 9 file, is there a need to synchronize the audio and visual if 10 you are going to compress it thereafter? 11 A. Well, I haven't performed that procedure myself, but I 12 believe there would be. 13 THE COURT: Mr. Johansen, if you would sit back about 14 another six inches, the audio will be a lot clearer. 15 MR. SIMS: Move to strike. No foundation to the last 16 part of that. 17 THE COURT: I will take it for what it's worth. If 18 he hasn't done it, he hasn't done it. 19 Q. After you posted the link to the DeCSS program on the 20 LiViD site, what happened then? 21 A. Well, I had some small increase in visitors, not much. 22 After the press started releasing articles and linked it to my 23 site, I received a substantial increase in visitors. 24 Q. Was anyone on the LiViD site critical of you posting a 25 link to CSS? 626 1 A. Yes, there was at least one person who felt that we should 2 have released the source with the Xing key at the same time we 3 released the executable. 4 Q. Did you release the source at the same time? 5 A. No, we did not. 6 Q. Why didn't you? 7 A. Because the source we had contained the Xing player key. 8 If we were to release that source, the Xing would be harmed, 9 the player key would be revoked and no new DVD movies would 10 work with the Xing DVD player or the player we would have 11 created. 12 Q. Did you intend never to release the source? 13 A. Before we created DeCSS we sent the source to Derek 14 Fawcus. He was supposed to rewrite the source without the 15 need for the Xing player key and then release that onto the 16 Internet. 17 Q. Did any event occur to you personally as a result of your 18 writing DeCSS? 19 MR. SIMS: Objection. Irrelevant. 20 THE COURT: Sustained. 21 Q. What happened next? 22 MR. SIMS: Objection. Irrelevant. 23 THE COURT: Well, look, we all know the story, don't 24 we? What's the harm? Go ahead. 25 A. Well, in January, on January 25, I had to go to the local 627 1 prosecutor's office because of charges filed by the MPAA in 2 Norway, and in February I received an award, a national 3 student award which is awarded to students who are in high 4 school and have achieved excellent grades and also achieved 5 something outside of school in culture, sports, art. 6 Q. Why did you receive that award? 7 A. I believe I received the prize because of my part in the 8 writing DeCSS. 9 Q. Did you get a prize? 10 A. Yes, I did. 11 Q. Did you get any money? 12 A. I received about $2,000. 13 Q. What did you do with the money? 14 A. I used $1200 and bought a high-end Sony DVD player for my 15 TV. 16 MR. HERNSTADT: Thank you very much, Mr. Johansen. 17 THE COURT: Mr. Sims. Thank you, Mr. Hernstadt. 18 CROSS-EXAMINATION 19 BY MR. SIMS: 20 Q. Good morning, Mr. Johansen. 21 A. Good morning. 22 Q. Now, you understood when you created DeCSS executable that 23 DVD movies were encrypted using the CSS encryption algorithm, 24 correct? 25 A. Yes, I did. 628 1 Q. And you first learned of CSS in about June or July of 2 1999? 3 A. Yes, I did. 4 Q. You understood that CSS required three sets of keys to 5 play back a DVD? 6 A. Yes. 7 Q. And you understood that certain of those keys were 8 themselves encrypted? 9 A. Well, I believe I understood that the CSS license requires 10 anyone who makes a DVD player to encrypt their algorithm and 11 key inside the DVD player. 12 Q. The program you created, DeCSS, that you posted, is a 13 Windows program, correct? 14 A. Yes, that's correct. 15 Q. And you came up with the name DeCSS? 16 A. Yes, I did. 17 Q. What does the De in DeCSS stand for? 18 A. It stands for decrypt. 19 Q. DeCSS has no playback functionality, is that correct? 20 A. Yes, that's correct. 21 Q. Once a decrypttive VOB file is copied to the user's hard 22 drive, he can do anything with that file that he can do with 23 any other computer file? 24 A. Yes, that's correct. 25 Q. He can copy it again? 629 1 A. Yes, that's correct. 2 Q. Compress it? 3 A. Yes. 4 Q. He can copy it to a VCD? I'm sorry. He can copy it to a 5 video compact disk? 6 A. Well, not in its original decrypted form. The size is too 7 high. 8 Q. But if he compresses it, it can be copied to a video 9 compact disk? 10 A. Yes, if he uses sufficient compression. 11 Q. And to a CD-ROM? 12 A. Yes. 13 Q. And it can be uploaded on to the Internet -- it could be 14 uploaded to the Internet, correct? 15 A. Yes, just as any other file. 16 Q. Now, am I correct that someone in a chat room advised you 17 two months ago that he or she had downloaded a decrypted 18 DivX'd DVD movie from the Internet? 19 A. No, I believe someone told me that they had downloaded a 20 movie. They didn't tell me what form it was or which movie it 21 was. 22 Q. They didn't tell you that it was DivX'd? 23 A. No, they did not. 24 Q. What was the chat room, by the way, where you had that 25 communication? 630 1 A. That would be #PC DVD. 2 MR. HERNSTADT: I object and move to strike the last 3 several questions and answer on the grounds of hearsay. 4 THE COURT: I'm not going to take it for the truth. 5 Q. Now, Mr. Johansen, did you testify last night that you 6 were told by this person that he had downloaded a DivX'd 7 movie? 8 A. No, I believe I told last night that he had told me that 9 he had downloaded a movie. He didn't say which kind of movie 10 it was. 11 MR. SIMS: I don't quite remember the approach you 12 want, but that testimony appears on page 10 of the -- 13 THE COURT: I don't have it. Just read it. Give the 14 page and line number and just read it. If there is a dispute 15 over the accuracy of the reading or of the transcript, we'll 16 deal with it. 17 MR. SIMS: Page ten, line 3. 18 "Q. Okay. What has that person told you?" 19 A. I believe he told me he had downloaded a movie from the 20 Internet. 21 THE COURT: I'm sorry. There is no reason you would 22 be any more familiar with U.S. courtroom procedure than I 23 might be with Norwegian. At this moment counsel is going to 24 read from the transcript of what you said last night. When he 25 says "question," what that indicates is that he is about to 631 1 read what you said last night and we will let you know when 2 you are to answer again. 3 THE WITNESS: Okay. 4 MR. HERNSTADT: I can see that it's hearsay. 5 THE COURT: Well, now it goes to credibility. Go 6 ahead. 7 BY MR. SIMS: 8 Q. The transcript says: 9 "Q. Okay. And what has that person told you?" And the 10 reporter wrote down the following answer: 11 "A. He told me that he had downloaded a DivX movie." 12 Is that correct? 13 THE COURT: Mr. Sims, your question is unclear. If 14 you are asking him if it's correct that that's what the 15 transcript says, we don't need that testimony. If you are 16 asking him whether what he said last night is true, that's an 17 appropriate question. 18 MR. SIMS: That's an appropriate question? 19 THE COURT: Yes. Mr. Hernstadt? 20 MR. HERNSTADT: Your Honor, actually the first 21 question is not entirely inappropriate. This is not a final 22 transcript. 23 THE COURT: Are you disputing its accuracy in this 24 regard? Do we have to bring the court reporter in to testify 25 as to the accuracy of the transcript? 632 1 MR. HERNSTADT: No, sir. 2 THE COURT: Go ahead, Mr. Sims. 3 Q. Is it true that you were told by this person that he had 4 downloaded a DivX'd movie? 5 A. No, it is not. 6 Q. And did you testify last night that he did tell you that? 7 A. No, I believe I testified that he had said he had 8 downloaded a movie, not which kind. 9 Q. Now, this conversation you had, what was the name of the 10 chat room again? 11 A. Pound PC DVD. 12 Q. Is that the precise chat room where you had announced your 13 creation of the Windows DeCSS utility? 14 A. Yes, that is correct. 15 Q. And how many months after you made that announcement in 16 that chat room did you have this conversation with this 17 person? 18 A. Excuse me? Could you please repeat? 19 Q. Yes. How long was it after you had made the announcement 20 about the Windows DeCSS utility did you have this conversation 21 with this person in which the person told you that they had 22 downloaded a movie from the Internet? 23 MR. HERNSTADT: Object to the form. 24 THE COURT: Overruled. 25 A. I don't recall, but I believe it was about a month. 633 1 Q. And am I correct that the Pound PC DVD chat room is not 2 limited to Linux users? 3 A. The Pound PC DVD channel is open for all users of PCs and 4 DVDs. 5 Q. Thank you very much. Now, you testified on direct that a 6 German person, I think, had reverse-engineered the Xing DVD 7 player, is that correct? 8 A. Yes, that is correct. 9 Q. And that person goes by the nick Ham? 10 A. Yes, that's correct. 11 Q. And it's Ham who wrote the source code that performed the 12 authentication function in DeCSS, is that correct? 13 A. No, that is not correct. He did not write the 14 authentication code. He wrote the decryption code. 15 Q. He wrote the encryption code? 16 A. Decryption code. 17 Q. Decryption. 18 A. Yes. 19 Q. Ham is a member of Masters of Reverse Engineering or MORE? 20 A. That's correct. 21 Q. And are you also a member of MORE? 22 A. Yes. 23 Q. There are other members in Germany and Holland, is that 24 correct? 25 A. Well, the third member is in the Netherlands. 634 1 Q. And it was Ham's reverse engineering of the Xing DVD 2 player that revealed the CSS encryption algorithm, am I right? 3 A. Yes, that's correct. 4 Q. Reverse engineering by Ham took place in or about 5 September 1999? 6 A. Yes, I believe it was late in September of 1999. 7 Q. And you testified that it was this revelation of the CSS 8 encryption algorithm and not any weakness in the CSS cipher 9 that allowed MORE to create DeCSS, is that correct? 10 A. Yes, that's correct. 11 Q. You obtained the decryption portions of the DeCSS source 12 code from Ham, correct? 13 A. Yes, that's correct. 14 Q. You then compiled the source code and created the 15 executable? 16 A. Well, in the form I received it, it was not compatible. 17 Q. Well, you testified the operation of DeCSS on a Windows 18 machine initially, correct? 19 A. Actually, I tested it under -- it was under Windows. 20 Q. And in performing your tests on DeCSS, which DVDs did you 21 decrypt? 22 A. Well, I don't recall which DVD I tried first, but the 23 second DVD I tried was the Matrix. 24 Q. And how many times did you decrypt DVDs? 25 A. Well, each time I watch a movie I decrypt a DVD. I don't 635 1 recall how many times I watched the DVD movie on my computer. 2 Q. When you posted the Microsoft Windows executable version 3 of DeCSS, you had no knowledge that the program would run 4 under Linux, correct? 5 A. No, that's not correct. 6 Q. Had you run it under Linux at that time? 7 A. No, I had not, but in theory it should work using an 8 application called wine, W-I-N-E. 9 Q. When you posted the DeCSS executable on your web page, you 10 did not post the source code, correct? 11 A. That is correct. 12 Q. You testified a moment ago that you thought it would work 13 under wine, is that correct? 14 A. That is correct. 15 Q. Have you ever actually tried that? 16 A. No, I have not. 17 THE COURT: Mr. Garbus, would you have a seat, 18 please. 19 Q. Now, you first posted the DeCSS executable utility where? 20 A. I posted it on my website. 21 Q. And after that, you announced that it was available on 22 your website in two different forums or two different places, 23 correct? 24 A. Yes, that is correct. 25 Q. And what were those two places? 636 1 A. LiViD mailing list and the Pound PC DVD IRC chat room. 2 Q. Which did you do first? 3 A. That would be the Pound PC DVD chat room. 4 Q. Am I correct that when you posted the announcement to the 5 LiViD mailing list that you just testified about, that was the 6 very first time you had ever posted anything or sent any 7 message to the LiViD mailing list? 8 A. Yes, that is correct. 9 Q. And did your announcement say anything about which 10 operating systems it had been tested on? 11 A. Yes, I believe it did. 12 Q. And which operating systems did it identify? 13 A. I believe the message said it had been tested on Windows 14 95, 98 and Windows NT. 15 Q. Any others? 16 A. I believe Windows 2000 was mentioned, but I don't recall 17 if it had been tested on that or not. 18 Q. And were there any other operating systems you identified 19 as having tested it under? 20 A. No, I don't. 21 Q. So they were only Windows operating systems. 22 A. Yes. 23 Q. Now, you testified last night that your web page was a 24 support page or Sigma Designs hardware-based DVD player, am I 25 correct? 637 1 A. Yes, that is correct. 2 Q. What is Sigma Designs? 3 A. Sigma Designs is a company in California which has several 4 years of experience in MPEG. 5 Q. To your knowledge, do they manufacture a CSS-licensed DVD 6 player that runs under Microsoft Windows? 7 A. Yes, they do. 8 Q. What is it called? 9 A. It's called Hollywood Plus. 10 Q. Hollywood Plus. 11 A. Yes. 12 Q. And you are also aware that Sigma Design has announced 13 plans to release a Linux-based DVD player? 14 A. Yes, I am. 15 Q. Do you understand that Sigma Designs has a license from 16 the DVD-CCA to do that? 17 A. Well, I would assume they have or else they wouldn't be 18 making it. 19 Q. And have you provided some assistance to the French 20 programmer for Sigma Designs who is working on that Linux DVD 21 player, correct? 22 A. Not direct assistance, but I have e-mailed him. 23 Q. You have? 24 A. E-mailed him. 25 Q. And have you provided any technical information to him? 638 1 A. No, I have not. 2 Q. Before you posted the DeCSS executable onto your web page 3 and made the announcement that you testified about, have you 4 ever had any communications with the defendant in this lawsuit 5 Eric Corley? 6 A. No, I have not. 7 Q. You never communicated with him at all until after this 8 lawsuit was filed, correct? 9 A. Yes, I believe that's correct. 10 Q. And you never saw Mr. Corley post a message to the LiViD 11 mailing list prior to that time, correct? 12 A. Yes, that is correct. 13 Q. In fact to your knowledge -- strike that. 14 Do you have any knowledge that Mr. Corley has ever 15 been a member of the LiViD group? 16 A. No, he has not. 17 Q. Now, at the time you posted your message onto the LiViD 18 mailing list that you mentioned, you did not have the DeCSS 19 source code on your page, correct? 20 A. That is correct. 21 Q. And am I correct that some members of the LiViD group 22 expressed anger at you for not providing the source code with 23 the utility? 24 A. Yes, that is correct. 25 Q. What is a flame war? 639 1 A. A flame war is when two or several people engage in a 2 discussion which gets out of hand. 3 Q. Am I correct that you got involved in a flame war with at 4 least one member of the LiViD group over the fact that you 5 didn't post the DeCSS source code? 6 A. I did get involved in a flame war, but I am not aware if 7 he was a member of the LiViD group or not. 8 Q. Where did the communication you had with respect to this 9 take place? 10 A. Some of it took place on the LiViD mailing list and some 11 of it was sent directly. 12 Q. And it began on the LiViD mailing list? 13 A. Yes, that is correct. 14 Q. Now, Mr. Fawcus created the css-auth source code that you 15 used in creating the utility, correct? 16 A. Yes, that is correct. 17 Q. And the dispute centered around the fact that the German 18 member of MORE, Ham, had used Mr. Fawcus's code but had 19 removed Fawcus's name and copy left notification, is that 20 correct? 21 A. Yes. 22 Q. What is copy left, as you understand it? 23 A. Copy left is when you use basically a copyright that gives 24 the user freedoms instead of taking them away. 25 Q. And the dispute centered around someone's complaint that 640 1 MORE was not playing by the -- I'm sorry. What is GPL? 2 A. GPL is a copy left license provided by the Free Software 3 Foundation. 4 Q. Was MORE's failure to credit Mr. Fawcus a violation of the 5 GPL license, as you understood it? 6 A. Yes, I believe so. 7 Q. In a nutshell, MORE was not playing by the GPL rules that 8 the LiViD group normally plays by, correct? 9 A. Yes, that is correct. 10 Q. And it was your understanding that Mr. Fawcus could sue 11 you for that, correct? 12 A. Well, yes, that is correct. 13 Q. And you eventually settled your difference with 14 Mr. Fawcus? 15 A. Yes, that is correct. 16 Q. You got a special license from him to use his source code 17 without credit, correct? 18 A. Well, he agreed that we didn't have to do anything to 19 provide new copies of the source with the original header. 20 Q. And your reason for doing that was to avoid making DeCSS's 21 source code fully open source. 22 A. That's not correct. It was already an open source at that 23 time. 24 Q. Am I correct that you didn't want it to be open source so 25 that you could keep the secrecy of the Xing key? 641 1 A. Yes, that is correct. 2 Q. The Linux community, as you understand it, believes in 3 free source code, open source code, correct? 4 A. Yes, that is correct. 5 Q. And MORE didn't make DeCSS available with open source code 6 to the entire Linux community when it posted the utility, 7 correct? 8 A. Yes, that is correct. 9 Q. When you announced to the LiViD mailing list in October 10 that DeCSS.exe was available on your web page, you said that 11 it works with the Matrix, DoD Speed Ripper doesn't, correct? 12 A. Yes, that's correct. 13 Q. It's your belief, I take it, that DeCSS is superior to 14 Speed Ripper? 15 A. Excuse me. Can you please repeat. 16 Q. Do you believe that DeCSS is superior to Speed Ripper? 17 A. Not directly superior, but it does decrypt some movies 18 that the Speed Ripper did not decrypt at that time. 19 MR. SIMS: I have no more questions. Thank you. 20 THE COURT: Mr. Hernstadt. 21 MR. HERNSTADT: Thank you. 22 REDIRECT EXAMINATION 23 BY MR. HERNSTADT: 24 Q. You were asked if you had used DeCSS to decrypt a DVD. 25 Have you ever used a decrypted file from a DVD to make a DivX? 642 1 A. No, I have not. 2 Q. Have you ever placed a decrypted DVD on the Internet, 3 transmitted it in some way? 4 A. No, I have not. 5 Q. Have you ever made it available on the Internet for 6 someone to download? 7 A. No. 8 Q. Have you ever sold a decrypted DVD in any form? 9 A. No, I have not. 10 Q. Have you ever traded a decrypted DVD with anyone? 11 A. No, I have not. 12 Q. Have you ever downloaded a DivX movie? 13 A. No. 14 Q. Have you ever made a DivX movie available for uploading? 15 A. No, I have not. 16 Q. Have you ever made a DivX movie available for someone else 17 to download from your website? 18 A. No, I have not. 19 Q. Have you ever used DeCSS for anything other than viewing 20 DVDs that you purchased? 21 A. No, I have not. 22 Q. You mentioned the Sigma Designs player. Is that a 23 software player? 24 A. Well, it's a soft -- it's hardware-based. It comes with a 25 piece of hardware but you also need the player that comes with 643 1 it, a piece of software. 2 Q. Does that mean you have to buy two pieces? 3 A. The product contains two pieces. 4 Q. You testified that you did not release the source code on 5 the DeCSS executable when you made the program a available on 6 your website. 7 A. Yes, that is correct. 8 Q. Did you make the source code available to Derek Fawcus? 9 A. Yes, that is correct. 10 Q. And did Derek Fawcus write that source code -- rewrite the 11 source code? 12 A. Yes, I believe he did. 13 Q. What operating system did he rewrite it for? 14 A. He wrote it for Linux. 15 Q. Why did you not want to release the source code for DeCSS? 16 A. Because the DeCSS source code contained the Xing player 17 key. If we were to release that source, the Xing key would be 18 revoked, Xing would probably have their license revoked, and 19 new DVDs which would be released later would not work with 20 Xing's player nor the player we would have created. 21 Q. You said that the German member of MORE found the CSS 22 algorithm by reverse-engineering the software. Did he say to 23 you whether it was difficult to do? 24 A. No, he said it was not difficult. 25 Q. Okay. You said that you did the same thing based on what 644 1 he informed you about how he had done it? 2 A. Yes, I did. 3 Q. Did you find it difficult to do? 4 A. No. 5 MR. SIMS: Objection. Irrelevant. 6 THE COURT: Sustained. 7 Q. How long did it take you to find the algorithm? 8 MR. SIMS: Objection. Irrelevant. 9 THE COURT: Why is it relevant, Mr. Hernstadt? 10 MR. HERNSTADT: Well, Mr. Sims brought it out on 11 cross-examination, and I am merely trying to clarify the 12 record with respect to the reverse-engineering process. 13 THE COURT: Did you raise it, Mr. Sims? 14 MR. SIMS: Certainly not in terms of effectiveness, 15 which is where we're going now. 16 THE COURT: Did you raise it, whether it was 17 subjectively in terms of effectiveness or not? 18 MR. SIMS: I don't think I did. 19 THE COURT: Let me look at my notes then. 20 MR. SIMS: I did ask questions about the obfuscation 21 about the Xing key, but ... 22 THE COURT: Mr. Hernstadt, I don't see it quickly. I 23 mean, is there something that you remember that will prompt my 24 memory? 25 MR. HERNSTADT: I believe it was something about that 645 1 the key was hidden. I don't recall exactly what it is. I 2 just had it in my note. 3 THE COURT: It will take less time to hear it then. 4 Overruled. 5 THE WITNESS: Can you please repeat the question? 6 THE COURT: Did you find it difficult to do, was the 7 question. 8 THE WITNESS: No, I did not. 9 Q. You discussed a dispute with Derek Fawcus about taking his 10 name off the source code that he had provided. Were you aware 11 of that? 12 A. No, I was not aware of that. 13 Q. When did you find out that his name had been taken off the 14 source code? 15 A. I found that out when he posted a message to the LiViD 16 mailing list saying that one of the files we had in our source 17 was actually his, but it did not contain the GPL header on his 18 name. 19 Q. What did you do when you read that posting to the LiViD 20 list? 21 A. I e-mailed him and tried to sort out a solution. 22 MR. HERNSTADT: Thank you very much, Mr. Johansen. I 23 have nothing further. 24 MR. SIMS: Nothing more, your Honor. 25 THE COURT: All right. Mr. Johansen, thank you very 646 1 much. 2 Mr. Gold? 3 MR. GOLD: I'm going to call Mikhail Reider to the 4 stand. 5 THE COURT: Is Mr. Young back there? We are working 6 on your request, but in the interim I can tell you that you 7 are able to buy from the court reporters a floppy that has the 8 day's proceedings by about 7 o'clock every night. 9 MR. COOPER: Good morning. Your Honor, plaintiffs 10 call Mikhail Reider. 11 MIKHAIL REIDER, 12 called as a witness by the Plaintiffs, 13 having been duly sworn, testified as follows: 14 MR. GARBUS: May I just ask one thing? There is some 15 question about whether or not the plaintiffs will rest after 16 this witness or call another witness. Could we know that so 17 we can decide how to arrange our witnesses? 18 THE COURT: That's a reasonable request. 19 Mr. Gold? 20 MR. SIMS: I don't know the answer to that. The 21 short answer is if we have completed a stipulation, and we 22 sent our work over to Mr. Hernstadt -- let me go find out. 23 THE COURT: I take it the answer is in your hands at 24 the moment, Mr. Garbus. 25 MR. SIMS: I don't believe it will be necessary, 647 1 but -- 2 MR. GOLD: Your Honor, this will be our last witness 3 and we will rest after she leaves the stand. 4 THE COURT: Whether or not you get the stipulation? 5 MR. GOLD: Yes. 6 THE COURT: Okay. You have your answer, Mr. Garbus. 7 Proceed, Mr. Cooper. 8 MR. COOPER: Thank you, your Honor. 9 DIRECT EXAMINATION 10 BY MR. COOPER: 11 Q. Good morning, Ms. Reider. 12 Q. Who is your employer? 13 A. The Motion Picture Association. 14 Q. What is your current job position? 15 A. I am manager of worldwide Internet antipiracy operations. 16 Q. What is your education background? 17 A. I have an undergraduate Bachelors in international 18 relations taken from the California State University of 19 Northridge, and an M Phil. in international conflict 20 resolution from the University of Dublin, Trinity College. 21 Q. What is your employment background? 22 A. From 1985 through '89 I was with the Rand Corporation, a 23 governmental think tank as a research assistant. Subsequent 24 to that, I took my M Phil. and joined the banking interest 25 Great Western Financial Corporation as a legislative and 648 1 regulatory analyst. After that, I joined the Department of 2 Justice Drug Enforcement Administration as an intelligence 3 research specialist. 4 Q. When were you with the Department of Justice for the DEA? 5 A. From 1992 through '95. 6 Q. And what did you do with the DEA? 7 A. As an intelligence research specialist I collected and 8 analyzed intelligence as it related to federal narcotics 9 trafficking investigations. 10 Q. And after the Department of Justice, what did you do next? 11 A. I was briefly with the United States State Department 12 Peace Corps in Thailand. 13 Q. And how long were you with the Peace Corps in Thailand? 14 A. Five to six month. 15 Q. And after you returned to the United States, what was your 16 next position? 17 A. Again with the U.S. Department of Justice, this time in 18 the Federal Bureau of Investigation. 19 Q. What did you do for the F.B.I.? 20 A. Intelligence research specialist. 21 Q. And that was during what period? 22 A. 1995 through '97. 23 Q. After your position with the F.B.I., what was your next 24 position? 25 A. I joined the California State Bar Association as an 649 1 investigator. 2 Q. And how long were you with the California State Bar? 3 A. Only eight months. 4 Q. Why was that? 5 A. The Governor of California vetoed the fee bill which 6 funded the state bar. 7 Q. Okay. And after that you took a position with? 8 A. The Motion Picture Association. 9 Q. I see. And your position with the MPAA began when? 10 A. In spring of 1998. 11 Q. Okay. Did you use computers in connection with the job 12 positions you just described? 13 A. Yes. Yes, through all of the jobs. 14 Q. In what ways? 15 A. Both in research on the Internet and specialized data 16 bases, as well as using proprietary software programs for 17 analyzing large volumes of electronic data. 18 Q. Do you have any specialized training in Internet 19 investigations? 20 A. Yes, I do. 21 Q. What is that training? 22 A. Both through the Department of Justice through 23 intelligence schools and also through HTCIA. 24 Q. What is HTCIA? 25 A. The High Technology Crime Investigators Association. It's 650 1 a worldwide body comprised of state, local, federal law 2 enforcement from around the world as well as private industry 3 security officials who are dedicated to fighting cyber crime. 4 Q. Do you have any computer program experience? 5 A. Yes, I do. 6 Q. How extensive is that? 7 A. It's limited. UNIX, BASIC, does. 8 Q. Was that also received in the course of your various prior 9 employments? 10 A. Yes, it was. 11 Q. What are your current job responsibilities at the MPAA? 12 A. I oversee all Internet investigations around the world and 13 coordinate between our worldwide offices. 14 Q. Since the beginning of your employment by the MPAA in 1998 15 has the MPAA been monitoring the Internet for infringement 16 activity? 17 A. Yes, actively. 18 Q. Can you generally describe what has been done? 19 A. Well, we monitor and search routinely website, FTP sites, 20 FSUs, file swapping utilities, IRC, the Internet relay chat 21 channels, news groups or Usenet. 22 Q. Could you briefly describe what file swapping utilities 23 are? 24 A. They are basically glorified FTPs. They allow individuals 25 to directly transfer files between one another, music or 651 1 movies. 2 Q. Can you give me the name of any file swapping utility that 3 you are currently monitoring? 4 A. Sure. IMESL, Gooey, Hotline, ScourNet, FileShare, 5 FileSwap, Freenet. 6 Q. Is Napster also a file sharing utility? 7 A. Napster also is an FSU. 8 Q. Would you just tell us what Internet relay chats are? 9 A. It's basically the CB radio of the Internet. It was 10 created in the mid to late 80s. It allows people to talk in 11 real time on line to one another no matter where they are, or 12 near real time. They have a number of networks and within 13 that channels. 14 Channels are created by any user whenever they feel 15 like it, so channels can go up and go down in a matter of 16 minutes or hours, or channels can be kept alive for years if 17 the operators of that channel so deem. 18 Q. Once these channels are set up, are they all accessible to 19 the public? 20 A. No, some of them are members only. 21 Q. How often does the MPAA monitor the Internet? 22 A. Daily. 23 Q. And how do you identify sites to monitor? 24 A. It's a combination of factors. Our member companies will 25 send up sites they wish us to monitor. The public will call 652 1 or write in to us with sites as well as through our own 2 intelligence gathering and investigations we have sites that 3 routinely lead us to other plays that harbor piracy on line. 4 Q. Have the MPAA come aware of any instances of member 5 companys' DVDs being decrypted and made available in any form 6 on the Internet prior to October 1999? 7 A. No. 8 Q. When was the first time you heard of the existence of a 9 utility that defeated CSS and decrypted the content of one of 10 the studio's DVDs? 11 A. Early to mid-October of 1999. 12 Q. What was that utility? 13 A. DeCSS. 14 Q. What was the source of the original information you 15 received in the existence of DeCSS? 16 A. I found it on a news posting on Slashdot. 17 Q. What did you do about the information regarding the 18 existence of DeCSS? 19 A. I followed their links and ultimately downloaded a copy of 20 DeCSS. 21 Q. And did you test it to see if it worked? 22 A. Yes, I did. 23 Q. Did it? 24 A. Yes, horrifyingly simple to use. 25 Q. How long did it take you to download DeCSS? 653 1 A. A matter of minutes. 2 Q. And how long did it take you to decrypt a DVD using DeCSS? 3 A. Approximately five minute. 4 Q. What operating system were you using? 5 A. Windows. 6 Q. Was DeCSS a Windows program? 7 A. Yes, it was. 8 Q. What did you do next? 9 A. I notified our legal department and Ken Jacobson, who is 10 my direct supervisor, and began to request the issuance of 11 cease and desist letters. Ultimately we filed this lawsuit. 12 Q. Now, have you ever heard of a program called DiVX? 13 A. Yes, I have. 14 Q. And when did you first become aware of that program? 15 A. Late February, early March of 2000. 16 Q. Did you download it? 17 A. Yes, I did. 18 Q. And did you examine it? 19 A. Yes, I did. 20 Q. What is it? 21 A. It's a codec or compression, decompression algorithm that 22 allows one to take the rather substantial files from the DVD 23 and highly compress them to make it easy for distribution or 24 manipulation. 25 Q. Did there come a time when the MPAA became aware of the 654 1 availability of decrypted DVDs on the Internet? 2 A. Yes, we did. 3 Q. When was that for the first time? 4 A. Late April, early May of 2000. 5 Q. How did you become aware of that? 6 A. Through our routine monitoring some of the pirate sites we 7 routinely look at, we began to see evidence of these decrypted 8 DVDs. 9 Q. How many titles initially did you see being available? 10 A. A handful. 11 Q. How many sites? 12 A. I'm sorry? 13 Q. How many sites initially? 14 A. Again, a handful. 15 Q. Since late April or early May, has the MPAA become aware 16 of any increase in the availability of encrypted DVDs? 17 A. Absolutely. The number has certainly surged upward. 18 Q. On what types of sites have you seen these DVDs being 19 available? 20 A. It runs the gamut from website to FTP sites, offering on 21 IRC channels, FSUs. 22 Q. Do all of the sites offer decrypted DVDs for download or 23 hard goods through barter or sale? 24 A. No, not all of them. 25 MR. GARBUS: I would object unless we have the 655 1 windows or the pictures of the site that she is referring to. 2 Other than that, it's hearsay. 3 THE COURT: What do you say, Mr. Cooper? 4 MR. COOPER: Your Honor, the windows or site, if you 5 will, are on the Internet and are constantly changing. I 6 don't believe that there are any screen shots other than those 7 we have produced in the discovery. We have produced some of 8 those, and we are eliciting general testimony regarding this 9 witness's experience and activity in connection with what the 10 MPAA knew about these activities and when. And for that 11 purpose I think it's competent. 12 MR. GARBUS: I will object to any testimony that's 13 not related to particular screen shots. Any testimony that 14 she wants to talk about that has screen shots related to it or 15 marked in as exhibits, I would have no objection to. 16 THE COURT: Is it your position, Mr. Garbus, that the 17 plaintiffs in this case and the MPAA knew and did nothing 18 about cracks of CSS for a long time? Haven't you been singing 19 that refrain? 20 MR. GARBUS: Yes. 21 THE COURT: And that's not a pejorative comment, but 22 since the opening of the trial? 23 MR. GARBUS: Yes. 24 THE COURT: Why isn't it relevant to that? 25 MR. GARBUS: Anything is relevant if there is 656 1 admissible evidence with respect to it. 2 THE COURT: It's state of mind. It's offered not for 3 the purpose of the truth. It's offered for the purpose of 4 state of mind. 5 MR. GARBUS: I object to it. I think it's offered -- 6 THE COURT: Why isn't it relevant to state of mind? 7 Is state of mind relevant, in your estimation? 8 MR. GARBUS: I think the state of mind is not 9 relevant. I think what's relevant is what the truth is. 10 THE COURT: Mr. Cooper, what do you say to that? 11 MR. COOPER: Well, we agree that state of mind is not 12 relevant, although we are trying to respond to what we 13 understood the defendants' position was. This information is 14 being offered as testimony of what Ms. Reider saw in 15 connection with her activity for the MPAA. It's competent 16 testimony with respect to that. 17 Whatever Mr. Garbus might want to ask her regarding 18 what an individual site may have said, I think the issue is 19 what the MPAA was doing in connection with its investigations 20 in response to Mr. Garbus's prior positions that it wasn't 21 doing enough. 22 THE COURT: Look. Haven't the plaintiff's taken the 23 position -- I mean, isn't this a precise turnabout? Mr. 24 Garbus spent a couple of days trying to establish that this 25 CSS system had been cracked a long time ago, the studios knew 657 1 it, they didn't protect themselves, and you folks constantly 2 objected that none of that was relevant on the ground that the 3 effectiveness or robustness of your security system was not 4 material here, and I sustained those objections. Right? 5 MR. COOPER: Yes, your Honor. 6 THE COURT: All right. So now comes turnabout. You 7 want an answer on all of that, and I previously ruled it out 8 when he tried to put it in. Why shouldn't I do the same thing 9 for the same reason when you try to put it in? 10 MR. COOPER: Your Honor, what you are suggesting 11 about the proper scope of the issues that are reasonably and 12 in material dispute in this case, we agree with. The question 13 here is a little different than the one you earlier ruled 14 upon. 15 THE COURT: Tell me how it's different. 16 MR. COOPER: The earlier question went to the 17 efficacy of CSS as a security system. 18 THE COURT: Right. 19 MR. COOPER: This I believe addresses Mr. Garbus's 20 second point, which we also believe is irrelevant, and that is 21 that the MPAA, once the circumvention device became known, did 22 too little or otherwise failed to react to the threat imposed 23 by DeCSS quickly enough. And while I believe that that is 24 also irrelevant, we are attempting to respond to that to the 25 extent the Court is interested in the issue. 658 1 THE COURT: Well, let's find out. Mr. Garbus, what 2 Mr. Cooper describes as your second point, are you in fact 3 making that argument, that is to say, that the MPAA was too 4 slow getting here? 5 MR. GARBUS: What she is testifying to, as I 6 understand it, is that -- 7 THE COURT: Mr. Garbus, I will let you say what you 8 want to say, but I really would like an answer to the question 9 first. 10 MR. GARBUS: Can I hear the question again. 11 (Record read) 12 THE COURT: Are you making that argument? 13 MR. GARBUS: The answer is yes. 14 THE COURT: Overruled. I am not taking it for the 15 truth. I am taking it on the issue of whether the MPAA's 16 right to relief, if it has any, is in any way affected by 17 undue delay in getting to the courthouse. 18 Go ahead, Mr. Cooper. 19 BY MR. COOPER: 20 Q. Do all of the sites you have just described offer 21 decrypted DVDs for download or hard goods through barter or 22 sale? 23 MR. GARBUS: Let me see if can I make it clear. Our 24 point is -- 25 I'm prepared to do this at the sidebar. 659 1 THE COURT: Go ahead, Mr. Garbus. 2 MR. GARBUS: It's our point that once they knew about 3 DeCSS, two things happened. One is they did nothing about it; 4 two, that prior to the time that they knew about DeCSS, they 5 knew about other utilities that ripped DVDs, and as I 6 understand what her testimony is, it is that she saw sites 7 that said it's from the DVD. These are not sites that say, as 8 I understand her testimony, it's from a DVD that's deencrypted 9 through DeCSS. So just let me parse out our position a little 10 more precisely, if I can. Again, I am prepared to do it at 11 the sidebar unless the Court is comfortable. 12 THE COURT: Mr. Garbus, you can stop repeating that. 13 If I find I need a sidebar, I will let you know. 14 MR. GARBUS: Thank you. 15 It is our position that last year they knew about a 16 number of procedures that could be utilized with respect to 17 DVD movies, that the only procedure that in any way related to 18 Linux or, if you want to call it a competitive technology, was 19 DeCSS. What they did is they did not go after any of the 20 technologies, they only went after DeCSS. So the delay deals 21 with their knowledge prior to DeCSS that there were other 22 rippers and other utilities and their failure to do that. At 23 least that's our position. 24 THE COURT: My ruling is the same. Go ahead, 25 Mr. Cooper. 660 1 I'm not taking it for the truth. I'm taking it as I 2 indicated. 3 MR. COOPER: Would you read back the pending 4 question, please? 5 (Record read) 6 THE COURT: That is, the truth of anything that was 7 on the websites. 8 A. No, not all of the sites. Some of them point in the 9 direction of where to locate them but they don't actually 10 offer distribution themselves. 11 Q. And has the MPAA followed those pointers from one site to 12 another? 13 A. Yes, we have. 14 Q. And approximately how many of these site have you become 15 aware of in the last two and a half months? 16 THE COURT: Be specific about what sites you are 17 talking about. So far we have ones that offer to barter and 18 sell and you've got ones that point. 19 Q. Can you distinguish between the ones that offer for 20 barter, sale or download on one hand and the ones that point? 21 A. Yeah. Approximately over 40 sites. 22 Q. Of which type? 23 A. Those which offer for barter or sale, distribution as 24 opposed to just pointing in the direction. 25 Q. What is the MPAA currently doing about these sites? 661 1 A. We have ongoing investigations. 2 Q. And can you, without going into the investigative details 3 of any of those investigations, tell me anything about them? 4 A. We have investigations currently active with federal law 5 enforcement here in the U.S. and worldwide. 6 Q. Which U.S. agencies? 7 A. U.S. Customs, Secret Service and F.B.I. 8 Q. Do you have information regarding any connection between 9 the recent availability on the Internet of decrypted DVDs and 10 the utility DeCSS? 11 A. Absolutely. 12 Q. What is that information? 13 A. Well, prior to the appearance of DeCSS we had seen no 14 decrypted DVDs anywhere on the Internet, and thereafter we 15 watched DeCSS proliferate alarmingly. It was simple to use. 16 We saw decrypted DVDs appear for sale and distribution not 17 long thereafter. 18 MR. GARBUS: I object to the question. She was asked 19 what information she had and then she responded with 20 speculation. 21 THE COURT: Where was the objection before she 22 answered, Mr. Garbus? 23 MR. GARBUS: It was only after she answered that it 24 was clear. 25 THE COURT: You know better than that, with all due 662 1 respect, but I think part of this testimony -- 2 MR. GARBUS: Look at the answer. See where the 3 answer comes in. 4 THE COURT: Part of this answer has no foundation, at 5 least to the extent it's offered for the truth. The portion 6 in which the witness said that prior to the appearance of 7 DeCSS they had seen no decrypted DVDs anywhere on the 8 Internet, I think that is perfectly admissible. It relates to 9 her personal knowledge. 10 The part of the answer that speaks of watching it 11 proliferate at an alarming rate I take to be that she saw lots 12 of sites on the Internet offering movies, but I have heard no 13 evidence based on personal knowledge that what was on the 14 Internet, that is to say, offers to sell or barter or 15 whatever, are properly considered for the truth of those 16 statements. 17 The part of the answer that says we saw decrypted 18 DVDs appear for sale and distribution not long thereafter, I 19 guess I need to hear more about in order to find out on what 20 basis the witness is telling me that. 21 MR. COOPER: Just to understand that last point, I 22 believe the witness testified that DeCSS was first on the 23 Internet in October and that the first appearance -- 24 THE COURT: Here is your problem, Mr. Cooper. Your 25 problem is whatever was said a few minutes ago that you are 663 1 trying to prove, that in fact since October there are lots of 2 movies being bought and sold over the Internet that were 3 decrypted through DeCSS, you are trying to prove it by saying 4 that there were none before October. Then DeCSS appeared, all 5 of which I think is relatively -- at least the second point is 6 uncontroversial. And the first point is evidence to support 7 your position, although it's disputed. 8 The third point depends on the truth of whatever was 9 on the Internet. That is to say, if the witness saw 40 10 website offerings to sell DVD movies, you would like me to 11 conclude that in fact those websites were, as they said on the 12 Internet, offering to distribute decrypted movies, that is, 13 they would perform as they indicated they would perform; and 14 then you are asking me further to draw the inference from the 15 timing that whatever they were selling or offering to sell 16 came from the DeCSS. 17 Now, the link you are having a problem with here is 18 that I think Mr. Garbus's objection is that it would be 19 inappropriate for me to assume that simply because you see on 20 the Internet a page that says "come get your copy of the 21 Matrix from us" means that in fact if somebody went to that 22 site a decrypted copy of the Matrix would be forthcoming. 23 That is essentially your argument, right, Mr. Garbus? 24 MR. GARBUS: Yes, or that there is any reason to 25 believe that it comes from DeCSS or any other source. 664 1 THE COURT: Well, I understand that point as well, 2 but they are asking me to infer that from the timing. 3 MR. GARBUS: Yes, your Honor, you stated our 4 position. 5 THE COURT: Okay. Now, he is making what I take to 6 be essentially a hearsay and/or a competence argument, 7 probably more hearsay than competence, about my considering, 8 or the purpose for which I consider Ms. Reider's testimony 9 about what is available on the Internet. 10 The situation would be the same if we were trying a 11 trademark case and you were trying to prove the availability 12 in the marketplace of counterfeit Levi jeans from newspaper 13 articles that indicated that somebody was offering counterfeit 14 Levi jeans. Now, there is perhaps a legal issue that you may 15 want to brief, both of you, as to whether that's appropriate 16 evidence, but I think that analogy is exactly what we're 17 talking about. Right, Mr. Garbus? 18 MR. GARBUS: Yes, sir. 19 MR. COOPER: That's Mr. Garbus's analogy, your Honor. 20 We don't believe -- 21 THE COURT: No, that was my analogy. 22 MR. COOPER: We don't believe that's the correct 23 analogy in this case. This is not a case in which we are 24 pursuing for the relief sought in this case, the relief that 25 would be sought in a case in which the bootleg -- 665 1 THE COURT: No, of course you're not. But the whole 2 purpose of this line of testimony, putting aside responding to 3 this sort of quasi laches argument, is to persuade me that 4 this is a real problem. And whether it's a real problem 5 depends, at least in part, on whether it's out there in the 6 marketplace. And the way those kinds of issues are usually 7 handled in a trademark case is that the investigator comes in 8 and says that I went to the store on Fordham Road and I bought 9 these six pairs of counterfeit jeans and here they are, and a 10 witness shows up from Levis and says we didn't make them, 11 they're counterfeit. 12 MR. COOPER: Your Honor, this goes to the question of 13 the appropriateness of relief and the question of a reasonable 14 apprehension of harm in the absence of that relief. 15 We are not attempting to prove here or indeed seek 16 the relief associated with copyright infringement per se. We 17 are not attempting to adduce the kinds of hard evidence that 18 would be necessary for a case that involved those issues. 19 What we are doing is attempting to provide to you our 20 reasonable apprehension that in the absence of the release 21 sought we will be harmed. 22 THE COURT: Well, you know, I hear the words but I'm 23 not sure I understand the symphony, to mix my metaphors very 24 badly. I really am not. 25 Look, I will hear the testimony, Mr. Garbus, but you 666 1 clearly know I understand the point, and if you want to brief, 2 either or both sides, the issue of what I'm supposed to 3 consider, that aspect of the testimony we have just narrowly 4 focused on, the witness's testimony about what's available 5 over the net, you are welcome to brief it. And in order to 6 decide this case, if I find I have to decide it, I'll decide 7 it. For now I'll hear the evidence. 8 MR. COOPER: Thank you, your Honor. Let me just 9 conclude with this witness then, your Honor, based on what you 10 have said, with two areas of questions. 11 BY MR. COOPER: 12 Q. First, I believe that we left off with this question of 13 the connection between DeCSS and the decryption of movies. 14 Have you seen any direct connection between DeCSS and 15 the decrypted DVDs on the Internet in your investigation? 16 MR. GARBUS: I object on the grounds of lack of 17 foundation. 18 THE COURT: Let me just go back to one or two more 19 thoughts that just occurred to me about the last question 20 before you go on, Mr. Cooper. 21 Among the things that you ought to consider, if you 22 are going to brief this point, and then I will consider 23 whether you brief it or not, are these: 24 First of all, I suppose it might be argued that when 25 somebody posts on the Internet saying, "Come to me, I'll sell 667 1 you a copy of the Matrix," that is a statement of a state of 2 mind, or a present intention or something like that from which 3 one is entitled to infer conduct. I'm not sure about that, 4 but that's why I put it on the table. 5 Secondly, maybe this notion of a verbal act as it 6 relates to the hearsay rule is implicated. 7 I'm really not sure about either one of those points, 8 but I want to let you know I'm thinking about them so you can 9 respond in due course. 10 Okay, Mr. Cooper. 11 MR. COOPER: Thank you, your Honor. 12 BY MR. COOPER: 13 Q. Do you have the question in mind, Ms. Reider? 14 A. Could you repeat it, please? 15 Q. Let me restate it. 16 Has there been in your investigation any direct 17 connection in the information that you have seen between DeCSS 18 and the decryption of the movies on the Internet? 19 A. Yes, there have been. 20 Q. What is that information? 21 A. I have seen sites where they suggest the use -- 22 MR. GARBUS: I assume I have a continuing objection. 23 THE COURT: Look, I think you should make your 24 objections, but if it's the same objection, if you would be so 25 kind as to say "the same objection," then I will simply know 668 1 it's the same thing, we don't have to pause, I will take it 2 subject to what I just indicated. 3 MR. GARBUS: I think I will say the same thing. 4 THE COURT: Okay. Same ruling. If it's something 5 new, let me know it's something new. 6 Go ahead, folks. 7 THE WITNESS: May I continue? 8 I have seen sites that have suggested the use of 9 DeCSS in order to then use the DivX codec against DVDs that 10 also offer DivX-made movies on their sites. 11 Q. Ms. Reider, given the wide proliferation of DeCSS on the 12 Internet, what help would the issuance of a permanent 13 injunction in this action do in your enforcement activity for 14 a number of companies? 15 MR. GARBUS: I object. 16 THE COURT: Well, I am going to take that answer as 17 well. Let it be added to my list of things that counsel 18 should consider with respect to the stuff of the Internet, 19 Rule 803(17) and how it applies in the electronic age. Rule 20 803(17). 21 Okay. Ms. Reider, I realize I'm stepping on your 22 lines constantly here this morning. Do you need the question 23 read back? 24 A. Yes, please. 25 (Record read) 669 1 MR. GARBUS: Your Honor, it seems to me, unless I'm 2 missing the point, that this sounds like a legal conclusion. 3 THE COURT: I don't think it's a legal conclusion. I 4 mean, that's kind of like asking somebody who lives downstream 5 of a damn that's about to be destroyed what effect a permanent 6 or preliminary injunction against tearing down the damn would 7 have on his property. The answer is a perfectly practical one 8 about preventing the river from flowing across the property. 9 I think that's what the question asks for. 10 MR. GARBUS: Okay. I have stated my position. 11 THE COURT: I understand. 12 MR. GARBUS: I'm not moved by the analogy between a 13 damn and a flowing river. 14 THE COURT: I know. I have given you lots of 15 analogies to think about in this case. 16 Go ahead, Mr. Cooper. 17 A. It would send a very strong message to both those that 18 would engage in illegal behavior and to law enforcement to 19 enforce it. It will make my job certainly, hopefully, easier 20 in terms of enforcing the right of our member companies for 21 the safety and security of their intellectual property. 22 Q. Let me ask you the same question with respect to the 23 effect, if the Court does not issue a permanent injunction, 24 what effect will that have on your activity to enforce the 25 interests of the member companies? 670 1 THE COURT: Believe me, that's not a useful question 2 either. There is another component that needs to be in that 3 question for it even to be relevant. 4 MR. GARBUS: Can we ask how upset she would be if you 5 deny the injunction? 6 THE COURT: We will have you testify about how upset 7 you will be if I grant it. 8 MR. COOPER: You mean if the Court concludes that 9 there is a violation here that determines not to issue the 10 injunction? 11 THE COURT: I don't know what the point of all this 12 is. Obviously the case isn't over, and if there is more 13 evidence that sheds light on the subject, I will certainly 14 consider it, but it seems to me that there is a reasonably 15 strong case to be made for the proposition that the barn is 16 unlocked and this horse is out. 17 Now, it seems to me also that what the MPAA wants is 18 a legal determination that unlocking this barn was illegal, 19 and so the next guy who considers unlocking another barn is 20 going to have something serious to think about. I suspect you 21 are also asking me to issue an injunction against the guy who 22 unlocked this barn not to unlock it again even though there is 23 no horse in it. So, you know, I don't know that this witness 24 has any light to shed on that subject. 25 MR. GARBUS: I must say I'm now finding your 671 1 analogies much more to my liking. 2 MR. COOPER: If I may, let me just say that our 3 position is obviously that the analogy that you referred to is 4 not apt, as Mr. Garbus has pointed out in his prior responses. 5 I recognize now is not the time to argue that issue. And 6 under the circumstances, if the witness's testimony about her 7 own experiential ability to deal with this issue and what aid 8 the Court's injunction might have in her enforcement 9 activities is not something that the Court is interested in 10 receiving at this time, then I would say that our -- 11 THE COURT: That was not my point. This whole little 12 discussion got started because you asked her what the effect 13 of my not issuing an injunction would be, and I assume that I 14 am going to hear a tale of woe, obviously just like I've heard 15 a tale of woe on the other side if I do issue the injunction. 16 But the critical ingredient is that the witness has 17 just told me that what this is all about is to send a message. 18 And there are various ways to send messages if indeed the 19 message is one you are entitled to have sent. And the 20 concerns I expressed yesterday and today on this subject have 21 addressed the form of any message to which you might be 22 entitled. That's what that was addressed to. 23 So, when you leave out of your question to the 24 witness about an injunction the fact that if you are entitled 25 to prevail, you might get relief short of an injunction, it 672 1 seems to me it's just a waste of everybody's time, with all 2 due respect, counsel. 3 You can ask the question with both components if you 4 want. 5 Q. Ms. Reider, in the event that the Court determines that 6 the plaintiffs are entitled to some relief, and the Court 7 determines that the relief would not include a permanent 8 injunction, would that have an impact on your ability to 9 enforce the interests of the member companies? 10 MR. GARBUS: Same objection. 11 THE COURT: Overruled. 12 A. Yes, it will have a huge impact. 13 Q. What is that impact? 14 A. There won't be any teeth, if you will, in it. We will 15 have no way to enforce that injunction. 16 Q. In the absence of an injunction? 17 A. In the absence. 18 THE COURT: If there is no injunction, there is 19 obviously no injunction to enforce, Ms. Reider. 20 Q. The question is what impact would the absence of the 21 injunction have in connection with your attempt to enforce the 22 member company's rights? 23 A. It will have a huge impact. 24 Q. In what way? 25 MR. GARBUS: I have a continuing objection. 673 1 THE COURT: Overruled. 2 A. We would have no ability to stop this. It would grant a 3 license to anyone in the world to do what they would with our 4 intellectual property, not just in this respect but in future 5 events. 6 THE COURT: I won't say what I was just about to say, 7 but, look, Ms. Reider, let's get down to the facts of this 8 case as opposed to the rhetoric. 9 If I understand it correctly, DeCSS is everywhere on 10 the Internet. I realize that's a hyperbolic statement, but 11 it's all over the play, right? 12 THE WITNESS: It's prevalent, yes. 13 THE COURT: Now, if I issue an injunction that says 14 that Mr. Corley can't put it on his website, how does that 15 affect DeCSS being everywhere else? 16 THE WITNESS: It affects it in that we can get 17 enforcement of other sites that are offering it, refusing to 18 take it down. 19 THE COURT: Because of what? 20 THE WITNESS: Because there is precedent. 21 THE COURT: Suppose the result were -- and I am not 22 saying it will be -- but just hypothetically suppose the 23 result were that the judgment recited that there was clearly a 24 controversy between the plaintiffs and this defendant as to 25 the legality under the DMCA of posting this utility, that the 674 1 controversy is persisting, that the posting of this utility 2 violates the Act, that you are entitled to a judicial 3 declaration of whether the conduct is lawful or not and the 4 court declares it is unlawful, the question of whether to 5 issue an injunction, invoke the discretionary power of the 6 court, courts have said for 300 years, at least that courts of 7 equity ought not to use the equitable power of injunction to 8 try to accomplish the impossible or to perform something which 9 is entirely futile, and therefore, in the exercise of 10 discretion, given the broad prevalence of this particular 11 utility, this time the court declines to issue the injunction 12 because it would do no practical good. 13 Now, it seems to me that perhaps there is an argument 14 in those circumstances that when you go to somebody and say, 15 look, it's on your website but it is in fact illegal, you've 16 got something to talk about, and it certainly sends a message 17 to the next guy with the next version of DeCSS that it's a 18 whole new ball game. Now, I don't understand your argument 19 given that set of hypotheses. 20 MR. GOLD: May I address the Court for a second, your 21 Honor? 22 THE COURT: No. I'm obviously going to hear 23 everybody on this at great length, all the lawyers, before 24 this is all over, but Ms. Reider is if not the chief, one of 25 the top enforcement people for the industry. She is offered 675 1 as a witness about what the practical significance of 2 different kinds of relief in this case might be, and before I 3 hear the lawyers' argument, I would like to hear what the 4 person in charge of performing the function has to say about 5 that. That's why you brought her here, as I understand it. 6 So, Ms. Reider, you know, I would like you to answer 7 that. One of the great things about a nonjury trial is the 8 judge gets to ask questions that are bothering him. 9 THE WITNESS: Well, your Honor, in our experience 10 thus far, trying to get prosecution at least on the criminal 11 side of things for failure to comply under existing law, it's 12 very difficult without being able to show damages or qualify 13 that damage, quantify it. If you just tell people, gee, you 14 shouldn't do that, but there is no penalty for having done 15 that -- 16 THE COURT: But, look, this is a criminal statute. 17 This is not a criminal case, but it's a criminal statute, it 18 says any person who violates Section 1201 or 1202 willfully 19 and for purposes of commercial advantage or private financial 20 gain can go to jail perhaps for as long as ten years. 21 Now, if the United States courts determine that 22 posting a utility like this is a crime and you hand a copy of 23 that decision to the person who is posting it, don't you think 24 there is some evidence maybe that if it doesn't come down off 25 the website it is a willful violation? 676 1 MR. COOPER: Your Honor, is that a question posed to 2 Ms. Reider from a factual standpoint? 3 THE COURT: Yes. She is making an argument that 4 without an injunction there is no effective remedy, and I want 5 to hear why. 6 THE WITNESS: Do you think I could get an AUSA or a 7 DA to take that case and enforce it? 8 THE COURT: It beats me. I mean, they haven't 9 indicted anybody in this case as far as I know. 10 Okay. Mr. Cooper, go ahead. 11 MR. COOPER: Nothing further of this witness, your 12 Honor. 13 THE COURT: Thank you. Mr. Garbus? 14 MR. GARBUS: Just one question. 15 CROSS-EXAMINATION 16 BY MR. GARBUS: 17 Q. Did you say you hadn't seen a movie on the Internet until 18 this year? 19 A. Can you repeat your question? 20 Q. When for the first time did you see a movie on the 21 Internet? 22 MR. COOPER: Objection, your Honor. It misstates the 23 testimony. 24 THE COURT: Well, it didn't purport to state any 25 testimony, so it can't misstate it. 677 1 A. Can you clarify, Mr. Garbus? 2 Q. When for the first time did you see a movie on the 3 Internet? 4 A. What type of movie, Mr. Garbus? I'm not clear on what 5 you're asking. 6 THE COURT: The question is very ambiguous. 7 Q. Any kind of movie on the Internet. 8 THE COURT: What do you mean, watched the movie? 9 MR. GARBUS: Yes. 10 A. Any kind of movie? 11 Q. Yes. 12 A. A couple of years ago. 13 Q. In 1998. 14 A. That's correct. 15 Q. And since 1998 how many movies did you watch on the 16 Internet? 17 A. I don't know. 18 Q. Were these movies that you bought to play on the Internet? 19 A. Can you play a movie on the Internet, Mr. Garbus? 20 Q. On your personal computer. 21 A. No, this is in the capacity of my job. 22 Q. Now, did you at any time learn -- let me go back to the 23 beginning of the process. As I understand it, you were given 24 at some point in time these LiViD documents which we have 25 referred to as Plaintiffs' Exhibit 9. 678 1 A. I need to see the documents that you are referring to. 2 MR. COOPER: Your Honor, I believe this is beyond the 3 scope of the direct. 4 THE COURT: Let me see where it's going. 5 Q. Do you remember when you looked at the LiViD group of 6 documents -- withdrawn. 7 At some point in time did either Mr. Jacobsen or 8 Litvak give you a group of documents which were downloaded 9 from the LiViD site? 10 A. No, they did not. 11 Q. Did you at any time go on the net to find any LiViD 12 documents? 13 A. Yes, I did. 14 Q. When was that? 15 A. As I recall, October or November of '99. 16 Q. And at whose direction was that done? 17 A. Under my own direction. I'm the supervisor of antipiracy. 18 Q. By the way, are you a lawyer? 19 A. No, I'm not. 20 Q. Now, what did you do after you downloaded those documents? 21 A. I reviewed them and turned them over to legal. 22 Q. And who was that? 23 A. Our legal department, Mark Litvak. 24 Q. To the best of your memory, was Mr. Goldstein or 2600.com 25 mentioned in any of those LiViD documents? 679 1 MR. COOPER: Objection, your Honor. Hearsay and 2 plainly beyond the scope of direct. 3 THE COURT: The hearsay objection is just wrong. Why 4 isn't it beyond the scope, Mr. Garbus? 5 MR. GARBUS: I'm trying to find out what she did. 6 She winds up saying she has a lot of information. I'm trying 7 to find out the basis for that information. 8 THE COURT: Sustained. 9 A. Can you repeat question, please? 10 THE COURT: I sustained the objection. 11 THE WITNESS: Sorry. 12 Q. Do you know what a DOD Speed Ripper is? 13 A. Yes, I do. 14 Q. Let me show you a document UP. 15 MR. COOPER: Your Honor, we object to the 16 introduction of this document. 17 THE COURT: It hasn't been offered yet. 18 MR. COOPER: It's attorney/client privilege, your 19 Honor. 20 THE COURT: Well, somebody should give me a copy of 21 the document. 22 MR. GARBUS: This is one of the -- 23 THE COURT: Just give me a minute, please. 24 (Pause) 25 THE COURT: Pose your question and I will ask the 680 1 witness not to answer until I have had an opportunity to hear 2 an objection, and please pose the question in a way that 3 doesn't disclose the content of the document, Mr. Garbus. 4 BY MR. GARBUS: 5 Q. Did you learn at some time in December of the existence of 6 a utility called DOD Speed Ripper? 7 THE COURT: Answer the question, please. 8 A. I don't recall. 9 Q. Let me show you this document and see if it refreshes your 10 recollection. 11 THE COURT: Go ahead. 12 MR. COOPER: Your Honor, are you ruling on the 13 privilege issue? 14 THE COURT: So far there is nothing that, in my view, 15 implicates a privilege. She is being shown a document for the 16 purpose of refreshing her recollection as to her state of mind 17 in December. 18 MR. COOPER: It's the use of the document which is an 19 attorney/client communication, to which we object. 20 THE COURT: I understand. You said that in the first 21 place. 22 MR. COOPER: I understand that. The question is 23 whether they are entitled to use a document which is an 24 attorney/client communication. 25 THE COURT: I understand your point. To that extent, 681 1 I'm offering your point. 2 MR. COOPER: Thank you, your Honor. 3 THE COURT: What's the question, Mr. Garbus? 4 Q. Does it refresh your recollection that you were told back 5 in December of 1999 about the DOD Speed Ripper? 6 A. No, it does not. 7 Q. Did you ever see that document before? 8 A. I don't recall it. 9 Q. Do you see your name on it? 10 A. I do see me copied, but the date of the missive was during 11 a time I was not in the office. 12 Q. Did you ever see that document at any time? 13 A. I don't recall. 14 Q. When for the first time, if ever, did you hear the term 15 "DOD Speed Ripper"? 16 A. I don't recall the exact date. 17 Q. Was it in 1999? 18 A. I don't recall the date, sir. 19 Q. Did you ever go to a site to see what a DOD Speed Ripper 20 was? 21 A. I have looked at it, yes. 22 Q. And tell me when you went to that site for the first time. 23 A. I don't recall the date. 24 Q. Was it in December of 1999? 25 A. I don't recall the date, sir. 682 1 Q. Any time in the last eight month? 2 A. I don't recall the date, sir. 3 Q. Now, you said before that you worked together with the 4 F.B.I., the U.S. Customs and who else? 5 A. That I worked for? 6 Q. The MPAA works together in its antipiracy investigations, 7 you said before, with the F.B.I., U.S. Customs and who else? 8 A. Secret Service. 9 Q. Has anybody ever shown you a document that indicates one 10 particular film was taken off the Internet that had been 11 deencrypted through DeCSS? 12 THE COURT: Didn't you have a stipulation the object 13 of which was to avoid this litany with every witness? 14 MR. GARBUS: Well, I think we are trying now to get 15 into what her investigation was. She is coming to certain 16 conclusions, and you have permitted, subject to the 17 qualifications that you have made, her testifying about 18 information. I am prepared to accept that when she speculates 19 that the stuff that's on the Internet, whatever it is that she 20 sees, that she doesn't know the source of anything that's on 21 the Internet, namely, whether it comes from DeCSS, DOD Ripper. 22 THE COURT: So I understand your point. Let's make 23 this simple. You're saying, Ms. Reider, that you have seen 24 various films, decrypted films offered on the Internet, right? 25 THE WITNESS: That's correct. 683 1 THE COURT: Do you have any way of saying whether any 2 particular one of the ones you have seen offered was decrypted 3 by DeCSS as opposed to some other technology apart from 4 whatever inference you draw from the timing? 5 THE WITNESS: No, my investigations are still 6 ongoing. 7 THE COURT: Okay. You have your "no," Mr. Garbus. 8 Let's go. 9 MR. GARBUS: Thank you. You asked the question 10 better than I could have. 11 Q. Now, you also indicated that there were various -- did you 12 ever look to see whether or not 2600.com sells any pirated 13 copies of DVDs? 14 THE COURT: I take it there is no such contention in 15 this case, right, Mr. Cooper? 16 MR. COOPER: That's correct, your Honor. 17 THE COURT: Okay. Next. 18 Q. And there is no contention that they barter, sell it or 19 point to anybody who does sell it? 20 THE COURT: Mr. Cooper? 21 MR. COOPER: If the "it" is decrypted DVDs, yes, your 22 Honor. 23 THE COURT: Okay. 24 Q. Do you know what a Speed Ripper is, by the way? 25 A. I know what it alleges to be. 684 1 Q. What does it allege to be? 2 A. It alleges to decrypt DVDs. It's a DeCSS clone. 3 Q. DeCSS clone? 4 A. Um-hum. 5 Q. Do you know if DOD Speed Ripper was available before 6 DeCSS? 7 A. Not to my knowledge. 8 Q. What is the basis of that? When for the first time did 9 you know that Speed Ripper was available? 10 MR. COOPER: Asked and answered, your Honor. 11 THE COURT: Overruled. 12 A. I don't recall the date. 13 THE COURT: Okay. We will take our morning break. 14 15 minutes. 15 (Recess) 16 THE COURT: You may proceed. 17 BY MR. GARBUS: 18 Q. You said that, as I understand it, once you learned -- 19 when did you learn of DeCSS for the first time? 20 A. Early to mid-October of '99. 21 Q. What did you then do after you learned it? 22 A. I pursued an investigation and downloaded it and then 23 notified our legal team. 24 Q. Now, have you ever used a DoDs Ripper? 25 A. Not all the way through. 685 1 Q. Tell me what you have done with it. 2 A. I have downloaded it and I have extracted a single VOB 3 file with it. 4 Q. And have you ever used a DOD Ripper? 5 MR. COOPER: Ambiguous. 6 THE COURT: What is the ambiguity? 7 MR. COOPER: I think it's the same question he asked 8 before. 9 THE COURT: Is there a different -- 10 Q. Do you know of anything separately called the DOD Ripper 11 rather than a DoDs Ripper? 12 A. No, I don't. 13 Q. How about Power Ripper? 14 A. I have heard of it. 15 Q. Have you ever utilized it? 16 A. No, I have not. 17 Q. Have you ever heard of DOD Speed Ripper? 18 A. I was under the impression that is what we were speaking 19 about. 20 Q. In other words, to you, Power Ripper and DOD Speed Ripper 21 are the same thing? 22 A. No, your earlier question regarding DoDs Ripper was my -- 23 Q. Excuse me a minute. Go ahead. 24 A. It was my impression we were discussing the DOD Speed 25 Ripper. 686 1 Q. Have you ever tried css-auth? 2 A. Yes, I have. 3 Q. And what have you done with it? 4 A. Just looked at the code. 5 Q. Have you ever tried css-cat? 6 A. Only looked at the code. 7 Q. Have you ever seen the end product, in other words, a 8 movie that is made, that has been started with the process of 9 a DOD Ripper, Power Ripper, Speed Ripper, css-auth or css-cat? 10 A. You want me to break those down? 11 Q. Sure. 12 A. I have seen the end product of movies that have been 13 decrypted. 14 Q. And have you ever issued a report, have you ever compiled 15 a report about any of your work with respect to these 16 utilities and the movies that have then been downloaded? 17 A. Not that I recall. 18 Q. With respect to your investigation of DeCSS, have you ever 19 prepared a report of that investigation? 20 A. I'm sorry. Can you repeat the question? 21 Q. With respect to any work that you did on DeCSS, Did you 22 ever prepare a report for the MPAA in any investigation you 23 did? 24 A. Not that I recall. 25 Q. Did anyone at the F.B.I. or U.S. Customs or the Secret 687 1 Service or the MPAA ever ask you to prepare any report about 2 any investigation you made concerning DeCSS? 3 A. I wouldn't be at liberty to tell you if any of those 4 federal agencies requested such a report. 5 MR. GARBUS: Your Honor, I would like to know if this 6 woman has ever prepared a report relating to DeCSS. 7 THE COURT: You can answer yes or no at least. 8 THE WITNESS: Not that I recall. 9 MR. GARBUS: We got past that pretty quickly. 10 Q. Now, Ms. Reider, you've talked about you being the chief 11 investigator at the MPAA to determine the piracy consequences 12 of DeCSS, is that right? 13 A. That is not my only function. 14 Q. Is that one of your functions? 15 A. That's one of many, yes. 16 Q. And you're telling me that you never prepared a report for 17 the MPAA concerning your investigation of DeCSS, is that 18 right? 19 A. Not that I recall. 20 Q. When you say not that you recall, just sit back for a 21 moment, take your time. Did you prepare such a report or did 22 you not? 23 MR. COOPER: Argumentative. 24 THE COURT: Overruled. 25 A. Not that I recall. 688 1 Q. Is there any document that I might conceivably show you 2 that would help you remember whether you prepared such a 3 report? 4 A. Well, if I knew that -- I don't know what you're asking. 5 Q. Is there any document that I could show you, or that 6 anybody in the world could show you, that could refresh your 7 recollection as to whether or not you ever prepared a report 8 for the MPAA concerning DeCSS? 9 MR. COOPER: Argumentative. Calls for speculation. 10 THE COURT: I'm going to allow it one more time. You 11 would think you were trying a medical malpractice case. Once 12 more. 13 A. I don't know. 14 Q. Did you ever produce a memo -- forget about the word 15 report -- for the MPAA or any other governmental agency 16 concerning DeCSS, the proliferation of it, the use of it, or 17 the consequences of the films that it would produce after that 18 DeCSS application was DivX'd? 19 A. I don't recall. 20 THE COURT: Mr. Garbus, you took her deposition, 21 right? 22 MR. GARBUS: Yes. 23 THE COURT: And I know that at least one whole box of 24 documents from her file was given to me for in camera 25 inspection on a claim of privilege that were subsequently 689 1 turned over to you. 2 Now, this is not the time to be either doing 3 discovery or whatever else this is. If you have a document, 4 let's go to it. If you don't have a document, ask something 5 else. 6 MR. GARBUS: I understand -- 7 Shall we approach the bench? 8 THE COURT: No. 9 MR. GARBUS: -- that there is no such document, that 10 she never prepared a report for the MPAA. Now, we have been 11 through a series of discussions where we have asked them to 12 produce lists of documents that we were promised that we have 13 never gotten. I can go through that now, but I don't think 14 it's an appropriate time. 15 THE COURT: Neither do I. So, you're complaining 16 they didn't give you the document that she says doesn't exist. 17 Is that the net of the complaint? 18 MR. GARBUS: No. Let me just go on. 19 Q. I'd like to learn something about what your investigation 20 consisted of. After you gave the Linux document to someone at 21 the MPAA in October or November, what did you then do in the 22 course of your investigation? 23 A. I'm sorry. Which Linux documents are you referring to? 24 Q. Did you testify that you downloaded some documents in 25 October, November and December from the LiViD group? 690 1 A. I don't know. They would have to read it back to me. 2 Q. Did you download -- let's start at the beginning. Did you 3 at any time download any documents from the LiViD group in 4 1999? 5 MR. COOPER: Your Honor, Mr. Garbus already elicited 6 testimony about what the witness downloaded and I think you 7 then sustained the objection with respect to this questioning 8 regarding the LiViD group and the documents downloaded with 9 respect to it. 10 MR. GARBUS: Your Honor, I would like to get into 11 what her investigation consisted of. She has come in here 12 allegedly as a witness to give information about that 13 investigation. 14 THE COURT: One question at a time. You already 15 asked her -- you first started off from the mistaken premise 16 that Mr. Jacobsen or Litvak gave her documents from the LiViD 17 site. She said, no, that hadn't happened. You then asked her 18 whether she went onto the site, and she testified she went 19 onto the net and found LiViD documents in October or November, 20 that she downloaded, reviewed them and turned them over to 21 legal, specifically to Mark Litvak. Now, I don't know why we 22 have to do it all over again. 23 MR. GARBUS: Because she said she didn't remember 24 that. 25 THE COURT: No, she didn't. 691 1 MR. GARBUS: Let me go on, if I can. 2 Q. After you turned these documents over to Mr. Litvak, then 3 what happened? 4 MR. COOPER: Ambiguous. 5 THE COURT: Overruled. 6 A. Then what happened in respect to what? 7 Q. Your investigation. Everything is directed now towards 8 your investigation. What did do you with respect to your 9 investigation after you turned these documents over to 10 Mr. Litvak? 11 A. I continued to look for evidence of piracy. 12 Q. Tell me what you did. 13 A. In respect to what, sir? 14 Q. DeCSS. 15 A. I continued to look for sites offering DeCSS and to 16 request the issuance of cease and desist letters. 17 Q. And were you also looking for sites relevant to DOD Ripper 18 or Power Ripper or Speed Ripper? 19 A. Our investigations are ongoing. 20 Q. Were you, at that time that you were looking for DeCSS 21 sites, also looking at sites for DOD Speed Ripper, Power 22 Ripper -- and Power Ripper? Excuse me. 23 A. I don't recall a time frame. 24 Q. When did you start looking at DeCSS sites? 25 A. Early to mid-October of '99. 692 1 Q. And can you tell me to the best of your recollection 2 whether that was before or after you were looking at sites for 3 DOD Ripper, if in fact you were? 4 MR. COOPER: Objection, your Honor. I think it has 5 been asked and answered repeatedly and it's plainly beyond the 6 scope of direct. 7 THE COURT: It's certainly sustained as to form. 8 Let's start with that. Try another question. 9 Q. After you started looking at the DeCSS site, did you make 10 any notes of any site you saw? 11 A. Can you clarify "make notes"? 12 Q. Did you write anything down on a piece of paper? 13 A. I imagine we downloaded those sites that we found. 14 Q. And do you recall now which sites that you found? 15 A. Not specifically. 16 THE COURT: Isn't that precisely the carton of 17 document that was submitted to my chambers that was then 18 turned over to you, Mr. Garbus, like maybe 5,000 pages of it? 19 MR. GARBUS: I don't know if that was all the 20 documents. What Mr. Schumann testified was that he had gotten 21 a part of the documents. I'm trying to find out now what the 22 documents were that she downloaded. 23 Can we approach the bench? 24 THE COURT: No. 25 MR. GARBUS: Let me tell you where I would like to 693 1 go, and if there is an issue about it, I just don't want to go 2 there. 3 I think I'm entitled to know -- she is the only 4 witness for the MPAA thus far produced. I understand she is 5 their last witness. We have been told about this awesome 6 threat of DeCSS, and I would like to find out what the MPA has 7 done since they first learned about it, and I would like to 8 find out during the course of this investigation or this 9 discussion with her what she has done, because she is the head 10 of piracy, with respect to the other utilities that allegedly 11 cause piracy, and whether or not she or anyone can tell 12 basically, if something is on the screen, which utility it 13 comes from -- 14 THE COURT: You already got that stipulation, didn't 15 you, early this morning? 16 MR. GARBUS: The last part I have. 17 THE COURT: Right. 18 MR. GARBUS: Now I would like to go to the 19 investigation. What I have said before is if they were 20 serious at all about DeCSS, that there were many, many ways 21 that they could have learned in October, November exactly who 22 had DeCSS, what was being done with respect to it, and I think 23 what they would have concluded, at least I would have 24 concluded, is that it was being used for the Linux machine and 25 that these other utilities may be appropriate "illegal copying 694 1 or piracy tools," but DeCSS, for precisely the reasons that 2 Mr. Shamos testified, is not. 3 Now, whether or not your Honor feels that makes DeCSS 4 still prohibitable by the statute is something for an 5 appropriate time, but it seems to me I'm entitled to go 6 through that with this witness. 7 THE COURT: What is on the table are questions 8 nit-picking about documents that you know full well were 9 produced to you, piles of them. 10 MR. GARBUS: Let me tell you some of the documents we 11 did not get. Shall we go through that now? 12 THE COURT: Mr. Garbus, no. 13 MR. GARBUS: May I ask my question? 14 THE COURT: You can ask a new question. 15 MR. GARBUS: Thank you. 16 Q. Now, when you say you were monitoring sites for DeCSS in 17 November of '99 -- 18 THE COURT: By the way, if we do get to that subject, 19 I'm still waiting for the affidavit about your client's hard 20 drive. Just keep that in mind. Let's go on. 21 MR. GARBUS: May I have the last question asked 22 repeated to me? 23 (Record read) 24 Q. Did you ever tell anybody from October until today that 25 you had ever seen a pirated copy of a digital movie, a 695 1 specific movie? 2 A. Yes. 3 Q. And did you ever tell anybody, or write a report, or 4 furnish a document indicating that it related in any way to 5 DeCSS? 6 A. As I stated before, I don't recall any report on DeCSS. 7 Q. Putting aside report, any e-mails? 8 A. I don't recall specifics. 9 Q. What has been your training as an investigator? You 10 worked for the F.B.I. for a period of time? 11 A. That's correct. 12 Q. Were you trained there as an investigator? 13 A. That's correct. 14 Q. And did the F.B.I. have some practice with respect to 15 making reports? 16 A. Yes, they do. 17 Q. Tell me what that practice was. 18 MR. COOPER: Relevancy, your Honor. 19 THE COURT: Sustained. 20 Q. Did the training include -- 21 THE COURT: Sustained. 22 Q. You indicated that -- let me ask this. When you say you 23 are monitoring websites, did you ever call any website in 24 order to determine the name, address or identification of any 25 individual who had been allegedly selling movies on any of 696 1 these file sharing sites? 2 A. Excuse me. You'll need to clarify your question. You 3 have asked about websites and FSUs all in the same sentence. 4 Q. Did you ever call anybody as part of your investigation, 5 or to your knowledge, if it's not confidential, the F.B.I., 6 Secret Service, U.S. Customs? 7 THE COURT: The question is lost with the digression. 8 Start the question again. 9 Q. Did you ever call anybody at anybody website that had file 10 sharing to determine where the films came from? 11 A. Do you mean did I telephone anyone? 12 Q. Yes. 13 A. Not personally. 14 Q. Did you ever make any investigation with respect to any of 15 those file sharing sites as to where the films came from? 16 A. Yes, we routinely investigate. 17 Q. And what did that investigation indicate? 18 MR. COOPER: Objection, your Honor. It's not only 19 confidential, ongoing investigations. Much of the information 20 she has on this subject is privileged and it is plainly beyond 21 the scope. 22 THE COURT: Well, you better come to sidebar. Mr. 23 Garbus and Mr. Cooper. 24 (At the sidebar) 25 THE COURT: Let's deal with scope first. Mr. Garbus, 697 1 why is it within the scope? 2 MR. GARBUS: My position is that they know that DeCSS 3 is not a pirating tool. My information. And I believe that 4 they may have made an attempt to determine that and may have 5 concluded what I have just said is so. Whether or not that 6 goes to your ultimate question about whether or not the DeCSS 7 is an appropriate or inappropriate circumvention is something 8 else. But it seems to me what I am entitled to know is this. 9 There are ten different utilities that with respect 10 to, let's say, the nine others, as I understand it, they did 11 no investigation, and that basically what you are dealing with 12 is an attempt to take a product away from, let's say, the 13 Linux source group, and that I think that what the MPA was 14 doing was basically protecting the licensing arrangement and 15 that this entire investigation had little and nothing to do 16 with piracy. And I think they are aware of the fact that the 17 stuff that's up on the Internet is not DeCSS material. Not 18 only the negative of it, but that they know that it's not. 19 THE COURT: So that's why it's within the scope of 20 the direct, is that right? 21 MR. GARBUS: If you want, I will make her my witness 22 at an appropriate time, keep her in court and I'll make her my 23 witness. 24 MR. COOPER: Your Honor, my principal concern -- I 25 don't think it's necessary -- 698 1 MR. GARBUS: I don't think it's within the scope of 2 the direct based on the conclusions that they drew. She is 3 the chief investigator. They put her on the stand. She comes 4 to assert conclusions. I think the facts contradict her 5 conclusions. 6 THE COURT: What conclusion? 7 MR. GARBUS: Well, I must tell you every one of the 8 conclusions is that DeCSS is a contributing factor or is one 9 of the reasons they are very concerned. One of the critical 10 parts of her testimony, as I understand it, is the spiking or 11 the enormous increase in material on the net since DeCSS first 12 comes about. 13 THE COURT: Um-hum. 14 MR. GARBUS: And I think the truth of it is you have 15 nine other utilities that lead to that spiking, and the one 16 utility that does not is DeCSS because it has a different 17 function. 18 THE COURT: You are certainly entitled to ask her 19 about the question of whether these other utilities could have 20 led to the spike. There is no question about that. 21 MR. GARBUS: Okay. And I want to know. 22 THE COURT: But I don't think that's what you have 23 been asking her. 24 MR. GARBUS: I have been trying to get the background 25 for it. I have been trying to find out her investigation. If 699 1 you are asking me to ask a conclusory question, I'm prepared 2 to do that. I wanted to know what her investigation 3 indicated. It seems to me I'm entitled to do that. 4 THE COURT: Mr. Cooper? 5 MR. COOPER: Our concern, your Honor, is that the 6 question that I think Mr. Garbus last asked her has the 7 potential for eliciting information regarding the specifics of 8 investigations of other potential actions and ongoing 9 investigations in cooperation with law enforcement. 10 I will say, for instance, that the MPAA member 11 companies are among the plaintiffs in an action filed today 12 against ScourNet, and to the extent that Mr. Garbus's question 13 is potentially going to elicit privileged information 14 regarding the investigation leading up to that action, I 15 believe we are entitled to protection from having to answer 16 that question under a variety of privileges. 17 I don't think it's necessary for Mr. Garbus's right 18 to question the witness on any relevant information she might 19 have, but I am concerned that it's privileged information and 20 information regarding ongoing investigations not be divulged 21 in connection with such a response. 22 MR. GARBUS: I am here to represent a client. My 23 understanding is that, of all of the utilities, the one that 24 is not being used for piracy is DeCSS because of the amount of 25 time it takes to do a variety of things. What is being used 700 1 for piracy are these other utilities, that the investigation 2 into DeCSS is solely related to the fact that there is a 3 competitive machine out there called Linux. That's what I'm 4 trying to get to. 5 If we can do all that with a stipulation, if we can 6 do all that -- not the last part about Linux -- but if we can 7 do it with a stipulation, I will try to craft one and I would 8 try and ask it in one question, but I was trying to get into 9 the investigation concerning it. 10 MR. COOPER: I don't even know how to respond to 11 that. The only information we have on any of those assertions 12 are from Mr. Garbus's mouth. This witness isn't able to 13 testify to that factual information because it's simply 14 nonexistent. 15 MR. GARBUS: She is the chief investigator. She may 16 contradict everything I said. She may say everything I just 17 said is wrong. 18 THE COURT: Look, Mr. Garbus is entitled to 19 cross-examine her on the subject of whether this spike in the 20 apparent availability of pirated movies on the Internet after 21 October or November is attributable to the appearance of 22 DeCSS. I think there are other ways of doing it. 23 MR. GARBUS: I could ask her one question. 24 THE COURT: We will take it one question at a time. 25 There are other ways of doing it. Let's try. 701 1 MR. GARBUS: Judge, you are an experienced trial 2 lawyer. If you can think of a better way for me to formulate 3 a question so we don't have a problem, I will do it. 4 THE COURT: I'm not getting your rate anymore to 5 formulate the questions, Mr. Garbus. 6 (In open court) 7 MR. GARBUS: You may be exagerating. 8 THE COURT: I don't think so. 9 MR. GARBUS: May I have the last question, please? 10 (Record read) 11 THE COURT: I am going to sustain the objection to 12 that question, because it's much too broad in the 13 circumstances, and it does implicate privileges. It 14 implicates legitimate confidentiality concerns beyond 15 privileges, but there is some appropriate area here that I 16 have indicated at the sidebar, and counsel can pursue it. 17 New question. 18 BY MR. GARBUS: 19 Q. Have you ever seen any documents that indicate whether or 20 not all of the films that are on these file sharing programs 21 do or do not come from Power Ripper? 22 A. No. 23 Q. Have you ever seen any documents -- 24 MR. GARBUS: Judge, if you have a better way of 25 formulating the question, I will take it. 702 1 THE COURT: As I said to you, I'm not getting paid 2 the rate you are getting for formulating questions. Once upon 3 a time I was, but not anymore. That's your job. 4 MR. GARBUS: Did we get an answer? 5 THE COURT: There is not a question. 6 Q. Can you tell by looking at any of the file sharing 7 programs what percentage of the films that are described on 8 those file sharing programs come from any particular utility? 9 A. You want to know what compression was used on them or -- 10 THE COURT: Let's try to make this simpler. I can't 11 resist, Mr. Garbus. I'm sorry. Think of it as pro bono. 12 I understood from a previous witness that when you 13 see a film listed on a website or an FSU that has been 14 decrypted and is available for sale or exchange, that you 15 can't tell from the listing itself what mode of decrypting the 16 film was used. Is that consistent with your understanding? 17 THE WITNESS: Yes, it is. 18 THE COURT: All right. Are there other ways that you 19 can ascertain by what means a film offered on the Internet or 20 an FSU for exchange or sale has been decrypted? 21 THE WITNESS: I don't know. 22 THE COURT: Back to you, Mr. Garbus. 23 Q. Who would know at the MPAA, if anybody? 24 A. I don't know. 25 Q. Do you know who Brad Hunt is? 703 1 A. Yes, I do. 2 Q. What is his job? 3 A. He is our chief technology officer. 4 Q. Have you ever had any discussions with him about the two 5 questions that the judge has asked you? 6 A. No, I have not. 7 Q. And who is Rick Hirsch? 8 A. He is the head of antipiracy for the IDSA. 9 Q. To your knowledge, does anyone at the MPAA have the 10 answers to the two questions that the judge posed? 11 A. I don't know. 12 Q. To your knowledge, does anybody in law enforcement have 13 the answers to the two questions the judge has posed? 14 A. I don't know. 15 THE COURT: Has anybody on the Cincinnati Reds? Come 16 on. Don't you think there is an easier way to do this, Mr. 17 Garbus? 18 MR. GARBUS: You tell me. Your questions are not 19 objectionable. Mine can be. Go ahead if your Honor wants to 20 formulate the question. 21 THE COURT: Mr. Sims has offered. 22 MR. SIMS: I will pose the question if you want, your 23 Honor. 24 THE COURT: It's Mr. Garbus's examination. 25 Q. Now, we have heard about a surge in Internet piracy, is 704 1 that right, over the last six months? 2 A. In respect to decrypted DVDs. 3 Q. Right. Can you tell whether or not that surge comes as a 4 result of the utility Power Ripper or DeCSS or DOD Ripper or 5 any other utility? 6 A. Not definitively. 7 Q. Has anyone at the MPAA ever made any investigation to 8 determine what the utility is or was being used to create that 9 surge? 10 A. I don't know. 11 Q. Have you ever made any investigation to determine which 12 utility leads to that surge? 13 A. As I stated before, it's an ongoing investigation. 14 THE COURT: Maybe we can get at it a little bit 15 better this way. If you were to download the file of a 16 decrypted movie obtained over the Internet or through an FSU, 17 are you aware of any means by which you can examine the code 18 and the data file of the download and determine through that 19 examination how the movie was decrypted? 20 THE WITNESS: I don't have that answer yet. 21 THE COURT: You don't have it yet. 22 THE WITNESS: No. 23 THE COURT: I take it the answer is that you hope to 24 find out some day, but you don't know it now, is that correct? 25 THE WITNESS: I hope to find out soon, yes. 705 1 THE COURT: All right. 2 Q. So, as of now, nobody knows the answer to my question? 3 THE COURT: As of now, Ms. Reider doesn't know the 4 answer. 5 THE WITNESS: That's correct. 6 Q. As of now, do you know if anybody in the MPAA knows the 7 answer? 8 A. I don't know. 9 Q. To your knowledge does anyone in law enforcement know the 10 answer? 11 A. I don't know. 12 Q. Now, has anyone ever said to you -- 13 THE COURT: Let me ask another question, because I 14 think it may short-cut this a lot. Would I be correct in 15 assuming, Ms. Reider, that there are other investigative 16 techniques that you have and are pursuing in an effort to find 17 out by what means any movies that may be offered on the 18 Internet were decrypted, out of conventional law enforcement 19 type techniques? 20 THE WITNESS: That's correct, your Honor. 21 THE COURT: Okay. Let's go. 22 Q. What are those techniques, and what is it that you're 23 doing? 24 A. We regularly try to determine the source, the author's 25 identity, location. 706 1 MR. GARBUS: Can I hear the answer again? 2 (Record read) 3 Q. During that course of investigation, have you ever 4 determined that DeCSS was ever used to send a film over the 5 Internet? 6 THE COURT: Well, on that you already have your 7 stipulation, Mr. Garbus. They have no direct evidence that 8 that ever occurred. They are asking you to infer it from 9 other things. 10 Q. Have you ever tried to determine whether or not any -- 11 from your investigation -- any of the films on the file 12 sharing programs came from DeCSS? 13 MR. COOPER: Asked and answered, your Honor. 14 THE COURT: Yes, I think it was. 15 MR. GARBUS: Your Honor, can I have five minutes? 16 Could I just have a five-minute break? 17 THE COURT: Yes, sure. 18 (Recess) 19 BY MR. GARBUS: 20 Q. During the course of your investigation, when you have 21 gone to these file sharing sites, have you ever learned that 22 the information posted on the site is false, namely, that they 23 don't have the movies that they say they have? 24 A. On occasion the download does not come through. 25 Q. And when you say "on occasion the download does not come 707 1 through," what does that mean? 2 A. There is some sort of error in the transfer. 3 Q. Do you know whether the film is on the site or it's just a 4 dud, that they say they have a film? 5 A. I don't know. 6 Q. Do you have any reports or records concerning the number 7 of duds on these file sharing sites? 8 A. Not to my knowledge. 9 Q. To your knowledge, does any law enforcement agency have 10 any information concerning the duds on these file sharing 11 sites? 12 A. I don't know. 13 MR. GARBUS: Excuse me, your Honor. We are just 14 trying to go through all these document now. It's a little 15 rough. 16 Q. This is document CO, which also has attached to it -- 17 well, let me show you this first. I show you Defendants' 18 Exhibit AT? 19 MR. GARBUS: May I approach the bench? 20 THE COURT: Yes. 21 Q. And I ask you whether or not you have ever seen this 22 document before. Have you ever seen that document before? 23 A. You showed it to me at the deposition. 24 Q. Prior to the deposition had you ever seen it before? 25 A. Not that I recall. 708 1 Q. Let me show you a document entitled CO. 2 MR. COOPER: Your Honor, this is a privileged 3 document. 4 THE COURT: Mr. Knight is who? 5 MR. COOPER: Mr. Knight is one of the attorneys, a 6 former regional director for the MPAA. 7 Mr. Litvak, as you know, is counsel for the MPAA. 8 And, your Honor, I believe that this goes to efficacy and is 9 not properly within the scope of direct. 10 THE COURT: Mr. Garbus? 11 MR. GARBUS: As I said, I'm prepared to make this 12 witness -- rather than get into scope or not scope at some 13 point -- I'm willing to make her my witness as a hostile 14 witness. 15 THE COURT: And what about the rest? 16 MR. GARBUS: Can I hear the rest again? 17 THE COURT: Privilege, relevance. 18 MR. GARBUS: This is the Macrovision report. 19 THE COURT: Please do not describe what it is. There 20 is a privilege claim. 21 MR. GARBUS: I don't see why it's privileged. 22 THE COURT: You don't see it. 23 MR. GARBUS: It's a public document. 24 THE COURT: CO is a memorandum from Mr. Hunt to Mr. 25 Knight, who was just identified as an attorney. We are 709 1 laboring under some difficulty here, and I appreciate that 2 that affects everyone, because in an effort to get this case 3 to trial, you have seen probably 95 percent of the plaintiff's 4 privileged documents on a "no waiver" basis with the 5 understanding that admissibility would be determined at trial. 6 In other circumstances, a determination would have been made 7 as to privilege, and if it was determined to have been 8 privileged, you never would have seen the document in the 9 first play. So please don't announce its contents while we 10 are discussing whether there is a proper privilege claim. 11 Now, would you address the privilege claim and the 12 relevance argument. 13 MR. GARBUS: With respect to relevance, it refers to 14 the document, which I don't perceive to be privilege. 15 THE COURT: No, AT is not. But by saying this refers 16 to it, you, of course, have already disclosed part of the 17 content of CO. But let's go on. 18 MR. GARBUS: Judge, shall we do this at the bench? 19 THE COURT: I think you are fully capable of 20 discussing the relevance and the privilege issues without 21 discussing the contents. 22 MR. GARBUS: I would like to ask her whether looking 23 at that document, to which there is an objection with respect 24 to privilege, refreshes her recollection as to whether she saw 25 a document that was not privileged. 710 1 THE COURT: For that limited purpose, you may show 2 her CO. 3 MR. GARBUS: Thank you. 4 THE WITNESS: He already has. 5 THE COURT: You have already seen it, Ms. Reider? 6 THE WITNESS: He just gave it to me. 7 THE COURT: He just gave it to you. All right. Ask 8 her the question. 9 Q. Does reading that document refresh your recollection as to 10 whether or not you saw a document entitled "Macrovision"? 11 A. No, it does not. 12 Q. Did you ever have any discussion with anyone at the MPAA 13 concerning any Macrovision analysis of the DVD CSS hack. 14 A. Not that I recall. 15 Q. Were you told by anyone at the MPAA that Macrovision had 16 determined that the DeCSS hack has no commercial significance? 17 A. I don't recall. 18 Q. Were you ever told by anybody at the MPAA -- by the way, 19 do you know who Macrovision is? 20 A. Vaguely. 21 Q. Tell me who they are. 22 A. They are a company that provides content protection for 23 videotape. 24 Q. Were you ever told by anyone at the MPAA either that a 25 Merdan report or a Macrovision record had determined that the 711 1 DeCSS hack has proven to be more difficult and complicated to 2 use than the average consumer is willing to put up with? 3 A. No. 4 Q. Did you have any conversations with anyone at the MPAA 5 concerning the differences in the use of the DeCSS utility and 6 the other utilities we have talked about, the DOD Ripper, the 7 Power Ripper, the Speed Ripper, with respect to their 8 efficacy, with respect to illegal copying? 9 A. Can you read back that whole question, please? 10 (Record read) 11 A. Not that I recall. 12 Q. Did anyone at the MPAA ever tell you that DeCSS was not 13 consumer or user friendly and would not pose a problem with 14 respect to illegal copying? 15 A. Not that I recall. 16 Q. Did anybody tell you the contrary? 17 A. I don't recall. 18 Q. Did you ever see any MPAA report that said that DeCSS is 19 not a utility that is appropriate for piracy or copying? 20 A. Not that I recall. 21 Q. Do you know if the MPAA ever made a determination that 22 DeCSS is not a copying or pirating utility? 23 A. Not that I recall. 24 Q. Did they ever come up with any contrary conclusion? 25 A. I don't know. 712 1 Q. When for the first time did you learn about Linux? 2 MR. COOPER: It assumes facts not in evidence, but 3 it's beyond the scope. 4 THE COURT: Sustained as -- pardon me? 5 MR. COOPER: And irrelevant. 6 THE COURT: Sustained as to form. Rephrase it. 7 Q. You previously talked about downloading material from the 8 LiViD group site. Is that right? 9 A. That's correct. 10 Q. Prior to that time, had you ever heard of Linux? 11 A. As an operating system? 12 Q. Yes. 13 A. Yes. 14 Q. When did you hear about it for the first time? 15 A. I don't recall the date. 16 Q. Was it in 1999? 17 A. I don't recall the date. 18 Q. Did anyone at the MPAA ever tell you about Linux or did 19 you learn it on your own? 20 MR. COOPER: Your Honor, relevancy. I recognize that 21 Mr. Garbus is entitled to cross-examine the witness on proper 22 matters, but I get the impression we are engaged in a 23 filibuster. 24 MR. GARBUS: Engaged in what? 25 THE COURT: A filibuster is what he said. 713 1 Overruled for the moment. 2 A. I don't recall. 3 Q. When for the first time did you ever hear the term "LiViD 4 group"? 5 A. I don't recall having heard that specific title. 6 Q. How did you know to go to the LiViD website, download the 7 material you downloaded in October and November? 8 A. I'm an investigator. I followed a trail there. 9 Q. Tell me what the trail was. 10 A. I read about it on Slashdot. 11 Q. And, by the way, do you know or anyone at the MPAA have 12 any reason to believe that 2600.com has anything to do with 13 the surge in Internet piracy? 14 MR. COOPER: Your Honor, to the extent that Mr. 15 Garbus is asking the witness of her knowledge from attorneys 16 in connection with this lawsuit, it would be privileged. 17 THE COURT: I just don't even begin to see the 18 relevance of it. 19 Q. Take aside the question -- 20 MR. GARBUS: Unless you are ruling on relevancy. 21 THE COURT: I am ruling on relevance. There has been 22 no clam here. They don't have to establish what you are 23 suggesting you were provided. 24 MR. GARBUS: It certainly goes to the question of 25 damage, doesn't it? 714 1 THE COURT: There is no damage claim in this case, 2 whatever you say in your papers. They amended their complaint 3 to delete it. 4 Q. Other than DeCSS, do you know what other ways there are to 5 copy DVDs? 6 A. Only what I have read. 7 Q. And what is it that you've read? 8 A. The drink or die Speed Ripper claims. 9 Q. Tell me what that is. 10 A. With all due respect, sir, you have been asking me about 11 the DOD Speed Ripper. 12 Q. So that's the only thing that you know of that is used to 13 decrypt DVDs other than DeCSS, is that right? 14 A. To my knowledge. 15 Q. Has anyone ever told you that any of these other utilities 16 that we have talked about can be used to decrypt DVDs? 17 MR. COOPER: Ambiguous, your Honor. 18 THE COURT: I don't think so. 19 THE WITNESS: Could you read the question back, 20 please? 21 (Record read) 22 A. Not that I recall. 23 Q. In response to Mr. Cooper's question before, you stated 24 that you tested DeCSS. Do you remember that? 25 A. That's correct. 715 1 Q. You didn't mention whether you were alone or with other 2 people. Were you alone? 3 A. No. 4 Q. Who was with you? 5 A. To the best of my recollection, Brad Hunt, Rick Hirsch and 6 Richard Kroon. 7 Q. And you have identified Brad Hunt as the chief. Rather 8 than go through it again, tell me who those three people are. 9 A. Brad Hunt is our chief technology officer, Rick Hirsch at 10 the time was director of worldwide antipiracy, and Richard 11 Kroon is a manager in our MIS department. 12 Q. What is Brad Hunt's background, to the extent you know it? 13 A. I don't know. 14 Q. Who did the actual downloading? 15 A. I did. 16 Q. And were you doing it under their supervision? 17 A. No, I was not. 18 Q. Did you then, after you downloaded it, watch a movie? 19 A. We decrypted a DVD. 20 Q. Which one? 21 A. As I recall, it was a Star Trek movie. 22 Q. Did you watch the movie? 23 A. We watched segments of it. 24 Q. How much? 25 A. In total, approximately five minutes. 716 1 Q. Is it fair to say that there is no report or memo 2 concerning that? 3 A. I can't speak for others. 4 Q. Did you ever make a report or memo concerning that? 5 A. Not that I recall. 6 Q. You said before that you hoped to have an answer soon 7 about whether a movie file reveals the decryption technique. 8 Who have you asked for this answer? 9 A. I have not yet asked anyone. 10 Q. You hope to have an answer soon, you haven't asked 11 anybody. Can you tell me whether or not anyone to your 12 knowledge is studying whether or not a movie file can 13 reveal -- that's been downloaded -- can reveal the decryption 14 technique? 15 A. I don't know. 16 Q. When do you hope to get an answer to the question you 17 didn't ask? 18 THE COURT: You think that's a proper question, Mr. 19 Garbus? 20 Q. When do you hope to learn when there will be information 21 about whether a movie file reveals a decryption technique? 22 MR. COOPER: Objection, your Honor. 23 THE COURT: Overruled. 24 A. In the near future. 25 Q. Is the near future sometime this year or next year? 717 1 A. I would say that was subjective as to what you would 2 qualify "near." 3 Q. You used the word. What do you mean by that? 4 A. Hopefully within the year. 5 Q. Now, do you know of any techniques that are being 6 developed by the movie studios or the MPAA to stop the 7 transmission of unauthorized movies over the Internet? 8 A. I have no specific knowledge. 9 Q. Does the word "digital transmission" mean anything to you? 10 MR. COOPER: Relevancy and scope, your Honor. 11 THE COURT: Sustained. 12 Q. By the way, do you in the course of your investigation use 13 informants? 14 A. Yes, I do. 15 Q. And are these informants used to determine facts for your 16 investigation? 17 A. They contribute intelligence. 18 Q. And has any of the intelligence that has been contributed 19 indicated to you that DeCSS is used in any way for any illegal 20 copying? 21 A. Yes, it does. 22 Q. Where is that found, that intelligence? 23 MR. COOPER: Your Honor -- 24 Q. Is that in any documents? 25 THE COURT: What is it, Mr. Cooper? 718 1 MR. COOPER: We had an understanding with respect to 2 the specifics of investigations and, in particular, the 3 informants, at least I understood we did with opposing 4 counsel. I am just wanting to make sure that that last 5 question is limited to whether the witness has copies of 6 informing as opposed to what the details of the investigation 7 are. 8 Q. Let me make it clear, I am not interested in any 9 informants's names and I don't want to you give me any 10 informants's names. 11 Have you ever soon a document from an informant -- by 12 the way, how many informants do you use in the New York 13 office? 14 A. In the New York office? 15 Q. Yes. 16 A. There are no informants in the New York office. 17 Q. How about Washington? 18 A. Informants in the Washington office? 19 Q. How many informants does the MPAA have in the United 20 States? 21 A. I don't know. 22 Q. How many informants does the MPAA have in Encino, 23 California? 24 A. Zero in Encino, California. 25 Q. Where are the informants located? I don't want to know 719 1 cities, just general areas. 2 A. They are around the world. 3 Q. Have any of these informants ever given you a written 4 document that shows that a DeCSS film was ever on the Internet 5 or was ever sold or copied? 6 A. Not specifically. 7 Q. How much money does the MPAA spend each year in its piracy 8 efforts? 9 A. I don't know. 10 Q. How many people -- by the way, where are you located? 11 A. Encino. 12 Q. And how many people are there in your office? 13 A. Approximately 120 or so. 14 Q. And how many of those people do you supervise? 15 A. Directly? 16 Q. Yes. 17 A. Four or five. 18 Q. How many people do you supervise indirectly? 19 A. It depends on the investigation. 20 Q. With respect to the DeCSS investigation. 21 A. It depends on which site offering DeCSS. 22 Q. Is there any investigation that the MPAA is making of 23 2600.com? 24 A. To the extent we filed this lawsuit. 25 Q. Other than that? 720 1 MR. COOPER: Your Honor, I believe the witness's 2 testimony has been that after a certain point in her 3 investigation she turned it over to legal and this lawsuit 4 resulted. He is asking outside of this lawsuit? 5 MR. GARBUS: I will now go before the lawsuit. 6 Q. Prior to January 13, was there an investigation of 7 2600.com? 8 A. Under the direction of the legal department. 9 Q. And do you know when that investigation began? 10 A. I can't give you an exact date. 11 Q. Now, you say, as I understood it -- where did you get 12 DeCSS from in the first instance? 13 A. I don't recall. 14 Q. Did you say you got it off Slashdot? 15 A. No, I did not. 16 Q. Do you know why 2600.com was the only person sued in this 17 lawsuit? Is there anything that you know, as a result of any 18 conversations you had prior to January 13, why Mr. Goldstein 19 and 2600.com, along with the other two defendants, were being 20 made the subject of this suit? 21 MR. COOPER: To the extent the witness has any 22 information on this subject, it is plainly privileged. 23 THE COURT: Sustained. 24 Q. What is the budget of your department? 25 A. I don't know. 721 1 Q. What is the budget of the antipiracy department of the 2 MPAA? 3 A. I don't know. 4 THE COURT: Mr. Garbus, I have let you go on for a 5 long period of time because it is now reasonably clear to me 6 that the object of this morning's exercise, in at least some 7 part, is simply to fill up hours that you want to fill up. 8 That's my perception of it anyway. We have gotten down nearly 9 to the color of the carpet in the office and what brand of 10 coffee is in the coffee machine. I don't see the relevance of 11 any of it. If there is any, I would like to hear it now. 12 MR. GARBUS: I would like to know -- I think it's 13 relevant. The MPAA has made allegations about DeCSS as a 14 piracy tool. As I understand it, DeCSS is used primarily for 15 the Linux machine; that with respect to piracy or illegal 16 copying, that it is the other utilities that are used, and 17 that the reason that DeCSS is the subject of this lawsuit is 18 not so much related to piracy but it related to the use by 19 Linux and other open source people of DeCSS which allows it to 20 play DVDs. 21 In other words, the argument that we have been making 22 since the beginning of this case is that this is not a piracy 23 case, this is not an illegal copying case. Rather, this is a 24 monopoly case where the DVD licensees control who shall play 25 DVD hardware. 722 1 THE COURT: And would you point to the pleading that 2 you have filed that makes this a monopoly case, Mr. Garbus. 3 MR. GARBUS: My memory is it's in the answer. I 4 don't have the answer before me. 5 THE COURT: Yes. Well, I have looked at it since 6 yesterday, and it is not there. What you allege in the answer 7 is that Congress's enactment of the DMCA and the application 8 of that statute, presumably by the courts of this country, 9 violates the antitrust laws. 10 MR. GARBUS: If -- 11 THE COURT: Excuse me. That is the only antitrust 12 allegation you have made in any pleading in this case. Now, I 13 suspect that you know, but in any case, I will say, that it is 14 impossible as a matter of law for the Congress of the United 15 States, by enacting a statute, or for a court of the United 16 States, by applying it, to violate the antitrust laws. 17 If there were an inconsistency between the DMCA and 18 the antitrust law, standard principles of law that have been 19 established in this country for 200 years, require the result 20 that because the Sherman Act was enacted in 1890, the Clayton 21 Act in 1914 and the Robinson-Patman Act in 1936, and the DMCA 22 in 1998, that the antitrust laws, to whatever extent they may 23 be inconsistent with the DMCA, are repealed. 24 Now, I don't see any inconsistency, and if there 25 were, it's not an issue in this lawsuit and let's just get on 723 1 with this lawsuit. 2 MR. GARBUS: I don't think it's an appropriate 3 response at this time. We have submitted briefs to you on 4 that question. I don't believe that the DMC -- 5 THE COURT: What brief is that, Mr. Garbus? Could 6 you bring my attention to it, please? 7 MR. GARBUS: Yes. We have a brief where we talk 8 about Sega, Betamax and the Connectix case. I think it's the 9 reply brief, and it's my memory that in that brief we talk 10 about the holdings in those three cases, and we discuss the 11 issue of whether or not the DMCA has in effect overruled those 12 three case. 13 It is our view that it has not. And in each of those 14 three cases, as I interpret the cases, they had arguments 15 about fair use, but they also had arguments under general 16 copyright discussion about monopoly, and we have cited those 17 cases in our brief and that has been part of our argument. 18 THE COURT: I stand fully by everything I said. 19 Let's move on. And if there is any relevance to this line of 20 examination, I still haven't heard it, and it is now 12:25, 21 and I am warning you now that your time with this witness is 22 running out. And if you don't get to something relevant, I 23 will simply terminate the examination after fair warning. You 24 have had part of that warning now. 25 MR. GARBUS: I will stop examining this witness. 724 1 THE COURT: I have not terminated your examination. 2 If you wish to stop now, that's your choice. 3 Do you wish to stop now? 4 MR. GARBUS: I will ask two or three questions. 5 BY MR. GARBUS: 6 Q. When you tested DeCSS, did you apply DivX? 7 A. No. 8 Q. Have you ever applied DivX? 9 A. No, I have not. 10 Q. Do you know what DivX is? 11 A. Yes, I do. 12 MR. GARBUS: Excuse me. I have no further questions 13 at this time. 14 THE COURT: Are you through with the witness, Mr. 15 Garbus? 16 MR. GARBUS: Yes, I am. 17 THE COURT: Is there any redirect? 18 MR. COOPER: No, your Honor. 19 THE COURT: The witness is excused. 20 (Witness excused) 21 THE COURT: Your next witness, Mr. Gold? 22 MR. GOLD: As I said before, this was our last 23 witness. However, there are some disputes about documents 24 still, we hoped, would have been resolved last night, but I'm 25 told they weren't. So prior to the resolution of those 725 1 document issues, which we would like to put in on our case, we 2 are not finished with the complaint, we are prepared to 3 address them. 4 MR. SIMS: I have an informal agreement with 5 Mr. Hernstadt and Mr. Atlas that, subject to your Honor's 6 permission, we have given them last night a list of the 7 exhibits, a subset of those we had marked, that we would like 8 to move in. They can't get to their objections until either 9 tomorrow or, they said this morning, more likely Monday. 10 So I think what Mr. Gold is saying is that we would 11 like to close subject to the offering of that evidence. I 12 believe that they will agree to much of it and then that will 13 narrow the amount of argument over the remaining arguments 14 that would be made at the time that we offer that evidence. 15 THE COURT: Is that satisfactory, Mr. Garbus? 16 MR. GARBUS: I have to speak to Mr. Hernstadt. I was 17 not part of these conversations. 18 MR. ATLAS: We were provided by Mr. Sims with their 19 exhibit list this morning. I have gone through and taken some 20 notes. I have narrowed down the issues. I would agree that 21 you should keep their eyes open. To the limited extent that 22 they will submit certain exhibits and certain deposition 23 designations, that's fine with us. We will try and work those 24 issues out tomorrow and over the weekend. 25 THE COURT: Okay. Plaintiff rests subject to 726 1 deposition excerpts and exhibits. 2 MR. GOLD: Thank you, your Honor. 3 THE COURT: Mr. Garbus? 4 MR. GARBUS: We would be prepared to put on a witness 5 after lunch. 6 THE COURT: 2 o'clock. 7 (Luncheon recess) 8 (Continued on next page) 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 727 1 A F T E R N O O N S E S S I O N 2 2:00 p.m. 3 THE COURT: We are missing somebody. I guess not. 4 Counsel, I gather you filed a motion in the Court of 5 Appeals yesterday to stay the trial on the ground that I 6 should not sit. Does anybody know what the status of that is? 7 MR. GARBUS: It has been denied. 8 THE COURT: It has been denied. All right. Call 9 your first witness. 10 MR. HERNSTADT: Defendants call Edward Felten. 11 MR. GOLD: Your Honor, may I make a motion with 12 respect to this witness? 13 THE COURT: Yes. 14 MR. GOLD: Your Honor, it would appear that 15 Mr. Felten is a distinguished professor of computer sciences 16 at Princeton and he has submitted one and a half page 17 declaration, six lines of which talk about what he is going to 18 testify about. 19 I would rather hand this up to you so you could see 20 the six lines for yourself. 21 THE COURT: Mr. Felten, why don't you have a seat for 22 a second anywhere you like. 23 MR. GOLD: May I approach, your Honor? 24 THE COURT: Yes. 25 MR. GOLD: This is the declaration. I'm referring to 728 1 page 2. 2 THE COURT: Okay. I have read it. 3 MR. GOLD: This is one of several cryptographers who 4 have submitted affidavits and the subject listed here I 5 respectfully submit, and as we set forth in our motion in 6 limine, have nothing to do with the charges we have made 7 against the defendant. 8 THE COURT: The very first item, the function 9 similarities and/or differences between source and object 10 code, I take it that that really is a foundation of the whole 11 case, right? I mean unless you know that, you don't know 12 anything about this case. 13 MR. HERNSTADT: Yes, your Honor. 14 MR. GOLD: The second, third and fourth, your Honor? 15 THE COURT: Well, let me hear from Mr. Hernstadt. 16 MR. HERNSTADT: About the relevance of this witness, 17 your Honor? 18 THE COURT: The relevance of items 2, 3 and 4 on this 19 statement. 20 MR. HERNSTADT: The relevance of items 2, 3 and 4 go 21 into two parts of our case, one is the First Amendment 22 argument that we make. All of this is testing, all of the 23 research that comes out of this testing is stuff that is 24 material that is published and discussed and part of a 25 discourse. DeCSS is an example of the type of program that 729 1 fits into the categories as set forth here. 2 THE COURT: That fits into? 3 MR. HERNSTADT: The categories that are set forth 4 here, 2, 3, 4. If a law is passed that permit the silencing 5 of discussion about a program because it does one thing, if 6 it's speech, then the First Amendment is violated. That's an 7 argument we have made. I think in order to understand that, 8 it is important that you understand the nature of the 9 research, the nature of the interaction, the accelerated 10 sessions. It's not just publications. It is a more 11 complicated interaction. And also, the benefit to the public 12 of the discourse, of the open public discourse. 13 MR. GOLD: Your Honor, one of the exhibits we were 14 handed during lunch, that I assume they gave us because they 15 were going to try to present in court, is a letter that a 16 bunch of scholars presented to Congress before they passed the 17 statute. I think the defendants are mistaking this for a 18 legislative body. They don't like the statute -- 19 THE COURT: We know they don't like the statute. 20 MR. GOLD: Well, that's what 2, 3 and 4 -- 21 THE COURT: I never met a defendant that liked the 22 statute under which they were being sued. Most drug dealers 23 have a problem with the narcotics laws. I didn't mean to 24 compare these people to drug dealers by any stretch. Perish 25 the thought. Just to illustrate the point. Most corporations 730 1 don't like the antitrust laws. Do you like that better? 2 MR. GOLD: If we get into 2, 3 and 4, you will be 3 into a lot of things I think you'll find have no relevance at 4 all. 5 THE COURT: Well, look, I'm prepared to be educated 6 to a point, and if I find that it's relevant and useful, I 7 will hear more. If the only objection here is relevance, I am 8 prepared to go a little bit of a way to find out whether I 9 think there is really something to it. 10 MR. GOLD: It's relevance, and it's the fact that 11 under the statute, on the face of the statute as we have set 12 forth, your Honor, there can be no cryptographic research 13 exception for these defendants. 14 THE COURT: No, but it is fair to say that in my 15 preliminary injunction ruling on the basis of no record at all 16 other than what you have told me, I came to the conclusion all 17 by myself that given the assumption that code has some 18 expressive content, there needs to be at some point 19 potentially a balancing with respect to constraining the 20 publication, because any constraint on the publication, given 21 the assumption, involves a First Amendment value. 22 Now, I think, therefore, that I need to hear 23 potentially evidence of this character in order to come to an 24 informed judgment about how to balance, instead of being in 25 the position that I found myself in in January, through no 731 1 fault of the plaintiffs, of basically having on the one side 2 your contention that this program did nothing but rip off your 3 product and the defendants' position that it didn't matter, 4 the First Amendment was a complete obstacle. 5 MR. GOLD: In terms of the sole purpose of the 6 product, the defense has admitted that the sole purpose was to 7 serve DeCSS. 8 THE COURT: I understand that, but there are other 9 issues here, and I am going to allow the witness to testify. 10 I'm not sure until I hear it how much of what he has to say is 11 useful, but I'm certainly going to start listening. 12 MR. GOLD: Thank you. 13 MR. HERNSTADT: Your Honor, just to make the record 14 clear, we have never submitted that the sole purpose is to 15 circumvent. We have submitted evidence that one of its 16 purposes is to decrypt. But that's not the same thing as 17 circumvent. 18 THE COURT: I know. You are a good lawyer, 19 Mr. Hernstadt. 20 MR. HERNSTADT: Thank you, sir. 21 THE COURT: It certainly doesn't serve the purpose of 22 allowing people to play Space Invaders. Okay. Let's go with 23 the witness. 24 EDWARD FELTEN, 25 called as a witness by the Defendant, 732 1 having been duly sworn, testified as follows: 2 DIRECT EXAMINATION 3 BY MR. HERNSTADT: 4 Q. Good afternoon, Professor Felten. Could you tell us what 5 your education in the area of computer science is? 6 A. Sure. My education in general, I received a bachelors 7 degree from CalTech in 1985 and in 1991, a masters degree, in 8 1993, a Ph.D. in computer science, both of those at the 9 University of Washington. 10 Q. And in the course of your studies, were you awarded any 11 honors? 12 A. Yes. My graduation from CalTech was a graduation with 13 honors, and I received an award for the -- for outstanding 14 research outside the classroom at CalTech, and when I was in 15 graduate school, I received an AT&T graduate fellowship and 16 also a Mercury 7 fellowship. 17 Q. What was the AT&T graduate fellowship? 18 A. This is a merit-based fellowship awarded by AT&T to a few 19 computer science students at top schools, and it is basically 20 a full ride through graduate school. 21 Q. After you completed graduate school, where did you go? 22 A. I joined the faculty at Princeton. 23 Q. Where are you teaching now? 24 A. Still at Princeton, the computer science department. 25 Q. What is your present position? 733 1 A. I'm an associate professor of computer science. 2 Q. What courses are you teaching? 3 A. The courses I have taught in the last few years include 4 introduction to information security, a course on computer 5 networks and distributing computing, and some special topics 6 courses related to computer security and some other topics. 7 Q. Do you know what DeCSS is? 8 A. Yes. 9 Q. Do you teach, use DeCSS in any of your classes? 10 A. Yes, I used it in my introduction to information security 11 course this last spring. 12 Q. What are your primary areas of research? 13 A. I do research in a number of areas. The main one is 14 computer security. I also do research related to operating 15 systems, to Internet software and some research related to 16 computer networks. 17 Q. Have you been given any honors or awards in connection 18 with your research? 19 A. Yes. These include some fellowships, a Sloan fellowship, 20 a National Young Investigator Award from the National Science 21 Foundation, and also some "Best Paper" awards at conferences. 22 For example, at the symposium on operating system principles 23 in 1997, which is the most prestigious conference in operating 24 systems which meets every two years, I received the "Best 25 Paper" award at that in 1997, so that indicates -- that is 734 1 said to indicate that I had written one of the two or three 2 best papers in the area of operating area research in that 3 area. 4 Q. Have you authored or coauthored a number of publications? 5 A. Yes. At least 50 articles in the scholarly -- at least 50 6 scholarly publications in the form of articles plus two books 7 and some magazine articles. 8 MR. HERNSTADT: Your Honor, may I approach the 9 witness? 10 THE COURT: Yes. 11 Q. Professor Felten, I have handed you Exhibit I believe BBP? 12 A. Yes. 13 Q. Could you identify that? 14 A. This is a declaration that I filed earlier in this case 15 and attached to it is a copy of my CV. 16 Q. Does your CV list your publications and articles? 17 A. Yes, it does. 18 MR. HERNSTADT: Your Honor, rather than spending more 19 time with that, I would move this into evidence. 20 MR. COOPER: No objection, your Honor. 21 THE COURT: Are you including within the offer the 22 attached paper on Protocol Failure Analysis in Applied 23 Cryptography Curriculum? 24 MR. HERNSTADT: Yes, your Honor. 25 THE COURT: Mr. Cooper? 735 1 MR. COOPER: Your Honor, I'm not familiar with that 2 article as having been part of the declaration. Certainly I 3 don't have a copy in what I have here from Dr. Felton's -- 4 THE COURT: I will receive that part of the exhibit 5 which consists of the declaration itself and the attached CV 6 but not at this point the article. 7 MR. HERNSTADT: Very good, your Honor. Actually I 8 don't have it either. 9 MR. COOPER: I don't believe it was attached. 10 THE COURT: It sure is, stapled to the one 11 Mr. Hernstadt just handed me. 12 MR. COOPER: We have never seen it, your Honor, to 13 the best of our knowledge. 14 THE COURT: That just happened. Let's go. 15 (Defendant's Exhibit BBP received in evidence) 16 Q. Do you do any other work outside of teaching and research? 17 A. I do consulting for a number of companies and others. 18 Some of that consulting is technical consulting, advising 19 companies, particularly in the security field. I serve on 20 technical advisory boards for six or seven companies, most of 21 them start-ups in the security area, and I also do some 22 consulting related to litigation. 23 Q. Have you ever testified in a case in connection with your 24 consulting? 25 A. Yes, I testified twice in the Microsoft antitrust case in 736 1 front of Judge Jackson, and in that case, I also was deposed 2 twice and filed two declarations. 3 Q. And did the court take your testimony as an expert? 4 A. Yes. The Department of Justice designated me as an expert 5 and Microsoft did not object, so the judge accepted my 6 testimony on that basis. 7 Q. What were the subject matters of your testimony in that 8 case? 9 A. I testified in general about operating systems, web 10 browsers and Internet software. I testified specifically 11 about the Microsoft products that were at issue in that case, 12 Windows 95, Windows 98 and Internet Explorer, the relationship 13 among them. I testified about general issues relating to the 14 design of software and how software could have been designed 15 in ways other than what Microsoft did and a few other topics. 16 I should also add that I also testified about the 17 security implications of what Microsoft had done in the design 18 of their products. 19 Q. In case anyone in the room doesn't know, what was the 20 result of that case? 21 A. The -- 22 MR. COOPER: Relevancy, your Honor. 23 THE COURT: Sustained. 24 Q. Are you familiar with the Linux operating system? 25 A. Yes. 737 1 THE COURT: Before we get to that, I want to ask the 2 witness one question. 3 I had another lawsuit at some point in which I 4 thought about but ultimately did not appoint a court expert in 5 a computer science area, and I remember that somebody referred 6 me to somebody at Princeton. I never engaged any "expert." 7 Was that you? 8 THE WITNESS: I don't recall ever being contacted. 9 THE COURT: I don't remember the name either. 10 MR. GARBUS: It was another one of our experts. 11 THE COURT: Okay. 12 Q. Do you use the Linux operating system? 13 THE COURT: Who was it, Mr. Garbus? 14 MR. GARBUS: I think it is Larry Peterson. 15 THE COURT: I don't remember the name. 16 MR. GARBUS: I don't think you and he ever spoke. 17 THE COURT: I think that's probably right. I think 18 there may have been an e-mail or two. 19 Go ahead. 20 Q. Do you use the Linux operating system? 21 A. Yes, I do on a regular basis. I have one in my home, in 22 my office, and I have at least two in the lab that my research 23 group uses. 24 Q. And do you also have a Windows computer? 25 A. Yes, I also have Windows computers in each of those places 738 1 as well. 2 Q. Is one of those two operating systems your preferred 3 operating system? 4 A. I think it depends what your purpose is. I think that in 5 general, Linux is faster, more stable and more flexible than 6 Windows, and so if that's what I'm after, then that's the 7 system of choice. 8 The big advantage of Windows is that it has support 9 for a lot more applications, and if you need one of those 10 applications that's not available on Linux, then I would 11 choose Windows for that reason. I think that if both 12 operating systems had equivalent sets of applications, I would 13 choose Linux. 14 Q. What programming languages do you use in your work? 15 A. A number of them. Like most computer scientists, I use 16 whatever language fits the job, and so this would include 17 languages like C, C++, Java, Pearl, NL and a number of others. 18 Q. And is there a connection between programming languages 19 and what has been referred to as case, source code and object 20 code? 21 A. Sure. Source code, I think of it as a general term 22 referring to certain kinds of computer languages. The form in 23 which the person typically writes the code directly is often 24 referred to as source code, so think of source code as being 25 one kind of computer language. 739 1 MR. HERNSTADT: Your Honor, the defense would offer 2 Professor Felten as an expert. 3 THE COURT: Just as I told the other side, it's not 4 necessary. If there is an objection to an opinion he offers, 5 we will deal with it then. 6 MR. HERNSTADT: Very good. Thank you, your Honor. 7 Q. You said earlier that one of your primary areas of 8 research is security. 9 THE COURT: Does that mean you're leaving source code 10 and object code? 11 MR. HERNSTADT: No. I'm coming back. 12 Q. What is your main focus of scholarship and teaching in the 13 area of security? 14 A. I, in my research group, do two things that I think 15 distinguish us from -- there are two ways in which we try to 16 distinguish our work. One is in focusing on the security of 17 widely used software, software that is deployed on a lot of 18 people's computers and that a lot of people are relying on. 19 The other is in trying to take a sort of holistic approach, to 20 consider the whole picture of what is involved in security at 21 a system level as opposed to focusing on the microlevel on 22 particular components. 23 Q. Does this research involve any reverse engineering? 24 A. Yes, we use reverse engineering quite a bit. One of the 25 things that we do is do detailed security studies of products 740 1 that are deployed in the field, and in doing that, one needs 2 to understand how the product works, what it does, whether the 3 things that the manual says are actually true, and so on. To 4 do that, you need to examine the software while it is running 5 in a sort of bit-by-bit fashion, and that is reverse 6 engineering. 7 Q. Does it involve encryption research as well? 8 A. Yes, many of the systems that we study involve encryption 9 and do encryption, so encryption is part of that holistic 10 picture that I talked about. 11 Q. You described taking apart programs, looking at programs 12 very precisely. Is that what is known as hacking? 13 A. We, the term "hacking" has been used in a lot of different 14 ways. Back when I started out in computer science, the term 15 "hacking" would have been almost universally applied to that. 16 In other words, hacking at one time was a term that was used 17 just to refer to playing around with computer systems, trying 18 to get them to do things, sort of analogous to tinkering if 19 you will. A person who was particularly good at that would be 20 called a hacker. 21 Then at some point in time, people who used computers 22 for criminal purposes started to call themselves hackers, 23 tried to apply that complimentary word to themselves, and the 24 press picked it up and now you hear the word used especially 25 in the public and the press in a negative way. So when I hear 741 1 someone use that word, I really have to look at the context to 2 see what they mean. 3 Q. Could you give us an example of a security research 4 project -- before you get to that, before when you were 5 talking about the work you were doing you used the word "we." 6 What did the "we" refer to? 7 A. We refers to a research group which consists of myself and 8 at various times a number of graduate students, perhaps some 9 undergraduate students, sometimes faculty colleagues get 10 involved. So what it means is really a group of people headed 11 by me. 12 Q. Could you give an example of a security research project 13 that you have worked on? 14 A. Sure. One project that we spent a number of years on 15 is -- started out with a study of the security of JAVA. Java 16 is a programming language and a system which was deployed by 17 itself and also in conjunction with web browsers, and because 18 of technical reasons, which I'll skip -- unless you really 19 want to hear them -- the security of Java was important for 20 the overall security of web browsers and, hence, the security 21 of people browsing the web, and so we started out in this 22 project by doing a detailed study of Java to try to understand 23 whether it provided the security guarantees that the vendors 24 of Java systems said it did and, if not, why not. And then we 25 moved on from there to deal with the implications of what we 742 1 had found. 2 Q. Which vendor's version of Java did you look at first? 3 A. We started out looking at the version from Sun 4 Microsystems because at the time we started, that was by far 5 the most popular version. Later on Netscape came out with 6 their own version of Java and we began to study that and 7 Microsoft came out with their own version and we began to 8 study that. For most of the project, we were looking at all 9 three implementations because those formed by far the bulk of 10 the systems that were actually deployed. 11 Q. Do researchers request the permission of a vendor in 12 advance before they start looking at a program? 13 A. No. We did not feel that we needed permission from anyone 14 to do what we were doing, and certainly we were happy to talk 15 to the vendors about what we were doing if they wanted to 16 engage us in a dialog, but we did not feel we needed their 17 permission to do it. 18 Q. Did your research reveal vulnerability in the various 19 implementations of Java? 20 A. Yes, quite a few. Over the course of about two to three 21 years, we found roughly a dozen of what I would consider 22 serious security vulnerabilities in various versions of Java. 23 Q. What did you do with the results you found? 24 A. We do a number of things. We discuss and publish the 25 results publicly. We discuss these results with the vendors 743 1 in order to help the vendors improve their products. We -- 2 and we use them to feed into and motivate our research in the 3 future, and I also use them in teaching. 4 Q. Where are the results published? 5 A. They are published in a number of places and in a number 6 of different ways. Because there are a number of audiences 7 who we would like to reach and who I think are interested in 8 hearing about this, ranging from the public, the average user 9 of this technology, on up to the sort of very advanced 10 research community, so we use the method that in each case 11 makes sense for talking to that constituency. 12 For the research community, we will publish papers in 13 journals and so on, give talks at conferences. For the 14 public, we will put articles on your website, talk to the 15 press, whatever we think will help convey the information we 16 have learned to the people who need to know it. 17 Q. When you describe the vulnerabilities, do you do so in a 18 specific way, detailing what is wrong with the program? 19 A. Yes, we think it is important that the information about 20 the vulnerabilities is available to people who have an 21 interest in knowing about it. We think the public benefits 22 from that kind of discussion in a number of ways, and so in 23 each situation, we are as specific as we think we need to be 24 in order to fully inform the public in the research community. 25 Q. Do you include code sometimes when you release the 744 1 results? 2 A. Sometimes. Sometimes we do. It depends really on the 3 circumstances. It depends on what we think is necessary and 4 appropriate in order to communicate our results. 5 Q. Now, looking at the Java project, did you disclose to the 6 vendors whose products you looked at the result you found 7 before you published them to the general public? 8 A. Well, we tried in every case. We were not always able to 9 establish a communication with the vendor that was useful. In 10 at least one instance, we tried to reach the vendor, tried to 11 communicate to the vendor. What we found was we couldn't get 12 through the public relations protective screen that they put 13 up in front of their engineers. In other instances, we did 14 disclose to the vendor because we thought under the 15 circumstances that was the -- that was an effective way to 16 proceed in order to serve the public interest. But we always 17 disclosed the results of our research to the public very 18 promptly. 19 Q. Why do you do that? 20 A. Well, we think we have a responsibility to do it. Early 21 on in the process of our discovering these vulnerabilities and 22 dealing with them, I was concerned about what was the right 23 way to behave, what was the -- what was the ethical thing to 24 do in this situation. And so I went and I spoke to an 25 ethicist at the university, a philosopher who studies ethics, 745 1 and I had lunch with her a few times and tried to sort through 2 what was the right thing to do in these type of situations. 3 The one message I took away from that was our prime 4 responsibility ethically in this situation was to the public, 5 to make sure that the public had the information they needed 6 in order to make good decisions about what to do. And so my 7 belief for a number of reasons is that the public is served by 8 the disclosure of this information to all of the community 9 that I talked to, ranging from the public itself down to 10 researchers. 11 Q. Okay. What other benefits are there from publishing the 12 result of your research? 13 A. I think there are a bunch of benefits that accrue to the 14 public as a result of this. First of all, there are the more 15 direct benefits. The public, after all -- first, the public, 16 after all, is using these systems, and they -- and the public 17 is making decisions about whether to use a particular 18 technology, and I think the public benefits from making those 19 decisions based on accurate information. 20 That is, if someone is deciding whether to deploy -- 21 whether to install a Java virtual machine on their computer, 22 they would benefit from knowing about the security of it. If 23 someone is deciding whether to buy a DVD player, they would 24 benefit from knowing about the security of the -- about the 25 strength of the security mechanisms installed in it. 746 1 For example, if I know that the DVD players have weak 2 security in them, I might decide that maybe I don't want to 3 buy a DVD player now, maybe some new technology with better 4 security is going to come along in a year and I will have to 5 throw my DVD player away. 6 So knowing about the security, knowing about whether 7 the security representations made by the vendors of these 8 systems is accurate, and knowing about what are the risks of 9 deploying a particular product, and understanding how things 10 are likely to play out in the future, all help the public. 11 And that comes from having accurate information about the 12 security level of the product that they are using. 13 That principle really applies to anyone who is 14 thinking about investing in a technology in any way. So it 15 might be the member of the public who is thinking about buying 16 something which is going to use that technology. It might be 17 someone who is thinking of releasing content in the DVD 18 format. It might be someone who is making a movie in the case 19 of DVDs, understanding what they are doing when they sign away 20 to someone the right to make DVDs with their work on it. It 21 might be someone who is thinking of going into a partnership 22 with a company who is using a particular technology. All of 23 these people can make better decisions and more informed 24 decisions if they actually know what are the implications of 25 the decisions they are making. 747 1 An additional benefit to the public along the same 2 lines is that over time, the public learns which products tend 3 to have problems, which companies tend to release products 4 that have problems, and they tend to develop a sense of which 5 kinds of technology are likely to have good security and which 6 are not, and that in the long run helps people understand what 7 to do. If they can see the next security problem coming, then 8 they can also make better decisions. 9 Q. Do you use the results you publish in teaching? 10 A. Yes. I believe rather strongly that in teaching students 11 about computer security, how -- to design secure systems, you 12 have to understand how systems really fail in practice, and I 13 think there is a good analogy here to the engineering of 14 buildings to stand up to earthquakes. If you are going to 15 design a building that can stand up to an earthquake and not 16 fall down, or you want to teach someone to do that, you have 17 to understand how buildings actually fall down in earthquakes, 18 which parts break and why, which of the engineering practices 19 in building the buildings tend to lead to strong buildings and 20 which don't. You have to look at that experience because 21 that's the only way you can keep your education, your 22 understanding from drifting off into theoretical irrelevance. 23 You need to understand how things actually break in practice 24 so you can avoid it in the future. 25 Q. Now, in publishing your results, have you ever published 748 1 code for a program that would exploit the vulnerabilities you 2 have discovered in your research? 3 A. Well, I make a distinction here between publishing code 4 that demonstrates the existence of a vulnerability and 5 publishing code that actually lets you harm someone. That is, 6 if you can demonstrate that a vulnerability exists, that that 7 system does not do what the people selling it say it does, 8 then that is a public good. And if you can do that without 9 providing all of the steps that someone needs to actually hurt 10 someone, then so much the better. So there is an important 11 distinction here. We do and have published code that 12 demonstrate the existence of vulnerabilities, but we have not 13 published code that takes all the steps necessary to harm 14 someone. 15 Q. Now, you mentioned before that you know what DeCSS is. 16 A. Yes. 17 Q. Could you tell us, what is DeCSS? 18 A. The DeCSS is a program that allows material on a DVD 19 encrypted with the CSS system to be decrypted essentially. 20 Q. When did you learn about DeCSS? 21 A. I learned about DeCSS -- I don't recall the exact date -- 22 I would estimate it was maybe in January roughly. And I 23 learned about it from reading reports in the press and also 24 from seeing Frank Stevenson's paper about it. 25 Q. Did you examine DeCSS to understand what it did? 749 1 A. Yes. At the time I got a copy of Frank Stevenson's paper, 2 I got a copy of DeCSS, I read them both side by side to 3 understand what was going on, to verify for myself that what 4 Mr. Stevenson had said and what was reported in the press was 5 generally accurate. 6 What Mr. Stevenson said was precisely accurate. What 7 was said in the press was generally accurate. Just to 8 understand what was going on, it was another one of those 9 examples I talked about, about how systems fail. 10 Q. When you refer to Mr. Stevenson's paper, are you talking 11 about Frank Stevenson's cryptoanalysis of the CSS algorithm? 12 A. Yes, that's what I meant. 13 Q. Did you learn anything about CSS upon examining DeCSS and 14 Mr. Stevenson's paper? 15 A. Yes, I learned a number of things about it. First of all, 16 I learned about how it worked, but I also learned about the 17 level of -- relative level of security that it offered. I 18 learned about what mistakes the people designing it had made, 19 and that let me move on and think about the implications of 20 those mistakes. 21 Q. Did you identify any particular flaws? 22 A. Sure. 23 MR. COOPER: Relevancy, your Honor. 24 THE COURT: No, I understand the relevance. 25 Overruled. This does not go -- at least I'm not taking it on 750 1 the issue of robustness. Go ahead. 2 A. Okay. There are a number of mistakes that the designers 3 of CSS made, starting out with designing their own 4 cryptosystem, instead of using a standard well-established one 5 that was known to be strong. That is a common beginner's 6 mistake and something that I advise my students against. 7 Beyond designing their own cipher, using a 40-bit key 8 is also a very significant mistake. It allows the system to 9 be broken by a brute force attack. In addition to that, there 10 was a third, more technical error that the designers made that 11 Frank Stevenson describes in his paper. That allows the keys 12 to be extracted with considerably less work even than a brute 13 force search. 14 Q. Based on your experience, would you describe CSS as a 15 security system? 16 A. Yes, it's a security system in the sense that I use the 17 term. I use the term broadly meaning that it's any kind of 18 system that's intended to control or restrict the use of 19 anything, so in that sense, it is a security system. 20 Q. What does CSS protect? 21 A. What it does or what it was intended to do is to -- it was 22 really two things. First of all, it was designed to prevent a 23 CSS-encoded DVD from being played in any player which did not 24 have the CSS algorithm in it. Second, it has the effect of 25 preventing any use other than playing of the material on the 751 1 DVD. 2 Q. Did it have any -- was it designed or intended to protect 3 the material in the DVD from being copied? 4 A. It did not -- it certainly did not, nor could it have 5 prevented the encrypted content from being copied to somewhere 6 else to our disk, to another DVD. 7 THE COURT: Could you sit back about five more inches 8 from the microphone, because whether you get too close, it 9 reverberates. 10 THE WITNESS: Sure. 11 THE COURT: Thank you. 12 Q. You mentioned before that it prevents a person from having 13 access to the material on the disk. Why would a person who 14 has purchased a DVD want to have access to the material on the 15 disk? 16 MR. COOPER: Objection, your Honor. It's not 17 relevant. 18 THE COURT: Sustained. 19 MR. HERNSTADT: Your Honor, I think this goes to the 20 various exemptions and other noninfringing uses. 21 THE COURT: Maybe it does, but this gentleman is an 22 expert on computer science, not an expert on why somebody else 23 might want to have access to a DVD file. 24 MR. HERNSTADT: Very good. May I approach the 25 witness? 752 1 THE COURT: You may. 2 Q. Professor Felten, I am giving you Exhibit BBS which is the 3 declaration of Professor Appel. I would ask you to turn to 4 Exhibit B at the very back. Is that an article that you 5 coauthored with Professor Appel? 6 A. Yes, it is, it's an article the two of us coauthored which 7 we submitted to the copyright office in response to a request 8 for comments related to the copyright office's opinion 9 regarding the DMCA, and also a slightly modified version of 10 this will appear -- I should say this, along with a little bit 11 of explanatory material explaining what the DMCA is and so on, 12 will appear in the Communications of the ACM Magazine in the 13 September issue. 14 Q. What is that magazine? 15 A. Communications of the ACM is sort of the flagship magazine 16 of the ACM which is the primary professional society for 17 computer scientists. Every member of the ACM gets the 18 magazine. 19 Q. What does ACM stand for? 20 A. Association for Computing Machinery. 21 Q. What do you discuss in this article? 22 A. The article discusses the -- the article discusses a 23 number of reasons why scholars in various disciplines, 24 including computer science, would want to, and in fact need to 25 in order to do research, have access to the raw bits, the raw 753 1 text, if you will, of a copyrighted work in order to do 2 various kinds of scholarship that do not infringe copyright. 3 MR. COOPER: Your Honor, if I may. If this testimony 4 is going to proceed in this direction, it seems to me that 5 it's outside of the scope of the expertise for which this 6 witness is offered. It seems to me to address the drafting of 7 the DMCA and the desire to have access to material protected 8 by encryption rather than to the science of cryptography. 9 MR. HERNSTADT: I think this article addresses the 10 scholarly uses to which he would put a program like DeCSS, and 11 in all of its permutations, the research that he discussed 12 earlier as well as the need for access to materials, in order 13 to conduct research. I also -- it goes to an argument that we 14 have made and will continue to make that fair use is exempted 15 and protected activity by the DMCA. 16 THE COURT: The question of whether fair use is 17 exempted by the DMCA requires the reading of the words 18 Congress put on the piece of paper. It's not a matter for 19 each side to bring in witnesses to testify as to their beliefs 20 on the subject. So to that extent, I don't think it's a 21 appropriate. 22 MR. HERNSTADT: If I may, I'm not presenting 23 Professor Felten to discuss his beliefs, but, rather, examples 24 of the types of activities that he would and has in his 25 professional life undertaken. 754 1 MR. COOPER: Your Honor, it's not any of the four 2 topics for which this witness has been identified and it's 3 plainly outside of the scope for which he has been offered. 4 THE COURT: Well, what about that, counsel? 5 MR. HERNSTADT: Your Honor, this is within the scope 6 of his discussion of the relationship between -- excuse me -- 7 of scholarship, the importance of disseminating and making 8 available information concerning the subject of such tests and 9 methodology and results of testing. I think that this is 10 addressing the needs of scholarship in perhaps a broader sense 11 but it is certainly within the scope of what he was to talk 12 about. The harm of scholarship that would result from not 13 being able to undertake certain practices I think is part of 14 the methodology of scholarship. 15 MR. COOPER: I don't think that's a fair 16 characterization of what he is being asked to testify about. 17 We accept that he is an appropriate witness to testify about 18 issues with respect to publishing security analyses and so on, 19 but I think this questioning goes to entirely different 20 subjects, none of which go to the question of whether the 21 defendants in this case have any potential fair use defense. 22 MR. HERNSTADT: Your Honor, I am prepared to move 23 into evidence or request to move into evidence Exhibit B of 24 the Appel declaration and allow you to make your own 25 assessment of how it fit into this. 755 1 THE COURT: I think that's the appropriate course. 2 I take it, Professor Felten, that what you said in 3 Exhibit B to Defendants' Exhibit BBS in fact represents your 4 genuinely held views, correct? 5 THE WITNESS: Yes, it does. 6 THE COURT: All right. Well I'm going to receive it 7 for whatever it's worth, but, Mr. Hernstadt -- 8 MR. HERNSTADT: I'm going to move on. 9 THE COURT: Let me finish making the point. So what 10 is received is just Exhibit B to Defendants' Exhibit BBS. 11 (Defendant's Exhibit B to Exhibit BBS received in 12 evidence) 13 MR. HERNSTADT: I would request that we separate it 14 and put it in as BBS-1. 15 THE COURT: Let's deal with that later. I would like 16 to finish what I'm trying to say to you. 17 I think it is probably self-evident, or if not, close 18 to self-evident that scholars could make use of some materials 19 that might appear in digital form -- and I don't limit myself 20 to motion pictures -- if they were free to circumvent whatever 21 technological protections there might be that stand between 22 them and the digital form of the material. 23 You now have this witness's view that that is so, and 24 you have his article. I don't think you have to beat a dead 25 horse on that point. You know, it goes or doesn't go wherever 756 1 you want it to go, and eight or nine more witnesses on the 2 same point -- and I don't know whether that's what your plan 3 is -- would be a little bit cumulative. Okay? 4 MR. HERNSTADT: Thank you, your Honor. 5 THE COURT: All right. 6 BY MR. HERNSTADT: 7 Q. Professor Felten, let me move on. Professor Felten, based 8 on your experience and expertise in the area of security 9 research, do you have an opinion as to whether the disclosure 10 of the DeCSS program was good? 11 THE COURT: Sustained. Good? 12 Q. Whether there is a value, a public value to the disclosure 13 of the DeCSS program? 14 THE COURT: Sustained. I have a lot of respect, 15 based on what I've read of his CV and what I have seen here, 16 for Professor Felten. But the last time I've looked he is not 17 an expert on what the public values are and whether they are 18 expert or not, the people who make those judgments in this 19 society are called Congressmen and Senators. 20 Q. Professor Felten, do you have an opinion as to the impact 21 of the disclosure -- the impact on the CSS of the disclosure 22 of the DeCSS's program? 23 MR. COOPER: Your Honor, it's vague and I believe, if 24 I understand it, beyond the scope of the expertise of this 25 witness. 757 1 THE COURT: Look, Dr. Felten, would I be right in 2 assuming that in your judgment, the disclosure of DeCSS code 3 has been of some value to you and in your opinion others who 4 follow the same line of work as you do from a scholarly point 5 of view? 6 THE WITNESS: Yes, I think it has meaning in my 7 research and in my teaching. 8 THE COURT: Is that what you wanted, Mr. Hernstadt? 9 MR. HERNSTADT: Yes. 10 Q. Could you explain how it has helped you? 11 A. Sure, I talked about in general about the benefits to 12 research that come from a discussion of real system failures 13 and why they fail and so on, and all of that holds true for 14 DeCSS. I think it's a very instructive example for 15 researchers. It's a benchmark against which we can hold up 16 research which claims to improve practices or to improve 17 designs. We can ask would this new method really have 18 prevented this kind of problem. It has been useful to me in 19 teaching. I have used it as an exam in my course, for 20 example, as one thing students can study where they can see a 21 real failure and think about why and how it happened and think 22 about what they might do differently. 23 Q. Turning back to source code and object code, Professor 24 Felten, what is source code? 25 A. I think of source code and object code as being sort of 758 1 two ends of a spectrum. There are lot of different languages 2 in which you can express computer programs, and there are 3 different styles of languages and computer scientists argue 4 endlessly about which ones are better. There are also 5 different levels of programming, like one talks about high 6 level or low level. 7 Generally high level is referring to things which are 8 closer to the level at which people tend to write programs. 9 Low level means closer to the level at which computers execute 10 them. But I don't think there is a clean distinction 11 necessarily between source code and object code. It's kind of 12 a continuum on which all of the different forms of computer 13 languages can be placed. 14 THE COURT: Can I try it this way? This isn't the 15 first computer case I have ever dealt with, and the 16 understanding that I have always had runs something along 17 these lines, and I would like you to tell me to what extent it 18 is right and to what extent it is wrong. 19 My first proposition, computers operate in a binary 20 environment; that is, everything is a one or a zero, right? 21 THE WITNESS: Yes. 22 THE COURT: That derives from the fact that various 23 bit of silicon in the computer either have a positive 24 electrical charge or a negative electrical charge, am I right? 25 THE WITNESS: Yes. 759 1 THE COURT: So in order for a computer to understand 2 any instructions or data that a human being wishes to enter 3 into a computer, it must be received by the computer in the 4 form of a string of positive or negative charges or to put in 5 common parlance, ones or zeros, right? 6 THE WITNESS: Yes. 7 THE COURT: Object code consists of that 8 machine-readable sequence of yes/no, one/zero impulses, true? 9 THE WITNESS: Yes, that's the strict definition of 10 object code. 11 THE COURT: Okay. Now people have a hard time 12 understanding strings of ones and zeros in potentially almost 13 infinite length. So source code is a language, whichever 14 particular one it may be, that is less abstract and easier for 15 human beings to understand than a string of ones and zeros, 16 correct? 17 THE WITNESS: Yes, generally. 18 THE COURT: Okay. And whether through the process 19 known as compilation or through some other process, whatever a 20 programmer writes in source code gets transformed for the 21 computer to operate upon into object code, i.e. the string of 22 ones and zeros or positive and negative charge, true? 23 THE WITNESS: That transformation does happen but it 24 doesn't always happen in one step. There are sometimes 25 intermediate steps, intermediate languages, for example. 760 1 THE COURT: When you spoke of a continuum, there are 2 computer languages that involve modes of expression or 3 conveying information or instructions that are at one end of 4 the spectrum close to English or some other spoken or written 5 human language, and other types of languages that are much 6 farther away from spoken and written language and much closer 7 to but not quite get at the machine readable binary format? 8 THE WITNESS: Yes, that's the distinction between 9 high level and low level. 10 THE COURT: Okay. Let's go, Mr. Hernstadt. 11 BY MR. HERNSTADT: 12 Q. Okay. Judge Kaplan identified source code as less 13 abstract than object code. Is it in fact less abstract? 14 A. That's a hard question. I would say they are abstract in 15 different ways. There are certainly some things which you can 16 learn more fruit any from source code. I talked about high 17 level and low level. There are sort of high level ideas about 18 how the program is structured in general, sort of the 19 architecture of it which you can generally get more easily 20 from source code. But there are other things which you can 21 learn more easily from object code. 22 Q. Can you read object code? 23 A. Yes, it's not as easy -- it's not the easiest language to 24 read certainly. We teach students to read it and write it as 25 part of their education. 761 1 Q. Are there parts of your research where you rely on your 2 ability to read object code to get the information you need? 3 A. Yes. I should add that we do things other than read 4 object code. We also execute it and you can learn a lot by 5 doing that. 6 Q. You talked about the different programming languages. Is 7 there -- is source code and object code, are they also types 8 of languages? 9 A. Well, object code in the sense of the thing that the 10 computer directly executes it. For types of microprocessors 11 there is a single language. There are many different 12 languages that you would classify as source code or sort of 13 intermediate things. There is a huge variety of languages. 14 Q. What did you mean when you discussed source code and 15 object code being on a continuum? 16 A. What I meant is that different levels -- different 17 languages might, you might write programs that might be at 18 different levels. Some are easier to read and write, some are 19 closer to what the machine executes, and that in the creation 20 of programs, you sometimes work with languages that are at a 21 sort of intermediate level. You might translate a program 22 from the language in which you wrote it into some other 23 language, then read and modify it in that intermediate 24 language, and then translate it again into the final object 25 code. So it's not -- it's not a binary distinction between 762 1 source code and object code. It's not just it's this or that. 2 There are in between stages, in-between levels of expression. 3 Q. And based on your experience with source code and object 4 code, is it your opinion that object code is expressive? 5 A. Certainly. 6 MR. COOPER: Your Honor, in a legal sense, he plainly 7 doesn't have that experience. 8 THE COURT: I don't take it in the legal sense. I 9 obviously want to hear what he means by that. 10 A. So the way I interpret the question is can one computer 11 scientist communicate to the other by the medium of object 12 code. I think certainly the answer is yes. You can learn a 13 lot from reading and analyzing and executing object code if 14 you know how to do it, and so can you learn about what the 15 author of the code, what the person who made that code 16 intended the program to do, you can learn about how the 17 program was constructed, you can learn about aesthetic and 18 engineering decisions that the person made, and from all of 19 that, you can learn things that the person who created the 20 program put in there. 21 THE COURT: Dr. Felten, let me ask you this: Can one 22 locksmith communicate information about a lock to another by 23 providing a key to the lock? 24 THE WITNESS: I think you could -- I think in that 25 instance, you could get some information about the lock from 763 1 the key, less information than you could get by taking apart 2 the lock. 3 THE COURT: Go ahead. 4 MR. HERNSTADT: Your Honor, in fact I'm done. Thank 5 you very much, Professor Felten. 6 THE COURT: Let's take our afternoon break. 3:15. 7 (Recess) 8 THE COURT: Okay. Mr. Cooper. 9 CROSS-EXAMINATION 10 BY MR. COOPER: 11 Q. Professor Felten, now you testified that your practice in 12 the security analyses in which you have been involved has been 13 to publish an initial report regarding the flaws you 14 discovered and followed later by a more scholarly report, 15 correct? 16 A. That's right, yes. 17 Q. And on occasion, you have included in your initial reports 18 portions of source code to the extent necessary to explain 19 your analysis, correct? 20 A. That's right. That's part of informing the public, as I 21 described before. Sometimes in order to do that, you have to 22 publish code, and so that people can look at what you've done 23 so that they can evaluate whether what you are saying is true, 24 and so that they can understand the implications of the flaw 25 that you found. 764 1 Q. Am I correct that you have been personally involved in 2 approximately 12 analyses where you discovered a flaw in an 3 encryption or security system? 4 A. About 12 flaws, yes. 5 Q. Okay. And of the reports you published with respect to 6 those 12, you found it appropriate to include portions of 7 source code in your initial reports on three of those, is that 8 correct? 9 A. Yes, approximately three. Those were the cases where we 10 thought it was appropriate, where what we needed to 11 communicate was best communicated in the form of code. 12 Q. And in every one of those instances, you were able to 13 publicly and professionally discuss and demonstrate the flaws 14 without providing people with the tools to take advantage of 15 those flaws, correct? 16 A. Without providing people with all of the tools, yes. 17 Without providing people, as I said, with all of the tools for 18 actually harming someone. That's not to say that we did not 19 provide code to demonstrate the existence of security flaws, 20 which we did. I also should point out that we are talking now 21 about the initial disclosure. Later we did scholarly 22 publications and other kinds of publications and those more 23 often included code and more detailed discussion of the flaws. 24 Q. Professor, you have never included the entirety of the 25 source code of the exploitation of a flaw in any of your 765 1 publications, have you? 2 A. Exploitation in the sense of allowing someone to be 3 harmed, no; but demonstration, yes. 4 Q. But you have never included in any of your publications 5 the entirety of the source code in the exploitation outlined 6 to defeat the security system you were discussing, isn't that 7 correct? 8 A. I think I explained it as well as I could in my previous 9 answer. 10 Q. But you are not answering my question, which is you have 11 never had occasion in any of the analyses in which you have 12 been engaged to publish the entirety of the source code which 13 represented the exploitation of the flaw you were studying, 14 isn't that correct, sir? 15 MR. HERNSTADT: Objection. 16 THE COURT: Sustained. I think there is a problem 17 with the question. 18 Q. Do you know what an exploitation is in the encryption and 19 cryptology area? 20 A. It's a term I've heard. I don't understand a precise 21 definition of it. 22 Q. Do you have your own definition of that term? 23 A. It's sometimes used to refer to a demonstration. 24 Sometimes it's used to refer to what I'll call a fully 25 damaging piece of code. 766 1 Q. Okay. So let's use it in the latter instance, a fully 2 damaging piece of code. You would agree, would you not, that 3 in either source or object code form a utility that was 4 designed to actually exploit a discovered flaw in a security 5 system would fall into that latter category? 6 MR. HERNSTADT: Objection to the form of the 7 question. 8 THE COURT: Overruled. 9 A. Something that was designed to actually say reformat 10 someone's hard disk or to actually infringe someone's 11 copyright, no, I have never actually -- I would put either of 12 those in the latter category and I've never released that kind 13 of code. 14 Q. Okay. In source or object form, correct? 15 A. In source or object form, I've never released code which 16 allows someone to take all the steps needed to harm someone. 17 Q. In fact, in all of the instances in which you were 18 involved in encryption analysis, you deliberately avoided 19 providing people with the tools necessary to break the system 20 you were studying, correct? 21 A. Yes. I made -- in all these instances, I made a 22 deliberate decision not to provide all of the steps to harm 23 someone. To connect this to DeCSS, my understanding of DeCSS 24 is that it is more in the line of a demonstration as I've used 25 the term. It does not distribute code which has been -- which 767 1 has been -- I'm sorry -- not code -- it does not distribute 2 content that has been taken from a DVD. 3 Q. No, it defeats the encryption on the CSS system and that's 4 all it does, isn't that true, Professor? 5 A. What it does is it allows material to be decrypted, and 6 I'm obviously not here to talk about whether that's legal. 7 But in a sense that I understand the distinction between 8 demonstration and exploitation as you defined it, I think it 9 falls in the demonstration area, because it does not copy and 10 distribute copyrighted material. 11 Q. No, it circumvents the certain security system that's 12 intended to protect that material, doesn't it? 13 MR. HERNSTADT: Objection. 14 THE COURT: Sustained. It's argumentative. 15 Q. Professor, in your view, the distribution of a fully 16 functional set of code that allows one to break a security 17 system is unethical, correct? 18 A. I think it depends on the circumstances. As I said 19 before, you have to look at the circumstances and understand 20 what it is necessary to communicate in order to inform the 21 public, in order to inform the research community, and I can 22 imagine situations in which the only way to do that was to 23 distribute code which was a full exploitation in the sense 24 that you determined, and then I think you'd have to face a 25 sort of balancing decision. So I can't say that it would 768 1 always be unethical in my view to do that. 2 Q. Didn't you testify at your deposition to the effect that 3 you never provide a tool which lets someone take all of the 4 steps in breaking into someone's computer and doing damage as 5 a result? 6 MR. HERNSTADT: Can we have a page and line? 7 THE COURT: Come on, Mr. Cooper, follow the rules. 8 MR. COOPER: I'm referring to Exhibit AZL, page 69, 9 line 15 through 18. 10 THE COURT: Read it. 11 "Q. We did not provide, we never provided a tool 12 which let someone, which gave someone all of the steps of 13 breaking into someone's computer and doing damage." 14 A. Could you repeat the question about that passage, please. 15 "Q. But in all of the 12 instances where you were 16 the discoverer of the flaw and you were involved in one way or 17 another in the ultimate public disclosure of that flaw, in no 18 instance did you find it necessary to provide people with the 19 tool to take advantage of the flaw in order to describe it, 20 discuss it, illustrate it or analyze it, right?" 21 You did testify in that fashion, didn't you, 22 Professor? 23 MR. HERNSTADT: Objection. 24 THE COURT: I don't get it, Mr. Cooper. What you 25 just read, if I understood it, it was a question, and 769 1 witnesses don't usually testify by asking questions. 2 MR. COOPER: His answer, if I may repeat the answer: 3 "We did not provide, we never provided a tool which let 4 someone, which gave someone all of the steps of breaking into 5 someone's computer and doing damage." 6 THE COURT: Answer? 7 MR. COOPER: That was the answer. 8 THE COURT: That was the answer. Okay. Got it. 9 Q. Next question: 10 "Q. And you, you deliberately avoided doing that, isn't 11 that true? 12 "A. That's correct." 13 THE COURT: Next question, counselor. 14 Q. You were also able to teach and discuss security flaws in 15 your classroom with your students regarding CSS without at any 16 time operating DeCSS as an executable utility, isn't that 17 correct? 18 A. Yes. In order to do the teaching that I did in that 19 course, I did not execute DeCSS as an executable utility. 20 Again that's not to say that in general one would never need 21 to execute something in order to teach about it, but given 22 what I decided to teach those students in that limited time 23 about, I did not need to do that. 24 Q. It wasn't necessary for you to use the executable utility 25 in order to discuss what you chose to discuss regarding those 770 1 flaws, correct? 2 A. I didn't use the software in the classroom in the sense of 3 executing it. What I did was I got DeCSS and I got Frank 4 Stevenson's paper, I read them myself, I understood the 5 situation, and based on my access to those materials and my 6 understanding, I was able to teach the students about CSS and 7 DeCSS. 8 I informed the students that this code was available 9 on the network and I informed them that if they wanted to 10 study it, they could study it. I don't know what they did as 11 a result of that. Certainly, as with everything in my course, 12 it was obviously not okay for the students to infringe 13 copyright, but I would not be at all surprised if some of the 14 students chose to do that kind of investigation themselves 15 based on my telling them that the code was available. 16 Q. Now, it's possible for you in your work to communicate 17 with other interested parties in your field regarding subjects 18 that you are researching and to maintain an ongoing dialog 19 with those parties through other means than posting material 20 to the public Internet, isn't that correct? 21 A. It is true that once I know about someone and once we have 22 established a sort of relationship, I can communicate with 23 them by e-mail. But as I discussed before, it's not the case 24 that there is a small community of people, all of whom know 25 each other, who are interested in this material and who are 771 1 doing research on it the way that the people working in this 2 field discover each other is to read each other's 3 publications. That's the way science works. You publish 4 openly and many people who you know read what you publish. 5 Some people you don't know read it. The only way to reach 6 that audience, the only way to find those other people out 7 there working on that topic is to publish in such a way that 8 they can read it. 9 And can I certainly tell you that I read my 10 colleagues', at other universities and companies, I read their 11 website to learn what they're up to. 12 Q. And if you have a particular interest in any of the areas 13 in which they are involved, you communicate with them directly 14 to get further information, correct? 15 A. In general, yes, but I don't know that it would be 16 fruitful to ask someone about something until I have seen what 17 is on their website. 18 And I should add I may be in an unusual position. If 19 this is a person I know and I send them some question, some 20 comment on their research, they are likely to take it 21 seriously, read it, and give me an answer. But if it's 22 someone who doesn't know me, they are going to -- they are 23 going to -- if it's someone who doesn't know me, and I want to 24 comment on their work, they are not necessarily going to be 25 willing to spend an afternoon on the phone with me explaining 772 1 their work. The reason that stuff is put out there on the web 2 is to be read. It's to be read by a lot of people, and I 3 frankly don't want to have to explain to everyone who asks 4 over the phone or by e-mail all of the details of the research 5 that I've done. It's not efficient. It doesn't make sense. 6 MR. COOPER: I don't have any further questions at 7 this point, your Honor. 8 THE COURT: All right. I have one, I guess two. 9 You've got networks at Princeton? 10 THE WITNESS: That's correct. 11 THE COURT: You've got networks for the faculty in 12 the academic buildings, and then is there a separate one for 13 the dormitories? 14 THE WITNESS: Yes, there is are networks in the 15 dorms. 16 THE COURT: What are the speeds? 17 THE WITNESS: The dorm networks are generally ten 18 megabits per second to each desktop. In the computer science 19 department, I can speak to what our network is for the 20 researchers. We generally have within the building 100 21 megabit per second links. Of course there are links between 22 the buildings and links between the university and the outside 23 world which have to be shared among all those people. So, for 24 example, in the computer science building from point A to 25 point B in the building we might have 10 megabits per second 773 1 on a really good day, but there is a link going from the 2 computer science department to the outside world which has to 3 be shared with everybody else in the building. 4 THE COURT: What is the speed of that? 5 THE WITNESS: I don't recall. I better not guess. 6 THE COURT: Okay. 7 THE WITNESS: If that's helpful, my colleague, 8 Professor Peterson is going to testify later. He knows all 9 this stuff much better than I do. 10 THE COURT: You were last at the University of 11 Washington how long ago? 12 THE WITNESS: 1993. 13 THE COURT: I guess any questions about the speed of 14 their network seven years ago is kind of like asking about 15 dinosaurs, right? 16 THE WITNESS: Well, seven years ago what we had in 17 our research building was 10 megabits per second inside the 18 building. 19 THE COURT: You are familiar with speeds at any other 20 universities in the last year per se? 21 THE WITNESS: Not particularly any other university. 22 I know generally what the technologies that are used, but I 23 can't speak to any specifically to any other university. 24 THE COURT: Generally. 25 THE WITNESS: Generally the technology within a 774 1 building is going to be either 10 megabits per second or 100 2 megabits per second on the ethernet. That's the most commonly 3 used technology. 4 THE COURT: Okay. Thank you. 5 Any further examination Mr. Hernstadt? 6 MR. HERNSTADT: No, your Honor, thank you very much. 7 THE COURT: Okay. The witness is excused. Thank 8 you. 9 THE WITNESS: Thank you. 10 (Witness excused) 11 THE COURT: Next witness, please. 12 MR. HERNSTADT: Our next witness is Mr. Goldstein. 13 ERIC CORLEY, 14 a defendant herein, having been duly sworn, 15 testified as follows: 16 DEPUTY CLERK: Please state your name for the record. 17 THE WITNESS: My pen name is Emanuel Goldstein. 18 My given name is Eric Corley. 19 THE COURT: What is it? 20 THE WITNESS: My pen name, writing name. 21 THE COURT: So the record is going to reflect, Steve, 22 that the witness's name is Eric Corley, which is the name he 23 is captioned under. 24 DIRECT EXAMINATION 25 BY MR. GARBUS: 775 1 Q. Mr. Corley, tell me something about your background. 2 A. I'm an English major. I graduated from the State 3 University of New York in 1982. I have worked -- 4 MR. GARBUS: Excuse me. Can we have a small bench 5 conference just for a moment? 6 THE COURT: Yes. You and Mr. Gold. Is this your 7 witness, Mr. Gold? 8 MR. GOLD: Yes, sir. 9 (At the sidebar) 10 MR. GARBUS: Mr. Corley has, as I understand it, an 11 arrest when he was a child as a juvenile which was dismissed, 12 an ACD case, I have never been able to find the file of it. 13 He testified to it at some length because I permitted it at 14 deposition, but I would make a motion that that be excluded at 15 this time. I don't know whether Mr. Gold intended to get into 16 it or not. 17 MR. GOLD: In the deposition there was testimony 18 about -- I think it was an indictment, was it not? I think 19 so. 20 MR. GARBUS: I don't know what it was. 21 MR. GOLD: I did not get the impression that he was a 22 youthful offender or he was below 18, but the nature of the 23 offense I think is one that reflects -- 24 THE COURT: Let me just find out something. Do you 25 propose to use this? 776 1 MR. GOLD: On cross, yes, but there was a 2 confidentiality agreement and I -- 3 THE COURT: What in particular do you propose to use 4 on cross? Was there a conviction? 5 MR. GARBUS: Do you have a record of a conviction? 6 MR. GOLD: I think there was a plea, wasn't there? 7 MR. GARBUS: As I understand it, he was treated as a 8 youthful offender and it was an ACD, it was an adjournment in 9 contemplation of dismissal and there is no criminal record. 10 THE COURT: Is there a conviction? 11 MR. GOLD: I think there was a plea, your Honor, and 12 I would have to check the transcript. If you give me two 13 minutes. But it was for breaking into a company computer 14 system, and I think it has relevance. 15 THE COURT: How long ago is it? 16 MR. GOLD: I don't remember. 17 MR. GARBUS: It was back -- he was I think about in 18 his early 20s. 19 THE COURT: How old is he now? 20 MR. GARBUS: I think he is in his mid 40s. I don't 21 remember exactly. I would have to ask him. 22 THE COURT: He is obviously going to be on the stand 23 more than the next hour, right? 24 MR. GARBUS: I think so. 25 THE COURT: Well, you guys figure out what the facts 777 1 are tonight. Rule 609 governs this as to the conviction, and 2 if memory serves, Rule 608 deals with the prior bad act issue. 3 This is not terra incognita. 4 MR. GARBUS: Can I hear the last question, please. 5 (Record read) 6 A. I will just take it from the top. I graduated from the 7 State University of New York at Stonybrook 1982 with a 8 Bachelors of Arts in English. I have worked in various 9 newspapers, including campus newspapers, community newspapers. 10 I have written numerous opinion pieces and other such articles 11 for newspapers such as Newsday, and since 1984, I have been 12 publishing 2600 Magazine. I have worked in radio since going 13 to the State University of Stonybrook since 1977, and I 14 currently work for WBAI in New York. 15 Q. How old are you? 16 A. I'm 40. 17 Q. Did you work for the Stonybrook Press? 18 A. Yes, that was one of the newspapers I worked for, one of 19 the campus newspapers. 20 Q. And have you ever been a broadcast journalist on WUSB? 21 A. Yes, WUSB is the university station at the State 22 University at Stonybrook. 23 Q. And how long have you been publishing the Hacker 24 Quarterly? 25 A. Since 1984, which I guess is 16 years. 778 1 Q. And do you know approximately the circulation of that? 2 A. Presently, including newsstands and subscribers together, 3 I would say probably about 60 to 65,000. 4 Q. And do you have any sense of who your readers are? 5 A. From meeting them at various gatherings, 2600 meetings, 6 conferences, I would say they are all kinds of different 7 people from 12 year olds to CIA agents, to foreign 8 intelligence to corporate executives, all kinds of people seem 9 to be fascinated with this. 10 Q. Now, did you serve as the music director for WUSB? 11 A. Yes, in 1980 to '81 school year, I was music director. 12 The year after that, I was program director of the radio 13 station. 14 Q. And in 1984, did you organize a Convention of alternative 15 presidential candidates in Stonybrook? 16 A. That's correct. We invited everybody who had registered 17 to run for president to gather in one place at the same time. 18 There were something like 219 candidates and about two dozen 19 of them accepted. 20 Q. Did you ever write a play? 21 A. I have written -- among the things that were publicly, no. 22 I have written a lot of things that haven't been released. 23 But the one major thing that was publicly released was a radio 24 play called Shadow of Long Island. 25 Q. What did it deal with? 779 1 A. It was kind of an H.G. Wells type of a thing where in 2 realtime, people dealt with the effects of an accident at a 3 nuclear power plant and since at the time, I believe it was 4 1985, that was a big controversy on Long Island, it was 5 something that got a lot of attention, a lot of interest. 6 Q. And with respect to the Hacker Quarterly, why did you 7 create it? 8 A. Well, I saw the need for information to be spread beyond 9 computer nerds, people who are just simply calling into 10 bulletin boards. Back in 1984, which is when the magazine 11 actually started, in order to take part in this kind of a 12 thing, you would have to call what is known as a BBS system, 13 and they could only handle one caller at a time which means 14 many times you would spend the better part of a day just 15 waiting for a busy signal to go away. You would have to keep 16 trying. There was no repeat dialing function. You would have 17 to keep dialing over and over again, and the speed was very 18 slow, something like 300 baud. 19 So I thought it would be nice, because these people 20 had so much to say, if there is way a forum for them to say it 21 and actually read it on paper, and since nobody else was doing 22 that, I figured why not. 23 Q. And has the Hacker Quarterly been quoted or featured in 24 any other newspapers? 25 A. Yes, we have been quoted quite a bit. 780 1 Q. Where? 2 A. I couldn't even begin to tell you all the places. Every 3 major newspaper and magazine I could think of, Time, Newsweek, 4 the New York Times, Wall Street Journal. I'm sure we are in 5 quite a few this week. We are always being quoted for our 6 opinion on various things that are happening in the world of 7 technology, whether it be things like the Melissa Virus, a 8 case like this, a conference like we've just had. There is 9 always something going on in the world of technology, and our 10 view seems to be something that's of interest. 11 Q. You say a conference you just had. Can you tell me what 12 that was? 13 A. We just had a conference this past weekend uptown at the 14 Hotel Pennsylvania where we had people gathering from all over 15 the planet to talk about the newest technological issues an 16 just basically to trade information, learn, and I think it was 17 a big success, we had something like 2300 people show up. 18 Q. This was run which by the hackers? This was sponsored by 19 2600 -- 20 A. Yes. 21 Q. Have you also been on a major broadcast and cable network? 22 A. Yes. 23 Q. Do you remember which ones? 24 A. All of them I think. Basically I was on Good Morning 25 America, Nightline, CBS Morning News, Charlie Rose. I can 781 1 keep going on with lists, but I think most of them I seem to 2 have been on at one point or another. 3 Q. Do you recall what the Washington Post, back in February 4 of 2000, said about you after were you sued in this case? 5 A. I think they referred to us as, I might be confusing it 6 with another story, but I think they referred to us as the 7 hacker's bible or something, along those lines. 8 THE COURT: I hope we are not going to get into an 9 assortment of what various people have said about the 10 defendant, since he has been sued in this case. 11 MR. GARBUS: We are past it. I don't think so. 12 Q. And how long have you been at BAI? 13 A. I first walked into WBAI in 1988 and I haven't left since. 14 Q. When you were on these various television shows, Charlie 15 Rose and cable, what was the subject of your discussion? 16 A. Like with the newspaper articles, different things 17 depending on what was happening in the news that particular 18 time, such as the Michelangelo Virus which was in the early 19 90s, or some panic over some possible security hole in a 20 computer system, or even something like an area code change 21 can, for some reason -- people come to us for explanations on 22 things like that. So depending on what was in the news at 23 that time, we get calls virtually every day from media people 24 wanting us to comment on one thing or another, and depending 25 on my schedule, I try to answer as best I can. 782 1 Q. Is it fair to say that you are called on those shows as an 2 expert in the computer area and the technology areas? 3 A. That's what they call me. I don't consider myself a 4 computer expert. I consider myself a journalist. But they -- 5 I've never taken a computer course or anything like that. I 6 majored in English, so I answer the questions as best I can, 7 but there are people with infinite amounts of knowledge in the 8 technical field beyond what I could imagine. 9 Q. When you posted DeCSS, did you know whether it would work 10 or not? 11 A. No, I had no idea if it would work. The reason we posted 12 the source code and the accompanying story is because it was 13 already a story. I believe it had already been out a month at 14 that point, and we saw this and the reaction to it, people 15 having their websites shut down, their pro Internet service 16 providers being threatened, their schools being threatened, we 17 saw that as a fascinating story, and we printed that story, we 18 printed what the story was about, which was our source, our 19 primary source, here is what they are talking about, here is 20 the source code. 21 Honestly, if someone had given me 20 random numbers 22 and said this is the program, we would have printed the 20 23 random numbers, if that's what everybody was talking about. I 24 have no knowledge if the program worked or not, but that 25 wasn't the story. The story was the reaction it was causing. 783 1 Q. And as of today, do you know whether DeCSS works? 2 A. I have heard conflicting things, even in this courtroom. 3 I don't know anybody myself who has gotten it to work, and I 4 don't know very many people who have even tried to get it to 5 work. I believe it can work if you spend a lot of time on it, 6 but I'm sure there are much easier ways to accomplish bad 7 things, if that's what you're trying to do. 8 MR. GOLD: Your Honor, I move to strike the answer. 9 It was full of speculation and he is not an expert witness as 10 he admits. 11 THE COURT: Strike everything after "I've heard 12 conflicting things." 13 Q. Now, have you ever sold a copy of a DVD disk that has been 14 de-encrypted through DeCSS? 15 A. No. 16 Q. Have you ever sent out a movie on the Internet as a result 17 of your having used DeCSS? 18 A. No. 19 Q. Now, you talked about working on WBAI. How long have you 20 been there? 21 A. Since 1988. 22 Q. And is the name of that program "Off the Hook?" 23 A. I started doing the program later that year in 1988 as a 24 special broadcast. It became a series in 1991, I believe. I 25 have also worked in the news department and as an engineer 784 1 over there. 2 Q. What does that program deal with? 3 A. It pretty much deals with similar things that the magazine 4 deals with, new developments in technology, security holes, 5 Orwellian aspects of today's society, people's privacy being 6 abused from all different angles. And what I like to do with 7 the program is reach people who have absolutely no background 8 in technology as opposed to the magazine. When I go on the 9 radio, anybody could be listening, and I find that many people 10 find it very fascinating to be hearing our perspective, and we 11 believe in explaining things to whoever will listen. So 12 people call into the radio show, we explain exactly what we're 13 talking about, sometimes they feel moved to come to one of our 14 meetings, which are once a month, and we make friends that 15 way. We explain how technology works from our perspective. 16 THE COURT: When you say you worked at WBAI as an 17 engineer, did you work there as a broadcast engineer who ran a 18 panel or some sort or some other kind of engineer? 19 THE WITNESS: A broadcast engineer, someone who 20 actually controls the board in the control room. 21 THE COURT: Thank you. Go ahead, Mr. Garbus. 22 Q. Now, have you participated in any panel discussions on 23 computers and the Internet-related issues? 24 A. Yes, numerous ones over the years. 25 Q. Tell me some of them. 785 1 A. There are the annual computer freedom and privacy 2 conferences. There was one I believe called Open Source 3 Solutions in Washington D.C. There was -- I don't recall the 4 names of the ones overseas that I attended. I know there was 5 one in Amsterdam and a couple of them in London as well. 6 Q. Have you also been on NPR, All Things Considered and World 7 News Now? 8 A. Yes, I have. 9 Q. Have you ever lectured at any university? 10 A. I have been a guest, a guest lecturer for various classes 11 at New York University, Seton Hall, the State University of 12 New York at Stonybrook. 13 Q. Have you ever testified before any committee of the House 14 of Representatives? 15 A. Yes, I testified before the house committee on technology 16 and finance, I believe, and that was in the early to mid 90s. 17 I don't have an exact date. 18 Q. Other than the conference you just mentioned before, have 19 you organized any other conferences? 20 A. Yes, that was our third conference. The first one was in 21 1994. The second one was in 1997. 22 Q. And can you tell me the title of the first one? 23 A. The title of the first one was called HOPE. That stood 24 for Hackers On Planet Earth, and we had -- it was the first 25 time ever that this country actually a conference like that 786 1 had been organized. I had drawn inspiration from some of the 2 conferences I had seen in Europe where people gathered 3 together and exchanged ideas in a free and open manner and 4 learned from each other and were guided in positive ways, at 5 least in my view, and in 1994, I thought it was a great 6 success as far as that went, and then it takes time to 7 organize these thing so we only do it every three years. 8 Q. And what was the second one? 9 A. The second one was a sequel to HOPE and we called it 10 Beyond HOPE and basically it was a continuation, the same kind 11 of a thing. We like to stress international cooperation. We 12 have people come over from different parts of the world and 13 tell us what is your phone system like, what do you dial to 14 make things work and connect to various things, how does your 15 billing system work, do they -- in what ways does the phone 16 company do evil things to you, you know, various things like 17 that as far as technology and privacy invasion and things that 18 we find ordinary people are concerned with increasingly today. 19 So, we just basically get these people together, trade 20 information, invite the public. 21 Q. And the sponsors of both of these conferences and the 22 third conference was 2600? 23 A. Yes, that's right. 24 Q. Where did you get 2600 from? 25 A. 2600 was a frequency that was used a long time ago back in 787 1 the 1960s and basically anyone who would transmit a 2600 hertz 2 tone over a long distance trunk connection would find 3 themselves put into what is known as operator mode where they 4 could then explore the entire phone system, and basically 5 route themselves to operators, to all kinds of mysterious 6 things that were out there. It doesn't work anymore, but it's 7 kind of a mystical thing from the past that people still talk 8 about. 9 Q. And your pen name, Emanuel Goldstein, where does that come 10 from? 11 A. Emanuel Goldstein was a character in 1984, the book by 12 George Orwell. He was supposedly the leader of the 13 underground, and it was kind of a cool name to take back in 14 the mid 80s, although I should point out in the end of the 15 book, it turned out he is actually a figment of the government 16 and he is entrapping everybody. That's another story. 17 Q. Did you take the name before you finished the book or 18 after you finished the book? 19 A. Actually I read the book about four times when I took the 20 name. 21 Q. Now, tell me some of the people who have spoken at the 22 conferences that you have organized? 23 A. We have had people like ex-CIA Agent Robert Steele, 24 cryptologist Bruce Snyder. At the most recent conference, we 25 had Jon Johansen who is here from Norway. We have had many, 788 1 many people. My mind is kind of drawing a blank when I try to 2 call them all up, but we have had journalists, people from 3 major television networks talk about how they cover stories 4 and how they might get misperceptions about what hackers are 5 all about. 6 And we try and bring these people together, whether 7 they are representatives of the government, people from 8 different countries, 12-year-old kids who are just learning 9 something, we try to bring them all together in the same room 10 so they can share information and bring something out of that, 11 and we find that many relationships are forged from this that 12 last for very long time. 13 Q. You mentioned Bruce Snyder. Can you tell me who he is? 14 A. He is an encryption expert. He has written several books. 15 Unfortunately he wasn't at the most recent conference. He was 16 here in 1997. And I understand his knowledge could fill a 17 room as far as what encryption is all about. 18 Q. Have you seen his affidavit in this case? 19 THE COURT: At what level of compression? 20 THE WITNESS: Any level I think. 21 A. He is one of those people that I'm in awe of, and many of 22 the people who come to the conferences are like gods to me. 23 They are people that just have so much knowledge and have done 24 so much, and I'm just -- I'm honored that they come to my 25 conference and share their information. 789 1 THE COURT: Mr. Garbus, I think we would save time if 2 we didn't just have testimonials to one's witnesses. I can 3 imagine the rebuttal case. 4 Q. Now, have you also written freelance pieces for magazines? 5 A. Yes, I have written pieces occasionally for local 6 newspapers, the New York Times, Newsday, and a couple of 7 foreign magazines as well. I wrote something for a Japanese 8 magazine a few years ago, something for magazines in England 9 and Holland, I believe as well. 10 Q. Now, do you in your magazine tell your readers about the 11 acts that -- the Hackers Act and the consequences of those 12 acts? 13 A. I'm sorry. I don't understand the question. 14 Q. In other words, in the Hacker Quarterly, do you tell your 15 readers the kinds of things they should and shouldn't do? 16 A. Well, we try not to be too moralistic. What we mostly do 17 is print information. We have an editorial at the beginning 18 of every issue where we expound on various thoughts, which is 19 something that I write, and also in the replies to letters in 20 the magazine, which is also printed every issue. If we give 21 any kind of moral guidance or judgment, that's where it is, 22 but in the actual articles themselves, it is more or less a 23 compilation of material that is already out there, and we kind 24 of present it to the people to show them this is what people 25 are saying, this is the information that's out there, this is 790 1 how systems supposedly work or don't work. And people write 2 in with corrections, they write in with additions, and we have 3 a dialog going based on that. 4 Q. Now does the name Mark Trapenhagen mean anything to you? 5 A. Not offhand. 6 Q. When did you start to put up the website? 7 A. Our website I believe first went up in 1995. 8 Q. Tell me about that. Why did you put it up? 9 A. Well, back in 1995, websites were just pretty much 10 starting to become popular, and we figured, you know, we are a 11 computer magazine, we really should be doing this. We had 12 just had our first conference the year before, so we had 13 enough money lying around so we could buy a machine and put it 14 up on the net. It was an extremely slow connection, but we 15 realized quickly that a lot of people came to our site to see 16 what we had to say. So we did our best to make it 17 interesting. 18 Q. Now, can you tell me at the present time how many hits 19 that site receives, how many unique visits? 20 A. Well, I can only estimate because we haven't kept logs 21 since last summer on that kind of a thing. We have what is 22 known as a counter on the front page and what we would do is 23 run statistics on it once a week, and that would take such 24 massive amount of memory that it would wind up crashing the 25 machine every Sunday night at midnight. 791 1 So we figured it wasn't that important to know 2 exactly how many people were hitting us. We had a general 3 sense that we had something on the order of 10,000 unique hits 4 a day. That means 10,000 different visitors coming to our 5 site, maybe seeing a few different pages but only being 6 counted once. 7 Q. Now at some point in time, there was an order entered by 8 this Court that you take down the DeCSS code. Do you recall 9 that? 10 A. Yes, I do. 11 Q. Prior to that time, did you print source and object code? 12 A. Of the DeCSS? 13 Q. Yes. 14 A. Yes. 15 Q. And when the Court ordered you to take it down, did you 16 take it down? 17 A. Yes, we did. 18 Q. And after you took it down, did you continue to have links 19 to other site? 20 A. Yes, the links remained up. 21 Q. And did you increase -- were the number of links increased 22 after the court order? 23 A. We had a large number of people submit new links and we 24 tried to keep up with it, but after a while it just became too 25 much and we just kind of left it in whatever state it was in 792 1 at that time. 2 Q. Whether you say submit new links, what do you mean by 3 that? 4 A. Well, we had a facility for people to tell us if they knew 5 other sites or if they were running a site and they wanted to 6 be included on the list, we had that on our main page, and 7 people were submitting that from the very beginning, ever 8 since it first went on line I think back in November or 9 December, and after we took the material off of our website, 10 it increased 20-fold at least and we just didn't have the 11 resources to continuously update things like that, and we felt 12 pretty much if people wanted to find DeCSS, they could easily 13 do it. It wasn't an issue anymore. 14 Q. Now, by the way, do you own some domain names? 15 A. I own quite a few domain names, yes. 16 Q. What are some of those names? 17 A. Well, gee, all the 2600 possibilities, .net, .org, .com. 18 I also own the WUSB site. I maintain their web page. And 19 there are also some rather humorous ones with some nasty 20 language in it, and I should explain why that is. NSI is the 21 registrar, Network Solutions Incorporated and up until last 22 summer, they were the only registrar in this country. You had 23 to submit your domain names through them. They had a policy 24 on language. They wouldn't allow certain words to be used as 25 domain names and some people objected to that, they thought it 793 1 was a form of censorship, but what was interesting was late 2 last summer, all of a sudden, there were new registrars. It 3 was opened up to all different companies, and many of those 4 company allowed you to register whatever name you wanted to. 5 So there was kind of a race for about two days, people 6 registering every possible four-letter word they could think 7 of, and I admit I was part of that race, because I basically 8 thought it was kind of interesting. But we never tied it into 9 the magazine in any way. That was more a personal hobby for 10 me. 11 Q. Can you give us some of the domain names, because they 12 will ask you on cross, we may as well get rid of it now. Go 13 ahead. 14 A. Well, gee, many of these I haven't even looked at in 15 several months, but I know fuckingmorons.com is one of them. 16 We put some -- before the names of various famous 17 corporations, I think Microsoft might have been one of them, 18 but I'm not sure, somebody beat us to that one, there were a 19 few others. I really have to look at the list because I don't 20 want to misspeak and say somebody else's name is mine, but 21 there are quite a few. There were maybe a dozen or so. 22 Q. Now, let me show you, if I can, documents marked as 23 Plaintiffs' Exhibits 113, 114, 115, 116, this looks like 1.11, 24 1.1, 1.2, 1.4, 1.6, 1.8, 1.7, 1.5, 1.3 and 1.12. I don't 25 think that there are other copies around. Are there? I think 794 1 these are the only copies. 2 And I would ask you to just briefly go through the 3 magazines, look at the green tags and tell me what those 4 relate to. 5 THE COURT: Are you offering them in evidence? 6 MR. GARBUS: I would, your Honor, yes. 7 MR. GOLD: I have no objection. 8 THE COURT: They are not offered for the truth, I 9 take it. 10 MR. GARBUS: They are offered -- right. 11 THE COURT: They are offered as examples of the 12 magazine. 13 MR. GARBUS: Yes. 14 THE COURT: They are received on that basis. 15 (Plaintiffs' Exhibits 113, 114, 115, 116, 1.11, 1.1, 16 1.2, 1.4, 1.6, 1.8, 1.7, 1.5, 1.3 and 1.12 received in 17 evidence) 18 A. Do you want me to go through all of these? 19 Q. Just briefly go through where the green stamps are. Those 20 are the places where you discuss things at your deposition. 21 By the way, are real names or true names used in the magazine? 22 A. That's entirely up to the author. If the author want to 23 submit their real name, we will print their real name. If 24 they want to submit an alias of some sort, we will print that. 25 It's not our decision to make. It's entirely up to them. 795 1 Q. Whether they submit letters to you and articles, is that 2 the same thing? 3 A. Yes. 4 Q. Do you in any way check out the accuracy of the 5 information? 6 A. Only to the point of if they are talking about a 7 particular operating system, does that operating system exist, 8 is the theory that they are expounding somewhat sound. It's 9 impossible with our staff to test out every single theory we 10 get, which is why a lot of what is printed is theoretical in 11 nature. It's something that this is how I believe the system 12 works and we present it. Invariably, we get people writing 13 back saying, no, this is really how the system works and then 14 we have a dialog going on different theories as to operating 15 systems, computer networks, telephone systems, whatnot. 16 Q. When you say -- who is the 2600 staff -- by the way, you 17 are located out in Long Island? 18 A. Yes. 19 Q. Who is the staff out there? 20 A. Well, we actually -- I am the editor and publisher. 21 THE COURT: Mr. Corley, can you back away from the 22 mike a couple inches. Thank you. 23 A. I am the editor and publisher. I have an office manager, 24 and I have someone who works on technical things on the system 25 occasionally. 796 1 Q. Is it fair to say this is basically a one-man operation? 2 A. I wouldn't say it's entirely a one-man operation, but me 3 being in the city actually has made it slow down to a trickle, 4 so I'm definitely the person that does things out there, and 5 everything else kind of is part of that in one degree or 6 another. 7 Q. And are you one of the people who write the materials that 8 goes up on the website? 9 A. The website, yes. I write some of the material that goes 10 up on there. 11 Q. Tell us just now by looking at the green tabs some of the 12 stories that are in the Hacker Quarterly? 13 A. There is a story called Cellular Interception Techniques 14 which basically goes into how cellular telephones work, how 15 cellular calls can be intercepted. It goes into the 16 Electronic Communications Privacy Act which makes such 17 interception illegal. It goes into how anyone with a 18 television set from the 1970s can use that television set to 19 intercept cellular phone calls. It's not exactly an advocacy 20 piece in any way. It's very technical in nature, and I think 21 you come out of this with an understanding of the law and the 22 understanding of the technology and an understanding of the 23 risk if you choose to use this particular type of cellular 24 phone. This is from 1995. It's not used very frequently 25 anymore. I like to think maybe this had something to do with 797 1 it, because the way cellular phone calls had been made in the 2 past was extremely insecure, and there wasn't enough being 3 done to protect people's privacy. 4 Q. And by the way, with respect to companies or utilities 5 that you have written about, have officers from those 6 companies ever contacted you concerning the materials that 7 have been written? 8 A. Well, I would have to say I've gotten more personal 9 contact such as at conferences and meetings with people who 10 say they love our magazine and they read it to find out all 11 the latest possible problems with their systems. Occasionally 12 we get people that threaten us and say you can't print this, 13 but upon challenging them, they have always backed down. 14 Q. And have any corporate executives ever told you that they 15 read your magazine for the first time and found out about 16 flaws in their product? 17 A. Yes, but also a lot of network engineers and they are the 18 ones who actually make the changes. 19 Q. Go ahead, continue. 20 A. I'm not sure if this is the article you wanted me to read. 21 It's entitled Imaginary Friends, and I'm not really sure -- is 22 this from 1996? 23 THE COURT: It's very high tech. 24 THE WITNESS: Yeah. 25 A. I think this is going into how to tell the phone company a 798 1 different name to list on your account. Basically this is for 2 people who are paranoid about being on any kind of a list, and 3 this is a way that you can make up a fake name, not for 4 purposes of fraud but for purposes of privacy, so that when 5 people call you on the phone, they ask for the fake name and 6 you know because they do that that they are looking at a list 7 of names and they are not really trying to call you. So this 8 article goes into how TRW compiles information, what the phone 9 company does when they open up an account for you, how to have 10 an unlisted phone number be really unlisted so your name isn't 11 on any list anywhere. 12 Q. Did you write either of these two articles? 13 A. No, I didn't. If I wrote them, I would remember them, but 14 I just remember them vaguely. 15 Q. Is it fair to say that the magazine is basically an 16 anthology of articles that you received? 17 A. Yes, I was looking for that word before. Anthology is 18 probably the best way. Probably the Readers Digest of the 19 hacker's world. We don't say that everything that is in these 20 articles is 100 percent correct. We have guidelines for the 21 articles, such as we don't print articles that espouse 22 destruction or immature acts or just various bad things. 23 MR. GOLD: Your Honor, I am having a lot of trouble 24 finding out what question the witness is answering in most of 25 these. There are long speeches going on. I was wondering if 799 1 the Court would request that the witness answer the question 2 that was asked. 3 MR. GARBUS: Let me see if we can help. 4 Q. Have you described the article that -- are we still on the 5 same article? 6 A. I had put that one down, but can I go back to it more in a 7 moment. 8 Q. Let's go to the next article. Tell me what the next 9 article deals with? 10 A. Snooping Via MS Mail. This is from 1996 as well. I 11 believe what this does, this describes a product known as MS 12 Mail which various companies use, and how people's mail can be 13 intercepted on that and spied upon. And this is an example of 14 an article that can be used in two ways. We print the 15 information. It can be used in a good way; that is, users can 16 learn about privacy, they can figure out ways to prevent them 17 from happening. Or it can be used in a bad way, someone can 18 take this an actually start spying on people. 19 We don't have a big moral discussion about what is 20 going to happen with the information we print, because the 21 information is already out there. As I said, we are more or 22 less an anthology of what is being distributed and we like to 23 think that by printing this information, we wake people up. 24 Q. Let's go to the next article. 25 A. This is similar to one before, Tips on Generating Fake ID. 800 1 This more or less goes a little bit outside the boundaries of 2 what we usually talk about because it's not really related to 3 computers or telephones, but it does have relevance in that it 4 talks about how people fool the system, how people get around 5 restrictions, and the article is written in kind of an 6 interesting tone. 7 It starts off, so you want to get drunk this weekend 8 or buy some cigarettes, etc., like that. This kind of is on 9 the boundary of what we print, the guidelines I mentioned. I 10 saw this as rather humorous, as a person being somewhat 11 sarcastic because, yeah, the only thing can you possibly do 12 with fake ID is buy cigarettes and get drunk. But I also saw 13 a lot of really good technical information here, websites that 14 are referenced, and if you are looking for somebody who is 15 doing this, this article will tell you what they're up to and 16 how it works. And I think it's something that is widespread 17 enough that you can't just ignore it and pretend it's not out 18 there. So that's the reason we printed that. 19 Q. Go to the next one. 20 A. This is more recent, so I should remember this one. Okay. 21 This is an editorial entitled, The Next Chapter from our 22 Spring 2000 issue. This basically deals a lot with the MPAA 23 case. I'm not exactly sure if you want me to read the entire 24 thing. It's rather large. 25 Q. Just tell me what it's about. 801 1 A. It's an editorial that I wrote and it kind of brings 2 together various issues that were going on at the time, 3 including the case of Kevin Mitnick who was a computer hacker 4 who was in prison for five years. That has drawn to a close 5 at almost the exact same time as this case has started. 6 We also touch upon various other laws that are being 7 passed that we see as being a bad thing, such as California's 8 three strikes laws which allows people who have committed 9 three crimes, even if they are not violent crimes, to be 10 imprisoned for life. So the piece is kind of more of an 11 editorial which covers it all and ties it together in a nice, 12 neat little package. 13 Q. Turn to the cover of the magazine. 14 A. Oh, yes, this is our kind of spoof cover of the MPAA 15 screen. 16 Q. Do you sell T-shirts? 17 A. Yes, we have T-shirts that are similar to this. In fact, 18 we used them to raise money for the defense, and we don't mean 19 any offense by it, it's just kind of a political cartoon that 20 we came up with, and I think most people see the humor in it. 21 Q. Can we go to the next one. 22 A. I think there is another one in the same issue. 23 THE COURT: How many more, Mr. Garbus? 24 MR. GARBUS: Do you want Mr. Goldstein to hand it to 25 the Court so the Court can see it after he has been describing 802 1 it? 2 THE COURT: When he is all done, the clerk will take 3 them. 4 MR. GARBUS: Go ahead. 5 THE COURT: How many more, Mr. Garbus? 6 MR. GARBUS: About half a dozen. These are the ones 7 that he was cross-examined on in the deposition, so we are 8 going to deal with it now. 9 A. I'm not sure if there is a green tag here, but these are 10 two articles. It's either AT&T's Gaping Hole or a Cellular 11 Network Detailed. I'm going to guess it's Gaping Hole, where 12 basically someone outlines a glitch in AT&T wireless service 13 that allows a user to receive free phone service. I remember 14 this particular article was something that the article -- that 15 the person had notified AT&T about and nothing had happened, 16 and the result was they sent us this article with the details 17 of exactly how it worked. And I understand that it doesn't 18 work anymore, so I think that speaks for itself. 19 Q. By the way, if the Court orders you to take down the links 20 to other sites, would you do that? 21 A. Absolutely, if the Court orders it, yes. 22 Q. Were you in Court, by the way, when the Court said it 23 would consider linking at a different time? Did you read the 24 transcript? 25 A. I read the transcript. I don't believe I was in court 803 1 that day. 2 This article is called How Domains Are Stolen, and 3 this is of particular interest to anyone who operates a 4 website. It's possible for people to go and hijack your site. 5 In fact, it happened to us only two weeks ago where someone 6 took advantage of a security hole in Network Solutions and 7 took our domain name, 2600.com and registered it to a site 8 somewhere overseas, and that would have been a real pain to 9 deal with to get back if we hadn't caught it. This article 10 gives one method of how such things are possible, and I would 11 like to think that this article coming out will wake up the 12 people at NSI so that it doesn't happen anymore. 13 Q. By the way -- 14 THE COURT: Excuse me, Mr. Garbus. You do 15 understand, do you not, that this is the time when the Court 16 is considering the linking issue, this trial? 17 MR. GARBUS: I understand that. 18 THE COURT: Okay. It wasn't clear from the way you 19 made your comment. 20 Q. Go ahead. 21 A. This is another article on cellular service, spoofing 22 cellular service. This is from 1996, before the onset of 23 digital cellular, so it was a much bigger issue then for the 24 electronic serial number to be grabbed literally as you were 25 driving down a highway by a cellular thief, I guess is the 804 1 best way to describe him, someone sitting on the side of a 2 road with a particular type of scanner who would simply grab 3 your numbers and just by grabbing your numbers, that would be 4 enough for them to become you and start making phone calls 5 under your phone number, and this is another gaping security 6 hole that we felt needed to be known, and I understand that 7 this kind of system is increasingly rare and is probably not 8 going to be around much longer at all. 9 Q. Are there other individuals who use the name 2600.com 10 other than you? 11 A. We are the only people who can use 2600.com. There are 12 other 2600 names in other countries. There is really no way 13 for us to register every single country name, nor would we 14 want to. And it is also possible for somebody to register a 15 machine as 2600. They could register 2600.Microsoft.com for 16 instance, so basically we are happy with having our website 17 2600.com and making sure that people know that's us. 18 Q. Are there other websites out there using a name or 19 something like that which people to your knowledge think are 20 associated with you? 21 A. Yeah, the only site associated with us are the sites we 22 run. The other types of association, it's more of an 23 emotional type of association where they may support the 24 magazine or agree with our basic philosophy and them might put 25 2600 in their name and that's something that really doesn't 805 1 concern us. We don't see that as a copyright issue or 2 something that's necessarily evil. The only time it would 3 concern us if they were doing something in our name that we 4 considered to be wrong. 5 Q. But you have no control over it? 6 A. We have no control over it. 7 Q. There are separate people using 2600? 8 A. Right, in that context, it would be an incredible waste of 9 time to try and control everybody who used that. 10 Q. Go ahead. 11 A. This article is entitled the Backyard Phreaker, 12 P-H-R-E-A-K-E-R. 13 And this goes into some detail on people who 14 literally climb telephone poles and hook into phone lines and 15 make phone calls. This happens quite a bit in unsecured 16 locations. It happens in New York City in the basements of 17 apartment buildings where the phone lines come into the 18 building and are left unsecured. What we find in many cases 19 is that unsuspecting people get these large phone bills and 20 the phone company says it was dialed from your phone number, 21 therefore, you had to have done it. We are showing here that 22 there are many ways people can make these phone calls on your 23 phone line without you ever knowing about it. And many 24 people, including a lot of the WBAI listeners, have used this 25 kind of information to battle the phone company and say, you 806 1 know, there are many other ways somebody could have used this 2 phone number to place this fraudulent call. And we also like 3 to think that this might encourage people to lock those boxes 4 so that everybody in the world can't get access to them. 5 Q. Continue. 6 A. This is actually -- 7 THE COURT: Mr. Garbus, I think we have heard enough. 8 You have the magazines in evidence. I can look at the 9 magazines. I don't need anymore summaries. 10 MR. GARBUS: I have no more questions of this 11 witness. 12 THE COURT: Okay. Mr. Gold? 13 Just so we are clear, Mr. Garbus, if you had other 14 questions, you are welcome to continue. I just don't need 15 more summaries of magazine articles. Do you understand? 16 MR. GARBUS: Yes. 17 THE COURT: Mr. Gold? 18 MR. GOLD: May we have the exhibits, the magazines? 19 THE COURT: Yes. 20 MR. GOLD: May I approach the witness for that 21 purpose? 22 THE COURT: Yes. 23 MR. GOLD: Thank you, sir. 24 CROSS-EXAMINATION 25 BY MR. GOLD: 807 1 Q. Good afternoon, Mr. Goldstein. 2 A. Good afternoon. 3 Q. Nice to see you again. Mr. Goldstein, in 1999, did your 4 2600.com site mirror DeCSS? 5 A. That's correct. 6 Q. When did you start? 7 A. I believe we started in late November. I don't have the 8 precise date. 9 Q. The posting that you've just referred to was done by who? 10 A. Who specifically posted the -- it was either myself or my 11 webmaster. 12 Q. And was this a webmaster you preapproved? 13 A. Yes, I take responsibility for everything that's on the 14 site. 15 Q. Is it true that prior to the preliminary injunction, any 16 member of the general public was able to download DeCSS 17 directly from the 2600.com website? 18 A. Any member who had a computer and a net connection could 19 do that, yes. 20 Q. Is it true that 2600.com is currently linking to other 21 sites that post DeCSS? 22 A. Yes, we have been linking from the beginning. 23 THE COURT: Let me ask this, I think I know the 24 answer to this, but I think it ought to be in the record. 25 What does mirror mean as you understood it when you 808 1 answered Mr. Gold's question? 2 THE WITNESS: Mirror is basically a link to another 3 site. Actually, mirror is a duplicate of your site, so it's 4 not entirely correct. I think Mr. Gold is referring to links. 5 A mirror is, say, our site goes down, you go to a site B and 6 it's the exact same thing, so in that particular case, it's 7 not the same. I believe you're referring to links. 8 THE COURT: But he asked you right at the beginning 9 of his examination whether in 1999 your site was mirroring 10 DeCSS and you said it was. What did you mean by that? 11 THE WITNESS: That refers to the specific program 12 DeCSS, so that, yes, that program was mirrored on our site. 13 The site itself, we were not mirroring the entire other site, 14 just the program. 15 THE COURT: Yeah, but I asked you what mirroring 16 means. 17 THE WITNESS: Mirroring means duplicating material 18 that's on another website, whether it be one file or an entire 19 site. 20 THE COURT: Thank you. 21 Q. In 1999, on the 2600.com site, did you encourage people 22 who were interested in supporting you to mirror DeCSS? 23 A. We gave people various constructive ways of expressing 24 themselves and that was one of them, yes. 25 Q. And did you continue to do that in 2000? 809 1 A. Yes, it's still up to this day. 2 Q. Is it true that with the links you have provided and you 3 do provide on the 2600.com site, someone, anyone, can go to 4 the 2600 site, click once on a mouse, which takes you directly 5 to another site that is posting DeCSS? 6 A. Yes, they could do that. They could do it in many other 7 ways as well. 8 Q. In all the time that you were posting and all the time 9 that you have been linking, did you know that DeCSS is 10 designed to circumvent the encryption technology that protects 11 the digital content stored on a DVD? 12 A. I knew that it did one thing and that it was -- 13 MR. GARBUS: I object. 14 THE COURT: Ground? 15 MR. GARBUS: Use of the word "circumvent." 16 THE COURT: I take it in the colloquial rather than 17 the legal sense. 18 A. We knew that DeCSS basically got around CSS, got around 19 the encryption that was not holding up to the stress. 20 Q. Is it true, Mr. Goldstein, that DeCSS exists to decrypt 21 CSS? 22 A. That's what it was written to do, yes. 23 Q. Is it true that in a write-up or article that appeared on 24 the 2600.com site, DeCSS was described as a free DVD decoder 25 that allows people to copy DVDs? 810 1 A. Yes, that was on our site, and I have since said that part 2 of that statement is inaccurate, that it was not written 3 solely to copy DVDs. It was written to decrypt CSS. I wasn't 4 aware of the difference myself. I didn't write that piece at 5 the time that it came out. I believed that was completely 6 accurate, but it turns out that it's a bit more complicated 7 than I had at first thought. It's not simply about copying. 8 It's about access control. 9 Q. You recall that you made that statement in your 10 deposition, sir? 11 A. I'm sorry? 12 Q. You recall, sir, that you made that statement in your 13 deposition? 14 A. Yes, I believe I clarified that. 15 Q. And when you say you have just gotten some other evidence, 16 when did you get that? 17 MR. GARBUS: I object if we are going to the 18 deposition. If he wants to read in the question and the 19 answer, he can do that. 20 THE COURT: I will sustain the objection as to form, 21 because I think the question is muddy. But let's see if we 22 get another question. 23 Q. You indicated that you got some new information since the 24 time of your deposition about your last answer, the one that 25 you -- 811 1 A. No, that's not what I said. 2 MR. GARBUS: I object. 3 Q. Could you tell me what was you said? 4 THE COURT: The objection is overruled. He said he 5 thought the statement was accurate when made it and now he 6 thinks it's inaccurate. 7 MR. GARBUS: No, no, I think there are two different 8 time frames we are talking about. 9 THE COURT: Obviously. The deposition and now. 10 MR. GARBUS: No, no. From the writing of the 11 article, the deposition and now are three different time 12 frames. 13 THE COURT: We are going to break for the day at this 14 point anyway. I will see you all at 9 o'clock tomorrow 15 morning. 16 MR. HERNSTADT: Your Honor, could we address a 17 scheduling matter? 18 THE COURT: Sure. Address it. 19 MR. HERNSTADT: May we approach? 20 THE COURT: No. 21 MR. HERNSTADT: Fair enough. Tomorrow, your Honor, 22 we have one witness. I know your Honor said that we have to 23 keep the witnesses coming. Unfortunately, every other witness 24 we have, one of them has informed us that he couldn't come at 25 all, and all the other ones are out of state. We've got them 812 1 lined up for Tuesday and Wednesday. Depending on 2 cross-examination we expect, if you permit us to continue, we 3 expect to complete the witnesses by the end of Wednesday. 4 MR. GOLD: Your Honor, I was hoping that we would be 5 finished with this case before Wednesday, and I would like to 6 go to San Francisco Wednesday to try to present a part of the 7 argument being made in court that day on Napster. 8 THE COURT: You better get your people here. 9 MR. HERNSTADT: Your Honor, unfortunately it's not 10 possible. 11 THE COURT: I gave you a lot of advanced warning of 12 this. Do your best. 13 MR. GARBUS: Can I get some kind -- can Mr. Gold tell 14 me how long he expects the cross-examination to be? 15 THE COURT: Tell them what you think. 16 MR. GOLD: I can't imagine it would take as long as 17 as an hour and a half, and I think it will be shorter, but 18 something like that, best guess. 19 THE COURT: Okay. 9 o'clock. 20 MR. COOPER: Your Honor, what we have been told, so 21 that we are all clear, is that Mr. Peterson is available for 22 tomorrow. The other names we have been given are for Tuesday. 23 THE COURT: Who were the other people? 24 MR. GARBUS: Can I just say one thing? 25 MR. HERNSTADT: Your Honor, we have on Tuesday 813 1 Olegario Craig. 2 THE COURT: Say the name again. 3 MR. HERNSTADT: Olegario Craig. He is a systems 4 administrator at the University of Massachusetts. He can't 5 get off from his job until then. He is taking two days of 6 vacation to come down for it. Matthew Pavlovich who is the 7 director of the LiViD project lives in Dallas, Chris DiBona 8 who works with Linux and he is addressing the Linux operating 9 system, he is in Palo Alto. Peter Ramadge who is at 10 Princeton, but he is going to do a demonstration and we were 11 unable to get the monitors to do the demonstration until 12 Monday. Michael Einhorn who is in New Jersey. Dave Touretzky 13 is in Holland and Andrew Appel is in Hawaii. 14 MR. GOLD: I think none of our witnesses were from 15 this area and they all disturbed their plans to meet their 16 obligations to be in court. 17 MR. HERNSTADT: Your Honor, all of our witnesses are 18 volunteers, pro bono, coming at their own expense. We are 19 doing the best we can to get them here. We don't have -- we 20 don't control them. I apologize. 21 THE COURT: Look, Princeton, New Jersey, the last 22 time I looked was about an hour from here. Dallas is a three- 23 and-a-quarter-hour airplane ride. And there are planes this 24 evening. You do what you can. I'm not making any ruling now, 25 but I remind you that you were told there would be no gaps, 814 1 both sides were told, you were warned about it, you were told 2 that the plaintiff expected to rest on Thursday. They did 3 rest on Thursday. There have been no surprises. 4 Thank you, folks. 5 (Trial adjourned to July 21, 2000, at 9:00 a.m.) 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 815 1 2 INDEX OF EXAMINATION 3 Witness D X RD RX 4 JON JOHANSEN.............616 627 641 5 MIKHAIL REIDER...........646 676 6 EDWARD FELTEN............731 763 7 ERIC CORLEY..............774 806 8 9 PLAINTIFF EXHIBITS 10 Exhibit No. Received 11 113, 114, 115, 116 12 1.11, 1.1, 1.2, 1.4, 1.6, 1.8, 13 1.7, 1.5, 1.3 and 1.12 ................... 794 14 15 DEFENDANT EXHIBITS 16 Exhibit No. Received 17 BBP .........................................735 18 B to Exhibit BBS ............................755 19 20 21 22 23 24 25