From Security Weekly Wiki
Jump to navigationJump to search

JetFlix: The Netflix for Pirates

Undercover FBI agents were able to stream pirated content, thanks to a completely illegal streaming operation call JetFlix. This is not like some of the pirated streaming sites out there (that my friends tell me about). JetFlix gave the appearance of a completely legit streaming service, charging $9.99 / month and made available just about any TV show and Movie on the planet. Some of the facts in the articles are really interesting:

  • A grand jury indictment this week charged eight people with allegedly operating two of the biggest illegal streaming sites in the country. They ran not out of some Eastern European server farm but in Las Vegas, Nevada. They had a customer service line, a US bank account, and even put out the occasional press release.
  • at one point claiming to host 183,000 television episodes and more than 37,000 subscribers. And in one year claimed over $750,000 in revenue.
  • They racked up the felony charges: Which is to say, rather than simply point users in the direction of a pirated show, Jetflicks allegedly stored that content on its own servers in the US. And it allowed customers not only to stream but to download those shows to their own devices, upgrading the charges from “public performance” to “distribution," and a conspiracy to commit criminal copyright infringement, which comes with up to five years of jail time. The government claims that Polo went one step further, creating a separate piracy service called iStreamItAll that streamed movies like Us and Finding Dory before their commercial release—another felony, also punishable by up to five years in prison. Additional money-laundering charges carry a penalty of up to 20 years each.
  • Ironically, they did not like people stealing from them: , Jetflicks suffered the same plague of password-sharing that its legitimate competitors do—and took a more hardline stance against it than Netflix and HBO have. The indictment alleges that the Jetflicks team would search the internet to find anyone sharing their logins, and sought to "prevent individuals from 'stealing' Jetflicks content."
  • I wonder if they used a DevOps development process: “Polo used sophisticated computer programming to scour global pirate sites for new illegal content; to download, process, and store these works; and then make the shows and movies available on servers in Canada to ISIA subscribers for streaming and downloading,” the DOJ announcement reads. “Polo also admitted to running several other piracy services — including a Usenet NZB indexing site called SmackDownOnYou — and earning over $1 million from his piracy operations.”


Murfie's Law In Action

I have to admit, I did not even consider that such a service existed and am excited about this idea, however, after reading this story I am hesitant. I have, like many, a large collection of CDs, Tapes and Vinyl records. I ripped them manually, a painstaking process. Murfie was a service that did this for you, stored all of your media, and allowed you to download and stream your own content (I'd immediately look for session handling bugs because imagine having access to everyone's media! But that would be wrong, and illegal). But suddenly, Murfie went out of business, cease all communications with customers, and did not send everyone their media back. Some interesting things:

  • Customers had always expected to get their discs back — it was part of the company’s promise. “I went back and looked at the terms of use,” says Arik Hesseldahl, who paid Murfie to rip and store 668 CDs. “Those CDs are my property. And they even include a line that says if they fail, you still own your CDs.” The most recent version of Murfie’s terms of use said that if Murfie goes away, the company is still on the hook for “returning your CDs, vinyl, and cassettes to you,” so long as you pay its typical shipping fee. Except shipping fees are a lot higher now, if you can get a hold of someone at the company.
  • An email was sent on November 22nd telling customers Murfie was shutting down and to await instructions on how to get their stuff. Those instructions came a week later, on Black Friday, when a second email said customers had four days to claim their collections or they’d be marked “abandoned.” Not only that, but they’d have to pay a shipping fee over 10 times higher than Murfie’s normal return cost in order to get back their discs. A third email on December 2nd extended the deadline to December 5th, and said there might be one or two in-person pickup days scheduled for those in Madison “if we can obtain the permission of the landlord.” “Abandoned discs will be recycled by the end of December,” read an email, “when the storage facility must be vacated.”