ELECTRONIC FRONTIER FOUNDATION
[Join EFF] [Act Now] [Sign Up] [About EFF]

Transcript of Trial - Day 4, MPAA v. 2600

NY; July 20, 2000

See related files:
http://www.eff.org/IP/Video (EFF Archive)
http://cryptome.org/cryptout.htm#DVD-DeCSS (Cryptome Archive)
http://www.2600.com/dvd/docs (2600 Archive)
http://eon.law.harvard.edu/openlaw/dvd/ (Harvard DVD OpenLaw Project)


                                                             



                                                                612



   1   UNITED STATES DISTRICT COURT
       SOUTHERN DISTRICT OF NEW YORK
   2   ------------------------------x

   3   UNIVERSAL CITY STUDIOS, INC.,
       et al,
   4
                      Plaintiffs,
   5
                  v.                           00 Civ. 277 (LAK)
   6
       SHAWN C. REIMERDES, et al,
   7
                      Defendants.
   8
       ------------------------------x
   9
                                               July 20, 2000
  10                                           9:00 a.m.

  11   Before:

  12                       HON. LEWIS A. KAPLAN,

  13                                           District Judge

  14                            APPEARANCES

  15   PROSKAUER, ROSE, L.L.P.
            Attorneys for Plaintiffs
  16   BY:  LEON P. GOLD
            CHARLES S. SIMS
  17        SCOTT P. COOPER

  18   FRANKFURT, GARBUS, KLEIN & SELZ
            Attorneys for Defendants
  19   BY:  MARTIN GARBUS
            ERNEST HERNSTADT
  20        DAVID ATLAS

  21

  22

  23

  24

  25




                                                                613



   1            (In open court)
   2            MR. GARBUS:  May we approach the bench?
   3            THE COURT:  Yes, you and Mr. Gold may approach the
   4   bench.
   5            (At the sidebar)
   6            MR. GARBUS:  I got the Court's opinion yesterday when
   7   I got back to my office, and we will try and deal with it in
   8   some way.  I do want to point out that as I read the
   9   transcript, I was asked to stop going into an area that I
  10   thought was relevant to the lawsuit because the Court felt
  11   that I was getting into a recusal issue.  The Court then asked
  12   the question that was specifically related to the recusal
  13   issue.  I think it's very difficult to try a case while this
  14   is going on.
  15            THE COURT:  I hear what you said, and what you've
  16   said is, regrettably, absolutely false.  And the transcript so
  17   reflects.
  18            MR. GARBUS:  Secondly --
  19            THE COURT:  I did not stop you from going into
  20   anything.  I raised a concern about whether you were doing it
  21   for a different purpose.  I said that.  You then said you
  22   weren't and therefore you would leave the subject.  I said,
  23   look, if you want to press it, it raises another issue and I
  24   will deal with it.  You then elected to stop.
  25            MR. GARBUS:  Thank you.  With respect to the issue of


                                                                614

   1   the press, the Court has already indicated in its previous
   2   decisions some concern.  I had 12 calls from the press
   3   yesterday.  I spoke to nobody.  I do not fault Mr. Gold at
   4   all.  I do understand, and I could be totally wrong, and I am
   5   not making criticism of any kind, that members of the
   6   Proskauer firm have spoken to the press.  If I'm wrong, then
   7   I'm wrong.
   8            MR. GOLD:  I didn't hear what you said.
   9            MR. GARBUS:  That members of the Proskauer firm have
  10   been speaking to the press, and I find nothing wrong with it,
  11   I'm not even asking about it.
  12            Are you saying --
  13            THE COURT:  Stop it, Mr. Gold.
  14            MR. GARBUS:  All I'm saying is if there is to be a
  15   bar, or if there is to be any significance given to any
  16   discussion by any member of the defense team or the
  17   defendants -- I have also seen Mr. Valenti's statements and
  18   statements by the MPAA -- then if the Court wishes to impose a
  19   press bar on everybody, I will not object to it.
  20            THE COURT:  Are you asking for it?
  21            MR. GARBUS:  Absolutely not.  But I don't want to be
  22   the only one feeling the pressure of that restriction.
  23            THE COURT:  Mr. Garbus, any pressure you are feeling
  24   in this regard is internally generated.
  25            MR. GARBUS:  Thank you.


                                                                615

   1            THE COURT:  I have imposed no bar, no one has asked
   2   me to impose a bar, and so that the record is abundantly
   3   clear, yesterday when you made a statement to the effect that
   4   you had not been making certain sorts of out of court
   5   statements or would not, or something to that effect, there
   6   was comment on the fact that you were speaking only for
   7   yourself.
   8            MR. GARBUS:  Absolutely.
   9            THE COURT:  And you made clear that you were speaking
  10   only for yourself.
  11            MR. GARBUS:  Absolutely.
  12            THE COURT:  And you know we are not, all of us,
  13   totally in a vacuum.  It is perfectly obvious that others at
  14   your table, or at least one other that I can identify, is
  15   speaking to the press with immense regularity.
  16            MR. GARBUS:  Do you care to mention the extent to
  17   which the other side is speaking to the press through press
  18   releases and distributing information as well?
  19            THE COURT:  I have absolutely no idea.  I suppose you
  20   are both talking to the press a lot.
  21            MR. GARBUS:  I am not.
  22            THE COURT:  Those are generic you's.  Both sides are
  23   obviously talking to the press.
  24            (In open court)
  25            Do you have a witness, Mr. Gold?


                                                                616

   1            MR. GOLD:  Yes, we do, your Honor.
   2            MR. HERNSTADT:  I think we have agreed to do Mr.
   3   Johansen first.
   4            THE COURT:  We will take Mr. Johansen out of order.
   5            MR. HERNSTADT:  Thank you very much, your Honor.
   6            The defendants call Jon Johansen.
   7    JON JOHANSEN,
   8         called as a witness by the Defendants,
   9         having been duly sworn, testified as follows:
  10   DIRECT EXAMINATION
  11   BY MR. HERNSTADT:
  12   Q.  Good morning, Mr. Johansen.
  13   A.  Good morning.
  14   Q.  Where do you live?
  15   A.  I live in Larvik, Norway.
  16   Q.  How old are you, sir?
  17   A.  I will be 17 in November.
  18   Q.  What is your educational background?
  19   A.  High school.
  20   Q.  Do you work now?
  21   A.  Yes, I do.
  22   Q.  Where do you work?
  23   A.  I work for WAP Factory in Oslo.
  24   Q.  What do you do for them?
  25   A.  I work in interactive TV.


                                                                617

   1   Q.  What does WAP Factory do?
   2   A.  We work with WAP, the Wireless Application Protocol, and
   3   interactive TV.
   4   Q.  Does it produce programs?
   5   A.  We -- yes, but not for the general public.
   6   Q.  Thank you.  What program languages do you use?
   7   A.  I use C, C++, Assembler and JAVA.
   8   Q.  And what operating systems do you use?
   9   A.  I use GNU/Linux, FreeBSD and Windows NT.
  10   Q.  How many computers do you have at home?
  11   A.  I have three computers.
  12   Q.  And what are the operating systems on those computers?
  13   A.  One has GNU/Linux, one has FreeBSD and one has GNU/Linux
  14   and Windows NT.
  15   Q.  What do you use those machines for?
  16   A.  The Linux only machine is used as a router, which I use to
  17   connect to the Internet, and the FreeBSD machine is used as a
  18   file print server and the new Linux and Windows NT machine is
  19   my desktop machine.
  20   Q.  How long have you used Linux programs?
  21   A.  I used Linux for about three years.
  22   Q.  What is your primary operating system that you use?
  23   A.  That would be Linux.
  24   Q.  When did you first -- do you know what a DVD is?
  25   A.  Yes, I do.


                                                                618

   1   Q.  When did you first see a DVD?
   2   A.  I first saw a DVD in 1997.
   3   Q.  Okay.  As of October 1999 did you own any DVDs?
   4   A.  Yes, I did.
   5   Q.  How many?
   6   A.  About 15.
   7   Q.  How many do you have today?
   8   A.  Today I have about 40 DVDs.
   9   Q.  Okay.  Did you buy them?
  10   A.  Yes, I did.
  11   Q.  How much does a DVD cost in Norway?
  12   A.  Region 2 DVDs for the European market are about 20 to $30,
  13   but they lack -- they usually lack all the extra features that
  14   are on the region 1 U.S. DVDs, so I buy imported U.S. DVDs,
  15   which are about 40 to $50.
  16   Q.  Can you play an imported U.S. DVD in Norway?
  17            MR. SIMS:  Object to this whole line as irrelevant,
  18   your Honor.
  19            THE COURT:  Sustained.  No, I'm not sure.  Overruled.
  20   I will let it go a while.
  21            MR. HERNSTADT:  Thank you, your Honor.
  22   A.  Can you please repeat?
  23            (Record read)
  24   A.  When a DVD comes from the factory it will only play the
  25   European region, which is 2, but almost all DVD players in


                                                                619

   1   Norway are modified to play DVDs from the whole world.
   2   Q.  Who modifies the DVD players?
   3   A.  The stores usually have a person who they send the DVD
   4   players to to have them modified before they sell them.
   5   Q.  Do you have DVD a player in your home?
   6   A.  Yes, I do.
   7   Q.  How many?
   8   A.  I have a set up DVD player for my TV and I have a DVD
   9   player on my computer.
  10   Q.  On which computer do you have the DVD player?
  11   A.  That would be Linux.
  12   Q.  Do you know a program called DeCSS?
  13   A.  Yes, I do.
  14   Q.  What is it?
  15   A.  It is a program which decrypts DVD movies and stores them
  16   on your hard drive.
  17   Q.  Does DeCSS do anything else?
  18   A.  No, it does not.
  19   Q.  Who wrote DeCSS?
  20   A.  I and two other people wrote DeCSS.
  21   Q.  How did this come about?
  22   A.  In September, October, 1999 I met a person on the Internet
  23   and he was also a Linux user.  We decided to investigate and
  24   find out how we could make a DVD player for Linux.
  25   Q.  Why did you want to do that?


                                                                620

   1   A.  Well, at the time I had a dedicated Windows machine, which
   2   I used only for DVD playback, and if I could get a Linux
   3   player I wouldn't have to have a machine just for DVDs.
   4   Q.  Okay.  So what did you do?
   5   A.  Well --
   6            MR. SIMS:  Your Honor, object on relevance to this
   7   whole line.
   8            THE COURT:  Tell me why.
   9            MR. SIMS:  Excuse me?
  10            THE COURT:  Tell me why.
  11            MR. SIMS:  Because the issue in the case has nothing
  12   to do with why this person created an executable for DeCSS.
  13   It has to do with what its function is and what Mr. Corley has
  14   done.
  15            THE COURT:  I am going to hear the evidence, within
  16   reasonable time limits, for what it's worth.  Go ahead.  I
  17   mean the man is here from Norway, I might as well hear him.
  18            MR. HERNSTADT:  Do you want to hear the purpose of
  19   the evidence or would you rather hear the evidence?
  20            THE COURT:  You are going to get the evidence in and
  21   I will hear the argument later, unless we come to a point
  22   where I think you have taken too much time and then you can
  23   try to explain to me why we should take more.
  24   Q.  Mr. Johansen, what did you do next towards making DeCSS?
  25   A.  We agreed that the person who I met would reverse engineer


                                                                621

   1   a DVD player in order to obtain the CSS algorithm and keys.
   2   Q.  Who was this person that you met on the Internet?
   3   A.  A person from Germany.  I don't know his identity.
   4   Q.  Okay.  What happened next?
   5   A.  About three days later when I was on line again, he
   6   messaged me and told me that he had found the CSS algorithm.
   7   He also sent the algorithm to me with the CSS authentication
   8   source which are written by Eric Fawcus earlier.  He also sent
   9   me information on where inside the player he had found the
  10   algorithm, and he also sent me a single player key.
  11   Q.  Why did he send you the information on how he found the
  12   algorithm?
  13            MR. SIMS:  Objection.
  14            THE COURT:  Sustained.
  15   Q.  What did you do next?
  16   A.  Well, he had told me where inside the player he had found
  17   the algorithm, so I disassembled the DVD player myself to see
  18   where he had found it.
  19   Q.  Was this a software DVD player?
  20   A.  Yes, this was a software DVD player, the Xing DVD player.
  21   Q.  What did you do next?
  22   A.  Well, at the time -- the UDF is a file system which is
  23   used on DVDs, and at the time Linux did not have the proper
  24   support.  It was currently in development.  It was being developed
  25   so I could not get it to work, so in order to test the


                                                                622

   1   decryption, if the decryption algorithm found worked, I
   2   created a Window executable which would use the CSS algorithm
   3   to decrypt the CSS content.
   4   Q.  You said you got the CSS authentication program from Derek
   5   Fawcus?
   6   A.  Yes, I believe the CSS authentication had been posted
   7   anonymously in Assembler language on the Internet, and Derek
   8   Fawcus had picked that up and rewritten it in C language and
   9   posted it on his website.
  10   Q.  How do you know that it was Derek Fawcus?
  11   A.  He told me.
  12            MR. SIMS:  Judge, move to strike.  Hearsay.
  13            THE COURT:  Strike what Mr. Fawcus told him.
  14   Q.  Were there any other indications that Mr. Fawcus might
  15   have been connected to the program?
  16   A.  The CSS-authentication?
  17   Q.  Yes.
  18   A.  Well, it was posted on his website so I presume he put it
  19   there.
  20   Q.  All right.  Tell us what happened next.
  21   A.  Well, after I had created the DeCSS executable, I posted
  22   it on my website, I made an announcement on the LiViD mailing
  23   list.  I posted a link to my website.
  24   Q.  Why did you make an announcement on the LiViD mailing
  25   list?


                                                                623

   1   A.  Well, I wanted them to know that we had successfully
   2   reverse-engineered a DVD player and obtained the algorithm we
   3   needed to make a DVD player.
   4   Q.  Why did you want the LiViD mailing list to know that?
   5   A.  That's what LiViD is about, it's about making a DVD player
   6   for Linux.
   7   Q.  Were you able to play DVDs on a Linux machine using DeCSS?
   8   A.  Well, yes.  After I had decrypted a movie, I used the NIST
   9   MP-2 player to successfully play a DVD.  I wouldn't have
  10   access to the DVD features but I could play the actual movie.
  11   Q.  Have you looked at any other programs that do
  12   substantially the same thing as DeCSS?
  13   A.  Yes, I have.  Before I created DeCSS, I had analyzed a
  14   program called DVD Rip, which I had found on the Internet.
  15   Q.  Why did you need to make DeCSS if you had found a program
  16   that did essentially the same thing?
  17   A.  Well, DVD Rip, it takes a decrypted DVD movie from memory
  18   and stores it on your hard drive.  It did not come in source,
  19   and in order to make a DVD player we would need to have
  20   source, and the DVD republication didn't contain the CSS
  21   algorithm and it was dependent on a DVD player for Windows.
  22   Q.  Did the DVD Ripped program decrypt DVDs?
  23   A.  No, it actually stole, if you would like to use that term,
  24   the DVD movie from memory after it had been decrypted by the
  25   Xing DVD player and then you save that stream on your hard


                                                                624

   1   drive.
   2   Q.  Were the files created by DVD Rip and DeCSS the same?
   3   A.  Not exactly, but the files created could easily be
   4   compressed using another compressed algorithm.
   5   Q.  And did DVD Rip, the file created by DVD Rip, was the
   6   audio and video together or separate?
   7   A.  They were together.
   8   Q.  And how about with DeCSS?
   9   A.  Well, they are still together with DeCSS as well.
  10   Q.  Okay.  Is there anything -- I'll move on.  What happened
  11   to you after --
  12            THE COURT:  Let me get clarification of that.  With
  13   DeCSS was there any need, is there any need to synchronize the
  14   audio files with the video files in order to see the movie in
  15   the form you would normally see a movie?
  16            THE WITNESS:  Well, if you make a DivX, is that what
  17   you mean?  Or if you want to play the DVD movie after it has
  18   been decrypted?
  19            THE COURT:  Either way.
  20            THE WITNESS:  After we decrypt a movie with DeCSS,
  21   you can simply play it in your DVD player.  You don't need to
  22   do anything.
  23            THE COURT:  What if you then want to compress it and
  24   transfer the compressed file to someone?
  25            THE WITNESS:  Well, that you would need -- I haven't


                                                                625

   1   actually performed that procedure, but I believe there are
   2   steps needed to resynchronize the video and audio.
   3            THE COURT:  What is the basis for your belief in that
   4   regard?
   5            THE WITNESS:  I have read several articles on the
   6   Internet that describe those procedures.
   7            THE COURT:  All right.  Go ahead.
   8   Q.  If you use DVD Rip to decrypt or to get a decrypted DVD
   9   file, is there a need to synchronize the audio and visual if
  10   you are going to compress it thereafter?
  11   A.  Well, I haven't performed that procedure myself, but I
  12   believe there would be.
  13            THE COURT:  Mr. Johansen, if you would sit back about
  14   another six inches, the audio will be a lot clearer.
  15            MR. SIMS:  Move to strike.  No foundation to the last
  16   part of that.
  17            THE COURT:  I will take it for what it's worth.  If
  18   he hasn't done it, he hasn't done it.
  19   Q.  After you posted the link to the DeCSS program on the
  20   LiViD site, what happened then?
  21   A.  Well, I had some small increase in visitors, not much.
  22   After the press started releasing articles and linked it to my
  23   site, I received a substantial increase in visitors.
  24   Q.  Was anyone on the LiViD site critical of you posting a
  25   link to CSS?


                                                                626

   1   A.  Yes, there was at least one person who felt that we should
   2   have released the source with the Xing key at the same time we
   3   released the executable.
   4   Q.  Did you release the source at the same time?
   5   A.  No, we did not.
   6   Q.  Why didn't you?
   7   A.  Because the source we had contained the Xing player key.
   8   If we were to release that source, the Xing would be harmed,
   9   the player key would be revoked and no new DVD movies would
  10   work with the Xing DVD player or the player we would have
  11   created.
  12   Q.  Did you intend never to release the source?
  13   A.  Before we created DeCSS we sent the source to Derek
  14   Fawcus.  He was supposed to rewrite the source without the
  15   need for the Xing player key and then release that onto the
  16   Internet.
  17   Q.  Did any event occur to you personally as a result of your
  18   writing DeCSS?
  19            MR. SIMS:  Objection.  Irrelevant.
  20            THE COURT:  Sustained.
  21   Q.  What happened next?
  22            MR. SIMS:  Objection.  Irrelevant.
  23            THE COURT:  Well, look, we all know the story, don't
  24   we?  What's the harm?  Go ahead.
  25   A.  Well, in January, on January 25, I had to go to the local


                                                                627

   1   prosecutor's office because of charges filed by the MPAA in
   2   Norway, and in February I received an award, a national
   3   student award which is awarded to students who are in high
   4   school and have achieved excellent grades and also achieved
   5   something outside of school in culture, sports, art.
   6   Q.  Why did you receive that award?
   7   A.  I believe I received the prize because of my part in the
   8   writing DeCSS.
   9   Q.  Did you get a prize?
  10   A.  Yes, I did.
  11   Q.  Did you get any money?
  12   A.  I received about $2,000.
  13   Q.  What did you do with the money?
  14   A.  I used $1200 and bought a high-end Sony DVD player for my
  15   TV.
  16            MR. HERNSTADT:  Thank you very much, Mr. Johansen.
  17            THE COURT:  Mr. Sims.  Thank you, Mr. Hernstadt.
  18   CROSS-EXAMINATION
  19   BY MR. SIMS:
  20   Q.  Good morning, Mr. Johansen.
  21   A.  Good morning.
  22   Q.  Now, you understood when you created DeCSS executable that
  23   DVD movies were encrypted using the CSS encryption algorithm,
  24   correct?
  25   A.  Yes, I did.


                                                                628

   1   Q.  And you first learned of CSS in about June or July of
   2   1999?
   3   A.  Yes, I did.
   4   Q.  You understood that CSS required three sets of keys to
   5   play back a DVD?
   6   A.  Yes.
   7   Q.  And you understood that certain of those keys were
   8   themselves encrypted?
   9   A.  Well, I believe I understood that the CSS license requires
  10   anyone who makes a DVD player to encrypt their algorithm and
  11   key inside the DVD player.
  12   Q.  The program you created, DeCSS, that you posted, is a
  13   Windows program, correct?
  14   A.  Yes, that's correct.
  15   Q.  And you came up with the name DeCSS?
  16   A.  Yes, I did.
  17   Q.  What does the De in DeCSS stand for?
  18   A.  It stands for decrypt.
  19   Q.  DeCSS has no playback functionality, is that correct?
  20   A.  Yes, that's correct.
  21   Q.  Once a decrypttive VOB file is copied to the user's hard
  22   drive, he can do anything with that file that he can do with
  23   any other computer file?
  24   A.  Yes, that's correct.
  25   Q.  He can copy it again?


                                                                629

   1   A.  Yes, that's correct.
   2   Q.  Compress it?
   3   A.  Yes.
   4   Q.  He can copy it to a VCD?  I'm sorry.  He can copy it to a
   5   video compact disk?
   6   A.  Well, not in its original decrypted form.  The size is too
   7   high.
   8   Q.  But if he compresses it, it can be copied to a video
   9   compact disk?
  10   A.  Yes, if he uses sufficient compression.
  11   Q.  And to a CD-ROM?
  12   A.  Yes.
  13   Q.  And it can be uploaded on to the Internet -- it could be
  14   uploaded to the Internet, correct?
  15   A.  Yes, just as any other file.
  16   Q.  Now, am I correct that someone in a chat room advised you
  17   two months ago that he or she had downloaded a decrypted
  18   DivX'd DVD movie from the Internet?
  19   A.  No, I believe someone told me that they had downloaded a
  20   movie.  They didn't tell me what form it was or which movie it
  21   was.
  22   Q.  They didn't tell you that it was DivX'd?
  23   A.  No, they did not.
  24   Q.  What was the chat room, by the way, where you had that
  25   communication?


                                                                630

   1   A.  That would be #PC DVD.
   2            MR. HERNSTADT:  I object and move to strike the last
   3   several questions and answer on the grounds of hearsay.
   4            THE COURT:  I'm not going to take it for the truth.
   5   Q.  Now, Mr. Johansen, did you testify last night that you
   6   were told by this person that he had downloaded a DivX'd
   7   movie?
   8   A.  No, I believe I told last night that he had told me that
   9   he had downloaded a movie.  He didn't say which kind of movie
  10   it was.
  11            MR. SIMS:  I don't quite remember the approach you
  12   want, but that testimony appears on page 10 of the --
  13            THE COURT:  I don't have it.  Just read it.  Give the
  14   page and line number and just read it.  If there is a dispute
  15   over the accuracy of the reading or of the transcript, we'll
  16   deal with it.
  17            MR. SIMS:  Page ten, line 3.
  18         "Q.  Okay.  What has that person told you?"
  19   A.  I believe he told me he had downloaded a movie from the
  20   Internet.
  21            THE COURT:  I'm sorry.  There is no reason you would
  22   be any more familiar with U.S. courtroom procedure than I
  23   might be with Norwegian.  At this moment counsel is going to
  24   read from the transcript of what you said last night.  When he
  25   says "question," what that indicates is that he is about to


                                                                631

   1   read what you said last night and we will let you know when
   2   you are to answer again.
   3            THE WITNESS:  Okay.
   4            MR. HERNSTADT:  I can see that it's hearsay.
   5            THE COURT:  Well, now it goes to credibility.  Go
   6   ahead.
   7   BY MR. SIMS:
   8   Q.  The transcript says:
   9         "Q.  Okay.  And what has that person told you?"  And the
  10   reporter wrote down the following answer:
  11         "A.  He told me that he had downloaded a DivX movie."
  12            Is that correct?
  13            THE COURT:  Mr. Sims, your question is unclear.  If
  14   you are asking him if it's correct that that's what the
  15   transcript says, we don't need that testimony.  If you are
  16   asking him whether what he said last night is true, that's an
  17   appropriate question.
  18            MR. SIMS:  That's an appropriate question?
  19            THE COURT:  Yes.  Mr. Hernstadt?
  20            MR. HERNSTADT:  Your Honor, actually the first
  21   question is not entirely inappropriate.  This is not a final
  22   transcript.
  23            THE COURT:  Are you disputing its accuracy in this
  24   regard?  Do we have to bring the court reporter in to testify
  25   as to the accuracy of the transcript?


                                                                632

   1            MR. HERNSTADT:  No, sir.
   2            THE COURT:  Go ahead, Mr. Sims.
   3   Q.  Is it true that you were told by this person that he had
   4   downloaded a DivX'd movie?
   5   A.  No, it is not.
   6   Q.  And did you testify last night that he did tell you that?
   7   A.  No, I believe I testified that he had said he had
   8   downloaded a movie, not which kind.
   9   Q.  Now, this conversation you had, what was the name of the
  10   chat room again?
  11   A.  Pound PC DVD.
  12   Q.  Is that the precise chat room where you had announced your
  13   creation of the Windows DeCSS utility?
  14   A.  Yes, that is correct.
  15   Q.  And how many months after you made that announcement in
  16   that chat room did you have this conversation with this
  17   person?
  18   A.  Excuse me?  Could you please repeat?
  19   Q.  Yes.  How long was it after you had made the announcement
  20   about the Windows DeCSS utility did you have this conversation
  21   with this person in which the person told you that they had
  22   downloaded a movie from the Internet?
  23            MR. HERNSTADT:  Object to the form.
  24            THE COURT:  Overruled.
  25   A.  I don't recall, but I believe it was about a month.


                                                                633

   1   Q.  And am I correct that the Pound PC DVD chat room is not
   2   limited to Linux users?
   3   A.  The Pound PC DVD channel is open for all users of PCs and
   4   DVDs.
   5   Q.  Thank you very much.  Now, you testified on direct that a
   6   German person, I think, had reverse-engineered the Xing DVD
   7   player, is that correct?
   8   A.  Yes, that is correct.
   9   Q.  And that person goes by the nick Ham?
  10   A.  Yes, that's correct.
  11   Q.  And it's Ham who wrote the source code that performed the
  12   authentication function in DeCSS, is that correct?
  13   A.  No, that is not correct.  He did not write the
  14   authentication code.  He wrote the decryption code.
  15   Q.  He wrote the encryption code?
  16   A.  Decryption code.
  17   Q.  Decryption.
  18   A.  Yes.
  19   Q.  Ham is a member of Masters of Reverse Engineering or MORE?
  20   A.  That's correct.
  21   Q.  And are you also a member of MORE?
  22   A.  Yes.
  23   Q.  There are other members in Germany and Holland, is that
  24   correct?
  25   A.  Well, the third member is in the Netherlands.


                                                                634

   1   Q.  And it was Ham's reverse engineering of the Xing DVD
   2   player that revealed the CSS encryption algorithm, am I right?
   3   A.  Yes, that's correct.
   4   Q.  Reverse engineering by Ham took place in or about
   5   September 1999?
   6   A.  Yes, I believe it was late in September of 1999.
   7   Q.  And you testified that it was this revelation of the CSS
   8   encryption algorithm and not any weakness in the CSS cipher
   9   that allowed MORE to create DeCSS, is that correct?
  10   A.  Yes, that's correct.
  11   Q.  You obtained the decryption portions of the DeCSS source
  12   code from Ham, correct?
  13   A.  Yes, that's correct.
  14   Q.  You then compiled the source code and created the
  15   executable?
  16   A.  Well, in the form I received it, it was not compatible.
  17   Q.  Well, you testified the operation of DeCSS on a Windows
  18   machine initially, correct?
  19   A.  Actually, I tested it under -- it was under Windows.
  20   Q.  And in performing your tests on DeCSS, which DVDs did you
  21   decrypt?
  22   A.  Well, I don't recall which DVD I tried first, but the
  23   second DVD I tried was the Matrix.
  24   Q.  And how many times did you decrypt DVDs?
  25   A.  Well, each time I watch a movie I decrypt a DVD.  I don't


                                                                635

   1   recall how many times I watched the DVD movie on my computer.
   2   Q.  When you posted the Microsoft Windows executable version
   3   of DeCSS, you had no knowledge that the program would run
   4   under Linux, correct?
   5   A.  No, that's not correct.
   6   Q.  Had you run it under Linux at that time?
   7   A.  No, I had not, but in theory it should work using an
   8   application called wine, W-I-N-E.
   9   Q.  When you posted the DeCSS executable on your web page, you
  10   did not post the source code, correct?
  11   A.  That is correct.
  12   Q.  You testified a moment ago that you thought it would work
  13   under wine, is that correct?
  14   A.  That is correct.
  15   Q.  Have you ever actually tried that?
  16   A.  No, I have not.
  17            THE COURT:  Mr. Garbus, would you have a seat,
  18   please.
  19   Q.  Now, you first posted the DeCSS executable utility where?
  20   A.  I posted it on my website.
  21   Q.  And after that, you announced that it was available on
  22   your website in two different forums or two different places,
  23   correct?
  24   A.  Yes, that is correct.
  25   Q.  And what were those two places?


                                                                636

   1   A.  LiViD mailing list and the Pound PC DVD IRC chat room.
   2   Q.  Which did you do first?
   3   A.  That would be the Pound PC DVD chat room.
   4   Q.  Am I correct that when you posted the announcement to the
   5   LiViD mailing list that you just testified about, that was the
   6   very first time you had ever posted anything or sent any
   7   message to the LiViD mailing list?
   8   A.  Yes, that is correct.
   9   Q.  And did your announcement say anything about which
  10   operating systems it had been tested on?
  11   A.  Yes, I believe it did.
  12   Q.  And which operating systems did it identify?
  13   A.  I believe the message said it had been tested on Windows
  14   95, 98 and Windows NT.
  15   Q.  Any others?
  16   A.  I believe Windows 2000 was mentioned, but I don't recall
  17   if it had been tested on that or not.
  18   Q.  And were there any other operating systems you identified
  19   as having tested it under?
  20   A.  No, I don't.
  21   Q.  So they were only Windows operating systems.
  22   A.  Yes.
  23   Q.  Now, you testified last night that your web page was a
  24   support page or Sigma Designs hardware-based DVD player, am I
  25   correct?


                                                                637

   1   A.  Yes, that is correct.
   2   Q.  What is Sigma Designs?
   3   A.  Sigma Designs is a company in California which has several
   4   years of experience in MPEG.
   5   Q.  To your knowledge, do they manufacture a CSS-licensed DVD
   6   player that runs under Microsoft Windows?
   7   A.  Yes, they do.
   8   Q.  What is it called?
   9   A.  It's called Hollywood Plus.
  10   Q.  Hollywood Plus.
  11   A.  Yes.
  12   Q.  And you are also aware that Sigma Design has announced
  13   plans to release a Linux-based DVD player?
  14   A.  Yes, I am.
  15   Q.  Do you understand that Sigma Designs has a license from
  16   the DVD-CCA to do that?
  17   A.  Well, I would assume they have or else they wouldn't be
  18   making it.
  19   Q.  And have you provided some assistance to the French
  20   programmer for Sigma Designs who is working on that Linux DVD
  21   player, correct?
  22   A.  Not direct assistance, but I have e-mailed him.
  23   Q.  You have?
  24   A.  E-mailed him.
  25   Q.  And have you provided any technical information to him?


                                                                638

   1   A.  No, I have not.
   2   Q.  Before you posted the DeCSS executable onto your web page
   3   and made the announcement that you testified about, have you
   4   ever had any communications with the defendant in this lawsuit
   5   Eric Corley?
   6   A.  No, I have not.
   7   Q.  You never communicated with him at all until after this
   8   lawsuit was filed, correct?
   9   A.  Yes, I believe that's correct.
  10   Q.  And you never saw Mr. Corley post a message to the LiViD
  11   mailing list prior to that time, correct?
  12   A.  Yes, that is correct.
  13   Q.  In fact to your knowledge -- strike that.
  14            Do you have any knowledge that Mr. Corley has ever
  15   been a member of the LiViD group?
  16   A.  No, he has not.
  17   Q.  Now, at the time you posted your message onto the LiViD
  18   mailing list that you mentioned, you did not have the DeCSS
  19   source code on your page, correct?
  20   A.  That is correct.
  21   Q.  And am I correct that some members of the LiViD group
  22   expressed anger at you for not providing the source code with
  23   the utility?
  24   A.  Yes, that is correct.
  25   Q.  What is a flame war?


                                                                639

   1   A.  A flame war is when two or several people engage in a
   2   discussion which gets out of hand.
   3   Q.  Am I correct that you got involved in a flame war with at
   4   least one member of the LiViD group over the fact that you
   5   didn't post the DeCSS source code?
   6   A.  I did get involved in a flame war, but I am not aware if
   7   he was a member of the LiViD group or not.
   8   Q.  Where did the communication you had with respect to this
   9   take place?
  10   A.  Some of it took place on the LiViD mailing list and some
  11   of it was sent directly.
  12   Q.  And it began on the LiViD mailing list?
  13   A.  Yes, that is correct.
  14   Q.  Now, Mr. Fawcus created the css-auth source code that you
  15   used in creating the utility, correct?
  16   A.  Yes, that is correct.
  17   Q.  And the dispute centered around the fact that the German
  18   member of MORE, Ham, had used Mr. Fawcus's code but had
  19   removed Fawcus's name and copy left notification, is that
  20   correct?
  21   A.  Yes.
  22   Q.  What is copy left, as you understand it?
  23   A.  Copy left is when you use basically a copyright that gives
  24   the user freedoms instead of taking them away.
  25   Q.  And the dispute centered around someone's complaint that


                                                                640

   1   MORE was not playing by the -- I'm sorry.  What is GPL?
   2   A.  GPL is a copy left license provided by the Free Software
   3   Foundation.
   4   Q.  Was MORE's failure to credit Mr. Fawcus a violation of the
   5   GPL license, as you understood it?
   6   A.  Yes, I believe so.
   7   Q.  In a nutshell, MORE was not playing by the GPL rules that
   8   the LiViD group normally plays by, correct?
   9   A.  Yes, that is correct.
  10   Q.  And it was your understanding that Mr. Fawcus could sue
  11   you for that, correct?
  12   A.  Well, yes, that is correct.
  13   Q.  And you eventually settled your difference with
  14   Mr. Fawcus?
  15   A.  Yes, that is correct.
  16   Q.  You got a special license from him to use his source code
  17   without credit, correct?
  18   A.  Well, he agreed that we didn't have to do anything to
  19   provide new copies of the source with the original header.
  20   Q.  And your reason for doing that was to avoid making DeCSS's
  21   source code fully open source.
  22   A.  That's not correct.  It was already an open source at that
  23   time.
  24   Q.  Am I correct that you didn't want it to be open source so
  25   that you could keep the secrecy of the Xing key?


                                                                641

   1   A.  Yes, that is correct.
   2   Q.  The Linux community, as you understand it, believes in
   3   free source code, open source code, correct?
   4   A.  Yes, that is correct.
   5   Q.  And MORE didn't make DeCSS available with open source code
   6   to the entire Linux community when it posted the utility,
   7   correct?
   8   A.  Yes, that is correct.
   9   Q.  When you announced to the LiViD mailing list in October
  10   that DeCSS.exe was available on your web page, you said that
  11   it works with the Matrix, DoD Speed Ripper doesn't, correct?
  12   A.  Yes, that's correct.
  13   Q.  It's your belief, I take it, that DeCSS is superior to
  14   Speed Ripper?
  15   A.  Excuse me.  Can you please repeat.
  16   Q.  Do you believe that DeCSS is superior to Speed Ripper?
  17   A.  Not directly superior, but it does decrypt some movies
  18   that the Speed Ripper did not decrypt at that time.
  19            MR. SIMS:  I have no more questions.  Thank you.
  20            THE COURT:  Mr. Hernstadt.
  21            MR. HERNSTADT:  Thank you.
  22   REDIRECT EXAMINATION
  23   BY MR. HERNSTADT:
  24   Q.  You were asked if you had used DeCSS to decrypt a DVD.
  25   Have you ever used a decrypted file from a DVD to make a DivX?


                                                                642

   1   A.  No, I have not.
   2   Q.  Have you ever placed a decrypted DVD on the Internet,
   3   transmitted it in some way?
   4   A.  No, I have not.
   5   Q.  Have you ever made it available on the Internet for
   6   someone to download?
   7   A.  No.
   8   Q.  Have you ever sold a decrypted DVD in any form?
   9   A.  No, I have not.
  10   Q.  Have you ever traded a decrypted DVD with anyone?
  11   A.  No, I have not.
  12   Q.  Have you ever downloaded a DivX movie?
  13   A.  No.
  14   Q.  Have you ever made a DivX movie available for uploading?
  15   A.  No, I have not.
  16   Q.  Have you ever made a DivX movie available for someone else
  17   to download from your website?
  18   A.  No, I have not.
  19   Q.  Have you ever used DeCSS for anything other than viewing
  20   DVDs that you purchased?
  21   A.  No, I have not.
  22   Q.  You mentioned the Sigma Designs player.  Is that a
  23   software player?
  24   A.  Well, it's a soft -- it's hardware-based.  It comes with a
  25   piece of hardware but you also need the player that comes with


                                                                643

   1   it, a piece of software.
   2   Q.  Does that mean you have to buy two pieces?
   3   A.  The product contains two pieces.
   4   Q.  You testified that you did not release the source code on
   5   the DeCSS executable when you made the program a available on
   6   your website.
   7   A.  Yes, that is correct.
   8   Q.  Did you make the source code available to Derek Fawcus?
   9   A.  Yes, that is correct.
  10   Q.  And did Derek Fawcus write that source code -- rewrite the
  11   source code?
  12   A.  Yes, I believe he did.
  13   Q.  What operating system did he rewrite it for?
  14   A.  He wrote it for Linux.
  15   Q.  Why did you not want to release the source code for DeCSS?
  16   A.  Because the DeCSS source code contained the Xing player
  17   key.  If we were to release that source, the Xing key would be
  18   revoked, Xing would probably have their license revoked, and
  19   new DVDs which would be released later would not work with
  20   Xing's player nor the player we would have created.
  21   Q.  You said that the German member of MORE found the CSS
  22   algorithm by reverse-engineering the software.  Did he say to
  23   you whether it was difficult to do?
  24   A.  No, he said it was not difficult.
  25   Q.  Okay.  You said that you did the same thing based on what


                                                                644

   1   he informed you about how he had done it?
   2   A.  Yes, I did.
   3   Q.  Did you find it difficult to do?
   4   A.  No.
   5            MR. SIMS:  Objection.  Irrelevant.
   6            THE COURT:  Sustained.
   7   Q.  How long did it take you to find the algorithm?
   8            MR. SIMS:  Objection.  Irrelevant.
   9            THE COURT:  Why is it relevant, Mr. Hernstadt?
  10            MR. HERNSTADT:  Well, Mr. Sims brought it out on
  11   cross-examination, and I am merely trying to clarify the
  12   record with respect to the reverse-engineering process.
  13            THE COURT:  Did you raise it, Mr. Sims?
  14            MR. SIMS:  Certainly not in terms of effectiveness,
  15   which is where we're going now.
  16            THE COURT:  Did you raise it, whether it was
  17   subjectively in terms of effectiveness or not?
  18            MR. SIMS:  I don't think I did.
  19            THE COURT:  Let me look at my notes then.
  20            MR. SIMS:  I did ask questions about the obfuscation
  21   about the Xing key, but ...
  22            THE COURT:  Mr. Hernstadt, I don't see it quickly.  I
  23   mean, is there something that you remember that will prompt my
  24   memory?
  25            MR. HERNSTADT:  I believe it was something about that


                                                                645

   1   the key was hidden.  I don't recall exactly what it is.  I
   2   just had it in my note.
   3            THE COURT:  It will take less time to hear it then.
   4   Overruled.
   5            THE WITNESS:  Can you please repeat the question?
   6            THE COURT:  Did you find it difficult to do, was the
   7   question.
   8            THE WITNESS:  No, I did not.
   9   Q.  You discussed a dispute with Derek Fawcus about taking his
  10   name off the source code that he had provided.  Were you aware
  11   of that?
  12   A.  No, I was not aware of that.
  13   Q.  When did you find out that his name had been taken off the
  14   source code?
  15   A.  I found that out when he posted a message to the LiViD
  16   mailing list saying that one of the files we had in our source
  17   was actually his, but it did not contain the GPL header on his
  18   name.
  19   Q.  What did you do when you read that posting to the LiViD
  20   list?
  21   A.  I e-mailed him and tried to sort out a solution.
  22            MR. HERNSTADT:  Thank you very much, Mr. Johansen.  I
  23   have nothing further.
  24            MR. SIMS:  Nothing more, your Honor.
  25            THE COURT:  All right.  Mr. Johansen, thank you very


                                                                646

   1   much.
   2            Mr. Gold?
   3            MR. GOLD:  I'm going to call Mikhail Reider to the
   4   stand.
   5            THE COURT:  Is Mr. Young back there?  We are working
   6   on your request, but in the interim I can tell you that you
   7   are able to buy from the court reporters a floppy that has the
   8   day's proceedings by about 7 o'clock every night.
   9            MR. COOPER:  Good morning.  Your Honor, plaintiffs
  10   call Mikhail Reider.
  11    MIKHAIL REIDER,
  12        called as a witness by the Plaintiffs,
  13        having been duly sworn, testified as follows:
  14            MR. GARBUS:  May I just ask one thing?  There is some
  15   question about whether or not the plaintiffs will rest after
  16   this witness or call another witness.  Could we know that so
  17   we can decide how to arrange our witnesses?
  18            THE COURT:  That's a reasonable request.
  19            Mr. Gold?
  20            MR. SIMS:  I don't know the answer to that.  The
  21   short answer is if we have completed a stipulation, and we
  22   sent our work over to Mr. Hernstadt -- let me go find out.
  23            THE COURT:  I take it the answer is in your hands at
  24   the moment, Mr. Garbus.
  25            MR. SIMS:  I don't believe it will be necessary,


                                                                647

   1   but --
   2            MR. GOLD:  Your Honor, this will be our last witness
   3   and we will rest after she leaves the stand.
   4            THE COURT:  Whether or not you get the stipulation?
   5            MR. GOLD:  Yes.
   6            THE COURT:  Okay.  You have your answer, Mr. Garbus.
   7            Proceed, Mr. Cooper.
   8            MR. COOPER:  Thank you, your Honor.
   9   DIRECT EXAMINATION
  10   BY MR. COOPER:
  11   Q.  Good morning, Ms. Reider.
  12   Q.  Who is your employer?
  13   A.  The Motion Picture Association.
  14   Q.  What is your current job position?
  15   A.  I am manager of worldwide Internet antipiracy operations.
  16   Q.  What is your education background?
  17   A.  I have an undergraduate Bachelors in international
  18   relations taken from the California State University of
  19   Northridge, and an M Phil. in international conflict
  20   resolution from the University of Dublin, Trinity College.
  21   Q.  What is your employment background?
  22   A.  From 1985 through '89 I was with the Rand Corporation, a
  23   governmental think tank as a research assistant.  Subsequent
  24   to that, I took my M Phil. and joined the banking interest
  25   Great Western Financial Corporation as a legislative and


                                                                648

   1   regulatory analyst.  After that, I joined the Department of
   2   Justice Drug Enforcement Administration as an intelligence
   3   research specialist.
   4   Q.  When were you with the Department of Justice for the DEA?
   5   A.  From 1992 through '95.
   6   Q.  And what did you do with the DEA?
   7   A.  As an intelligence research specialist I collected and
   8   analyzed intelligence as it related to federal narcotics
   9   trafficking investigations.
  10   Q.  And after the Department of Justice, what did you do next?
  11   A.  I was briefly with the United States State Department
  12   Peace Corps in Thailand.
  13   Q.  And how long were you with the Peace Corps in Thailand?
  14   A.  Five to six month.
  15   Q.  And after you returned to the United States, what was your
  16   next position?
  17   A.  Again with the U.S. Department of Justice, this time in
  18   the Federal Bureau of Investigation.
  19   Q.  What did you do for the F.B.I.?
  20   A.  Intelligence research specialist.
  21   Q.  And that was during what period?
  22   A.  1995 through '97.
  23   Q.  After your position with the F.B.I., what was your next
  24   position?
  25   A.  I joined the California State Bar Association as an


                                                                649

   1   investigator.
   2   Q.  And how long were you with the California State Bar?
   3   A.  Only eight months.
   4   Q.  Why was that?
   5   A.  The Governor of California vetoed the fee bill which
   6   funded the state bar.
   7   Q.  Okay.  And after that you took a position with?
   8   A.  The Motion Picture Association.
   9   Q.  I see.  And your position with the MPAA began when?
  10   A.  In spring of 1998.
  11   Q.  Okay.  Did you use computers in connection with the job
  12   positions you just described?
  13   A.  Yes.  Yes, through all of the jobs.
  14   Q.  In what ways?
  15   A.  Both in research on the Internet and specialized data
  16   bases, as well as using proprietary software programs for
  17   analyzing large volumes of electronic data.
  18   Q.  Do you have any specialized training in Internet
  19   investigations?
  20   A.  Yes, I do.
  21   Q.  What is that training?
  22   A.  Both through the Department of Justice through
  23   intelligence schools and also through HTCIA.
  24   Q.  What is HTCIA?
  25   A.  The High Technology Crime Investigators Association.  It's


                                                                650

   1   a worldwide body comprised of state, local, federal law
   2   enforcement from around the world as well as private industry
   3   security officials who are dedicated to fighting cyber crime.
   4   Q.  Do you have any computer program experience?
   5   A.  Yes, I do.
   6   Q.  How extensive is that?
   7   A.  It's limited.  UNIX, BASIC, does.
   8   Q.  Was that also received in the course of your various prior
   9   employments?
  10   A.  Yes, it was.
  11   Q.  What are your current job responsibilities at the MPAA?
  12   A.  I oversee all Internet investigations around the world and
  13   coordinate between our worldwide offices.
  14   Q.  Since the beginning of your employment by the MPAA in 1998
  15   has the MPAA been monitoring the Internet for infringement
  16   activity?
  17   A.  Yes, actively.
  18   Q.  Can you generally describe what has been done?
  19   A.  Well, we monitor and search routinely website, FTP sites,
  20   FSUs, file swapping utilities, IRC, the Internet relay chat
  21   channels, news groups or Usenet.
  22   Q.  Could you briefly describe what file swapping utilities
  23   are?
  24   A.  They are basically glorified FTPs.  They allow individuals
  25   to directly transfer files between one another, music or


                                                                651

   1   movies.
   2   Q.  Can you give me the name of any file swapping utility that
   3   you are currently monitoring?
   4   A.  Sure.  IMESL, Gooey, Hotline, ScourNet, FileShare,
   5   FileSwap, Freenet.
   6   Q.  Is Napster also a file sharing utility?
   7   A.  Napster also is an FSU.
   8   Q.  Would you just tell us what Internet relay chats are?
   9   A.  It's basically the CB radio of the Internet.  It was
  10   created in the mid to late 80s.  It allows people to talk in
  11   real time on line to one another no matter where they are, or
  12   near real time.  They have a number of networks and within
  13   that channels.
  14            Channels are created by any user whenever they feel
  15   like it, so channels can go up and go down in a matter of
  16   minutes or hours, or channels can be kept alive for years if
  17   the operators of that channel so deem.
  18   Q.  Once these channels are set up, are they all accessible to
  19   the public?
  20   A.  No, some of them are members only.
  21   Q.  How often does the MPAA monitor the Internet?
  22   A.  Daily.
  23   Q.  And how do you identify sites to monitor?
  24   A.  It's a combination of factors.  Our member companies will
  25   send up sites they wish us to monitor.  The public will call


                                                                652

   1   or write in to us with sites as well as through our own
   2   intelligence gathering and investigations we have sites that
   3   routinely lead us to other plays that harbor piracy on line.
   4   Q.  Have the MPAA come aware of any instances of member
   5   companys' DVDs being decrypted and made available in any form
   6   on the Internet prior to October 1999?
   7   A.  No.
   8   Q.  When was the first time you heard of the existence of a
   9   utility that defeated CSS and decrypted the content of one of
  10   the studio's DVDs?
  11   A.  Early to mid-October of 1999.
  12   Q.  What was that utility?
  13   A.  DeCSS.
  14   Q.  What was the source of the original information you
  15   received in the existence of DeCSS?
  16   A.  I found it on a news posting on Slashdot.
  17   Q.  What did you do about the information regarding the
  18   existence of DeCSS?
  19   A.  I followed their links and ultimately downloaded a copy of
  20   DeCSS.
  21   Q.  And did you test it to see if it worked?
  22   A.  Yes, I did.
  23   Q.  Did it?
  24   A.  Yes, horrifyingly simple to use.
  25   Q.  How long did it take you to download DeCSS?


                                                                653

   1   A.  A matter of minutes.
   2   Q.  And how long did it take you to decrypt a DVD using DeCSS?
   3   A.  Approximately five minute.
   4   Q.  What operating system were you using?
   5   A.  Windows.
   6   Q.  Was DeCSS a Windows program?
   7   A.  Yes, it was.
   8   Q.  What did you do next?
   9   A.  I notified our legal department and Ken Jacobson, who is
  10   my direct supervisor, and began to request the issuance of
  11   cease and desist letters.  Ultimately we filed this lawsuit.
  12   Q.  Now, have you ever heard of a program called DiVX?
  13   A.  Yes, I have.
  14   Q.  And when did you first become aware of that program?
  15   A.  Late February, early March of 2000.
  16   Q.  Did you download it?
  17   A.  Yes, I did.
  18   Q.  And did you examine it?
  19   A.  Yes, I did.
  20   Q.  What is it?
  21   A.  It's a codec or compression, decompression algorithm that
  22   allows one to take the rather substantial files from the DVD
  23   and highly compress them to make it easy for distribution or
  24   manipulation.
  25   Q.  Did there come a time when the MPAA became aware of the


                                                                654

   1   availability of decrypted DVDs on the Internet?
   2   A.  Yes, we did.
   3   Q.  When was that for the first time?
   4   A.  Late April, early May of 2000.
   5   Q.  How did you become aware of that?
   6   A.  Through our routine monitoring some of the pirate sites we
   7   routinely look at, we began to see evidence of these decrypted
   8   DVDs.
   9   Q.  How many titles initially did you see being available?
  10   A.  A handful.
  11   Q.  How many sites?
  12   A.  I'm sorry?
  13   Q.  How many sites initially?
  14   A.  Again, a handful.
  15   Q.  Since late April or early May, has the MPAA become aware
  16   of any increase in the availability of encrypted DVDs?
  17   A.  Absolutely.  The number has certainly surged upward.
  18   Q.  On what types of sites have you seen these DVDs being
  19   available?
  20   A.  It runs the gamut from website to FTP sites, offering on
  21   IRC channels, FSUs.
  22   Q.  Do all of the sites offer decrypted DVDs for download or
  23   hard goods through barter or sale?
  24   A.  No, not all of them.
  25            MR. GARBUS:  I would object unless we have the


                                                                655

   1   windows or the pictures of the site that she is referring to.
   2   Other than that, it's hearsay.
   3            THE COURT:  What do you say, Mr. Cooper?
   4            MR. COOPER:  Your Honor, the windows or site, if you
   5   will, are on the Internet and are constantly changing.  I
   6   don't believe that there are any screen shots other than those
   7   we have produced in the discovery.  We have produced some of
   8   those, and we are eliciting general testimony regarding this
   9   witness's experience and activity in connection with what the
  10   MPAA knew about these activities and when.  And for that
  11   purpose I think it's competent.
  12            MR. GARBUS:  I will object to any testimony that's
  13   not related to particular screen shots.  Any testimony that
  14   she wants to talk about that has screen shots related to it or
  15   marked in as exhibits, I would have no objection to.
  16            THE COURT:  Is it your position, Mr. Garbus, that the
  17   plaintiffs in this case and the MPAA knew and did nothing
  18   about cracks of CSS for a long time?  Haven't you been singing
  19   that refrain?
  20            MR. GARBUS:  Yes.
  21            THE COURT:  And that's not a pejorative comment, but
  22   since the opening of the trial?
  23            MR. GARBUS:  Yes.
  24            THE COURT:  Why isn't it relevant to that?
  25            MR. GARBUS:  Anything is relevant if there is


                                                                656

   1   admissible evidence with respect to it.
   2            THE COURT:  It's state of mind.  It's offered not for
   3   the purpose of the truth.  It's offered for the purpose of
   4   state of mind.
   5            MR. GARBUS:  I object to it.  I think it's offered --
   6            THE COURT:  Why isn't it relevant to state of mind?
   7   Is state of mind relevant, in your estimation?
   8            MR. GARBUS:  I think the state of mind is not
   9   relevant.  I think what's relevant is what the truth is.
  10            THE COURT:  Mr. Cooper, what do you say to that?
  11            MR. COOPER:  Well, we agree that state of mind is not
  12   relevant, although we are trying to respond to what we
  13   understood the defendants' position was.  This information is
  14   being offered as testimony of what Ms. Reider saw in
  15   connection with her activity for the MPAA.  It's competent
  16   testimony with respect to that.
  17            Whatever Mr. Garbus might want to ask her regarding
  18   what an individual site may have said, I think the issue is
  19   what the MPAA was doing in connection with its investigations
  20   in response to Mr. Garbus's prior positions that it wasn't
  21   doing enough.
  22            THE COURT:  Look.  Haven't the plaintiff's taken the
  23   position -- I mean, isn't this a precise turnabout?  Mr.
  24   Garbus spent a couple of days trying to establish that this
  25   CSS system had been cracked a long time ago, the studios knew


                                                                657

   1   it, they didn't protect themselves, and you folks constantly
   2   objected that none of that was relevant on the ground that the
   3   effectiveness or robustness of your security system was not
   4   material here, and I sustained those objections.  Right?
   5            MR. COOPER:  Yes, your Honor.
   6            THE COURT:  All right.  So now comes turnabout.  You
   7   want an answer on all of that, and I previously ruled it out
   8   when he tried to put it in.  Why shouldn't I do the same thing
   9   for the same reason when you try to put it in?
  10            MR. COOPER:  Your Honor, what you are suggesting
  11   about the proper scope of the issues that are reasonably and
  12   in material dispute in this case, we agree with.  The question
  13   here is a little different than the one you earlier ruled
  14   upon.
  15            THE COURT:  Tell me how it's different.
  16            MR. COOPER:  The earlier question went to the
  17   efficacy of CSS as a security system.
  18            THE COURT:  Right.
  19            MR. COOPER:  This I believe addresses Mr. Garbus's
  20   second point, which we also believe is irrelevant, and that is
  21   that the MPAA, once the circumvention device became known, did
  22   too little or otherwise failed to react to the threat imposed
  23   by DeCSS quickly enough.  And while I believe that that is
  24   also irrelevant, we are attempting to respond to that to the
  25   extent the Court is interested in the issue.


                                                                658

   1            THE COURT:  Well, let's find out.  Mr. Garbus, what
   2   Mr. Cooper describes as your second point, are you in fact
   3   making that argument, that is to say, that the MPAA was too
   4   slow getting here?
   5            MR. GARBUS:  What she is testifying to, as I
   6   understand it, is that --
   7            THE COURT:  Mr. Garbus, I will let you say what you
   8   want to say, but I really would like an answer to the question
   9   first.
  10            MR. GARBUS:  Can I hear the question again.
  11            (Record read)
  12            THE COURT:  Are you making that argument?
  13            MR. GARBUS:  The answer is yes.
  14            THE COURT:  Overruled.  I am not taking it for the
  15   truth.  I am taking it on the issue of whether the MPAA's
  16   right to relief, if it has any, is in any way affected by
  17   undue delay in getting to the courthouse.
  18            Go ahead, Mr. Cooper.
  19   BY MR. COOPER:
  20   Q.  Do all of the sites you have just described offer
  21   decrypted DVDs for download or hard goods through barter or
  22   sale?
  23            MR. GARBUS:  Let me see if can I make it clear.  Our
  24   point is --
  25            I'm prepared to do this at the sidebar.


                                                                659

   1            THE COURT:  Go ahead, Mr. Garbus.
   2            MR. GARBUS:  It's our point that once they knew about
   3   DeCSS, two things happened.  One is they did nothing about it;
   4   two, that prior to the time that they knew about DeCSS, they
   5   knew about other utilities that ripped DVDs, and as I
   6   understand what her testimony is, it is that she saw sites
   7   that said it's from the DVD.  These are not sites that say, as
   8   I understand her testimony, it's from a DVD that's deencrypted
   9   through DeCSS.  So just let me parse out our position a little
  10   more precisely, if I can.  Again, I am prepared to do it at
  11   the sidebar unless the Court is comfortable.
  12            THE COURT:  Mr. Garbus, you can stop repeating that.
  13   If I find I need a sidebar, I will let you know.
  14            MR. GARBUS:  Thank you.
  15            It is our position that last year they knew about a
  16   number of procedures that could be utilized with respect to
  17   DVD movies, that the only procedure that in any way related to
  18   Linux or, if you want to call it a competitive technology, was
  19   DeCSS.  What they did is they did not go after any of the
  20   technologies, they only went after DeCSS.  So the delay deals
  21   with their knowledge prior to DeCSS that there were other
  22   rippers and other utilities and their failure to do that.  At
  23   least that's our position.
  24            THE COURT:  My ruling is the same.  Go ahead,
  25   Mr. Cooper.


                                                                660

   1            I'm not taking it for the truth.  I'm taking it as I
   2   indicated.
   3            MR. COOPER:  Would you read back the pending
   4   question, please?
   5            (Record read)
   6            THE COURT:  That is, the truth of anything that was
   7   on the websites.
   8   A.  No, not all of the sites.  Some of them point in the
   9   direction of where to locate them but they don't actually
  10   offer distribution themselves.
  11   Q.  And has the MPAA followed those pointers from one site to
  12   another?
  13   A.  Yes, we have.
  14   Q.  And approximately how many of these site have you become
  15   aware of in the last two and a half months?
  16            THE COURT:  Be specific about what sites you are
  17   talking about.  So far we have ones that offer to barter and
  18   sell and you've got ones that point.
  19   Q.  Can you distinguish between the ones that offer for
  20   barter, sale or download on one hand and the ones that point?
  21   A.  Yeah.  Approximately over 40 sites.
  22   Q.  Of which type?
  23   A.  Those which offer for barter or sale, distribution as
  24   opposed to just pointing in the direction.
  25   Q.  What is the MPAA currently doing about these sites?


                                                                661

   1   A.  We have ongoing investigations.
   2   Q.  And can you, without going into the investigative details
   3   of any of those investigations, tell me anything about them?
   4   A.  We have investigations currently active with federal law
   5   enforcement here in the U.S. and worldwide.
   6   Q.  Which U.S. agencies?
   7   A.  U.S. Customs, Secret Service and F.B.I.
   8   Q.  Do you have information regarding any connection between
   9   the recent availability on the Internet of decrypted DVDs and
  10   the utility DeCSS?
  11   A.  Absolutely.
  12   Q.  What is that information?
  13   A.  Well, prior to the appearance of DeCSS we had seen no
  14   decrypted DVDs anywhere on the Internet, and thereafter we
  15   watched DeCSS proliferate alarmingly.  It was simple to use.
  16   We saw decrypted DVDs appear for sale and distribution not
  17   long thereafter.
  18            MR. GARBUS:  I object to the question.  She was asked
  19   what information she had and then she responded with
  20   speculation.
  21            THE COURT:  Where was the objection before she
  22   answered, Mr. Garbus?
  23            MR. GARBUS:  It was only after she answered that it
  24   was clear.
  25            THE COURT:  You know better than that, with all due


                                                                662

   1   respect, but I think part of this testimony --
   2            MR. GARBUS:  Look at the answer.  See where the
   3   answer comes in.
   4            THE COURT:  Part of this answer has no foundation, at
   5   least to the extent it's offered for the truth.  The portion
   6   in which the witness said that prior to the appearance of
   7   DeCSS they had seen no decrypted DVDs anywhere on the
   8   Internet, I think that is perfectly admissible.  It relates to
   9   her personal knowledge.
  10            The part of the answer that speaks of watching it
  11   proliferate at an alarming rate I take to be that she saw lots
  12   of sites on the Internet offering movies, but I have heard no
  13   evidence based on personal knowledge that what was on the
  14   Internet, that is to say, offers to sell or barter or
  15   whatever, are properly considered for the truth of those
  16   statements.
  17            The part of the answer that says we saw decrypted
  18   DVDs appear for sale and distribution not long thereafter, I
  19   guess I need to hear more about in order to find out on what
  20   basis the witness is telling me that.
  21            MR. COOPER:  Just to understand that last point, I
  22   believe the witness testified that DeCSS was first on the
  23   Internet in October and that the first appearance --
  24            THE COURT:  Here is your problem, Mr. Cooper.  Your
  25   problem is whatever was said a few minutes ago that you are


                                                                663

   1   trying to prove, that in fact since October there are lots of
   2   movies being bought and sold over the Internet that were
   3   decrypted through DeCSS, you are trying to prove it by saying
   4   that there were none before October.  Then DeCSS appeared, all
   5   of which I think is relatively -- at least the second point is
   6   uncontroversial.  And the first point is evidence to support
   7   your position, although it's disputed.
   8            The third point depends on the truth of whatever was
   9   on the Internet.  That is to say, if the witness saw 40
  10   website offerings to sell DVD movies, you would like me to
  11   conclude that in fact those websites were, as they said on the
  12   Internet, offering to distribute decrypted movies, that is,
  13   they would perform as they indicated they would perform; and
  14   then you are asking me further to draw the inference from the
  15   timing that whatever they were selling or offering to sell
  16   came from the DeCSS.
  17            Now, the link you are having a problem with here is
  18   that I think Mr. Garbus's objection is that it would be
  19   inappropriate for me to assume that simply because you see on
  20   the Internet a page that says "come get your copy of the
  21   Matrix from us" means that in fact if somebody went to that
  22   site a decrypted copy of the Matrix would be forthcoming.
  23   That is essentially your argument, right, Mr. Garbus?
  24            MR. GARBUS:  Yes, or that there is any reason to
  25   believe that it comes from DeCSS or any other source.


                                                                664

   1            THE COURT:  Well, I understand that point as well,
   2   but they are asking me to infer that from the timing.
   3            MR. GARBUS:  Yes, your Honor, you stated our
   4   position.
   5            THE COURT:  Okay.  Now, he is making what I take to
   6   be essentially a hearsay and/or a competence argument,
   7   probably more hearsay than competence, about my considering,
   8   or the purpose for which I consider Ms. Reider's testimony
   9   about what is available on the Internet.
  10            The situation would be the same if we were trying a
  11   trademark case and you were trying to prove the availability
  12   in the marketplace of counterfeit Levi jeans from newspaper
  13   articles that indicated that somebody was offering counterfeit
  14   Levi jeans.  Now, there is perhaps a legal issue that you may
  15   want to brief, both of you, as to whether that's appropriate
  16   evidence, but I think that analogy is exactly what we're
  17   talking about.  Right, Mr. Garbus?
  18            MR. GARBUS:  Yes, sir.
  19            MR. COOPER:  That's Mr. Garbus's analogy, your Honor.
  20   We don't believe --
  21            THE COURT:  No, that was my analogy.
  22            MR. COOPER:  We don't believe that's the correct
  23   analogy in this case.  This is not a case in which we are
  24   pursuing for the relief sought in this case, the relief that
  25   would be sought in a case in which the bootleg --


                                                                665

   1            THE COURT:  No, of course you're not.  But the whole
   2   purpose of this line of testimony, putting aside responding to
   3   this sort of quasi laches argument, is to persuade me that
   4   this is a real problem.  And whether it's a real problem
   5   depends, at least in part, on whether it's out there in the
   6   marketplace.  And the way those kinds of issues are usually
   7   handled in a trademark case is that the investigator comes in
   8   and says that I went to the store on Fordham Road and I bought
   9   these six pairs of counterfeit jeans and here they are, and a
  10   witness shows up from Levis and says we didn't make them,
  11   they're counterfeit.
  12            MR. COOPER:  Your Honor, this goes to the question of
  13   the appropriateness of relief and the question of a reasonable
  14   apprehension of harm in the absence of that relief.
  15            We are not attempting to prove here or indeed seek
  16   the relief associated with copyright infringement per se.  We
  17   are not attempting to adduce the kinds of hard evidence that
  18   would be necessary for a case that involved those issues.
  19   What we are doing is attempting to provide to you our
  20   reasonable apprehension that in the absence of the release
  21   sought we will be harmed.
  22            THE COURT:  Well, you know, I hear the words but I'm
  23   not sure I understand the symphony, to mix my metaphors very
  24   badly.  I really am not.
  25            Look, I will hear the testimony, Mr. Garbus, but you


                                                                666

   1   clearly know I understand the point, and if you want to brief,
   2   either or both sides, the issue of what I'm supposed to
   3   consider, that aspect of the testimony we have just narrowly
   4   focused on, the witness's testimony about what's available
   5   over the net, you are welcome to brief it.  And in order to
   6   decide this case, if I find I have to decide it, I'll decide
   7   it.  For now I'll hear the evidence.
   8            MR. COOPER:  Thank you, your Honor.  Let me just
   9   conclude with this witness then, your Honor, based on what you
  10   have said, with two areas of questions.
  11   BY MR. COOPER:
  12   Q.  First, I believe that we left off with this question of
  13   the connection between DeCSS and the decryption of movies.
  14            Have you seen any direct connection between DeCSS and
  15   the decrypted DVDs on the Internet in your investigation?
  16            MR. GARBUS:  I object on the grounds of lack of
  17   foundation.
  18            THE COURT:  Let me just go back to one or two more
  19   thoughts that just occurred to me about the last question
  20   before you go on, Mr. Cooper.
  21            Among the things that you ought to consider, if you
  22   are going to brief this point, and then I will consider
  23   whether you brief it or not, are these:
  24            First of all, I suppose it might be argued that when
  25   somebody posts on the Internet saying, "Come to me, I'll sell


                                                                667

   1   you a copy of the Matrix," that is a statement of a state of
   2   mind, or a present intention or something like that from which
   3   one is entitled to infer conduct.  I'm not sure about that,
   4   but that's why I put it on the table.
   5            Secondly, maybe this notion of a verbal act as it
   6   relates to the hearsay rule is implicated.
   7            I'm really not sure about either one of those points,
   8   but I want to let you know I'm thinking about them so you can
   9   respond in due course.
  10            Okay, Mr. Cooper.
  11            MR. COOPER:  Thank you, your Honor.
  12   BY MR. COOPER:
  13   Q.  Do you have the question in mind, Ms. Reider?
  14   A.  Could you repeat it, please?
  15   Q.  Let me restate it.
  16            Has there been in your investigation any direct
  17   connection in the information that you have seen between DeCSS
  18   and the decryption of the movies on the Internet?
  19   A.  Yes, there have been.
  20   Q.  What is that information?
  21   A.  I have seen sites where they suggest the use --
  22            MR. GARBUS:  I assume I have a continuing objection.
  23            THE COURT:  Look, I think you should make your
  24   objections, but if it's the same objection, if you would be so
  25   kind as to say "the same objection," then I will simply know


                                                                668

   1   it's the same thing, we don't have to pause, I will take it
   2   subject to what I just indicated.
   3            MR. GARBUS:  I think I will say the same thing.
   4            THE COURT:  Okay.  Same ruling.  If it's something
   5   new, let me know it's something new.
   6            Go ahead, folks.
   7            THE WITNESS:  May I continue?
   8            I have seen sites that have suggested the use of
   9   DeCSS in order to then use the DivX codec against DVDs that
  10   also offer DivX-made movies on their sites.
  11   Q.  Ms. Reider, given the wide proliferation of DeCSS on the
  12   Internet, what help would the issuance of a permanent
  13   injunction in this action do in your enforcement activity for
  14   a number of companies?
  15            MR. GARBUS:  I object.
  16            THE COURT:  Well, I am going to take that answer as
  17   well.  Let it be added to my list of things that counsel
  18   should consider with respect to the stuff of the Internet,
  19   Rule 803(17) and how it applies in the electronic age.  Rule
  20   803(17).
  21            Okay.  Ms. Reider, I realize I'm stepping on your
  22   lines constantly here this morning.  Do you need the question
  23   read back?
  24   A.  Yes, please.
  25            (Record read)


                                                                669

   1            MR. GARBUS:  Your Honor, it seems to me, unless I'm
   2   missing the point, that this sounds like a legal conclusion.
   3            THE COURT:  I don't think it's a legal conclusion.  I
   4   mean, that's kind of like asking somebody who lives downstream
   5   of a damn that's about to be destroyed what effect a permanent
   6   or preliminary injunction against tearing down the damn would
   7   have on his property.  The answer is a perfectly practical one
   8   about preventing the river from flowing across the property.
   9   I think that's what the question asks for.
  10            MR. GARBUS:  Okay.  I have stated my position.
  11            THE COURT:  I understand.
  12            MR. GARBUS:  I'm not moved by the analogy between a
  13   damn and a flowing river.
  14            THE COURT:  I know.  I have given you lots of
  15   analogies to think about in this case.
  16            Go ahead, Mr. Cooper.
  17   A.  It would send a very strong message to both those that
  18   would engage in illegal behavior and to law enforcement to
  19   enforce it.  It will make my job certainly, hopefully, easier
  20   in terms of enforcing the right of our member companies for
  21   the safety and security of their intellectual property.
  22   Q.  Let me ask you the same question with respect to the
  23   effect, if the Court does not issue a permanent injunction,
  24   what effect will that have on your activity to enforce the
  25   interests of the member companies?


                                                                670

   1            THE COURT:  Believe me, that's not a useful question
   2   either.  There is another component that needs to be in that
   3   question for it even to be relevant.
   4            MR. GARBUS:  Can we ask how upset she would be if you
   5   deny the injunction?
   6            THE COURT:  We will have you testify about how upset
   7   you will be if I grant it.
   8            MR. COOPER:  You mean if the Court concludes that
   9   there is a violation here that determines not to issue the
  10   injunction?
  11            THE COURT:  I don't know what the point of all this
  12   is.  Obviously the case isn't over, and if there is more
  13   evidence that sheds light on the subject, I will certainly
  14   consider it, but it seems to me that there is a reasonably
  15   strong case to be made for the proposition that the barn is
  16   unlocked and this horse is out.
  17            Now, it seems to me also that what the MPAA wants is
  18   a legal determination that unlocking this barn was illegal,
  19   and so the next guy who considers unlocking another barn is
  20   going to have something serious to think about.  I suspect you
  21   are also asking me to issue an injunction against the guy who
  22   unlocked this barn not to unlock it again even though there is
  23   no horse in it.  So, you know, I don't know that this witness
  24   has any light to shed on that subject.
  25            MR. GARBUS:  I must say I'm now finding your


                                                                671

   1   analogies much more to my liking.
   2            MR. COOPER:  If I may, let me just say that our
   3   position is obviously that the analogy that you referred to is
   4   not apt, as Mr. Garbus has pointed out in his prior responses.
   5   I recognize now is not the time to argue that issue.  And
   6   under the circumstances, if the witness's testimony about her
   7   own experiential ability to deal with this issue and what aid
   8   the Court's injunction might have in her enforcement
   9   activities is not something that the Court is interested in
  10   receiving at this time, then I would say that our --
  11            THE COURT:  That was not my point.  This whole little
  12   discussion got started because you asked her what the effect
  13   of my not issuing an injunction would be, and I assume that I
  14   am going to hear a tale of woe, obviously just like I've heard
  15   a tale of woe on the other side if I do issue the injunction.
  16            But the critical ingredient is that the witness has
  17   just told me that what this is all about is to send a message.
  18   And there are various ways to send messages if indeed the
  19   message is one you are entitled to have sent.  And the
  20   concerns I expressed yesterday and today on this subject have
  21   addressed the form of any message to which you might be
  22   entitled.  That's what that was addressed to.
  23            So, when you leave out of your question to the
  24   witness about an injunction the fact that if you are entitled
  25   to prevail, you might get relief short of an injunction, it


                                                                672

   1   seems to me it's just a waste of everybody's time, with all
   2   due respect, counsel.
   3            You can ask the question with both components if you
   4   want.
   5   Q.  Ms. Reider, in the event that the Court determines that
   6   the plaintiffs are entitled to some relief, and the Court
   7   determines that the relief would not include a permanent
   8   injunction, would that have an impact on your ability to
   9   enforce the interests of the member companies?
  10            MR. GARBUS:  Same objection.
  11            THE COURT:  Overruled.
  12   A.  Yes, it will have a huge impact.
  13   Q.  What is that impact?
  14   A.  There won't be any teeth, if you will, in it.  We will
  15   have no way to enforce that injunction.
  16   Q.  In the absence of an injunction?
  17   A.  In the absence.
  18            THE COURT:  If there is no injunction, there is
  19   obviously no injunction to enforce, Ms. Reider.
  20   Q.  The question is what impact would the absence of the
  21   injunction have in connection with your attempt to enforce the
  22   member company's rights?
  23   A.  It will have a huge impact.
  24   Q.  In what way?
  25            MR. GARBUS:  I have a continuing objection.


                                                                673

   1            THE COURT:  Overruled.
   2   A.  We would have no ability to stop this.  It would grant a
   3   license to anyone in the world to do what they would with our
   4   intellectual property, not just in this respect but in future
   5   events.
   6            THE COURT:  I won't say what I was just about to say,
   7   but, look, Ms. Reider, let's get down to the facts of this
   8   case as opposed to the rhetoric.
   9            If I understand it correctly, DeCSS is everywhere on
  10   the Internet.  I realize that's a hyperbolic statement, but
  11   it's all over the play, right?
  12            THE WITNESS:  It's prevalent, yes.
  13            THE COURT:  Now, if I issue an injunction that says
  14   that Mr. Corley can't put it on his website, how does that
  15   affect DeCSS being everywhere else?
  16            THE WITNESS:  It affects it in that we can get
  17   enforcement of other sites that are offering it, refusing to
  18   take it down.
  19            THE COURT:  Because of what?
  20            THE WITNESS:  Because there is precedent.
  21            THE COURT:  Suppose the result were -- and I am not
  22   saying it will be -- but just hypothetically suppose the
  23   result were that the judgment recited that there was clearly a
  24   controversy between the plaintiffs and this defendant as to
  25   the legality under the DMCA of posting this utility, that the


                                                                674

   1   controversy is persisting, that the posting of this utility
   2   violates the Act, that you are entitled to a judicial
   3   declaration of whether the conduct is lawful or not and the
   4   court declares it is unlawful, the question of whether to
   5   issue an injunction, invoke the discretionary power of the
   6   court, courts have said for 300 years, at least that courts of
   7   equity ought not to use the equitable power of injunction to
   8   try to accomplish the impossible or to perform something which
   9   is entirely futile, and therefore, in the exercise of
  10   discretion, given the broad prevalence of this particular
  11   utility, this time the court declines to issue the injunction
  12   because it would do no practical good.
  13            Now, it seems to me that perhaps there is an argument
  14   in those circumstances that when you go to somebody and say,
  15   look, it's on your website but it is in fact illegal, you've
  16   got something to talk about, and it certainly sends a message
  17   to the next guy with the next version of DeCSS that it's a
  18   whole new ball game.  Now, I don't understand your argument
  19   given that set of hypotheses.
  20            MR. GOLD:  May I address the Court for a second, your
  21   Honor?
  22            THE COURT:  No.  I'm obviously going to hear
  23   everybody on this at great length, all the lawyers, before
  24   this is all over, but Ms. Reider is if not the chief, one of
  25   the top enforcement people for the industry.  She is offered


                                                                675

   1   as a witness about what the practical significance of
   2   different kinds of relief in this case might be, and before I
   3   hear the lawyers' argument, I would like to hear what the
   4   person in charge of performing the function has to say about
   5   that.  That's why you brought her here, as I understand it.
   6            So, Ms. Reider, you know, I would like you to answer
   7   that.  One of the great things about a nonjury trial is the
   8   judge gets to ask questions that are bothering him.
   9            THE WITNESS:  Well, your Honor, in our experience
  10   thus far, trying to get prosecution at least on the criminal
  11   side of things for failure to comply under existing law, it's
  12   very difficult without being able to show damages or qualify
  13   that damage, quantify it.  If you just tell people, gee, you
  14   shouldn't do that, but there is no penalty for having done
  15   that --
  16            THE COURT:  But, look, this is a criminal statute.
  17   This is not a criminal case, but it's a criminal statute, it
  18   says any person who violates Section 1201 or 1202 willfully
  19   and for purposes of commercial advantage or private financial
  20   gain can go to jail perhaps for as long as ten years.
  21            Now, if the United States courts determine that
  22   posting a utility like this is a crime and you hand a copy of
  23   that decision to the person who is posting it, don't you think
  24   there is some evidence maybe that if it doesn't come down off
  25   the website it is a willful violation?


                                                                676

   1            MR. COOPER:  Your Honor, is that a question posed to
   2   Ms. Reider from a factual standpoint?
   3            THE COURT:  Yes.  She is making an argument that
   4   without an injunction there is no effective remedy, and I want
   5   to hear why.
   6            THE WITNESS:  Do you think I could get an AUSA or a
   7   DA to take that case and enforce it?
   8            THE COURT:  It beats me.  I mean, they haven't
   9   indicted anybody in this case as far as I know.
  10            Okay.  Mr. Cooper, go ahead.
  11            MR. COOPER:  Nothing further of this witness, your
  12   Honor.
  13            THE COURT:  Thank you.  Mr. Garbus?
  14            MR. GARBUS:  Just one question.
  15   CROSS-EXAMINATION
  16   BY MR. GARBUS:
  17   Q.  Did you say you hadn't seen a movie on the Internet until
  18   this year?
  19   A.  Can you repeat your question?
  20   Q.  When for the first time did you see a movie on the
  21   Internet?
  22            MR. COOPER:  Objection, your Honor.  It misstates the
  23   testimony.
  24            THE COURT:  Well, it didn't purport to state any
  25   testimony, so it can't misstate it.


                                                                677

   1   A.  Can you clarify, Mr. Garbus?
   2   Q.  When for the first time did you see a movie on the
   3   Internet?
   4   A.  What type of movie, Mr. Garbus?  I'm not clear on what
   5   you're asking.
   6            THE COURT:  The question is very ambiguous.
   7   Q.  Any kind of movie on the Internet.
   8            THE COURT:  What do you mean, watched the movie?
   9            MR. GARBUS:  Yes.
  10   A.  Any kind of movie?
  11   Q.  Yes.
  12   A.  A couple of years ago.
  13   Q.  In 1998.
  14   A.  That's correct.
  15   Q.  And since 1998 how many movies did you watch on the
  16   Internet?
  17   A.  I don't know.
  18   Q.  Were these movies that you bought to play on the Internet?
  19   A.  Can you play a movie on the Internet, Mr. Garbus?
  20   Q.  On your personal computer.
  21   A.  No, this is in the capacity of my job.
  22   Q.  Now, did you at any time learn -- let me go back to the
  23   beginning of the process.  As I understand it, you were given
  24   at some point in time these LiViD documents which we have
  25   referred to as Plaintiffs' Exhibit 9.


                                                                678

   1   A.  I need to see the documents that you are referring to.
   2            MR. COOPER:  Your Honor, I believe this is beyond the
   3   scope of the direct.
   4            THE COURT:  Let me see where it's going.
   5   Q.  Do you remember when you looked at the LiViD group of
   6   documents -- withdrawn.
   7            At some point in time did either Mr. Jacobsen or
   8   Litvak give you a group of documents which were downloaded
   9   from the LiViD site?
  10   A.  No, they did not.
  11   Q.  Did you at any time go on the net to find any LiViD
  12   documents?
  13   A.  Yes, I did.
  14   Q.  When was that?
  15   A.  As I recall, October or November of '99.
  16   Q.  And at whose direction was that done?
  17   A.  Under my own direction.  I'm the supervisor of antipiracy.
  18   Q.  By the way, are you a lawyer?
  19   A.  No, I'm not.
  20   Q.  Now, what did you do after you downloaded those documents?
  21   A.  I reviewed them and turned them over to legal.
  22   Q.  And who was that?
  23   A.  Our legal department, Mark Litvak.
  24   Q.  To the best of your memory, was Mr. Goldstein or 2600.com
  25   mentioned in any of those LiViD documents?


                                                                679

   1            MR. COOPER:  Objection, your Honor.  Hearsay and
   2   plainly beyond the scope of direct.
   3            THE COURT:  The hearsay objection is just wrong.  Why
   4   isn't it beyond the scope, Mr. Garbus?
   5            MR. GARBUS:  I'm trying to find out what she did.
   6   She winds up saying she has a lot of information.  I'm trying
   7   to find out the basis for that information.
   8            THE COURT:  Sustained.
   9   A.  Can you repeat question, please?
  10            THE COURT:  I sustained the objection.
  11            THE WITNESS:  Sorry.
  12   Q.  Do you know what a DOD Speed Ripper is?
  13   A.  Yes, I do.
  14   Q.  Let me show you a document UP.
  15            MR. COOPER:  Your Honor, we object to the
  16   introduction of this document.
  17            THE COURT:  It hasn't been offered yet.
  18            MR. COOPER:  It's attorney/client privilege, your
  19   Honor.
  20            THE COURT:  Well, somebody should give me a copy of
  21   the document.
  22            MR. GARBUS:  This is one of the --
  23            THE COURT:  Just give me a minute, please.
  24            (Pause)
  25            THE COURT:  Pose your question and I will ask the


                                                                680

   1   witness not to answer until I have had an opportunity to hear
   2   an objection, and please pose the question in a way that
   3   doesn't disclose the content of the document, Mr. Garbus.
   4   BY MR. GARBUS:
   5   Q.  Did you learn at some time in December of the existence of
   6   a utility called DOD Speed Ripper?
   7            THE COURT:  Answer the question, please.
   8   A.  I don't recall.
   9   Q.  Let me show you this document and see if it refreshes your
  10   recollection.
  11            THE COURT:  Go ahead.
  12            MR. COOPER:  Your Honor, are you ruling on the
  13   privilege issue?
  14            THE COURT:  So far there is nothing that, in my view,
  15   implicates a privilege.  She is being shown a document for the
  16   purpose of refreshing her recollection as to her state of mind
  17   in December.
  18            MR. COOPER:  It's the use of the document which is an
  19   attorney/client communication, to which we object.
  20            THE COURT:  I understand.  You said that in the first
  21   place.
  22            MR. COOPER:  I understand that.  The question is
  23   whether they are entitled to use a document which is an
  24   attorney/client communication.
  25            THE COURT:  I understand your point.  To that extent,


                                                                681

   1   I'm offering your point.
   2            MR. COOPER:  Thank you, your Honor.
   3            THE COURT:  What's the question, Mr. Garbus?
   4   Q.  Does it refresh your recollection that you were told back
   5   in December of 1999 about the DOD Speed Ripper?
   6   A.  No, it does not.
   7   Q.  Did you ever see that document before?
   8   A.  I don't recall it.
   9   Q.  Do you see your name on it?
  10   A.  I do see me copied, but the date of the missive was during
  11   a time I was not in the office.
  12   Q.  Did you ever see that document at any time?
  13   A.  I don't recall.
  14   Q.  When for the first time, if ever, did you hear the term
  15   "DOD Speed Ripper"?
  16   A.  I don't recall the exact date.
  17   Q.  Was it in 1999?
  18   A.  I don't recall the date, sir.
  19   Q.  Did you ever go to a site to see what a DOD Speed Ripper
  20   was?
  21   A.  I have looked at it, yes.
  22   Q.  And tell me when you went to that site for the first time.
  23   A.  I don't recall the date.
  24   Q.  Was it in December of 1999?
  25   A.  I don't recall the date, sir.


                                                                682

   1   Q.  Any time in the last eight month?
   2   A.  I don't recall the date, sir.
   3   Q.  Now, you said before that you worked together with the
   4   F.B.I., the U.S. Customs and who else?
   5   A.  That I worked for?
   6   Q.  The MPAA works together in its antipiracy investigations,
   7   you said before, with the F.B.I., U.S. Customs and who else?
   8   A.  Secret Service.
   9   Q.  Has anybody ever shown you a document that indicates one
  10   particular film was taken off the Internet that had been
  11   deencrypted through DeCSS?
  12            THE COURT:  Didn't you have a stipulation the object
  13   of which was to avoid this litany with every witness?
  14            MR. GARBUS:  Well, I think we are trying now to get
  15   into what her investigation was.  She is coming to certain
  16   conclusions, and you have permitted, subject to the
  17   qualifications that you have made, her testifying about
  18   information.  I am prepared to accept that when she speculates
  19   that the stuff that's on the Internet, whatever it is that she
  20   sees, that she doesn't know the source of anything that's on
  21   the Internet, namely, whether it comes from DeCSS, DOD Ripper.
  22            THE COURT:  So I understand your point.  Let's make
  23   this simple.  You're saying, Ms. Reider, that you have seen
  24   various films, decrypted films offered on the Internet, right?
  25            THE WITNESS:  That's correct.


                                                                683

   1            THE COURT:  Do you have any way of saying whether any
   2   particular one of the ones you have seen offered was decrypted
   3   by DeCSS as opposed to some other technology apart from
   4   whatever inference you draw from the timing?
   5            THE WITNESS:  No, my investigations are still
   6   ongoing.
   7            THE COURT:  Okay.  You have your "no," Mr. Garbus.
   8   Let's go.
   9            MR. GARBUS:  Thank you.  You asked the question
  10   better than I could have.
  11   Q.  Now, you also indicated that there were various -- did you
  12   ever look to see whether or not 2600.com sells any pirated
  13   copies of DVDs?
  14            THE COURT:  I take it there is no such contention in
  15   this case, right, Mr. Cooper?
  16            MR. COOPER:  That's correct, your Honor.
  17            THE COURT:  Okay.  Next.
  18   Q.  And there is no contention that they barter, sell it or
  19   point to anybody who does sell it?
  20            THE COURT:  Mr. Cooper?
  21            MR. COOPER:  If the "it" is decrypted DVDs, yes, your
  22   Honor.
  23            THE COURT:  Okay.
  24   Q.  Do you know what a Speed Ripper is, by the way?
  25   A.  I know what it alleges to be.


                                                                684

   1   Q.  What does it allege to be?
   2   A.  It alleges to decrypt DVDs.  It's a DeCSS clone.
   3   Q.  DeCSS clone?
   4   A.  Um-hum.
   5   Q.  Do you know if DOD Speed Ripper was available before
   6   DeCSS?
   7   A.  Not to my knowledge.
   8   Q.  What is the basis of that?  When for the first time did
   9   you know that Speed Ripper was available?
  10            MR. COOPER:  Asked and answered, your Honor.
  11            THE COURT:  Overruled.
  12   A.  I don't recall the date.
  13            THE COURT:  Okay.  We will take our morning break.
  14   15 minutes.
  15            (Recess)
  16            THE COURT:  You may proceed.
  17   BY MR. GARBUS:
  18   Q.  You said that, as I understand it, once you learned --
  19   when did you learn of DeCSS for the first time?
  20   A.  Early to mid-October of '99.
  21   Q.  What did you then do after you learned it?
  22   A.  I pursued an investigation and downloaded it and then
  23   notified our legal team.
  24   Q.  Now, have you ever used a DoDs Ripper?
  25   A.  Not all the way through.


                                                                685

   1   Q.  Tell me what you have done with it.
   2   A.  I have downloaded it and I have extracted a single VOB
   3   file with it.
   4   Q.  And have you ever used a DOD Ripper?
   5            MR. COOPER:  Ambiguous.
   6            THE COURT:  What is the ambiguity?
   7            MR. COOPER:  I think it's the same question he asked
   8   before.
   9            THE COURT:  Is there a different --
  10   Q.  Do you know of anything separately called the DOD Ripper
  11   rather than a DoDs Ripper?
  12   A.  No, I don't.
  13   Q.  How about Power Ripper?
  14   A.  I have heard of it.
  15   Q.  Have you ever utilized it?
  16   A.  No, I have not.
  17   Q.  Have you ever heard of DOD Speed Ripper?
  18   A.  I was under the impression that is what we were speaking
  19   about.
  20   Q.  In other words, to you, Power Ripper and DOD Speed Ripper
  21   are the same thing?
  22   A.  No, your earlier question regarding DoDs Ripper was my --
  23   Q.  Excuse me a minute.  Go ahead.
  24   A.  It was my impression we were discussing the DOD Speed
  25   Ripper.


                                                                686

   1   Q.  Have you ever tried css-auth?
   2   A.  Yes, I have.
   3   Q.  And what have you done with it?
   4   A.  Just looked at the code.
   5   Q.  Have you ever tried css-cat?
   6   A.  Only looked at the code.
   7   Q.  Have you ever seen the end product, in other words, a
   8   movie that is made, that has been started with the process of
   9   a DOD Ripper, Power Ripper, Speed Ripper, css-auth or css-cat?
  10   A.  You want me to break those down?
  11   Q.  Sure.
  12   A.  I have seen the end product of movies that have been
  13   decrypted.
  14   Q.  And have you ever issued a report, have you ever compiled
  15   a report about any of your work with respect to these
  16   utilities and the movies that have then been downloaded?
  17   A.  Not that I recall.
  18   Q.  With respect to your investigation of DeCSS, have you ever
  19   prepared a report of that investigation?
  20   A.  I'm sorry.  Can you repeat the question?
  21   Q.  With respect to any work that you did on DeCSS, Did you
  22   ever prepare a report for the MPAA in any investigation you
  23   did?
  24   A.  Not that I recall.
  25   Q.  Did anyone at the F.B.I. or U.S. Customs or the Secret


                                                                687

   1   Service or the MPAA ever ask you to prepare any report about
   2   any investigation you made concerning DeCSS?
   3   A.  I wouldn't be at liberty to tell you if any of those
   4   federal agencies requested such a report.
   5            MR. GARBUS:  Your Honor, I would like to know if this
   6   woman has ever prepared a report relating to DeCSS.
   7            THE COURT:  You can answer yes or no at least.
   8            THE WITNESS:  Not that I recall.
   9            MR. GARBUS:  We got past that pretty quickly.
  10   Q.  Now, Ms. Reider, you've talked about you being the chief
  11   investigator at the MPAA to determine the piracy consequences
  12   of DeCSS, is that right?
  13   A.  That is not my only function.
  14   Q.  Is that one of your functions?
  15   A.  That's one of many, yes.
  16   Q.  And you're telling me that you never prepared a report for
  17   the MPAA concerning your investigation of DeCSS, is that
  18   right?
  19   A.  Not that I recall.
  20   Q.  When you say not that you recall, just sit back for a
  21   moment, take your time.  Did you prepare such a report or did
  22   you not?
  23            MR. COOPER:  Argumentative.
  24            THE COURT:  Overruled.
  25   A.  Not that I recall.


                                                                688

   1   Q.  Is there any document that I might conceivably show you
   2   that would help you remember whether you prepared such a
   3   report?
   4   A.  Well, if I knew that -- I don't know what you're asking.
   5   Q.  Is there any document that I could show you, or that
   6   anybody in the world could show you, that could refresh your
   7   recollection as to whether or not you ever prepared a report
   8   for the MPAA concerning DeCSS?
   9            MR. COOPER:  Argumentative.  Calls for speculation.
  10            THE COURT:  I'm going to allow it one more time.  You
  11   would think you were trying a medical malpractice case.  Once
  12   more.
  13   A.  I don't know.
  14   Q.  Did you ever produce a memo -- forget about the word
  15   report -- for the MPAA or any other governmental agency
  16   concerning DeCSS, the proliferation of it, the use of it, or
  17   the consequences of the films that it would produce after that
  18   DeCSS application was DivX'd?
  19   A.  I don't recall.
  20            THE COURT:  Mr. Garbus, you took her deposition,
  21   right?
  22            MR. GARBUS:  Yes.
  23            THE COURT:  And I know that at least one whole box of
  24   documents from her file was given to me for in camera
  25   inspection on a claim of privilege that were subsequently


                                                                689

   1   turned over to you.
   2            Now, this is not the time to be either doing
   3   discovery or whatever else this is.  If you have a document,
   4   let's go to it.  If you don't have a document, ask something
   5   else.
   6            MR. GARBUS:  I understand --
   7            Shall we approach the bench?
   8            THE COURT:  No.
   9            MR. GARBUS:  -- that there is no such document, that
  10   she never prepared a report for the MPAA.  Now, we have been
  11   through a series of discussions where we have asked them to
  12   produce lists of documents that we were promised that we have
  13   never gotten.  I can go through that now, but I don't think
  14   it's an appropriate time.
  15            THE COURT:  Neither do I.  So, you're complaining
  16   they didn't give you the document that she says doesn't exist.
  17   Is that the net of the complaint?
  18            MR. GARBUS:  No.  Let me just go on.
  19   Q.  I'd like to learn something about what your investigation
  20   consisted of.  After you gave the Linux document to someone at
  21   the MPAA in October or November, what did you then do in the
  22   course of your investigation?
  23   A.  I'm sorry.  Which Linux documents are you referring to?
  24   Q.  Did you testify that you downloaded some documents in
  25   October, November and December from the LiViD group?


                                                                690

   1   A.  I don't know.  They would have to read it back to me.
   2   Q.  Did you download -- let's start at the beginning.  Did you
   3   at any time download any documents from the LiViD group in
   4   1999?
   5            MR. COOPER:  Your Honor, Mr. Garbus already elicited
   6   testimony about what the witness downloaded and I think you
   7   then sustained the objection with respect to this questioning
   8   regarding the LiViD group and the documents downloaded with
   9   respect to it.
  10            MR. GARBUS:  Your Honor, I would like to get into
  11   what her investigation consisted of.  She has come in here
  12   allegedly as a witness to give information about that
  13   investigation.
  14            THE COURT:  One question at a time.  You already
  15   asked her -- you first started off from the mistaken premise
  16   that Mr. Jacobsen or Litvak gave her documents from the LiViD
  17   site.  She said, no, that hadn't happened.  You then asked her
  18   whether she went onto the site, and she testified she went
  19   onto the net and found LiViD documents in October or November,
  20   that she downloaded, reviewed them and turned them over to
  21   legal, specifically to Mark Litvak.  Now, I don't know why we
  22   have to do it all over again.
  23            MR. GARBUS:  Because she said she didn't remember
  24   that.
  25            THE COURT:  No, she didn't.


                                                                691

   1            MR. GARBUS:  Let me go on, if I can.
   2   Q.  After you turned these documents over to Mr. Litvak, then
   3   what happened?
   4            MR. COOPER:  Ambiguous.
   5            THE COURT:  Overruled.
   6   A.  Then what happened in respect to what?
   7   Q.  Your investigation.  Everything is directed now towards
   8   your investigation.  What did do you with respect to your
   9   investigation after you turned these documents over to
  10   Mr. Litvak?
  11   A.  I continued to look for evidence of piracy.
  12   Q.  Tell me what you did.
  13   A.  In respect to what, sir?
  14   Q.  DeCSS.
  15   A.  I continued to look for sites offering DeCSS and to
  16   request the issuance of cease and desist letters.
  17   Q.  And were you also looking for sites relevant to DOD Ripper
  18   or Power Ripper or Speed Ripper?
  19   A.  Our investigations are ongoing.
  20   Q.  Were you, at that time that you were looking for DeCSS
  21   sites, also looking at sites for DOD Speed Ripper, Power
  22   Ripper -- and Power Ripper?  Excuse me.
  23   A.  I don't recall a time frame.
  24   Q.  When did you start looking at DeCSS sites?
  25   A.  Early to mid-October of '99.


                                                                692

   1   Q.  And can you tell me to the best of your recollection
   2   whether that was before or after you were looking at sites for
   3   DOD Ripper, if in fact you were?
   4            MR. COOPER:  Objection, your Honor.  I think it has
   5   been asked and answered repeatedly and it's plainly beyond the
   6   scope of direct.
   7            THE COURT:  It's certainly sustained as to form.
   8   Let's start with that.  Try another question.
   9   Q.  After you started looking at the DeCSS site, did you make
  10   any notes of any site you saw?
  11   A.  Can you clarify "make notes"?
  12   Q.  Did you write anything down on a piece of paper?
  13   A.  I imagine we downloaded those sites that we found.
  14   Q.  And do you recall now which sites that you found?
  15   A.  Not specifically.
  16            THE COURT:  Isn't that precisely the carton of
  17   document that was submitted to my chambers that was then
  18   turned over to you, Mr. Garbus, like maybe 5,000 pages of it?
  19            MR. GARBUS:  I don't know if that was all the
  20   documents.  What Mr. Schumann testified was that he had gotten
  21   a part of the documents.  I'm trying to find out now what the
  22   documents were that she downloaded.
  23            Can we approach the bench?
  24            THE COURT:  No.
  25            MR. GARBUS:  Let me tell you where I would like to


                                                                693

   1   go, and if there is an issue about it, I just don't want to go
   2   there.
   3            I think I'm entitled to know -- she is the only
   4   witness for the MPAA thus far produced.  I understand she is
   5   their last witness.  We have been told about this awesome
   6   threat of DeCSS, and I would like to find out what the MPA has
   7   done since they first learned about it, and I would like to
   8   find out during the course of this investigation or this
   9   discussion with her what she has done, because she is the head
  10   of piracy, with respect to the other utilities that allegedly
  11   cause piracy, and whether or not she or anyone can tell
  12   basically, if something is on the screen, which utility it
  13   comes from --
  14            THE COURT:  You already got that stipulation, didn't
  15   you, early this morning?
  16            MR. GARBUS:  The last part I have.
  17            THE COURT:  Right.
  18            MR. GARBUS:  Now I would like to go to the
  19   investigation.  What I have said before is if they were
  20   serious at all about DeCSS, that there were many, many ways
  21   that they could have learned in October, November exactly who
  22   had DeCSS, what was being done with respect to it, and I think
  23   what they would have concluded, at least I would have
  24   concluded, is that it was being used for the Linux machine and
  25   that these other utilities may be appropriate "illegal copying


                                                                694

   1   or piracy tools," but DeCSS, for precisely the reasons that
   2   Mr. Shamos testified, is not.
   3            Now, whether or not your Honor feels that makes DeCSS
   4   still prohibitable by the statute is something for an
   5   appropriate time, but it seems to me I'm entitled to go
   6   through that with this witness.
   7            THE COURT:  What is on the table are questions
   8   nit-picking about documents that you know full well were
   9   produced to you, piles of them.
  10            MR. GARBUS:  Let me tell you some of the documents we
  11   did not get.  Shall we go through that now?
  12            THE COURT:  Mr. Garbus, no.
  13            MR. GARBUS:  May I ask my question?
  14            THE COURT:  You can ask a new question.
  15            MR. GARBUS:  Thank you.
  16   Q.  Now, when you say you were monitoring sites for DeCSS in
  17   November of '99 --
  18            THE COURT:  By the way, if we do get to that subject,
  19   I'm still waiting for the affidavit about your client's hard
  20   drive.  Just keep that in mind.  Let's go on.
  21            MR. GARBUS:  May I have the last question asked
  22   repeated to me?
  23            (Record read)
  24   Q.  Did you ever tell anybody from October until today that
  25   you had ever seen a pirated copy of a digital movie, a


                                                                695

   1   specific movie?
   2   A.  Yes.
   3   Q.  And did you ever tell anybody, or write a report, or
   4   furnish a document indicating that it related in any way to
   5   DeCSS?
   6   A.  As I stated before, I don't recall any report on DeCSS.
   7   Q.  Putting aside report, any e-mails?
   8   A.  I don't recall specifics.
   9   Q.  What has been your training as an investigator?  You
  10   worked for the F.B.I. for a period of time?
  11   A.  That's correct.
  12   Q.  Were you trained there as an investigator?
  13   A.  That's correct.
  14   Q.  And did the F.B.I. have some practice with respect to
  15   making reports?
  16   A.  Yes, they do.
  17   Q.  Tell me what that practice was.
  18            MR. COOPER:  Relevancy, your Honor.
  19            THE COURT:  Sustained.
  20   Q.  Did the training include --
  21            THE COURT:  Sustained.
  22   Q.  You indicated that -- let me ask this.  When you say you
  23   are monitoring websites, did you ever call any website in
  24   order to determine the name, address or identification of any
  25   individual who had been allegedly selling movies on any of


                                                                696

   1   these file sharing sites?
   2   A.  Excuse me.  You'll need to clarify your question.  You
   3   have asked about websites and FSUs all in the same sentence.
   4   Q.  Did you ever call anybody as part of your investigation,
   5   or to your knowledge, if it's not confidential, the F.B.I.,
   6   Secret Service, U.S. Customs?
   7            THE COURT:  The question is lost with the digression.
   8   Start the question again.
   9   Q.  Did you ever call anybody at anybody website that had file
  10   sharing to determine where the films came from?
  11   A.  Do you mean did I telephone anyone?
  12   Q.  Yes.
  13   A.  Not personally.
  14   Q.  Did you ever make any investigation with respect to any of
  15   those file sharing sites as to where the films came from?
  16   A.  Yes, we routinely investigate.
  17   Q.  And what did that investigation indicate?
  18            MR. COOPER:  Objection, your Honor.  It's not only
  19   confidential, ongoing investigations.  Much of the information
  20   she has on this subject is privileged and it is plainly beyond
  21   the scope.
  22            THE COURT:  Well, you better come to sidebar.  Mr.
  23   Garbus and Mr. Cooper.
  24            (At the sidebar)
  25            THE COURT:  Let's deal with scope first.  Mr. Garbus,


                                                                697

   1   why is it within the scope?
   2            MR. GARBUS:  My position is that they know that DeCSS
   3   is not a pirating tool.  My information.  And I believe that
   4   they may have made an attempt to determine that and may have
   5   concluded what I have just said is so.  Whether or not that
   6   goes to your ultimate question about whether or not the DeCSS
   7   is an appropriate or inappropriate circumvention is something
   8   else.  But it seems to me what I am entitled to know is this.
   9            There are ten different utilities that with respect
  10   to, let's say, the nine others, as I understand it, they did
  11   no investigation, and that basically what you are dealing with
  12   is an attempt to take a product away from, let's say, the
  13   Linux source group, and that I think that what the MPA was
  14   doing was basically protecting the licensing arrangement and
  15   that this entire investigation had little and nothing to do
  16   with piracy.  And I think they are aware of the fact that the
  17   stuff that's up on the Internet is not DeCSS material.  Not
  18   only the negative of it, but that they know that it's not.
  19            THE COURT:  So that's why it's within the scope of
  20   the direct, is that right?
  21            MR. GARBUS:  If you want, I will make her my witness
  22   at an appropriate time, keep her in court and I'll make her my
  23   witness.
  24            MR. COOPER:  Your Honor, my principal concern -- I
  25   don't think it's necessary --


                                                                698

   1            MR. GARBUS:  I don't think it's within the scope of
   2   the direct based on the conclusions that they drew.  She is
   3   the chief investigator.  They put her on the stand.  She comes
   4   to assert conclusions.  I think the facts contradict her
   5   conclusions.
   6            THE COURT:  What conclusion?
   7            MR. GARBUS:  Well, I must tell you every one of the
   8   conclusions is that DeCSS is a contributing factor or is one
   9   of the reasons they are very concerned.  One of the critical
  10   parts of her testimony, as I understand it, is the spiking or
  11   the enormous increase in material on the net since DeCSS first
  12   comes about.
  13            THE COURT:  Um-hum.
  14            MR. GARBUS:  And I think the truth of it is you have
  15   nine other utilities that lead to that spiking, and the one
  16   utility that does not is DeCSS because it has a different
  17   function.
  18            THE COURT:  You are certainly entitled to ask her
  19   about the question of whether these other utilities could have
  20   led to the spike.  There is no question about that.
  21            MR. GARBUS:  Okay.  And I want to know.
  22            THE COURT:  But I don't think that's what you have
  23   been asking her.
  24            MR. GARBUS:  I have been trying to get the background
  25   for it.  I have been trying to find out her investigation.  If


                                                                699

   1   you are asking me to ask a conclusory question, I'm prepared
   2   to do that.  I wanted to know what her investigation
   3   indicated.  It seems to me I'm entitled to do that.
   4            THE COURT:  Mr. Cooper?
   5            MR. COOPER:  Our concern, your Honor, is that the
   6   question that I think Mr. Garbus last asked her has the
   7   potential for eliciting information regarding the specifics of
   8   investigations of other potential actions and ongoing
   9   investigations in cooperation with law enforcement.
  10            I will say, for instance, that the MPAA member
  11   companies are among the plaintiffs in an action filed today
  12   against ScourNet, and to the extent that Mr. Garbus's question
  13   is potentially going to elicit privileged information
  14   regarding the investigation leading up to that action, I
  15   believe we are entitled to protection from having to answer
  16   that question under a variety of privileges.
  17            I don't think it's necessary for Mr. Garbus's right
  18   to question the witness on any relevant information she might
  19   have, but I am concerned that it's privileged information and
  20   information regarding ongoing investigations not be divulged
  21   in connection with such a response.
  22            MR. GARBUS:  I am here to represent a client.  My
  23   understanding is that, of all of the utilities, the one that
  24   is not being used for piracy is DeCSS because of the amount of
  25   time it takes to do a variety of things.  What is being used


                                                                700

   1   for piracy are these other utilities, that the investigation
   2   into DeCSS is solely related to the fact that there is a
   3   competitive machine out there called Linux.  That's what I'm
   4   trying to get to.
   5            If we can do all that with a stipulation, if we can
   6   do all that -- not the last part about Linux -- but if we can
   7   do it with a stipulation, I will try to craft one and I would
   8   try and ask it in one question, but I was trying to get into
   9   the investigation concerning it.
  10            MR. COOPER:  I don't even know how to respond to
  11   that.  The only information we have on any of those assertions
  12   are from Mr. Garbus's mouth.  This witness isn't able to
  13   testify to that factual information because it's simply
  14   nonexistent.
  15            MR. GARBUS:  She is the chief investigator.  She may
  16   contradict everything I said.  She may say everything I just
  17   said is wrong.
  18            THE COURT:  Look, Mr. Garbus is entitled to
  19   cross-examine her on the subject of whether this spike in the
  20   apparent availability of pirated movies on the Internet after
  21   October or November is attributable to the appearance of
  22   DeCSS.  I think there are other ways of doing it.
  23            MR. GARBUS:  I could ask her one question.
  24            THE COURT:  We will take it one question at a time.
  25   There are other ways of doing it.  Let's try.


                                                                701

   1            MR. GARBUS:  Judge, you are an experienced trial
   2   lawyer.  If you can think of a better way for me to formulate
   3   a question so we don't have a problem, I will do it.
   4            THE COURT:  I'm not getting your rate anymore to
   5   formulate the questions, Mr. Garbus.
   6            (In open court)
   7            MR. GARBUS:  You may be exagerating.
   8            THE COURT:  I don't think so.
   9            MR. GARBUS:  May I have the last question, please?
  10            (Record read)
  11            THE COURT:  I am going to sustain the objection to
  12   that question, because it's much too broad in the
  13   circumstances, and it does implicate privileges.  It
  14   implicates legitimate confidentiality concerns beyond
  15   privileges, but there is some appropriate area here that I
  16   have indicated at the sidebar, and counsel can pursue it.
  17            New question.
  18   BY MR. GARBUS:
  19   Q.  Have you ever seen any documents that indicate whether or
  20   not all of the films that are on these file sharing programs
  21   do or do not come from Power Ripper?
  22   A.  No.
  23   Q.  Have you ever seen any documents --
  24            MR. GARBUS:  Judge, if you have a better way of
  25   formulating the question, I will take it.


                                                                702

   1            THE COURT:  As I said to you, I'm not getting paid
   2   the rate you are getting for formulating questions.  Once upon
   3   a time I was, but not anymore.  That's your job.
   4            MR. GARBUS:  Did we get an answer?
   5            THE COURT:  There is not a question.
   6   Q.  Can you tell by looking at any of the file sharing
   7   programs what percentage of the films that are described on
   8   those file sharing programs come from any particular utility?
   9   A.  You want to know what compression was used on them or --
  10            THE COURT:  Let's try to make this simpler.  I can't
  11   resist, Mr. Garbus.  I'm sorry.  Think of it as pro bono.
  12            I understood from a previous witness that when you
  13   see a film listed on a website or an FSU that has been
  14   decrypted and is available for sale or exchange, that you
  15   can't tell from the listing itself what mode of decrypting the
  16   film was used.  Is that consistent with your understanding?
  17            THE WITNESS:  Yes, it is.
  18            THE COURT:  All right.  Are there other ways that you
  19   can ascertain by what means a film offered on the Internet or
  20   an FSU for exchange or sale has been decrypted?
  21            THE WITNESS:  I don't know.
  22            THE COURT:  Back to you, Mr. Garbus.
  23   Q.  Who would know at the MPAA, if anybody?
  24   A.  I don't know.
  25   Q.  Do you know who Brad Hunt is?


                                                                703

   1   A.  Yes, I do.
   2   Q.  What is his job?
   3   A.  He is our chief technology officer.
   4   Q.  Have you ever had any discussions with him about the two
   5   questions that the judge has asked you?
   6   A.  No, I have not.
   7   Q.  And who is Rick Hirsch?
   8   A.  He is the head of antipiracy for the IDSA.
   9   Q.  To your knowledge, does anyone at the MPAA have the
  10   answers to the two questions that the judge posed?
  11   A.  I don't know.
  12   Q.  To your knowledge, does anybody in law enforcement have
  13   the answers to the two questions the judge has posed?
  14   A.  I don't know.
  15            THE COURT:  Has anybody on the Cincinnati Reds?  Come
  16   on.  Don't you think there is an easier way to do this, Mr.
  17   Garbus?
  18            MR. GARBUS:  You tell me.  Your questions are not
  19   objectionable.  Mine can be.  Go ahead if your Honor wants to
  20   formulate the question.
  21            THE COURT:  Mr. Sims has offered.
  22            MR. SIMS:  I will pose the question if you want, your
  23   Honor.
  24            THE COURT:  It's Mr. Garbus's examination.
  25   Q.  Now, we have heard about a surge in Internet piracy, is


                                                                704

   1   that right, over the last six months?
   2   A.  In respect to decrypted DVDs.
   3   Q.  Right.  Can you tell whether or not that surge comes as a
   4   result of the utility Power Ripper or DeCSS or DOD Ripper or
   5   any other utility?
   6   A.  Not definitively.
   7   Q.  Has anyone at the MPAA ever made any investigation to
   8   determine what the utility is or was being used to create that
   9   surge?
  10   A.  I don't know.
  11   Q.  Have you ever made any investigation to determine which
  12   utility leads to that surge?
  13   A.  As I stated before, it's an ongoing investigation.
  14            THE COURT:  Maybe we can get at it a little bit
  15   better this way.  If you were to download the file of a
  16   decrypted movie obtained over the Internet or through an FSU,
  17   are you aware of any means by which you can examine the code
  18   and the data file of the download and determine through that
  19   examination how the movie was decrypted?
  20            THE WITNESS:  I don't have that answer yet.
  21            THE COURT:  You don't have it yet.
  22            THE WITNESS:  No.
  23            THE COURT:  I take it the answer is that you hope to
  24   find out some day, but you don't know it now, is that correct?
  25            THE WITNESS:  I hope to find out soon, yes.


                                                                705

   1            THE COURT:  All right.
   2   Q.  So, as of now, nobody knows the answer to my question?
   3            THE COURT:  As of now, Ms. Reider doesn't know the
   4   answer.
   5            THE WITNESS:  That's correct.
   6   Q.  As of now, do you know if anybody in the MPAA knows the
   7   answer?
   8   A.  I don't know.
   9   Q.  To your knowledge does anyone in law enforcement know the
  10   answer?
  11   A.  I don't know.
  12   Q.  Now, has anyone ever said to you --
  13            THE COURT:  Let me ask another question, because I
  14   think it may short-cut this a lot.  Would I be correct in
  15   assuming, Ms. Reider, that there are other investigative
  16   techniques that you have and are pursuing in an effort to find
  17   out by what means any movies that may be offered on the
  18   Internet were decrypted, out of conventional law enforcement
  19   type techniques?
  20            THE WITNESS:  That's correct, your Honor.
  21            THE COURT:  Okay.  Let's go.
  22   Q.  What are those techniques, and what is it that you're
  23   doing?
  24   A.  We regularly try to determine the source, the author's
  25   identity, location.


                                                                706

   1            MR. GARBUS:  Can I hear the answer again?
   2            (Record read)
   3   Q.  During that course of investigation, have you ever
   4   determined that DeCSS was ever used to send a film over the
   5   Internet?
   6            THE COURT:  Well, on that you already have your
   7   stipulation, Mr. Garbus.  They have no direct evidence that
   8   that ever occurred.  They are asking you to infer it from
   9   other things.
  10   Q.  Have you ever tried to determine whether or not any --
  11   from your investigation -- any of the films on the file
  12   sharing programs came from DeCSS?
  13            MR. COOPER:  Asked and answered, your Honor.
  14            THE COURT:  Yes, I think it was.
  15            MR. GARBUS:  Your Honor, can I have five minutes?
  16   Could I just have a five-minute break?
  17            THE COURT:  Yes, sure.
  18            (Recess)
  19   BY MR. GARBUS:
  20   Q.  During the course of your investigation, when you have
  21   gone to these file sharing sites, have you ever learned that
  22   the information posted on the site is false, namely, that they
  23   don't have the movies that they say they have?
  24   A.  On occasion the download does not come through.
  25   Q.  And when you say "on occasion the download does not come


                                                                707

   1   through," what does that mean?
   2   A.  There is some sort of error in the transfer.
   3   Q.  Do you know whether the film is on the site or it's just a
   4   dud, that they say they have a film?
   5   A.  I don't know.
   6   Q.  Do you have any reports or records concerning the number
   7   of duds on these file sharing sites?
   8   A.  Not to my knowledge.
   9   Q.  To your knowledge, does any law enforcement agency have
  10   any information concerning the duds on these file sharing
  11   sites?
  12   A.  I don't know.
  13            MR. GARBUS:  Excuse me, your Honor.  We are just
  14   trying to go through all these document now.  It's a little
  15   rough.
  16   Q.  This is document CO, which also has attached to it --
  17   well, let me show you this first.  I show you Defendants'
  18   Exhibit AT?
  19            MR. GARBUS:  May I approach the bench?
  20            THE COURT:  Yes.
  21   Q.  And I ask you whether or not you have ever seen this
  22   document before.  Have you ever seen that document before?
  23   A.  You showed it to me at the deposition.
  24   Q.  Prior to the deposition had you ever seen it before?
  25   A.  Not that I recall.


                                                                708

   1   Q.  Let me show you a document entitled CO.
   2            MR. COOPER:  Your Honor, this is a privileged
   3   document.
   4            THE COURT:  Mr. Knight is who?
   5            MR. COOPER:  Mr. Knight is one of the attorneys, a
   6   former regional director for the MPAA.
   7            Mr. Litvak, as you know, is counsel for the MPAA.
   8   And, your Honor, I believe that this goes to efficacy and is
   9   not properly within the scope of direct.
  10            THE COURT:  Mr. Garbus?
  11            MR. GARBUS:  As I said, I'm prepared to make this
  12   witness -- rather than get into scope or not scope at some
  13   point -- I'm willing to make her my witness as a hostile
  14   witness.
  15            THE COURT:  And what about the rest?
  16            MR. GARBUS:  Can I hear the rest again?
  17            THE COURT:  Privilege, relevance.
  18            MR. GARBUS:  This is the Macrovision report.
  19            THE COURT:  Please do not describe what it is.  There
  20   is a privilege claim.
  21            MR. GARBUS:  I don't see why it's privileged.
  22            THE COURT:  You don't see it.
  23            MR. GARBUS:  It's a public document.
  24            THE COURT:  CO is a memorandum from Mr. Hunt to Mr.
  25   Knight, who was just identified as an attorney.  We are


                                                                709

   1   laboring under some difficulty here, and I appreciate that
   2   that affects everyone, because in an effort to get this case
   3   to trial, you have seen probably 95 percent of the plaintiff's
   4   privileged documents on a "no waiver" basis with the
   5   understanding that admissibility would be determined at trial.
   6   In other circumstances, a determination would have been made
   7   as to privilege, and if it was determined to have been
   8   privileged, you never would have seen the document in the
   9   first play.  So please don't announce its contents while we
  10   are discussing whether there is a proper privilege claim.
  11            Now, would you address the privilege claim and the
  12   relevance argument.
  13            MR. GARBUS:  With respect to relevance, it refers to
  14   the document, which I don't perceive to be privilege.
  15            THE COURT:  No, AT is not.  But by saying this refers
  16   to it, you, of course, have already disclosed part of the
  17   content of CO.  But let's go on.
  18            MR. GARBUS:  Judge, shall we do this at the bench?
  19            THE COURT:  I think you are fully capable of
  20   discussing the relevance and the privilege issues without
  21   discussing the contents.
  22            MR. GARBUS:  I would like to ask her whether looking
  23   at that document, to which there is an objection with respect
  24   to privilege, refreshes her recollection as to whether she saw
  25   a document that was not privileged.


                                                                710

   1            THE COURT:  For that limited purpose, you may show
   2   her CO.
   3            MR. GARBUS:  Thank you.
   4            THE WITNESS:  He already has.
   5            THE COURT:  You have already seen it, Ms. Reider?
   6            THE WITNESS:  He just gave it to me.
   7            THE COURT:  He just gave it to you.  All right.  Ask
   8   her the question.
   9   Q.  Does reading that document refresh your recollection as to
  10   whether or not you saw a document entitled "Macrovision"?
  11   A.  No, it does not.
  12   Q.  Did you ever have any discussion with anyone at the MPAA
  13   concerning any Macrovision analysis of the DVD CSS hack.
  14   A.  Not that I recall.
  15   Q.  Were you told by anyone at the MPAA that Macrovision had
  16   determined that the DeCSS hack has no commercial significance?
  17   A.  I don't recall.
  18   Q.  Were you ever told by anybody at the MPAA -- by the way,
  19   do you know who Macrovision is?
  20   A.  Vaguely.
  21   Q.  Tell me who they are.
  22   A.  They are a company that provides content protection for
  23   videotape.
  24   Q.  Were you ever told by anyone at the MPAA either that a
  25   Merdan report or a Macrovision record had determined that the


                                                                711

   1   DeCSS hack has proven to be more difficult and complicated to
   2   use than the average consumer is willing to put up with?
   3   A.  No.
   4   Q.  Did you have any conversations with anyone at the MPAA
   5   concerning the differences in the use of the DeCSS utility and
   6   the other utilities we have talked about, the DOD Ripper, the
   7   Power Ripper, the Speed Ripper, with respect to their
   8   efficacy, with respect to illegal copying?
   9   A.  Can you read back that whole question, please?
  10            (Record read)
  11   A.  Not that I recall.
  12   Q.  Did anyone at the MPAA ever tell you that DeCSS was not
  13   consumer or user friendly and would not pose a problem with
  14   respect to illegal copying?
  15   A.  Not that I recall.
  16   Q.  Did anybody tell you the contrary?
  17   A.  I don't recall.
  18   Q.  Did you ever see any MPAA report that said that DeCSS is
  19   not a utility that is appropriate for piracy or copying?
  20   A.  Not that I recall.
  21   Q.  Do you know if the MPAA ever made a determination that
  22   DeCSS is not a copying or pirating utility?
  23   A.  Not that I recall.
  24   Q.  Did they ever come up with any contrary conclusion?
  25   A.  I don't know.


                                                                712

   1   Q.  When for the first time did you learn about Linux?
   2            MR. COOPER:  It assumes facts not in evidence, but
   3   it's beyond the scope.
   4            THE COURT:  Sustained as -- pardon me?
   5            MR. COOPER:  And irrelevant.
   6            THE COURT:  Sustained as to form.  Rephrase it.
   7   Q.  You previously talked about downloading material from the
   8   LiViD group site.  Is that right?
   9   A.  That's correct.
  10   Q.  Prior to that time, had you ever heard of Linux?
  11   A.  As an operating system?
  12   Q.  Yes.
  13   A.  Yes.
  14   Q.  When did you hear about it for the first time?
  15   A.  I don't recall the date.
  16   Q.  Was it in 1999?
  17   A.  I don't recall the date.
  18   Q.  Did anyone at the MPAA ever tell you about Linux or did
  19   you learn it on your own?
  20            MR. COOPER:  Your Honor, relevancy.  I recognize that
  21   Mr. Garbus is entitled to cross-examine the witness on proper
  22   matters, but I get the impression we are engaged in a
  23   filibuster.
  24            MR. GARBUS:  Engaged in what?
  25            THE COURT:  A filibuster is what he said.


                                                                713

   1            Overruled for the moment.
   2   A.  I don't recall.
   3   Q.  When for the first time did you ever hear the term "LiViD
   4   group"?
   5   A.  I don't recall having heard that specific title.
   6   Q.  How did you know to go to the LiViD website, download the
   7   material you downloaded in October and November?
   8   A.  I'm an investigator.  I followed a trail there.
   9   Q.  Tell me what the trail was.
  10   A.  I read about it on Slashdot.
  11   Q.  And, by the way, do you know or anyone at the MPAA have
  12   any reason to believe that 2600.com has anything to do with
  13   the surge in Internet piracy?
  14            MR. COOPER:  Your Honor, to the extent that Mr.
  15   Garbus is asking the witness of her knowledge from attorneys
  16   in connection with this lawsuit, it would be privileged.
  17            THE COURT:  I just don't even begin to see the
  18   relevance of it.
  19   Q.  Take aside the question --
  20            MR. GARBUS:  Unless you are ruling on relevancy.
  21            THE COURT:  I am ruling on relevance.  There has been
  22   no clam here.  They don't have to establish what you are
  23   suggesting you were provided.
  24            MR. GARBUS:  It certainly goes to the question of
  25   damage, doesn't it?


                                                                714

   1            THE COURT:  There is no damage claim in this case,
   2   whatever you say in your papers.  They amended their complaint
   3   to delete it.
   4   Q.  Other than DeCSS, do you know what other ways there are to
   5   copy DVDs?
   6   A.  Only what I have read.
   7   Q.  And what is it that you've read?
   8   A.  The drink or die Speed Ripper claims.
   9   Q.  Tell me what that is.
  10   A.  With all due respect, sir, you have been asking me about
  11   the DOD Speed Ripper.
  12   Q.  So that's the only thing that you know of that is used to
  13   decrypt DVDs other than DeCSS, is that right?
  14   A.  To my knowledge.
  15   Q.  Has anyone ever told you that any of these other utilities
  16   that we have talked about can be used to decrypt DVDs?
  17            MR. COOPER:  Ambiguous, your Honor.
  18            THE COURT:  I don't think so.
  19            THE WITNESS:  Could you read the question back,
  20   please?
  21            (Record read)
  22   A.  Not that I recall.
  23   Q.  In response to Mr. Cooper's question before, you stated
  24   that you tested DeCSS.  Do you remember that?
  25   A.  That's correct.


                                                                715

   1   Q.  You didn't mention whether you were alone or with other
   2   people.  Were you alone?
   3   A.  No.
   4   Q.  Who was with you?
   5   A.  To the best of my recollection, Brad Hunt, Rick Hirsch and
   6   Richard Kroon.
   7   Q.  And you have identified Brad Hunt as the chief.  Rather
   8   than go through it again, tell me who those three people are.
   9   A.  Brad Hunt is our chief technology officer, Rick Hirsch at
  10   the time was director of worldwide antipiracy, and Richard
  11   Kroon is a manager in our MIS department.
  12   Q.  What is Brad Hunt's background, to the extent you know it?
  13   A.  I don't know.
  14   Q.  Who did the actual downloading?
  15   A.  I did.
  16   Q.  And were you doing it under their supervision?
  17   A.  No, I was not.
  18   Q.  Did you then, after you downloaded it, watch a movie?
  19   A.  We decrypted a DVD.
  20   Q.  Which one?
  21   A.  As I recall, it was a Star Trek movie.
  22   Q.  Did you watch the movie?
  23   A.  We watched segments of it.
  24   Q.  How much?
  25   A.  In total, approximately five minutes.


                                                                716

   1   Q.  Is it fair to say that there is no report or memo
   2   concerning that?
   3   A.  I can't speak for others.
   4   Q.  Did you ever make a report or memo concerning that?
   5   A.  Not that I recall.
   6   Q.  You said before that you hoped to have an answer soon
   7   about whether a movie file reveals the decryption technique.
   8   Who have you asked for this answer?
   9   A.  I have not yet asked anyone.
  10   Q.  You hope to have an answer soon, you haven't asked
  11   anybody.  Can you tell me whether or not anyone to your
  12   knowledge is studying whether or not a movie file can
  13   reveal -- that's been downloaded -- can reveal the decryption
  14   technique?
  15   A.  I don't know.
  16   Q.  When do you hope to get an answer to the question you
  17   didn't ask?
  18            THE COURT:  You think that's a proper question, Mr.
  19   Garbus?
  20   Q.  When do you hope to learn when there will be information
  21   about whether a movie file reveals a decryption technique?
  22            MR. COOPER:  Objection, your Honor.
  23            THE COURT:  Overruled.
  24   A.  In the near future.
  25   Q.  Is the near future sometime this year or next year?


                                                                717

   1   A.  I would say that was subjective as to what you would
   2   qualify "near."
   3   Q.  You used the word.  What do you mean by that?
   4   A.  Hopefully within the year.
   5   Q.  Now, do you know of any techniques that are being
   6   developed by the movie studios or the MPAA to stop the
   7   transmission of unauthorized movies over the Internet?
   8   A.  I have no specific knowledge.
   9   Q.  Does the word "digital transmission" mean anything to you?
  10            MR. COOPER:  Relevancy and scope, your Honor.
  11            THE COURT:  Sustained.
  12   Q.  By the way, do you in the course of your investigation use
  13   informants?
  14   A.  Yes, I do.
  15   Q.  And are these informants used to determine facts for your
  16   investigation?
  17   A.  They contribute intelligence.
  18   Q.  And has any of the intelligence that has been contributed
  19   indicated to you that DeCSS is used in any way for any illegal
  20   copying?
  21   A.  Yes, it does.
  22   Q.  Where is that found, that intelligence?
  23            MR. COOPER:  Your Honor --
  24   Q.  Is that in any documents?
  25            THE COURT:  What is it, Mr. Cooper?


                                                                718

   1            MR. COOPER:  We had an understanding with respect to
   2   the specifics of investigations and, in particular, the
   3   informants, at least I understood we did with opposing
   4   counsel.  I am just wanting to make sure that that last
   5   question is limited to whether the witness has copies of
   6   informing as opposed to what the details of the investigation
   7   are.
   8   Q.  Let me make it clear, I am not interested in any
   9   informants's names and I don't want to you give me any
  10   informants's names.
  11            Have you ever soon a document from an informant -- by
  12   the way, how many informants do you use in the New York
  13   office?
  14   A.  In the New York office?
  15   Q.  Yes.
  16   A.  There are no informants in the New York office.
  17   Q.  How about Washington?
  18   A.  Informants in the Washington office?
  19   Q.  How many informants does the MPAA have in the United
  20   States?
  21   A.  I don't know.
  22   Q.  How many informants does the MPAA have in Encino,
  23   California?
  24   A.  Zero in Encino, California.
  25   Q.  Where are the informants located?  I don't want to know


                                                                719

   1   cities, just general areas.
   2   A.  They are around the world.
   3   Q.  Have any of these informants ever given you a written
   4   document that shows that a DeCSS film was ever on the Internet
   5   or was ever sold or copied?
   6   A.  Not specifically.
   7   Q.  How much money does the MPAA spend each year in its piracy
   8   efforts?
   9   A.  I don't know.
  10   Q.  How many people -- by the way, where are you located?
  11   A.  Encino.
  12   Q.  And how many people are there in your office?
  13   A.  Approximately 120 or so.
  14   Q.  And how many of those people do you supervise?
  15   A.  Directly?
  16   Q.  Yes.
  17   A.  Four or five.
  18   Q.  How many people do you supervise indirectly?
  19   A.  It depends on the investigation.
  20   Q.  With respect to the DeCSS investigation.
  21   A.  It depends on which site offering DeCSS.
  22   Q.  Is there any investigation that the MPAA is making of
  23   2600.com?
  24   A.  To the extent we filed this lawsuit.
  25   Q.  Other than that?


                                                                720

   1            MR. COOPER:  Your Honor, I believe the witness's
   2   testimony has been that after a certain point in her
   3   investigation she turned it over to legal and this lawsuit
   4   resulted.  He is asking outside of this lawsuit?
   5            MR. GARBUS:  I will now go before the lawsuit.
   6   Q.  Prior to January 13, was there an investigation of
   7   2600.com?
   8   A.  Under the direction of the legal department.
   9   Q.  And do you know when that investigation began?
  10   A.  I can't give you an exact date.
  11   Q.  Now, you say, as I understood it -- where did you get
  12   DeCSS from in the first instance?
  13   A.  I don't recall.
  14   Q.  Did you say you got it off Slashdot?
  15   A.  No, I did not.
  16   Q.  Do you know why 2600.com was the only person sued in this
  17   lawsuit?  Is there anything that you know, as a result of any
  18   conversations you had prior to January 13, why Mr. Goldstein
  19   and 2600.com, along with the other two defendants, were being
  20   made the subject of this suit?
  21            MR. COOPER:  To the extent the witness has any
  22   information on this subject, it is plainly privileged.
  23            THE COURT:  Sustained.
  24   Q.  What is the budget of your department?
  25   A.  I don't know.


                                                                721

   1   Q.  What is the budget of the antipiracy department of the
   2   MPAA?
   3   A.  I don't know.
   4            THE COURT:  Mr. Garbus, I have let you go on for a
   5   long period of time because it is now reasonably clear to me
   6   that the object of this morning's exercise, in at least some
   7   part, is simply to fill up hours that you want to fill up.
   8   That's my perception of it anyway.  We have gotten down nearly
   9   to the color of the carpet in the office and what brand of
  10   coffee is in the coffee machine.  I don't see the relevance of
  11   any of it.  If there is any, I would like to hear it now.
  12            MR. GARBUS:  I would like to know -- I think it's
  13   relevant.  The MPAA has made allegations about DeCSS as a
  14   piracy tool.  As I understand it, DeCSS is used primarily for
  15   the Linux machine; that with respect to piracy or illegal
  16   copying, that it is the other utilities that are used, and
  17   that the reason that DeCSS is the subject of this lawsuit is
  18   not so much related to piracy but it related to the use by
  19   Linux and other open source people of DeCSS which allows it to
  20   play DVDs.
  21            In other words, the argument that we have been making
  22   since the beginning of this case is that this is not a piracy
  23   case, this is not an illegal copying case.  Rather, this is a
  24   monopoly case where the DVD licensees control who shall play
  25   DVD hardware.


                                                                722

   1            THE COURT:  And would you point to the pleading that
   2   you have filed that makes this a monopoly case, Mr. Garbus.
   3            MR. GARBUS:  My memory is it's in the answer.  I
   4   don't have the answer before me.
   5            THE COURT:  Yes.  Well, I have looked at it since
   6   yesterday, and it is not there.  What you allege in the answer
   7   is that Congress's enactment of the DMCA and the application
   8   of that statute, presumably by the courts of this country,
   9   violates the antitrust laws.
  10            MR. GARBUS:  If --
  11            THE COURT:  Excuse me.  That is the only antitrust
  12   allegation you have made in any pleading in this case.  Now, I
  13   suspect that you know, but in any case, I will say, that it is
  14   impossible as a matter of law for the Congress of the United
  15   States, by enacting a statute, or for a court of the United
  16   States, by applying it, to violate the antitrust laws.
  17            If there were an inconsistency between the DMCA and
  18   the antitrust law, standard principles of law that have been
  19   established in this country for 200 years, require the result
  20   that because the Sherman Act was enacted in 1890, the Clayton
  21   Act in 1914 and the Robinson-Patman Act in 1936, and the DMCA
  22   in 1998, that the antitrust laws, to whatever extent they may
  23   be inconsistent with the DMCA, are repealed.
  24            Now, I don't see any inconsistency, and if there
  25   were, it's not an issue in this lawsuit and let's just get on


                                                                723

   1   with this lawsuit.
   2            MR. GARBUS:  I don't think it's an appropriate
   3   response at this time.  We have submitted briefs to you on
   4   that question.  I don't believe that the DMC --
   5            THE COURT:  What brief is that, Mr. Garbus?  Could
   6   you bring my attention to it, please?
   7            MR. GARBUS:  Yes.  We have a brief where we talk
   8   about Sega, Betamax and the Connectix case.  I think it's the
   9   reply brief, and it's my memory that in that brief we talk
  10   about the holdings in those three cases, and we discuss the
  11   issue of whether or not the DMCA has in effect overruled those
  12   three case.
  13            It is our view that it has not.  And in each of those
  14   three cases, as I interpret the cases, they had arguments
  15   about fair use, but they also had arguments under general
  16   copyright discussion about monopoly, and we have cited those
  17   cases in our brief and that has been part of our argument.
  18            THE COURT:  I stand fully by everything I said.
  19   Let's move on.  And if there is any relevance to this line of
  20   examination, I still haven't heard it, and it is now 12:25,
  21   and I am warning you now that your time with this witness is
  22   running out.  And if you don't get to something relevant, I
  23   will simply terminate the examination after fair warning.  You
  24   have had part of that warning now.
  25            MR. GARBUS:  I will stop examining this witness.


                                                                724

   1            THE COURT:  I have not terminated your examination.
   2   If you wish to stop now, that's your choice.
   3            Do you wish to stop now?
   4            MR. GARBUS:  I will ask two or three questions.
   5   BY MR. GARBUS:
   6   Q.  When you tested DeCSS, did you apply DivX?
   7   A.  No.
   8   Q.  Have you ever applied DivX?
   9   A.  No, I have not.
  10   Q.  Do you know what DivX is?
  11   A.  Yes, I do.
  12            MR. GARBUS:  Excuse me.  I have no further questions
  13   at this time.
  14            THE COURT:  Are you through with the witness, Mr.
  15   Garbus?
  16            MR. GARBUS:  Yes, I am.
  17            THE COURT:  Is there any redirect?
  18            MR. COOPER:  No, your Honor.
  19            THE COURT:  The witness is excused.
  20            (Witness excused)
  21            THE COURT:  Your next witness, Mr. Gold?
  22            MR. GOLD:  As I said before, this was our last
  23   witness.  However, there are some disputes about documents
  24   still, we hoped, would have been resolved last night, but I'm
  25   told they weren't.  So prior to the resolution of those


                                                                725

   1   document issues, which we would like to put in on our case, we
   2   are not finished with the complaint, we are prepared to
   3   address them.
   4            MR. SIMS:  I have an informal agreement with
   5   Mr. Hernstadt and Mr. Atlas that, subject to your Honor's
   6   permission, we have given them last night a list of the
   7   exhibits, a subset of those we had marked, that we would like
   8   to move in.  They can't get to their objections until either
   9   tomorrow or, they said this morning, more likely Monday.
  10            So I think what Mr. Gold is saying is that we would
  11   like to close subject to the offering of that evidence.  I
  12   believe that they will agree to much of it and then that will
  13   narrow the amount of argument over the remaining arguments
  14   that would be made at the time that we offer that evidence.
  15            THE COURT:  Is that satisfactory, Mr. Garbus?
  16            MR. GARBUS:  I have to speak to Mr. Hernstadt.  I was
  17   not part of these conversations.
  18            MR. ATLAS:  We were provided by Mr. Sims with their
  19   exhibit list this morning.  I have gone through and taken some
  20   notes.  I have narrowed down the issues.  I would agree that
  21   you should keep their eyes open.  To the limited extent that
  22   they will submit certain exhibits and certain deposition
  23   designations, that's fine with us.  We will try and work those
  24   issues out tomorrow and over the weekend.
  25            THE COURT:  Okay.  Plaintiff rests subject to


                                                                726

   1   deposition excerpts and exhibits.
   2            MR. GOLD:  Thank you, your Honor.
   3            THE COURT:  Mr. Garbus?
   4            MR. GARBUS:  We would be prepared to put on a witness
   5   after lunch.
   6            THE COURT:  2 o'clock.
   7            (Luncheon recess)
   8            (Continued on next page)
   9
  10
  11
  12
  13
  14
  15
  16
  17
  18
  19
  20
  21
  22
  23
  24
  25


                                                                727

   1                 A F T E R N O O N   S E S S I O N
   2                             2:00 p.m.
   3            THE COURT:  We are missing somebody.  I guess not.
   4            Counsel, I gather you filed a motion in the Court of
   5   Appeals yesterday to stay the trial on the ground that I
   6   should not sit.  Does anybody know what the status of that is?
   7            MR. GARBUS:  It has been denied.
   8            THE COURT:  It has been denied.  All right.  Call
   9   your first witness.
  10            MR. HERNSTADT:  Defendants call Edward Felten.
  11            MR. GOLD:  Your Honor, may I make a motion with
  12   respect to this witness?
  13            THE COURT:  Yes.
  14            MR. GOLD:  Your Honor, it would appear that
  15   Mr. Felten is a distinguished professor of computer sciences
  16   at Princeton and he has submitted one and a half page
  17   declaration, six lines of which talk about what he is going to
  18   testify about.
  19            I would rather hand this up to you so you could see
  20   the six lines for yourself.
  21            THE COURT:  Mr. Felten, why don't you have a seat for
  22   a second anywhere you like.
  23            MR. GOLD:  May I approach, your Honor?
  24            THE COURT:  Yes.
  25            MR. GOLD:  This is the declaration.  I'm referring to


                                                                728

   1   page 2.
   2            THE COURT:  Okay.  I have read it.
   3            MR. GOLD:  This is one of several cryptographers who
   4   have submitted affidavits and the subject listed here I
   5   respectfully submit, and as we set forth in our motion in
   6   limine, have nothing to do with the charges we have made
   7   against the defendant.
   8            THE COURT:  The very first item, the function
   9   similarities and/or differences between source and object
  10   code, I take it that that really is a foundation of the whole
  11   case, right?  I mean unless you know that, you don't know
  12   anything about this case.
  13            MR. HERNSTADT:  Yes, your Honor.
  14            MR. GOLD:  The second, third and fourth, your Honor?
  15            THE COURT:  Well, let me hear from Mr. Hernstadt.
  16            MR. HERNSTADT:  About the relevance of this witness,
  17   your Honor?
  18            THE COURT:  The relevance of items 2, 3 and 4 on this
  19   statement.
  20            MR. HERNSTADT:  The relevance of items 2, 3 and 4 go
  21   into two parts of our case, one is the First Amendment
  22   argument that we make.  All of this is testing, all of the
  23   research that comes out of this testing is stuff that is
  24   material that is published and discussed and part of a
  25   discourse.  DeCSS is an example of the type of program that


                                                                729

   1   fits into the categories as set forth here.
   2            THE COURT:  That fits into?
   3            MR. HERNSTADT:  The categories that are set forth
   4   here, 2, 3, 4.  If a law is passed that permit the silencing
   5   of discussion about a program because it does one thing, if
   6   it's speech, then the First Amendment is violated.  That's an
   7   argument we have made.  I think in order to understand that,
   8   it is important that you understand the nature of the
   9   research, the nature of the interaction, the accelerated
  10   sessions.  It's not just publications.  It is a more
  11   complicated interaction.  And also, the benefit to the public
  12   of the discourse, of the open public discourse.
  13            MR. GOLD:  Your Honor, one of the exhibits we were
  14   handed during lunch, that I assume they gave us because they
  15   were going to try to present in court, is a letter that a
  16   bunch of scholars presented to Congress before they passed the
  17   statute.  I think the defendants are mistaking this for a
  18   legislative body.  They don't like the statute --
  19            THE COURT:  We know they don't like the statute.
  20            MR. GOLD:  Well, that's what 2, 3 and 4 --
  21            THE COURT:  I never met a defendant that liked the
  22   statute under which they were being sued.  Most drug dealers
  23   have a problem with the narcotics laws.  I didn't mean to
  24   compare these people to drug dealers by any stretch.  Perish
  25   the thought.  Just to illustrate the point.  Most corporations


                                                                730

   1   don't like the antitrust laws.  Do you like that better?
   2            MR. GOLD:  If we get into 2, 3 and 4, you will be
   3   into a lot of things I think you'll find have no relevance at
   4   all.
   5            THE COURT:  Well, look, I'm prepared to be educated
   6   to a point, and if I find that it's relevant and useful, I
   7   will hear more.  If the only objection here is relevance, I am
   8   prepared to go a little bit of a way to find out whether I
   9   think there is really something to it.
  10            MR. GOLD:  It's relevance, and it's the fact that
  11   under the statute, on the face of the statute as we have set
  12   forth, your Honor, there can be no cryptographic research
  13   exception for these defendants.
  14            THE COURT:  No, but it is fair to say that in my
  15   preliminary injunction ruling on the basis of no record at all
  16   other than what you have told me, I came to the conclusion all
  17   by myself that given the assumption that code has some
  18   expressive content, there needs to be at some point
  19   potentially a balancing with respect to constraining the
  20   publication, because any constraint on the publication, given
  21   the assumption, involves a First Amendment value.
  22            Now, I think, therefore, that I need to hear
  23   potentially evidence of this character in order to come to an
  24   informed judgment about how to balance, instead of being in
  25   the position that I found myself in in January, through no


                                                                731

   1   fault of the plaintiffs, of basically having on the one side
   2   your contention that this program did nothing but rip off your
   3   product and the defendants' position that it didn't matter,
   4   the First Amendment was a complete obstacle.
   5            MR. GOLD:  In terms of the sole purpose of the
   6   product, the defense has admitted that the sole purpose was to
   7   serve DeCSS.
   8            THE COURT:  I understand that, but there are other
   9   issues here, and I am going to allow the witness to testify.
  10   I'm not sure until I hear it how much of what he has to say is
  11   useful, but I'm certainly going to start listening.
  12            MR. GOLD:  Thank you.
  13            MR. HERNSTADT:  Your Honor, just to make the record
  14   clear, we have never submitted that the sole purpose is to
  15   circumvent.  We have submitted evidence that one of its
  16   purposes is to decrypt.  But that's not the same thing as
  17   circumvent.
  18            THE COURT:  I know.  You are a good lawyer,
  19   Mr. Hernstadt.
  20            MR. HERNSTADT:  Thank you, sir.
  21            THE COURT:  It certainly doesn't serve the purpose of
  22   allowing people to play Space Invaders.  Okay.  Let's go with
  23   the witness.
  24    EDWARD FELTEN,
  25        called as a witness by the Defendant,


                                                                732

   1        having been duly sworn, testified as follows:
   2   DIRECT EXAMINATION
   3   BY MR. HERNSTADT:
   4   Q.  Good afternoon, Professor Felten.  Could you tell us what
   5   your education in the area of computer science is?
   6   A.  Sure.  My education in general, I received a bachelors
   7   degree from CalTech in 1985 and in 1991, a masters degree, in
   8   1993, a Ph.D. in computer science, both of those at the
   9   University of Washington.
  10   Q.  And in the course of your studies, were you awarded any
  11   honors?
  12   A.  Yes.  My graduation from CalTech was a graduation with
  13   honors, and I received an award for the -- for outstanding
  14   research outside the classroom at CalTech, and when I was in
  15   graduate school, I received an AT&T graduate fellowship and
  16   also a Mercury 7 fellowship.
  17   Q.  What was the AT&T graduate fellowship?
  18   A.  This is a merit-based fellowship awarded by AT&T to a few
  19   computer science students at top schools, and it is basically
  20   a full ride through graduate school.
  21   Q.  After you completed graduate school, where did you go?
  22   A.  I joined the faculty at Princeton.
  23   Q.  Where are you teaching now?
  24   A.  Still at Princeton, the computer science department.
  25   Q.  What is your present position?


                                                                733

   1   A.  I'm an associate professor of computer science.
   2   Q.  What courses are you teaching?
   3   A.  The courses I have taught in the last few years include
   4   introduction to information security, a course on computer
   5   networks and distributing computing, and some special topics
   6   courses related to computer security and some other topics.
   7   Q.  Do you know what DeCSS is?
   8   A.  Yes.
   9   Q.  Do you teach, use DeCSS in any of your classes?
  10   A.  Yes, I used it in my introduction to information security
  11   course this last spring.
  12   Q.  What are your primary areas of research?
  13   A.  I do research in a number of areas.  The main one is
  14   computer security.  I also do research related to operating
  15   systems, to Internet software and some research related to
  16   computer networks.
  17   Q.  Have you been given any honors or awards in connection
  18   with your research?
  19   A.  Yes.  These include some fellowships, a Sloan fellowship,
  20   a National Young Investigator Award from the National Science
  21   Foundation, and also some "Best Paper" awards at conferences.
  22   For example, at the symposium on operating system principles
  23   in 1997, which is the most prestigious conference in operating
  24   systems which meets every two years, I received the "Best
  25   Paper" award at that in 1997, so that indicates -- that is


                                                                734

   1   said to indicate that I had written one of the two or three
   2   best papers in the area of operating area research in that
   3   area.
   4   Q.  Have you authored or coauthored a number of publications?
   5   A.  Yes.  At least 50 articles in the scholarly -- at least 50
   6   scholarly publications in the form of articles plus two books
   7   and some magazine articles.
   8            MR. HERNSTADT:  Your Honor, may I approach the
   9   witness?
  10            THE COURT:  Yes.
  11   Q.  Professor Felten, I have handed you Exhibit I believe BBP?
  12   A.  Yes.
  13   Q.  Could you identify that?
  14   A.  This is a declaration that I filed earlier in this case
  15   and attached to it is a copy of my CV.
  16   Q.  Does your CV list your publications and articles?
  17   A.  Yes, it does.
  18            MR. HERNSTADT:  Your Honor, rather than spending more
  19   time with that, I would move this into evidence.
  20            MR. COOPER:  No objection, your Honor.
  21            THE COURT:  Are you including within the offer the
  22   attached paper on Protocol Failure Analysis in Applied
  23   Cryptography Curriculum?
  24            MR. HERNSTADT:  Yes, your Honor.
  25            THE COURT:  Mr. Cooper?


                                                                735

   1            MR. COOPER:  Your Honor, I'm not familiar with that
   2   article as having been part of the declaration.  Certainly I
   3   don't have a copy in what I have here from Dr. Felton's --
   4            THE COURT:  I will receive that part of the exhibit
   5   which consists of the declaration itself and the attached CV
   6   but not at this point the article.
   7            MR. HERNSTADT:  Very good, your Honor.  Actually I
   8   don't have it either.
   9            MR. COOPER:  I don't believe it was attached.
  10            THE COURT:  It sure is, stapled to the one
  11   Mr. Hernstadt just handed me.
  12            MR. COOPER:  We have never seen it, your Honor, to
  13   the best of our knowledge.
  14            THE COURT:  That just happened.  Let's go.
  15            (Defendant's Exhibit BBP received in evidence)
  16   Q.  Do you do any other work outside of teaching and research?
  17   A.  I do consulting for a number of companies and others.
  18   Some of that consulting is technical consulting, advising
  19   companies, particularly in the security field.  I serve on
  20   technical advisory boards for six or seven companies, most of
  21   them start-ups in the security area, and I also do some
  22   consulting related to litigation.
  23   Q.  Have you ever testified in a case in connection with your
  24   consulting?
  25   A.  Yes, I testified twice in the Microsoft antitrust case in


                                                                736

   1   front of Judge Jackson, and in that case, I also was deposed
   2   twice and filed two declarations.
   3   Q.  And did the court take your testimony as an expert?
   4   A.  Yes.  The Department of Justice designated me as an expert
   5   and Microsoft did not object, so the judge accepted my
   6   testimony on that basis.
   7   Q.  What were the subject matters of your testimony in that
   8   case?
   9   A.  I testified in general about operating systems, web
  10   browsers and Internet software.  I testified specifically
  11   about the Microsoft products that were at issue in that case,
  12   Windows 95, Windows 98 and Internet Explorer, the relationship
  13   among them.  I testified about general issues relating to the
  14   design of software and how software could have been designed
  15   in ways other than what Microsoft did and a few other topics.
  16            I should also add that I also testified about the
  17   security implications of what Microsoft had done in the design
  18   of their products.
  19   Q.  In case anyone in the room doesn't know, what was the
  20   result of that case?
  21   A.  The --
  22            MR. COOPER:  Relevancy, your Honor.
  23            THE COURT:  Sustained.
  24   Q.  Are you familiar with the Linux operating system?
  25   A.  Yes.


                                                                737

   1            THE COURT:  Before we get to that, I want to ask the
   2   witness one question.
   3            I had another lawsuit at some point in which I
   4   thought about but ultimately did not appoint a court expert in
   5   a computer science area, and I remember that somebody referred
   6   me to somebody at Princeton.  I never engaged any "expert."
   7   Was that you?
   8            THE WITNESS:  I don't recall ever being contacted.
   9            THE COURT:  I don't remember the name either.
  10            MR. GARBUS:  It was another one of our experts.
  11            THE COURT:  Okay.
  12   Q.  Do you use the Linux operating system?
  13            THE COURT:  Who was it, Mr. Garbus?
  14            MR. GARBUS:  I think it is Larry Peterson.
  15            THE COURT:  I don't remember the name.
  16            MR. GARBUS:  I don't think you and he ever spoke.
  17            THE COURT:  I think that's probably right.  I think
  18   there may have been an e-mail or two.
  19            Go ahead.
  20   Q.  Do you use the Linux operating system?
  21   A.  Yes, I do on a regular basis.  I have one in my home, in
  22   my office, and I have at least two in the lab that my research
  23   group uses.
  24   Q.  And do you also have a Windows computer?
  25   A.  Yes, I also have Windows computers in each of those places


                                                                738

   1   as well.
   2   Q.  Is one of those two operating systems your preferred
   3   operating system?
   4   A.  I think it depends what your purpose is.  I think that in
   5   general, Linux is faster, more stable and more flexible than
   6   Windows, and so if that's what I'm after, then that's the
   7   system of choice.
   8            The big advantage of Windows is that it has support
   9   for a lot more applications, and if you need one of those
  10   applications that's not available on Linux, then I would
  11   choose Windows for that reason.  I think that if both
  12   operating systems had equivalent sets of applications, I would
  13   choose Linux.
  14   Q.  What programming languages do you use in your work?
  15   A.  A number of them.  Like most computer scientists, I use
  16   whatever language fits the job, and so this would include
  17   languages like C, C++, Java, Pearl, NL and a number of others.
  18   Q.  And is there a connection between programming languages
  19   and what has been referred to as case, source code and object
  20   code?
  21   A.  Sure.  Source code, I think of it as a general term
  22   referring to certain kinds of computer languages.  The form in
  23   which the person typically writes the code directly is often
  24   referred to as source code, so think of source code as being
  25   one kind of computer language.


                                                                739

   1            MR. HERNSTADT:  Your Honor, the defense would offer
   2   Professor Felten as an expert.
   3            THE COURT:  Just as I told the other side, it's not
   4   necessary.  If there is an objection to an opinion he offers,
   5   we will deal with it then.
   6            MR. HERNSTADT:  Very good.  Thank you, your Honor.
   7   Q.  You said earlier that one of your primary areas of
   8   research is security.
   9            THE COURT:  Does that mean you're leaving source code
  10   and object code?
  11            MR. HERNSTADT:  No.  I'm coming back.
  12   Q.  What is your main focus of scholarship and teaching in the
  13   area of security?
  14   A.  I, in my research group, do two things that I think
  15   distinguish us from -- there are two ways in which we try to
  16   distinguish our work.  One is in focusing on the security of
  17   widely used software, software that is deployed on a lot of
  18   people's computers and that a lot of people are relying on.
  19   The other is in trying to take a sort of holistic approach, to
  20   consider the whole picture of what is involved in security at
  21   a system level as opposed to focusing on the microlevel on
  22   particular components.
  23   Q.  Does this research involve any reverse engineering?
  24   A.  Yes, we use reverse engineering quite a bit.  One of the
  25   things that we do is do detailed security studies of products


                                                                740

   1   that are deployed in the field, and in doing that, one needs
   2   to understand how the product works, what it does, whether the
   3   things that the manual says are actually true, and so on.  To
   4   do that, you need to examine the software while it is running
   5   in a sort of bit-by-bit fashion, and that is reverse
   6   engineering.
   7   Q.  Does it involve encryption research as well?
   8   A.  Yes, many of the systems that we study involve encryption
   9   and do encryption, so encryption is part of that holistic
  10   picture that I talked about.
  11   Q.  You described taking apart programs, looking at programs
  12   very precisely.  Is that what is known as hacking?
  13   A.  We, the term "hacking" has been used in a lot of different
  14   ways.  Back when I started out in computer science, the term
  15   "hacking" would have been almost universally applied to that.
  16   In other words, hacking at one time was a term that was used
  17   just to refer to playing around with computer systems, trying
  18   to get them to do things, sort of analogous to tinkering if
  19   you will.  A person who was particularly good at that would be
  20   called a hacker.
  21            Then at some point in time, people who used computers
  22   for criminal purposes started to call themselves hackers,
  23   tried to apply that complimentary word to themselves, and the
  24   press picked it up and now you hear the word used especially
  25   in the public and the press in a negative way.  So when I hear


                                                                741

   1   someone use that word, I really have to look at the context to
   2   see what they mean.
   3   Q.  Could you give us an example of a security research
   4   project -- before you get to that, before when you were
   5   talking about the work you were doing you used the word "we."
   6   What did the "we" refer to?
   7   A.  We refers to a research group which consists of myself and
   8   at various times a number of graduate students, perhaps some
   9   undergraduate students, sometimes faculty colleagues get
  10   involved.  So what it means is really a group of people headed
  11   by me.
  12   Q.  Could you give an example of a security research project
  13   that you have worked on?
  14   A.  Sure.  One project that we spent a number of years on
  15   is -- started out with a study of the security of JAVA.  Java
  16   is a programming language and a system which was deployed by
  17   itself and also in conjunction with web browsers, and because
  18   of technical reasons, which I'll skip -- unless you really
  19   want to hear them -- the security of Java was important for
  20   the overall security of web browsers and, hence, the security
  21   of people browsing the web, and so we started out in this
  22   project by doing a detailed study of Java to try to understand
  23   whether it provided the security guarantees that the vendors
  24   of Java systems said it did and, if not, why not.  And then we
  25   moved on from there to deal with the implications of what we


                                                                742

   1   had found.
   2   Q.  Which vendor's version of Java did you look at first?
   3   A.  We started out looking at the version from Sun
   4   Microsystems because at the time we started, that was by far
   5   the most popular version.  Later on Netscape came out with
   6   their own version of Java and we began to study that and
   7   Microsoft came out with their own version and we began to
   8   study that.  For most of the project, we were looking at all
   9   three implementations because those formed by far the bulk of
  10   the systems that were actually deployed.
  11   Q.  Do researchers request the permission of a vendor in
  12   advance before they start looking at a program?
  13   A.  No.  We did not feel that we needed permission from anyone
  14   to do what we were doing, and certainly we were happy to talk
  15   to the vendors about what we were doing if they wanted to
  16   engage us in a dialog, but we did not feel we needed their
  17   permission to do it.
  18   Q.  Did your research reveal vulnerability in the various
  19   implementations of Java?
  20   A.  Yes, quite a few.  Over the course of about two to three
  21   years, we found roughly a dozen of what I would consider
  22   serious security vulnerabilities in various versions of Java.
  23   Q.  What did you do with the results you found?
  24   A.  We do a number of things.  We discuss and publish the
  25   results publicly.  We discuss these results with the vendors


                                                                743

   1   in order to help the vendors improve their products.  We --
   2   and we use them to feed into and motivate our research in the
   3   future, and I also use them in teaching.
   4   Q.  Where are the results published?
   5   A.  They are published in a number of places and in a number
   6   of different ways.  Because there are a number of audiences
   7   who we would like to reach and who I think are interested in
   8   hearing about this, ranging from the public, the average user
   9   of this technology, on up to the sort of very advanced
  10   research community, so we use the method that in each case
  11   makes sense for talking to that constituency.
  12            For the research community, we will publish papers in
  13   journals and so on, give talks at conferences.  For the
  14   public, we will put articles on your website, talk to the
  15   press, whatever we think will help convey the information we
  16   have learned to the people who need to know it.
  17   Q.  When you describe the vulnerabilities, do you do so in a
  18   specific way, detailing what is wrong with the program?
  19   A.  Yes, we think it is important that the information about
  20   the vulnerabilities is available to people who have an
  21   interest in knowing about it.  We think the public benefits
  22   from that kind of discussion in a number of ways, and so in
  23   each situation, we are as specific as we think we need to be
  24   in order to fully inform the public in the research community.
  25   Q.  Do you include code sometimes when you release the


                                                                744

   1   results?
   2   A.  Sometimes.  Sometimes we do.  It depends really on the
   3   circumstances.  It depends on what we think is necessary and
   4   appropriate in order to communicate our results.
   5   Q.  Now, looking at the Java project, did you disclose to the
   6   vendors whose products you looked at the result you found
   7   before you published them to the general public?
   8   A.  Well, we tried in every case.  We were not always able to
   9   establish a communication with the vendor that was useful.  In
  10   at least one instance, we tried to reach the vendor, tried to
  11   communicate to the vendor.  What we found was we couldn't get
  12   through the public relations protective screen that they put
  13   up in front of their engineers.  In other instances, we did
  14   disclose to the vendor because we thought under the
  15   circumstances that was the -- that was an effective way to
  16   proceed in order to serve the public interest.  But we always
  17   disclosed the results of our research to the public very
  18   promptly.
  19   Q.  Why do you do that?
  20   A.  Well, we think we have a responsibility to do it.  Early
  21   on in the process of our discovering these vulnerabilities and
  22   dealing with them, I was concerned about what was the right
  23   way to behave, what was the -- what was the ethical thing to
  24   do in this situation.  And so I went and I spoke to an
  25   ethicist at the university, a philosopher who studies ethics,


                                                                745

   1   and I had lunch with her a few times and tried to sort through
   2   what was the right thing to do in these type of situations.
   3            The one message I took away from that was our prime
   4   responsibility ethically in this situation was to the public,
   5   to make sure that the public had the information they needed
   6   in order to make good decisions about what to do.  And so my
   7   belief for a number of reasons is that the public is served by
   8   the disclosure of this information to all of the community
   9   that I talked to, ranging from the public itself down to
  10   researchers.
  11   Q.  Okay.  What other benefits are there from publishing the
  12   result of your research?
  13   A.  I think there are a bunch of benefits that accrue to the
  14   public as a result of this.  First of all, there are the more
  15   direct benefits.  The public, after all -- first, the public,
  16   after all, is using these systems, and they -- and the public
  17   is making decisions about whether to use a particular
  18   technology, and I think the public benefits from making those
  19   decisions based on accurate information.
  20            That is, if someone is deciding whether to deploy --
  21   whether to install a Java virtual machine on their computer,
  22   they would benefit from knowing about the security of it.  If
  23   someone is deciding whether to buy a DVD player, they would
  24   benefit from knowing about the security of the -- about the
  25   strength of the security mechanisms installed in it.


                                                                746

   1            For example, if I know that the DVD players have weak
   2   security in them, I might decide that maybe I don't want to
   3   buy a DVD player now, maybe some new technology with better
   4   security is going to come along in a year and I will have to
   5   throw my DVD player away.
   6            So knowing about the security, knowing about whether
   7   the security representations made by the vendors of these
   8   systems is accurate, and knowing about what are the risks of
   9   deploying a particular product, and understanding how things
  10   are likely to play out in the future, all help the public.
  11   And that comes from having accurate information about the
  12   security level of the product that they are using.
  13            That principle really applies to anyone who is
  14   thinking about investing in a technology in any way.  So it
  15   might be the member of the public who is thinking about buying
  16   something which is going to use that technology.  It might be
  17   someone who is thinking of releasing content in the DVD
  18   format.  It might be someone who is making a movie in the case
  19   of DVDs, understanding what they are doing when they sign away
  20   to someone the right to make DVDs with their work on it.  It
  21   might be someone who is thinking of going into a partnership
  22   with a company who is using a particular technology.  All of
  23   these people can make better decisions and more informed
  24   decisions if they actually know what are the implications of
  25   the decisions they are making.


                                                                747

   1            An additional benefit to the public along the same
   2   lines is that over time, the public learns which products tend
   3   to have problems, which companies tend to release products
   4   that have problems, and they tend to develop a sense of which
   5   kinds of technology are likely to have good security and which
   6   are not, and that in the long run helps people understand what
   7   to do.  If they can see the next security problem coming, then
   8   they can also make better decisions.
   9   Q.  Do you use the results you publish in teaching?
  10   A.  Yes.  I believe rather strongly that in teaching students
  11   about computer security, how -- to design secure systems, you
  12   have to understand how systems really fail in practice, and I
  13   think there is a good analogy here to the engineering of
  14   buildings to stand up to earthquakes.  If you are going to
  15   design a building that can stand up to an earthquake and not
  16   fall down, or you want to teach someone to do that, you have
  17   to understand how buildings actually fall down in earthquakes,
  18   which parts break and why, which of the engineering practices
  19   in building the buildings tend to lead to strong buildings and
  20   which don't.  You have to look at that experience because
  21   that's the only way you can keep your education, your
  22   understanding from drifting off into theoretical irrelevance.
  23   You need to understand how things actually break in practice
  24   so you can avoid it in the future.
  25   Q.  Now, in publishing your results, have you ever published


                                                                748

   1   code for a program that would exploit the vulnerabilities you
   2   have discovered in your research?
   3   A.  Well, I make a distinction here between publishing code
   4   that demonstrates the existence of a vulnerability and
   5   publishing code that actually lets you harm someone.  That is,
   6   if you can demonstrate that a vulnerability exists, that that
   7   system does not do what the people selling it say it does,
   8   then that is a public good.  And if you can do that without
   9   providing all of the steps that someone needs to actually hurt
  10   someone, then so much the better.  So there is an important
  11   distinction here.  We do and have published code that
  12   demonstrate the existence of vulnerabilities, but we have not
  13   published code that takes all the steps necessary to harm
  14   someone.
  15   Q.  Now, you mentioned before that you know what DeCSS is.
  16   A.  Yes.
  17   Q.  Could you tell us, what is DeCSS?
  18   A.  The DeCSS is a program that allows material on a DVD
  19   encrypted with the CSS system to be decrypted essentially.
  20   Q.  When did you learn about DeCSS?
  21   A.  I learned about DeCSS -- I don't recall the exact date --
  22   I would estimate it was maybe in January roughly.  And I
  23   learned about it from reading reports in the press and also
  24   from seeing Frank Stevenson's paper about it.
  25   Q.  Did you examine DeCSS to understand what it did?


                                                                749

   1   A.  Yes.  At the time I got a copy of Frank Stevenson's paper,
   2   I got a copy of DeCSS, I read them both side by side to
   3   understand what was going on, to verify for myself that what
   4   Mr. Stevenson had said and what was reported in the press was
   5   generally accurate.
   6            What Mr. Stevenson said was precisely accurate.  What
   7   was said in the press was generally accurate.  Just to
   8   understand what was going on, it was another one of those
   9   examples I talked about, about how systems fail.
  10   Q.  When you refer to Mr. Stevenson's paper, are you talking
  11   about Frank Stevenson's cryptoanalysis of the CSS algorithm?
  12   A.  Yes, that's what I meant.
  13   Q.  Did you learn anything about CSS upon examining DeCSS and
  14   Mr. Stevenson's paper?
  15   A.  Yes, I learned a number of things about it.  First of all,
  16   I learned about how it worked, but I also learned about the
  17   level of -- relative level of security that it offered.  I
  18   learned about what mistakes the people designing it had made,
  19   and that let me move on and think about the implications of
  20   those mistakes.
  21   Q.  Did you identify any particular flaws?
  22   A.  Sure.
  23            MR. COOPER:  Relevancy, your Honor.
  24            THE COURT:  No, I understand the relevance.
  25   Overruled.  This does not go -- at least I'm not taking it on


                                                                750

   1   the issue of robustness.  Go ahead.
   2   A.  Okay.  There are a number of mistakes that the designers
   3   of CSS made, starting out with designing their own
   4   cryptosystem, instead of using a standard well-established one
   5   that was known to be strong.  That is a common beginner's
   6   mistake and something that I advise my students against.
   7            Beyond designing their own cipher, using a 40-bit key
   8   is also a very significant mistake.  It allows the system to
   9   be broken by a brute force attack.  In addition to that, there
  10   was a third, more technical error that the designers made that
  11   Frank Stevenson describes in his paper.  That allows the keys
  12   to be extracted with considerably less work even than a brute
  13   force search.
  14   Q.  Based on your experience, would you describe CSS as a
  15   security system?
  16   A.  Yes, it's a security system in the sense that I use the
  17   term.  I use the term broadly meaning that it's any kind of
  18   system that's intended to control or restrict the use of
  19   anything, so in that sense, it is a security system.
  20   Q.  What does CSS protect?
  21   A.  What it does or what it was intended to do is to -- it was
  22   really two things.  First of all, it was designed to prevent a
  23   CSS-encoded DVD from being played in any player which did not
  24   have the CSS algorithm in it.  Second, it has the effect of
  25   preventing any use other than playing of the material on the


                                                                751

   1   DVD.
   2   Q.  Did it have any -- was it designed or intended to protect
   3   the material in the DVD from being copied?
   4   A.  It did not -- it certainly did not, nor could it have
   5   prevented the encrypted content from being copied to somewhere
   6   else to our disk, to another DVD.
   7            THE COURT:  Could you sit back about five more inches
   8   from the microphone, because whether you get too close, it
   9   reverberates.
  10            THE WITNESS:  Sure.
  11            THE COURT:  Thank you.
  12   Q.  You mentioned before that it prevents a person from having
  13   access to the material on the disk.  Why would a person who
  14   has purchased a DVD want to have access to the material on the
  15   disk?
  16            MR. COOPER:  Objection, your Honor.  It's not
  17   relevant.
  18            THE COURT:  Sustained.
  19            MR. HERNSTADT:  Your Honor, I think this goes to the
  20   various exemptions and other noninfringing uses.
  21            THE COURT:  Maybe it does, but this gentleman is an
  22   expert on computer science, not an expert on why somebody else
  23   might want to have access to a DVD file.
  24            MR. HERNSTADT:  Very good.  May I approach the
  25   witness?


                                                                752

   1            THE COURT:  You may.
   2   Q.  Professor Felten, I am giving you Exhibit BBS which is the
   3   declaration of Professor Appel.  I would ask you to turn to
   4   Exhibit B at the very back.  Is that an article that you
   5   coauthored with Professor Appel?
   6   A.  Yes, it is, it's an article the two of us coauthored which
   7   we submitted to the copyright office in response to a request
   8   for comments related to the copyright office's opinion
   9   regarding the DMCA, and also a slightly modified version of
  10   this will appear -- I should say this, along with a little bit
  11   of explanatory material explaining what the DMCA is and so on,
  12   will appear in the Communications of the ACM Magazine in the
  13   September issue.
  14   Q.  What is that magazine?
  15   A.  Communications of the ACM is sort of the flagship magazine
  16   of the ACM which is the primary professional society for
  17   computer scientists.  Every member of the ACM gets the
  18   magazine.
  19   Q.  What does ACM stand for?
  20   A.  Association for Computing Machinery.
  21   Q.  What do you discuss in this article?
  22   A.  The article discusses the -- the article discusses a
  23   number of reasons why scholars in various disciplines,
  24   including computer science, would want to, and in fact need to
  25   in order to do research, have access to the raw bits, the raw


                                                                753

   1   text, if you will, of a copyrighted work in order to do
   2   various kinds of scholarship that do not infringe copyright.
   3            MR. COOPER:  Your Honor, if I may.  If this testimony
   4   is going to proceed in this direction, it seems to me that
   5   it's outside of the scope of the expertise for which this
   6   witness is offered.  It seems to me to address the drafting of
   7   the DMCA and the desire to have access to material protected
   8   by encryption rather than to the science of cryptography.
   9            MR. HERNSTADT:  I think this article addresses the
  10   scholarly uses to which he would put a program like DeCSS, and
  11   in all of its permutations, the research that he discussed
  12   earlier as well as the need for access to materials, in order
  13   to conduct research.  I also -- it goes to an argument that we
  14   have made and will continue to make that fair use is exempted
  15   and protected activity by the DMCA.
  16            THE COURT:  The question of whether fair use is
  17   exempted by the DMCA requires the reading of the words
  18   Congress put on the piece of paper.  It's not a matter for
  19   each side to bring in witnesses to testify as to their beliefs
  20   on the subject.  So to that extent, I don't think it's a
  21   appropriate.
  22            MR. HERNSTADT:  If I may, I'm not presenting
  23   Professor Felten to discuss his beliefs, but, rather, examples
  24   of the types of activities that he would and has in his
  25   professional life undertaken.


                                                                754

   1            MR. COOPER:  Your Honor, it's not any of the four
   2   topics for which this witness has been identified and it's
   3   plainly outside of the scope for which he has been offered.
   4            THE COURT:  Well, what about that, counsel?
   5            MR. HERNSTADT:  Your Honor, this is within the scope
   6   of his discussion of the relationship between -- excuse me --
   7   of scholarship, the importance of disseminating and making
   8   available information concerning the subject of such tests and
   9   methodology and results of testing.  I think that this is
  10   addressing the needs of scholarship in perhaps a broader sense
  11   but it is certainly within the scope of what he was to talk
  12   about.  The harm of scholarship that would result from not
  13   being able to undertake certain practices I think is part of
  14   the methodology of scholarship.
  15            MR. COOPER:  I don't think that's a fair
  16   characterization of what he is being asked to testify about.
  17   We accept that he is an appropriate witness to testify about
  18   issues with respect to publishing security analyses and so on,
  19   but I think this questioning goes to entirely different
  20   subjects, none of which go to the question of whether the
  21   defendants in this case have any potential fair use defense.
  22            MR. HERNSTADT:  Your Honor, I am prepared to move
  23   into evidence or request to move into evidence Exhibit B of
  24   the Appel declaration and allow you to make your own
  25   assessment of how it fit into this.


                                                                755

   1            THE COURT:  I think that's the appropriate course.
   2            I take it, Professor Felten, that what you said in
   3   Exhibit B to Defendants' Exhibit BBS in fact represents your
   4   genuinely held views, correct?
   5            THE WITNESS:  Yes, it does.
   6            THE COURT:  All right.  Well I'm going to receive it
   7   for whatever it's worth, but, Mr. Hernstadt --
   8            MR. HERNSTADT:  I'm going to move on.
   9            THE COURT:  Let me finish making the point.  So what
  10   is received is just Exhibit B to Defendants' Exhibit BBS.
  11            (Defendant's Exhibit B to Exhibit BBS received in
  12   evidence)
  13            MR. HERNSTADT:  I would request that we separate it
  14   and put it in as BBS-1.
  15            THE COURT:  Let's deal with that later.  I would like
  16   to finish what I'm trying to say to you.
  17            I think it is probably self-evident, or if not, close
  18   to self-evident that scholars could make use of some materials
  19   that might appear in digital form -- and I don't limit myself
  20   to motion pictures -- if they were free to circumvent whatever
  21   technological protections there might be that stand between
  22   them and the digital form of the material.
  23            You now have this witness's view that that is so, and
  24   you have his article.  I don't think you have to beat a dead
  25   horse on that point.  You know, it goes or doesn't go wherever


                                                                756

   1   you want it to go, and eight or nine more witnesses on the
   2   same point -- and I don't know whether that's what your plan
   3   is -- would be a little bit cumulative.  Okay?
   4            MR. HERNSTADT:  Thank you, your Honor.
   5            THE COURT:  All right.
   6   BY MR. HERNSTADT:
   7   Q.  Professor Felten, let me move on.  Professor Felten, based
   8   on your experience and expertise in the area of security
   9   research, do you have an opinion as to whether the disclosure
  10   of the DeCSS program was good?
  11            THE COURT:  Sustained.  Good?
  12   Q.  Whether there is a value, a public value to the disclosure
  13   of the DeCSS program?
  14            THE COURT:  Sustained.  I have a lot of respect,
  15   based on what I've read of his CV and what I have seen here,
  16   for Professor Felten.  But the last time I've looked he is not
  17   an expert on what the public values are and whether they are
  18   expert or not, the people who make those judgments in this
  19   society are called Congressmen and Senators.
  20   Q.  Professor Felten, do you have an opinion as to the impact
  21   of the disclosure -- the impact on the CSS of the disclosure
  22   of the DeCSS's program?
  23            MR. COOPER:  Your Honor, it's vague and I believe, if
  24   I understand it, beyond the scope of the expertise of this
  25   witness.


                                                                757

   1            THE COURT:  Look, Dr. Felten, would I be right in
   2   assuming that in your judgment, the disclosure of DeCSS code
   3   has been of some value to you and in your opinion others who
   4   follow the same line of work as you do from a scholarly point
   5   of view?
   6            THE WITNESS:  Yes, I think it has meaning in my
   7   research and in my teaching.
   8            THE COURT:  Is that what you wanted, Mr. Hernstadt?
   9            MR. HERNSTADT:  Yes.
  10   Q.  Could you explain how it has helped you?
  11   A.  Sure, I talked about in general about the benefits to
  12   research that come from a discussion of real system failures
  13   and why they fail and so on, and all of that holds true for
  14   DeCSS.  I think it's a very instructive example for
  15   researchers.  It's a benchmark against which we can hold up
  16   research which claims to improve practices or to improve
  17   designs.  We can ask would this new method really have
  18   prevented this kind of problem.  It has been useful to me in
  19   teaching.  I have used it as an exam in my course, for
  20   example, as one thing students can study where they can see a
  21   real failure and think about why and how it happened and think
  22   about what they might do differently.
  23   Q.  Turning back to source code and object code, Professor
  24   Felten, what is source code?
  25   A.  I think of source code and object code as being sort of


                                                                758

   1   two ends of a spectrum.  There are lot of different languages
   2   in which you can express computer programs, and there are
   3   different styles of languages and computer scientists argue
   4   endlessly about which ones are better.  There are also
   5   different levels of programming, like one talks about high
   6   level or low level.
   7            Generally high level is referring to things which are
   8   closer to the level at which people tend to write programs.
   9   Low level means closer to the level at which computers execute
  10   them.  But I don't think there is a clean distinction
  11   necessarily between source code and object code.  It's kind of
  12   a continuum on which all of the different forms of computer
  13   languages can be placed.
  14            THE COURT:  Can I try it this way?  This isn't the
  15   first computer case I have ever dealt with, and the
  16   understanding that I have always had runs something along
  17   these lines, and I would like you to tell me to what extent it
  18   is right and to what extent it is wrong.
  19            My first proposition, computers operate in a binary
  20   environment; that is, everything is a one or a zero, right?
  21            THE WITNESS:  Yes.
  22            THE COURT:  That derives from the fact that various
  23   bit of silicon in the computer either have a positive
  24   electrical charge or a negative electrical charge, am I right?
  25            THE WITNESS:  Yes.


                                                                759

   1            THE COURT:  So in order for a computer to understand
   2   any instructions or data that a human being wishes to enter
   3   into a computer, it must be received by the computer in the
   4   form of a string of positive or negative charges or to put in
   5   common parlance, ones or zeros, right?
   6            THE WITNESS:  Yes.
   7            THE COURT:  Object code consists of that
   8   machine-readable sequence of yes/no, one/zero impulses, true?
   9            THE WITNESS:  Yes, that's the strict definition of
  10   object code.
  11            THE COURT:  Okay.  Now people have a hard time
  12   understanding strings of ones and zeros in potentially almost
  13   infinite length.  So source code is a language, whichever
  14   particular one it may be, that is less abstract and easier for
  15   human beings to understand than a string of ones and zeros,
  16   correct?
  17            THE WITNESS:  Yes, generally.
  18            THE COURT:  Okay.  And whether through the process
  19   known as compilation or through some other process, whatever a
  20   programmer writes in source code gets transformed for the
  21   computer to operate upon into object code, i.e. the string of
  22   ones and zeros or positive and negative charge, true?
  23            THE WITNESS:  That transformation does happen but it
  24   doesn't always happen in one step.  There are sometimes
  25   intermediate steps, intermediate languages, for example.


                                                                760

   1            THE COURT:  When you spoke of a continuum, there are
   2   computer languages that involve modes of expression or
   3   conveying information or instructions that are at one end of
   4   the spectrum close to English or some other spoken or written
   5   human language, and other types of languages that are much
   6   farther away from spoken and written language and much closer
   7   to but not quite get at the machine readable binary format?
   8            THE WITNESS:  Yes, that's the distinction between
   9   high level and low level.
  10            THE COURT:  Okay.  Let's go, Mr. Hernstadt.
  11   BY MR. HERNSTADT:
  12   Q.  Okay.  Judge Kaplan identified source code as less
  13   abstract than object code.  Is it in fact less abstract?
  14   A.  That's a hard question.  I would say they are abstract in
  15   different ways.  There are certainly some things which you can
  16   learn more fruit any from source code.  I talked about high
  17   level and low level.  There are sort of high level ideas about
  18   how the program is structured in general, sort of the
  19   architecture of it which you can generally get more easily
  20   from source code.  But there are other things which you can
  21   learn more easily from object code.
  22   Q.  Can you read object code?
  23   A.  Yes, it's not as easy -- it's not the easiest language to
  24   read certainly.  We teach students to read it and write it as
  25   part of their education.


                                                                761

   1   Q.  Are there parts of your research where you rely on your
   2   ability to read object code to get the information you need?
   3   A.  Yes.  I should add that we do things other than read
   4   object code.  We also execute it and you can learn a lot by
   5   doing that.
   6   Q.  You talked about the different programming languages.  Is
   7   there -- is source code and object code, are they also types
   8   of languages?
   9   A.  Well, object code in the sense of the thing that the
  10   computer directly executes it.  For types of microprocessors
  11   there is a single language.  There are many different
  12   languages that you would classify as source code or sort of
  13   intermediate things.  There is a huge variety of languages.
  14   Q.  What did you mean when you discussed source code and
  15   object code being on a continuum?
  16   A.  What I meant is that different levels -- different
  17   languages might, you might write programs that might be at
  18   different levels.  Some are easier to read and write, some are
  19   closer to what the machine executes, and that in the creation
  20   of programs, you sometimes work with languages that are at a
  21   sort of intermediate level.  You might translate a program
  22   from the language in which you wrote it into some other
  23   language, then read and modify it in that intermediate
  24   language, and then translate it again into the final object
  25   code.  So it's not -- it's not a binary distinction between


                                                                762

   1   source code and object code.  It's not just it's this or that.
   2   There are in between stages, in-between levels of expression.
   3   Q.  And based on your experience with source code and object
   4   code, is it your opinion that object code is expressive?
   5   A.  Certainly.
   6            MR. COOPER:  Your Honor, in a legal sense, he plainly
   7   doesn't have that experience.
   8            THE COURT:  I don't take it in the legal sense.  I
   9   obviously want to hear what he means by that.
  10   A.  So the way I interpret the question is can one computer
  11   scientist communicate to the other by the medium of object
  12   code.  I think certainly the answer is yes.  You can learn a
  13   lot from reading and analyzing and executing object code if
  14   you know how to do it, and so can you learn about what the
  15   author of the code, what the person who made that code
  16   intended the program to do, you can learn about how the
  17   program was constructed, you can learn about aesthetic and
  18   engineering decisions that the person made, and from all of
  19   that, you can learn things that the person who created the
  20   program put in there.
  21            THE COURT:  Dr. Felten, let me ask you this:  Can one
  22   locksmith communicate information about a lock to another by
  23   providing a key to the lock?
  24            THE WITNESS:  I think you could -- I think in that
  25   instance, you could get some information about the lock from


                                                                763

   1   the key, less information than you could get by taking apart
   2   the lock.
   3            THE COURT:  Go ahead.
   4            MR. HERNSTADT:  Your Honor, in fact I'm done.  Thank
   5   you very much, Professor Felten.
   6            THE COURT:  Let's take our afternoon break.  3:15.
   7            (Recess)
   8            THE COURT:  Okay.  Mr. Cooper.
   9   CROSS-EXAMINATION
  10   BY MR. COOPER:
  11   Q.  Professor Felten, now you testified that your practice in
  12   the security analyses in which you have been involved has been
  13   to publish an initial report regarding the flaws you
  14   discovered and followed later by a more scholarly report,
  15   correct?
  16   A.  That's right, yes.
  17   Q.  And on occasion, you have included in your initial reports
  18   portions of source code to the extent necessary to explain
  19   your analysis, correct?
  20   A.  That's right.  That's part of informing the public, as I
  21   described before.  Sometimes in order to do that, you have to
  22   publish code, and so that people can look at what you've done
  23   so that they can evaluate whether what you are saying is true,
  24   and so that they can understand the implications of the flaw
  25   that you found.


                                                                764

   1   Q.  Am I correct that you have been personally involved in
   2   approximately 12 analyses where you discovered a flaw in an
   3   encryption or security system?
   4   A.  About 12 flaws, yes.
   5   Q.  Okay.  And of the reports you published with respect to
   6   those 12, you found it appropriate to include portions of
   7   source code in your initial reports on three of those, is that
   8   correct?
   9   A.  Yes, approximately three.  Those were the cases where we
  10   thought it was appropriate, where what we needed to
  11   communicate was best communicated in the form of code.
  12   Q.  And in every one of those instances, you were able to
  13   publicly and professionally discuss and demonstrate the flaws
  14   without providing people with the tools to take advantage of
  15   those flaws, correct?
  16   A.  Without providing people with all of the tools, yes.
  17   Without providing people, as I said, with all of the tools for
  18   actually harming someone.  That's not to say that we did not
  19   provide code to demonstrate the existence of security flaws,
  20   which we did.  I also should point out that we are talking now
  21   about the initial disclosure.  Later we did scholarly
  22   publications and other kinds of publications and those more
  23   often included code and more detailed discussion of the flaws.
  24   Q.  Professor, you have never included the entirety of the
  25   source code of the exploitation of a flaw in any of your


                                                                765

   1   publications, have you?
   2   A.  Exploitation in the sense of allowing someone to be
   3   harmed, no; but demonstration, yes.
   4   Q.  But you have never included in any of your publications
   5   the entirety of the source code in the exploitation outlined
   6   to defeat the security system you were discussing, isn't that
   7   correct?
   8   A.  I think I explained it as well as I could in my previous
   9   answer.
  10   Q.  But you are not answering my question, which is you have
  11   never had occasion in any of the analyses in which you have
  12   been engaged to publish the entirety of the source code which
  13   represented the exploitation of the flaw you were studying,
  14   isn't that correct, sir?
  15            MR. HERNSTADT:  Objection.
  16            THE COURT:  Sustained.  I think there is a problem
  17   with the question.
  18   Q.  Do you know what an exploitation is in the encryption and
  19   cryptology area?
  20   A.  It's a term I've heard.  I don't understand a precise
  21   definition of it.
  22   Q.  Do you have your own definition of that term?
  23   A.  It's sometimes used to refer to a demonstration.
  24   Sometimes it's used to refer to what I'll call a fully
  25   damaging piece of code.


                                                                766

   1   Q.  Okay.  So let's use it in the latter instance, a fully
   2   damaging piece of code.  You would agree, would you not, that
   3   in either source or object code form a utility that was
   4   designed to actually exploit a discovered flaw in a security
   5   system would fall into that latter category?
   6            MR. HERNSTADT:  Objection to the form of the
   7   question.
   8            THE COURT:  Overruled.
   9   A.  Something that was designed to actually say reformat
  10   someone's hard disk or to actually infringe someone's
  11   copyright, no, I have never actually -- I would put either of
  12   those in the latter category and I've never released that kind
  13   of code.
  14   Q.  Okay.  In source or object form, correct?
  15   A.  In source or object form, I've never released code which
  16   allows someone to take all the steps needed to harm someone.
  17   Q.  In fact, in all of the instances in which you were
  18   involved in encryption analysis, you deliberately avoided
  19   providing people with the tools necessary to break the system
  20   you were studying, correct?
  21   A.  Yes.  I made -- in all these instances, I made a
  22   deliberate decision not to provide all of the steps to harm
  23   someone.  To connect this to DeCSS, my understanding of DeCSS
  24   is that it is more in the line of a demonstration as I've used
  25   the term.  It does not distribute code which has been -- which


                                                                767

   1   has been -- I'm sorry -- not code -- it does not distribute
   2   content that has been taken from a DVD.
   3   Q.  No, it defeats the encryption on the CSS system and that's
   4   all it does, isn't that true, Professor?
   5   A.  What it does is it allows material to be decrypted, and
   6   I'm obviously not here to talk about whether that's legal.
   7   But in a sense that I understand the distinction between
   8   demonstration and exploitation as you defined it, I think it
   9   falls in the demonstration area, because it does not copy and
  10   distribute copyrighted material.
  11   Q.  No, it circumvents the certain security system that's
  12   intended to protect that material, doesn't it?
  13            MR. HERNSTADT:  Objection.
  14            THE COURT:  Sustained.  It's argumentative.
  15   Q.  Professor, in your view, the distribution of a fully
  16   functional set of code that allows one to break a security
  17   system is unethical, correct?
  18   A.  I think it depends on the circumstances.  As I said
  19   before, you have to look at the circumstances and understand
  20   what it is necessary to communicate in order to inform the
  21   public, in order to inform the research community, and I can
  22   imagine situations in which the only way to do that was to
  23   distribute code which was a full exploitation in the sense
  24   that you determined, and then I think you'd have to face a
  25   sort of balancing decision.  So I can't say that it would


                                                                768

   1   always be unethical in my view to do that.
   2   Q.  Didn't you testify at your deposition to the effect that
   3   you never provide a tool which lets someone take all of the
   4   steps in breaking into someone's computer and doing damage as
   5   a result?
   6            MR. HERNSTADT:  Can we have a page and line?
   7            THE COURT:  Come on, Mr. Cooper, follow the rules.
   8            MR. COOPER:  I'm referring to Exhibit AZL, page 69,
   9   line 15 through 18.
  10            THE COURT:  Read it.
  11            "Q.    We did not provide, we never provided a tool
  12   which let someone, which gave someone all of the steps of
  13   breaking into someone's computer and doing damage."
  14   A.  Could you repeat the question about that passage, please.
  15            "Q.   But in all of the 12 instances where you were
  16   the discoverer of the flaw and you were involved in one way or
  17   another in the ultimate public disclosure of that flaw, in no
  18   instance did you find it necessary to provide people with the
  19   tool to take advantage of the flaw in order to describe it,
  20   discuss it, illustrate it or analyze it, right?"
  21            You did testify in that fashion, didn't you,
  22   Professor?
  23            MR. HERNSTADT:  Objection.
  24            THE COURT:  I don't get it, Mr. Cooper.  What you
  25   just read, if I understood it, it was a question, and


                                                                769

   1   witnesses don't usually testify by asking questions.
   2            MR. COOPER:  His answer, if I may repeat the answer:
   3   "We did not provide, we never provided a tool which let
   4   someone, which gave someone all of the steps of breaking into
   5   someone's computer and doing damage."
   6            THE COURT:  Answer?
   7            MR. COOPER:  That was the answer.
   8            THE COURT:  That was the answer.  Okay.  Got it.
   9   Q.  Next question:
  10         "Q.  And you, you deliberately avoided doing that, isn't
  11   that true?
  12         "A.  That's correct."
  13            THE COURT:  Next question, counselor.
  14   Q.  You were also able to teach and discuss security flaws in
  15   your classroom with your students regarding CSS without at any
  16   time operating DeCSS as an executable utility, isn't that
  17   correct?
  18   A.  Yes.  In order to do the teaching that I did in that
  19   course, I did not execute DeCSS as an executable utility.
  20   Again that's not to say that in general one would never need
  21   to execute something in order to teach about it, but given
  22   what I decided to teach those students in that limited time
  23   about, I did not need to do that.
  24   Q.  It wasn't necessary for you to use the executable utility
  25   in order to discuss what you chose to discuss regarding those


                                                                770

   1   flaws, correct?
   2   A.  I didn't use the software in the classroom in the sense of
   3   executing it.  What I did was I got DeCSS and I got Frank
   4   Stevenson's paper, I read them myself, I understood the
   5   situation, and based on my access to those materials and my
   6   understanding, I was able to teach the students about CSS and
   7   DeCSS.
   8            I informed the students that this code was available
   9   on the network and I informed them that if they wanted to
  10   study it, they could study it.  I don't know what they did as
  11   a result of that.  Certainly, as with everything in my course,
  12   it was obviously not okay for the students to infringe
  13   copyright, but I would not be at all surprised if some of the
  14   students chose to do that kind of investigation themselves
  15   based on my telling them that the code was available.
  16   Q.  Now, it's possible for you in your work to communicate
  17   with other interested parties in your field regarding subjects
  18   that you are researching and to maintain an ongoing dialog
  19   with those parties through other means than posting material
  20   to the public Internet, isn't that correct?
  21   A.  It is true that once I know about someone and once we have
  22   established a sort of relationship, I can communicate with
  23   them by e-mail.  But as I discussed before, it's not the case
  24   that there is a small community of people, all of whom know
  25   each other, who are interested in this material and who are


                                                                771

   1   doing research on it the way that the people working in this
   2   field discover each other is to read each other's
   3   publications.  That's the way science works.  You publish
   4   openly and many people who you know read what you publish.
   5   Some people you don't know read it.  The only way to reach
   6   that audience, the only way to find those other people out
   7   there working on that topic is to publish in such a way that
   8   they can read it.
   9            And can I certainly tell you that I read my
  10   colleagues', at other universities and companies, I read their
  11   website to learn what they're up to.
  12   Q.  And if you have a particular interest in any of the areas
  13   in which they are involved, you communicate with them directly
  14   to get further information, correct?
  15   A.  In general, yes, but I don't know that it would be
  16   fruitful to ask someone about something until I have seen what
  17   is on their website.
  18            And I should add I may be in an unusual position.  If
  19   this is a person I know and I send them some question, some
  20   comment on their research, they are likely to take it
  21   seriously, read it, and give me an answer.  But if it's
  22   someone who doesn't know me, they are going to -- they are
  23   going to -- if it's someone who doesn't know me, and I want to
  24   comment on their work, they are not necessarily going to be
  25   willing to spend an afternoon on the phone with me explaining


                                                                772

   1   their work.  The reason that stuff is put out there on the web
   2   is to be read.  It's to be read by a lot of people, and I
   3   frankly don't want to have to explain to everyone who asks
   4   over the phone or by e-mail all of the details of the research
   5   that I've done.  It's not efficient.  It doesn't make sense.
   6            MR. COOPER:  I don't have any further questions at
   7   this point, your Honor.
   8            THE COURT:  All right.  I have one, I guess two.
   9            You've got networks at Princeton?
  10            THE WITNESS:  That's correct.
  11            THE COURT:  You've got networks for the faculty in
  12   the academic buildings, and then is there a separate one for
  13   the dormitories?
  14            THE WITNESS:  Yes, there is are networks in the
  15   dorms.
  16            THE COURT:  What are the speeds?
  17            THE WITNESS:  The dorm networks are generally ten
  18   megabits per second to each desktop.  In the computer science
  19   department, I can speak to what our network is for the
  20   researchers.  We generally have within the building 100
  21   megabit per second links.  Of course there are links between
  22   the buildings and links between the university and the outside
  23   world which have to be shared among all those people.  So, for
  24   example, in the computer science building from point A to
  25   point B in the building we might have 10 megabits per second


                                                                773

   1   on a really good day, but there is a link going from the
   2   computer science department to the outside world which has to
   3   be shared with everybody else in the building.
   4            THE COURT:  What is the speed of that?
   5            THE WITNESS:  I don't recall.  I better not guess.
   6            THE COURT:  Okay.
   7            THE WITNESS:  If that's helpful, my colleague,
   8   Professor Peterson is going to testify later.  He knows all
   9   this stuff much better than I do.
  10            THE COURT:  You were last at the University of
  11   Washington how long ago?
  12            THE WITNESS:  1993.
  13            THE COURT:  I guess any questions about the speed of
  14   their network seven years ago is kind of like asking about
  15   dinosaurs, right?
  16            THE WITNESS:  Well, seven years ago what we had in
  17   our research building was 10 megabits per second inside the
  18   building.
  19            THE COURT:  You are familiar with speeds at any other
  20   universities in the last year per se?
  21            THE WITNESS:  Not particularly any other university.
  22   I know generally what the technologies that are used, but I
  23   can't speak to any specifically to any other university.
  24            THE COURT:  Generally.
  25            THE WITNESS:  Generally the technology within a


                                                                774

   1   building is going to be either 10 megabits per second or 100
   2   megabits per second on the ethernet.  That's the most commonly
   3   used technology.
   4            THE COURT:  Okay.  Thank you.
   5            Any further examination Mr. Hernstadt?
   6            MR. HERNSTADT:  No, your Honor, thank you very much.
   7            THE COURT:  Okay.  The witness is excused.  Thank
   8   you.
   9            THE WITNESS:  Thank you.
  10            (Witness excused)
  11            THE COURT:  Next witness, please.
  12            MR. HERNSTADT:  Our next witness is Mr. Goldstein.
  13    ERIC CORLEY,
  14        a defendant herein, having been duly sworn,
  15        testified as follows:
  16            DEPUTY CLERK:  Please state your name for the record.
  17            THE WITNESS:  My pen name is Emanuel Goldstein.
  18            My given name is Eric Corley.
  19            THE COURT:  What is it?
  20            THE WITNESS:  My pen name, writing name.
  21            THE COURT:  So the record is going to reflect, Steve,
  22   that the witness's name is Eric Corley, which is the name he
  23   is captioned under.
  24   DIRECT EXAMINATION
  25   BY MR. GARBUS:


                                                                775

   1   Q.  Mr. Corley, tell me something about your background.
   2   A.  I'm an English major.  I graduated from the State
   3   University of New York in 1982.  I have worked --
   4            MR. GARBUS:  Excuse me.  Can we have a small bench
   5   conference just for a moment?
   6            THE COURT:  Yes.  You and Mr. Gold.  Is this your
   7   witness, Mr. Gold?
   8            MR. GOLD:  Yes, sir.
   9            (At the sidebar)
  10            MR. GARBUS:  Mr. Corley has, as I understand it, an
  11   arrest when he was a child as a juvenile which was dismissed,
  12   an ACD case, I have never been able to find the file of it.
  13   He testified to it at some length because I permitted it at
  14   deposition, but I would make a motion that that be excluded at
  15   this time.  I don't know whether Mr. Gold intended to get into
  16   it or not.
  17            MR. GOLD:  In the deposition there was testimony
  18   about -- I think it was an indictment, was it not?  I think
  19   so.
  20            MR. GARBUS:  I don't know what it was.
  21            MR. GOLD:  I did not get the impression that he was a
  22   youthful offender or he was below 18, but the nature of the
  23   offense I think is one that reflects --
  24            THE COURT:  Let me just find out something.  Do you
  25   propose to use this?


                                                                776

   1            MR. GOLD:  On cross, yes, but there was a
   2   confidentiality agreement and I --
   3            THE COURT:  What in particular do you propose to use
   4   on cross?  Was there a conviction?
   5            MR. GARBUS:  Do you have a record of a conviction?
   6            MR. GOLD:  I think there was a plea, wasn't there?
   7            MR. GARBUS:  As I understand it, he was treated as a
   8   youthful offender and it was an ACD, it was an adjournment in
   9   contemplation of dismissal and there is no criminal record.
  10            THE COURT:  Is there a conviction?
  11            MR. GOLD:  I think there was a plea, your Honor, and
  12   I would have to check the transcript.  If you give me two
  13   minutes.  But it was for breaking into a company computer
  14   system, and I think it has relevance.
  15            THE COURT:  How long ago is it?
  16            MR. GOLD:  I don't remember.
  17            MR. GARBUS:  It was back -- he was I think about in
  18   his early 20s.
  19            THE COURT:  How old is he now?
  20            MR. GARBUS:  I think he is in his mid 40s.  I don't
  21   remember exactly.  I would have to ask him.
  22            THE COURT:  He is obviously going to be on the stand
  23   more than the next hour, right?
  24            MR. GARBUS:  I think so.
  25            THE COURT:  Well, you guys figure out what the facts


                                                                777

   1   are tonight. Rule 609 governs this as to the conviction, and
   2   if memory serves, Rule 608 deals with the prior bad act issue.
   3   This is not terra incognita.
   4            MR. GARBUS:  Can I hear the last question, please.
   5            (Record read)
   6   A.  I will just take it from the top.  I graduated from the
   7   State University of New York at Stonybrook 1982 with a
   8   Bachelors of Arts in English.  I have worked in various
   9   newspapers, including campus newspapers, community newspapers.
  10   I have written numerous opinion pieces and other such articles
  11   for newspapers such as Newsday, and since 1984, I have been
  12   publishing 2600 Magazine.  I have worked in radio since going
  13   to the State University of Stonybrook since 1977, and I
  14   currently work for WBAI in New York.
  15   Q.  How old are you?
  16   A.  I'm 40.
  17   Q.  Did you work for the Stonybrook Press?
  18   A.  Yes, that was one of the newspapers I worked for, one of
  19   the campus newspapers.
  20   Q.  And have you ever been a broadcast journalist on WUSB?
  21   A.  Yes, WUSB is the university station at the State
  22   University at Stonybrook.
  23   Q.  And how long have you been publishing the Hacker
  24   Quarterly?
  25   A.  Since 1984, which I guess is 16 years.


                                                                778

   1   Q.  And do you know approximately the circulation of that?
   2   A.  Presently, including newsstands and subscribers together,
   3   I would say probably about 60 to 65,000.
   4   Q.  And do you have any sense of who your readers are?
   5   A.  From meeting them at various gatherings, 2600 meetings,
   6   conferences, I would say they are all kinds of different
   7   people from 12 year olds to CIA agents, to foreign
   8   intelligence to corporate executives, all kinds of people seem
   9   to be fascinated with this.
  10   Q.  Now, did you serve as the music director for WUSB?
  11   A.  Yes, in 1980 to '81 school year, I was music director.
  12   The year after that, I was program director of the radio
  13   station.
  14   Q.  And in 1984, did you organize a Convention of alternative
  15   presidential candidates in Stonybrook?
  16   A.  That's correct.  We invited everybody who had registered
  17   to run for president to gather in one place at the same time.
  18   There were something like 219 candidates and about two dozen
  19   of them accepted.
  20   Q.  Did you ever write a play?
  21   A.  I have written -- among the things that were publicly, no.
  22   I have written a lot of things that haven't been released.
  23   But the one major thing that was publicly released was a radio
  24   play called Shadow of Long Island.
  25   Q.  What did it deal with?


                                                                779

   1   A.  It was kind of an H.G. Wells type of a thing where in
   2   realtime, people dealt with the effects of an accident at a
   3   nuclear power plant and since at the time, I believe it was
   4   1985, that was a big controversy on Long Island, it was
   5   something that got a lot of attention, a lot of interest.
   6   Q.  And with respect to the Hacker Quarterly, why did you
   7   create it?
   8   A.  Well, I saw the need for information to be spread beyond
   9   computer nerds, people who are just simply calling into
  10   bulletin boards.  Back in 1984, which is when the magazine
  11   actually started, in order to take part in this kind of a
  12   thing, you would have to call what is known as a BBS system,
  13   and they could only handle one caller at a time which means
  14   many times you would spend the better part of a day just
  15   waiting for a busy signal to go away.  You would have to keep
  16   trying.  There was no repeat dialing function.  You would have
  17   to keep dialing over and over again, and the speed was very
  18   slow, something like 300 baud.
  19            So I thought it would be nice, because these people
  20   had so much to say, if there is way a forum for them to say it
  21   and actually read it on paper, and since nobody else was doing
  22   that, I figured why not.
  23   Q.  And has the Hacker Quarterly been quoted or featured in
  24   any other newspapers?
  25   A.  Yes, we have been quoted quite a bit.


                                                                780

   1   Q.  Where?
   2   A.  I couldn't even begin to tell you all the places.  Every
   3   major newspaper and magazine I could think of, Time, Newsweek,
   4   the New York Times, Wall Street Journal.  I'm sure we are in
   5   quite a few this week.  We are always being quoted for our
   6   opinion on various things that are happening in the world of
   7   technology, whether it be things like the Melissa Virus, a
   8   case like this, a conference like we've just had.  There is
   9   always something going on in the world of technology, and our
  10   view seems to be something that's of interest.
  11   Q.  You say a conference you just had.  Can you tell me what
  12   that was?
  13   A.  We just had a conference this past weekend uptown at the
  14   Hotel Pennsylvania where we had people gathering from all over
  15   the planet to talk about the newest technological issues an
  16   just basically to trade information, learn, and I think it was
  17   a big success, we had something like 2300 people show up.
  18   Q.  This was run which by the hackers?  This was sponsored by
  19   2600 --
  20   A.  Yes.
  21   Q.  Have you also been on a major broadcast and cable network?
  22   A.  Yes.
  23   Q.  Do you remember which ones?
  24   A.  All of them I think.  Basically I was on Good Morning
  25   America, Nightline, CBS Morning News, Charlie Rose.  I can


                                                                781

   1   keep going on with lists, but I think most of them I seem to
   2   have been on at one point or another.
   3   Q.  Do you recall what the Washington Post, back in February
   4   of 2000, said about you after were you sued in this case?
   5   A.  I think they referred to us as, I might be confusing it
   6   with another story, but I think they referred to us as the
   7   hacker's bible or something, along those lines.
   8            THE COURT:  I hope we are not going to get into an
   9   assortment of what various people have said about the
  10   defendant, since he has been sued in this case.
  11            MR. GARBUS:  We are past it.  I don't think so.
  12   Q.  And how long have you been at BAI?
  13   A.  I first walked into WBAI in 1988 and I haven't left since.
  14   Q.  When you were on these various television shows, Charlie
  15   Rose and cable, what was the subject of your discussion?
  16   A.  Like with the newspaper articles, different things
  17   depending on what was happening in the news that particular
  18   time, such as the Michelangelo Virus which was in the early
  19   90s, or some panic over some possible security hole in a
  20   computer system, or even something like an area code change
  21   can, for some reason -- people come to us for explanations on
  22   things like that.  So depending on what was in the news at
  23   that time, we get calls virtually every day from media people
  24   wanting us to comment on one thing or another, and depending
  25   on my schedule, I try to answer as best I can.


                                                                782

   1   Q.  Is it fair to say that you are called on those shows as an
   2   expert in the computer area and the technology areas?
   3   A.  That's what they call me.  I don't consider myself a
   4   computer expert.  I consider myself a journalist.  But they --
   5   I've never taken a computer course or anything like that. I
   6   majored in English, so I answer the questions as best I can,
   7   but there are people with infinite amounts of knowledge in the
   8   technical field beyond what I could imagine.
   9   Q.  When you posted DeCSS, did you know whether it would work
  10   or not?
  11   A.  No, I had no idea if it would work.  The reason we posted
  12   the source code and the accompanying story is because it was
  13   already a story.  I believe it had already been out a month at
  14   that point, and we saw this and the reaction to it, people
  15   having their websites shut down, their pro Internet service
  16   providers being threatened, their schools being threatened, we
  17   saw that as a fascinating story, and we printed that story, we
  18   printed what the story was about, which was our source, our
  19   primary source, here is what they are talking about, here is
  20   the source code.
  21            Honestly, if someone had given me 20 random numbers
  22   and said this is the program, we would have printed the 20
  23   random numbers, if that's what everybody was talking about.  I
  24   have no knowledge if the program worked or not, but that
  25   wasn't the story.  The story was the reaction it was causing.


                                                                783

   1   Q.  And as of today, do you know whether DeCSS works?
   2   A.  I have heard conflicting things, even in this courtroom.
   3   I don't know anybody myself who has gotten it to work, and I
   4   don't know very many people who have even tried to get it to
   5   work.  I believe it can work if you spend a lot of time on it,
   6   but I'm sure there are much easier ways to accomplish bad
   7   things, if that's what you're trying to do.
   8            MR. GOLD:  Your Honor, I move to strike the answer.
   9   It was full of speculation and he is not an expert witness as
  10   he admits.
  11            THE COURT:  Strike everything after "I've heard
  12   conflicting things."
  13   Q.  Now, have you ever sold a copy of a DVD disk that has been
  14   de-encrypted through DeCSS?
  15   A.  No.
  16   Q.  Have you ever sent out a movie on the Internet as a result
  17   of your having used DeCSS?
  18   A.  No.
  19   Q.  Now, you talked about working on WBAI.  How long have you
  20   been there?
  21   A.  Since 1988.
  22   Q.  And is the name of that program "Off the Hook?"
  23   A.  I started doing the program later that year in 1988 as a
  24   special broadcast.  It became a series in 1991, I believe.  I
  25   have also worked in the news department and as an engineer


                                                                784

   1   over there.
   2   Q.  What does that program deal with?
   3   A.  It pretty much deals with similar things that the magazine
   4   deals with, new developments in technology, security holes,
   5   Orwellian aspects of today's society, people's privacy being
   6   abused from all different angles.  And what I like to do with
   7   the program is reach people who have absolutely no background
   8   in technology as opposed to the magazine.  When I go on the
   9   radio, anybody could be listening, and I find that many people
  10   find it very fascinating to be hearing our perspective, and we
  11   believe in explaining things to whoever will listen.  So
  12   people call into the radio show, we explain exactly what we're
  13   talking about, sometimes they feel moved to come to one of our
  14   meetings, which are once a month, and we make friends that
  15   way.  We explain how technology works from our perspective.
  16            THE COURT:  When you say you worked at WBAI as an
  17   engineer, did you work there as a broadcast engineer who ran a
  18   panel or some sort or some other kind of engineer?
  19            THE WITNESS:  A broadcast engineer, someone who
  20   actually controls the board in the control room.
  21            THE COURT:  Thank you.  Go ahead, Mr. Garbus.
  22   Q.  Now, have you participated in any panel discussions on
  23   computers and the Internet-related issues?
  24   A.  Yes, numerous ones over the years.
  25   Q.  Tell me some of them.


                                                                785

   1   A.  There are the annual computer freedom and privacy
   2   conferences.  There was one I believe called Open Source
   3   Solutions in Washington D.C.  There was -- I don't recall the
   4   names of the ones overseas that I attended.  I know there was
   5   one in Amsterdam and a couple of them in London as well.
   6   Q.  Have you also been on NPR, All Things Considered and World
   7   News Now?
   8   A.  Yes, I have.
   9   Q.  Have you ever lectured at any university?
  10   A.  I have been a guest, a guest lecturer for various classes
  11   at New York University, Seton Hall, the State University of
  12   New York at Stonybrook.
  13   Q.  Have you ever testified before any committee of the House
  14   of Representatives?
  15   A.  Yes, I testified before the house committee on technology
  16   and finance, I believe, and that was in the early to mid 90s.
  17   I don't have an exact date.
  18   Q.  Other than the conference you just mentioned before, have
  19   you organized any other conferences?
  20   A.  Yes, that was our third conference.  The first one was in
  21   1994.  The second one was in 1997.
  22   Q.  And can you tell me the title of the first one?
  23   A.  The title of the first one was called HOPE.  That stood
  24   for Hackers On Planet Earth, and we had -- it was the first
  25   time ever that this country actually a conference like that


                                                                786

   1   had been organized.  I had drawn inspiration from some of the
   2   conferences I had seen in Europe where people gathered
   3   together and exchanged ideas in a free and open manner and
   4   learned from each other and were guided in positive ways, at
   5   least in my view, and in 1994, I thought it was a great
   6   success as far as that went, and then it takes time to
   7   organize these thing so we only do it every three years.
   8   Q.  And what was the second one?
   9   A.  The second one was a sequel to HOPE and we called it
  10   Beyond HOPE and basically it was a continuation, the same kind
  11   of a thing.  We like to stress international cooperation.  We
  12   have people come over from different parts of the world and
  13   tell us what is your phone system like, what do you dial to
  14   make things work and connect to various things, how does your
  15   billing system work, do they -- in what ways does the phone
  16   company do evil things to you, you know, various things like
  17   that as far as technology and privacy invasion and things that
  18   we find ordinary people are concerned with increasingly today.
  19   So, we just basically get these people together, trade
  20   information, invite the public.
  21   Q.  And the sponsors of both of these conferences and the
  22   third conference was 2600?
  23   A.  Yes, that's right.
  24   Q.  Where did you get 2600 from?
  25   A.  2600 was a frequency that was used a long time ago back in


                                                                787

   1   the 1960s and basically anyone who would transmit a 2600 hertz
   2   tone over a long distance trunk connection would find
   3   themselves put into what is known as operator mode where they
   4   could then explore the entire phone system, and basically
   5   route themselves to operators, to all kinds of mysterious
   6   things that were out there.  It doesn't work anymore, but it's
   7   kind of a mystical thing from the past that people still talk
   8   about.
   9   Q.  And your pen name, Emanuel Goldstein, where does that come
  10   from?
  11   A.  Emanuel Goldstein was a character in 1984, the book by
  12   George Orwell.  He was supposedly the leader of the
  13   underground, and it was kind of a cool name to take back in
  14   the mid 80s, although I should point out in the end of the
  15   book, it turned out he is actually a figment of the government
  16   and he is entrapping everybody.  That's another story.
  17   Q.  Did you take the name before you finished the book or
  18   after you finished the book?
  19   A.  Actually I read the book about four times when I took the
  20   name.
  21   Q.  Now, tell me some of the people who have spoken at the
  22   conferences that you have organized?
  23   A.  We have had people like ex-CIA Agent Robert Steele,
  24   cryptologist Bruce Snyder.  At the most recent conference, we
  25   had Jon Johansen who is here from Norway.  We have had many,


                                                                788

   1   many people.  My mind is kind of drawing a blank when I try to
   2   call them all up, but we have had journalists, people from
   3   major television networks talk about how they cover stories
   4   and how they might get misperceptions about what hackers are
   5   all about.
   6            And we try and bring these people together, whether
   7   they are representatives of the government, people from
   8   different countries, 12-year-old kids who are just learning
   9   something, we try to bring them all together in the same room
  10   so they can share information and bring something out of that,
  11   and we find that many relationships are forged from this that
  12   last for very long time.
  13   Q.  You mentioned Bruce Snyder.  Can you tell me who he is?
  14   A.  He is an encryption expert.  He has written several books.
  15   Unfortunately he wasn't at the most recent conference.  He was
  16   here in 1997.  And I understand his knowledge could fill a
  17   room as far as what encryption is all about.
  18   Q.  Have you seen his affidavit in this case?
  19            THE COURT:  At what level of compression?
  20            THE WITNESS:  Any level I think.
  21   A.  He is one of those people that I'm in awe of, and many of
  22   the people who come to the conferences are like gods to me.
  23   They are people that just have so much knowledge and have done
  24   so much, and I'm just -- I'm honored that they come to my
  25   conference and share their information.


                                                                789

   1            THE COURT:  Mr. Garbus, I think we would save time if
   2   we didn't just have testimonials to one's witnesses.  I can
   3   imagine the rebuttal case.
   4   Q.  Now, have you also written freelance pieces for magazines?
   5   A.  Yes, I have written pieces occasionally for local
   6   newspapers, the New York Times, Newsday, and a couple of
   7   foreign magazines as well.  I wrote something for a Japanese
   8   magazine a few years ago, something for magazines in England
   9   and Holland, I believe as well.
  10   Q.  Now, do you in your magazine tell your readers about the
  11   acts that -- the Hackers Act and the consequences of those
  12   acts?
  13   A.  I'm sorry.  I don't understand the question.
  14   Q.  In other words, in the Hacker Quarterly, do you tell your
  15   readers the kinds of things they should and shouldn't do?
  16   A.  Well, we try not to be too moralistic.  What we mostly do
  17   is print information.  We have an editorial at the beginning
  18   of every issue where we expound on various thoughts, which is
  19   something that I write, and also in the replies to letters in
  20   the magazine, which is also printed every issue.  If we give
  21   any kind of moral guidance or judgment, that's where it is,
  22   but in the actual articles themselves, it is more or less a
  23   compilation of material that is already out there, and we kind
  24   of present it to the people to show them this is what people
  25   are saying, this is the information that's out there, this is


                                                                790

   1   how systems supposedly work or don't work.  And people write
   2   in with corrections, they write in with additions, and we have
   3   a dialog going based on that.
   4   Q.  Now does the name Mark Trapenhagen mean anything to you?
   5   A.  Not offhand.
   6   Q.  When did you start to put up the website?
   7   A.  Our website I believe first went up in 1995.
   8   Q.  Tell me about that.  Why did you put it up?
   9   A.  Well, back in 1995, websites were just pretty much
  10   starting to become popular, and we figured, you know, we are a
  11   computer magazine, we really should be doing this.  We had
  12   just had our first conference the year before, so we had
  13   enough money lying around so we could buy a machine and put it
  14   up on the net.  It was an extremely slow connection, but we
  15   realized quickly that a lot of people came to our site to see
  16   what we had to say.  So we did our best to make it
  17   interesting.
  18   Q.  Now, can you tell me at the present time how many hits
  19   that site receives, how many unique visits?
  20   A.  Well, I can only estimate because we haven't kept logs
  21   since last summer on that kind of a thing.  We have what is
  22   known as a counter on the front page and what we would do is
  23   run statistics on it once a week, and that would take such
  24   massive amount of memory that it would wind up crashing the
  25   machine every Sunday night at midnight.


                                                                791

   1            So we figured it wasn't that important to know
   2   exactly how many people were hitting us.  We had a general
   3   sense that we had something on the order of 10,000 unique hits
   4   a day.  That means 10,000 different visitors coming to our
   5   site, maybe seeing a few different pages but only being
   6   counted once.
   7   Q.  Now at some point in time, there was an order entered by
   8   this Court that you take down the DeCSS code.  Do you recall
   9   that?
  10   A.  Yes, I do.
  11   Q.  Prior to that time, did you print source and object code?
  12   A.  Of the DeCSS?
  13   Q.  Yes.
  14   A.  Yes.
  15   Q.  And when the Court ordered you to take it down, did you
  16   take it down?
  17   A.  Yes, we did.
  18   Q.  And after you took it down, did you continue to have links
  19   to other site?
  20   A.  Yes, the links remained up.
  21   Q.  And did you increase -- were the number of links increased
  22   after the court order?
  23   A.  We had a large number of people submit new links and we
  24   tried to keep up with it, but after a while it just became too
  25   much and we just kind of left it in whatever state it was in


                                                                792

   1   at that time.
   2   Q.  Whether you say submit new links, what do you mean by
   3   that?
   4   A.  Well, we had a facility for people to tell us if they knew
   5   other sites or if they were running a site and they wanted to
   6   be included on the list, we had that on our main page, and
   7   people were submitting that from the very beginning, ever
   8   since it first went on line I think back in November or
   9   December, and after we took the material off of our website,
  10   it increased 20-fold at least and we just didn't have the
  11   resources to continuously update things like that, and we felt
  12   pretty much if people wanted to find DeCSS, they could easily
  13   do it.  It wasn't an issue anymore.
  14   Q.  Now, by the way, do you own some domain names?
  15   A.  I own quite a few domain names, yes.
  16   Q.  What are some of those names?
  17   A.  Well, gee, all the 2600 possibilities, .net, .org, .com.
  18   I also own the WUSB site.  I maintain their web page.  And
  19   there are also some rather humorous ones with some nasty
  20   language in it, and I should explain why that is.  NSI is the
  21   registrar, Network Solutions Incorporated and up until last
  22   summer, they were the only registrar in this country.  You had
  23   to submit your domain names through them.  They had a policy
  24   on language.  They wouldn't allow certain words to be used as
  25   domain names and some people objected to that, they thought it


                                                                793

   1   was a form of censorship, but what was interesting was late
   2   last summer, all of a sudden, there were new registrars.  It
   3   was opened up to all different companies, and many of those
   4   company allowed you to register whatever name you wanted to.
   5   So there was kind of a race for about two days, people
   6   registering every possible four-letter word they could think
   7   of, and I admit I was part of that race, because I basically
   8   thought it was kind of interesting.  But we never tied it into
   9   the magazine in any way.  That was more a personal hobby for
  10   me.
  11   Q.  Can you give us some of the domain names, because they
  12   will ask you on cross, we may as well get rid of it now.  Go
  13   ahead.
  14   A.  Well, gee, many of these I haven't even looked at in
  15   several months, but I know fuckingmorons.com is one of them.
  16   We put some -- before the names of various famous
  17   corporations, I think Microsoft might have been one of them,
  18   but I'm not sure, somebody beat us to that one, there were a
  19   few others.  I really have to look at the list because I don't
  20   want to misspeak and say somebody else's name is mine, but
  21   there are quite a few.  There were maybe a dozen or so.
  22   Q.  Now, let me show you, if I can, documents marked as
  23   Plaintiffs' Exhibits 113, 114, 115, 116, this looks like 1.11,
  24   1.1, 1.2, 1.4, 1.6, 1.8, 1.7, 1.5, 1.3 and 1.12.  I don't
  25   think that there are other copies around.  Are there?  I think


                                                                794

   1   these are the only copies.
   2            And I would ask you to just briefly go through the
   3   magazines, look at the green tags and tell me what those
   4   relate to.
   5            THE COURT:  Are you offering them in evidence?
   6            MR. GARBUS:  I would, your Honor, yes.
   7            MR. GOLD:  I have no objection.
   8            THE COURT:  They are not offered for the truth, I
   9   take it.
  10            MR. GARBUS:  They are offered -- right.
  11            THE COURT:  They are offered as examples of the
  12   magazine.
  13            MR. GARBUS:  Yes.
  14            THE COURT:  They are received on that basis.
  15            (Plaintiffs' Exhibits 113, 114, 115, 116, 1.11, 1.1,
  16   1.2, 1.4, 1.6, 1.8, 1.7, 1.5, 1.3 and 1.12 received in
  17   evidence)
  18   A.  Do you want me to go through all of these?
  19   Q.  Just briefly go through where the green stamps are.  Those
  20   are the places where you discuss things at your deposition.
  21   By the way, are real names or true names used in the magazine?
  22   A.  That's entirely up to the author.  If the author want to
  23   submit their real name, we will print their real name.  If
  24   they want to submit an alias of some sort, we will print that.
  25   It's not our decision to make.  It's entirely up to them.


                                                                795

   1   Q.  Whether they submit letters to you and articles, is that
   2   the same thing?
   3   A.  Yes.
   4   Q.  Do you in any way check out the accuracy of the
   5   information?
   6   A.  Only to the point of if they are talking about a
   7   particular operating system, does that operating system exist,
   8   is the theory that they are expounding somewhat sound.  It's
   9   impossible with our staff to test out every single theory we
  10   get, which is why a lot of what is printed is theoretical in
  11   nature.  It's something that this is how I believe the system
  12   works and we present it.  Invariably, we get people writing
  13   back saying, no, this is really how the system works and then
  14   we have a dialog going on different theories as to operating
  15   systems, computer networks, telephone systems, whatnot.
  16   Q.  When you say -- who is the 2600 staff -- by the way, you
  17   are located out in Long Island?
  18   A.  Yes.
  19   Q.  Who is the staff out there?
  20   A.  Well, we actually -- I am the editor and publisher.
  21            THE COURT:  Mr. Corley, can you back away from the
  22   mike a couple inches.  Thank you.
  23   A.  I am the editor and publisher.  I have an office manager,
  24   and I have someone who works on technical things on the system
  25   occasionally.


                                                                796

   1   Q.  Is it fair to say this is basically a one-man operation?
   2   A.  I wouldn't say it's entirely a one-man operation, but me
   3   being in the city actually has made it slow down to a trickle,
   4   so I'm definitely the person that does things out there, and
   5   everything else kind of is part of that in one degree or
   6   another.
   7   Q.  And are you one of the people who write the materials that
   8   goes up on the website?
   9   A.  The website, yes.  I write some of the material that goes
  10   up on there.
  11   Q.  Tell us just now by looking at the green tabs some of the
  12   stories that are in the Hacker Quarterly?
  13   A.  There is a story called Cellular Interception Techniques
  14   which basically goes into how cellular telephones work, how
  15   cellular calls can be intercepted.  It goes into the
  16   Electronic Communications Privacy Act which makes such
  17   interception illegal.  It goes into how anyone with a
  18   television set from the 1970s can use that television set to
  19   intercept cellular phone calls.  It's not exactly an advocacy
  20   piece in any way.  It's very technical in nature, and I think
  21   you come out of this with an understanding of the law and the
  22   understanding of the technology and an understanding of the
  23   risk if you choose to use this particular type of cellular
  24   phone.  This is from 1995.  It's not used very frequently
  25   anymore.  I like to think maybe this had something to do with


                                                                797

   1   it, because the way cellular phone calls had been made in the
   2   past was extremely insecure, and there wasn't enough being
   3   done to protect people's privacy.
   4   Q.  And by the way, with respect to companies or utilities
   5   that you have written about, have officers from those
   6   companies ever contacted you concerning the materials that
   7   have been written?
   8   A.  Well, I would have to say I've gotten more personal
   9   contact such as at conferences and meetings with people who
  10   say they love our magazine and they read it to find out all
  11   the latest possible problems with their systems.  Occasionally
  12   we get people that threaten us and say you can't print this,
  13   but upon challenging them, they have always backed down.
  14   Q.  And have any corporate executives ever told you that they
  15   read your magazine for the first time and found out about
  16   flaws in their product?
  17   A.  Yes, but also a lot of network engineers and they are the
  18   ones who actually make the changes.
  19   Q.  Go ahead, continue.
  20   A.  I'm not sure if this is the article you wanted me to read.
  21   It's entitled Imaginary Friends, and I'm not really sure -- is
  22   this from 1996?
  23            THE COURT:  It's very high tech.
  24            THE WITNESS:  Yeah.
  25   A.  I think this is going into how to tell the phone company a


                                                                798

   1   different name to list on your account.  Basically this is for
   2   people who are paranoid about being on any kind of a list, and
   3   this is a way that you can make up a fake name, not for
   4   purposes of fraud but for purposes of privacy, so that when
   5   people call you on the phone, they ask for the fake name and
   6   you know because they do that that they are looking at a list
   7   of names and they are not really trying to call you.  So this
   8   article goes into how TRW compiles information, what the phone
   9   company does when they open up an account for you, how to have
  10   an unlisted phone number be really unlisted so your name isn't
  11   on any list anywhere.
  12   Q.  Did you write either of these two articles?
  13   A.  No, I didn't.  If I wrote them, I would remember them, but
  14   I just remember them vaguely.
  15   Q.  Is it fair to say that the magazine is basically an
  16   anthology of articles that you received?
  17   A.  Yes, I was looking for that word before.  Anthology is
  18   probably the best way.  Probably the Readers Digest of the
  19   hacker's world.  We don't say that everything that is in these
  20   articles is 100 percent correct.  We have guidelines for the
  21   articles, such as we don't print articles that espouse
  22   destruction or immature acts or just various bad things.
  23            MR. GOLD:  Your Honor, I am having a lot of trouble
  24   finding out what question the witness is answering in most of
  25   these.  There are long speeches going on.  I was wondering if


                                                                799

   1   the Court would request that the witness answer the question
   2   that was asked.
   3            MR. GARBUS:  Let me see if we can help.
   4   Q.  Have you described the article that -- are we still on the
   5   same article?
   6   A.  I had put that one down, but can I go back to it more in a
   7   moment.
   8   Q.  Let's go to the next article.  Tell me what the next
   9   article deals with?
  10   A.  Snooping Via MS Mail.  This is from 1996 as well.  I
  11   believe what this does, this describes a product known as MS
  12   Mail which various companies use, and how people's mail can be
  13   intercepted on that and spied upon.  And this is an example of
  14   an article that can be used in two ways.  We print the
  15   information.  It can be used in a good way; that is, users can
  16   learn about privacy, they can figure out ways to prevent them
  17   from happening.  Or it can be used in a bad way, someone can
  18   take this an actually start spying on people.
  19            We don't have a big moral discussion about what is
  20   going to happen with the information we print, because the
  21   information is already out there.  As I said, we are more or
  22   less an anthology of what is being distributed and we like to
  23   think that by printing this information, we wake people up.
  24   Q.  Let's go to the next article.
  25   A.  This is similar to one before, Tips on Generating Fake ID.


                                                                800

   1   This more or less goes a little bit outside the boundaries of
   2   what we usually talk about because it's not really related to
   3   computers or telephones, but it does have relevance in that it
   4   talks about how people fool the system, how people get around
   5   restrictions, and the article is written in kind of an
   6   interesting tone.
   7            It starts off, so you want to get drunk this weekend
   8   or buy some cigarettes, etc., like that.  This kind of is on
   9   the boundary of what we print, the guidelines I mentioned.  I
  10   saw this as rather humorous, as a person being somewhat
  11   sarcastic because, yeah, the only thing can you possibly do
  12   with fake ID is buy cigarettes and get drunk.  But I also saw
  13   a lot of really good technical information here, websites that
  14   are referenced, and if you are looking for somebody who is
  15   doing this, this article will tell you what they're up to and
  16   how it works.  And I think it's something that is widespread
  17   enough that you can't just ignore it and pretend it's not out
  18   there.  So that's the reason we printed that.
  19   Q.  Go to the next one.
  20   A.  This is more recent, so I should remember this one.  Okay.
  21   This is an editorial entitled, The Next Chapter from our
  22   Spring 2000 issue.  This basically deals a lot with the MPAA
  23   case.  I'm not exactly sure if you want me to read the entire
  24   thing.  It's rather large.
  25   Q.  Just tell me what it's about.


                                                                801

   1   A.  It's an editorial that I wrote and it kind of brings
   2   together various issues that were going on at the time,
   3   including the case of Kevin Mitnick who was a computer hacker
   4   who was in prison for five years.  That has drawn to a close
   5   at almost the exact same time as this case has started.
   6            We also touch upon various other laws that are being
   7   passed that we see as being a bad thing, such as California's
   8   three strikes laws which allows people who have committed
   9   three crimes, even if they are not violent crimes, to be
  10   imprisoned for life.  So the piece is kind of more of an
  11   editorial which covers it all and ties it together in a nice,
  12   neat little package.
  13   Q.  Turn to the cover of the magazine.
  14   A.  Oh, yes, this is our kind of spoof cover of the MPAA
  15   screen.
  16   Q.  Do you sell T-shirts?
  17   A.  Yes, we have T-shirts that are similar to this.  In fact,
  18   we used them to raise money for the defense, and we don't mean
  19   any offense by it, it's just kind of a political cartoon that
  20   we came up with, and I think most people see the humor in it.
  21   Q.  Can we go to the next one.
  22   A.  I think there is another one in the same issue.
  23            THE COURT:  How many more, Mr. Garbus?
  24            MR. GARBUS:  Do you want Mr. Goldstein to hand it to
  25   the Court so the Court can see it after he has been describing


                                                                802

   1   it?
   2            THE COURT:  When he is all done, the clerk will take
   3   them.
   4            MR. GARBUS:  Go ahead.
   5            THE COURT:  How many more, Mr. Garbus?
   6            MR. GARBUS:  About half a dozen.  These are the ones
   7   that he was cross-examined on in the deposition, so we are
   8   going to deal with it now.
   9   A.  I'm not sure if there is a green tag here, but these are
  10   two articles.  It's either AT&T's Gaping Hole or a Cellular
  11   Network Detailed.  I'm going to guess it's Gaping Hole, where
  12   basically someone outlines a glitch in AT&T wireless service
  13   that allows a user to receive free phone service.  I remember
  14   this particular article was something that the article -- that
  15   the person had notified AT&T about and nothing had happened,
  16   and the result was they sent us this article with the details
  17   of exactly how it worked.  And I understand that it doesn't
  18   work anymore, so I think that speaks for itself.
  19   Q.  By the way, if the Court orders you to take down the links
  20   to other sites, would you do that?
  21   A.  Absolutely, if the Court orders it, yes.
  22   Q.  Were you in Court, by the way, when the Court said it
  23   would consider linking at a different time?  Did you read the
  24   transcript?
  25   A.  I read the transcript.  I don't believe I was in court


                                                                803

   1   that day.
   2            This article is called How Domains Are Stolen, and
   3   this is of particular interest to anyone who operates a
   4   website.  It's possible for people to go and hijack your site.
   5   In fact, it happened to us only two weeks ago where someone
   6   took advantage of a security hole in Network Solutions and
   7   took our domain name, 2600.com and registered it to a site
   8   somewhere overseas, and that would have been a real pain to
   9   deal with to get back if we hadn't caught it.  This article
  10   gives one method of how such things are possible, and I would
  11   like to think that this article coming out will wake up the
  12   people at NSI so that it doesn't happen anymore.
  13   Q.  By the way --
  14            THE COURT:  Excuse me, Mr. Garbus.  You do
  15   understand, do you not, that this is the time when the Court
  16   is considering the linking issue, this trial?
  17            MR. GARBUS:  I understand that.
  18            THE COURT:  Okay.  It wasn't clear from the way you
  19   made your comment.
  20   Q.  Go ahead.
  21   A.  This is another article on cellular service, spoofing
  22   cellular service.  This is from 1996, before the onset of
  23   digital cellular, so it was a much bigger issue then for the
  24   electronic serial number to be grabbed literally as you were
  25   driving down a highway by a cellular thief, I guess is the


                                                                804

   1   best way to describe him, someone sitting on the side of a
   2   road with a particular type of scanner who would simply grab
   3   your numbers and just by grabbing your numbers, that would be
   4   enough for them to become you and start making phone calls
   5   under your phone number, and this is another gaping security
   6   hole that we felt needed to be known, and I understand that
   7   this kind of system is increasingly rare and is probably not
   8   going to be around much longer at all.
   9   Q.  Are there other individuals who use the name 2600.com
  10   other than you?
  11   A.  We are the only people who can use 2600.com.  There are
  12   other 2600 names in other countries.  There is really no way
  13   for us to register every single country name, nor would we
  14   want to.  And it is also possible for somebody to register a
  15   machine as 2600.  They could register 2600.Microsoft.com for
  16   instance, so basically we are happy with having our website
  17   2600.com and making sure that people know that's us.
  18   Q.  Are there other websites out there using a name or
  19   something like that which people to your knowledge think are
  20   associated with you?
  21   A.  Yeah, the only site associated with us are the sites we
  22   run.  The other types of association, it's more of an
  23   emotional type of association where they may support the
  24   magazine or agree with our basic philosophy and them might put
  25   2600 in their name and that's something that really doesn't


                                                                805

   1   concern us.  We don't see that as a copyright issue or
   2   something that's necessarily evil.  The only time it would
   3   concern us if they were doing something in our name that we
   4   considered to be wrong.
   5   Q.  But you have no control over it?
   6   A.  We have no control over it.
   7   Q.  There are separate people using 2600?
   8   A.  Right, in that context, it would be an incredible waste of
   9   time to try and control everybody who used that.
  10   Q.  Go ahead.
  11   A.  This article is entitled the Backyard Phreaker,
  12   P-H-R-E-A-K-E-R.
  13            And this goes into some detail on people who
  14   literally climb telephone poles and hook into phone lines and
  15   make phone calls.  This happens quite a bit in unsecured
  16   locations.  It happens in New York City in the basements of
  17   apartment buildings where the phone lines come into the
  18   building and are left unsecured.  What we find in many cases
  19   is that unsuspecting people get these large phone bills and
  20   the phone company says it was dialed from your phone number,
  21   therefore, you had to have done it.  We are showing here that
  22   there are many ways people can make these phone calls on your
  23   phone line without you ever knowing about it.  And many
  24   people, including a lot of the WBAI listeners, have used this
  25   kind of information to battle the phone company and say, you


                                                                806

   1   know, there are many other ways somebody could have used this
   2   phone number to place this fraudulent call.  And we also like
   3   to think that this might encourage people to lock those boxes
   4   so that everybody in the world can't get access to them.
   5   Q.  Continue.
   6   A.  This is actually --
   7            THE COURT:  Mr. Garbus, I think we have heard enough.
   8   You have the magazines in evidence.  I can look at the
   9   magazines.  I don't need anymore summaries.
  10            MR. GARBUS:  I have no more questions of this
  11   witness.
  12            THE COURT:  Okay.  Mr. Gold?
  13            Just so we are clear, Mr. Garbus, if you had other
  14   questions, you are welcome to continue.  I just don't need
  15   more summaries of magazine articles.  Do you understand?
  16            MR. GARBUS:  Yes.
  17            THE COURT:  Mr. Gold?
  18            MR. GOLD:  May we have the exhibits, the magazines?
  19            THE COURT:  Yes.
  20            MR. GOLD:  May I approach the witness for that
  21   purpose?
  22            THE COURT:  Yes.
  23            MR. GOLD:  Thank you, sir.
  24   CROSS-EXAMINATION
  25   BY MR. GOLD:


                                                                807

   1   Q.  Good afternoon, Mr. Goldstein.
   2   A.  Good afternoon.
   3   Q.  Nice to see you again.  Mr. Goldstein, in 1999, did your
   4   2600.com site mirror DeCSS?
   5   A.  That's correct.
   6   Q.  When did you start?
   7   A.  I believe we started in late November.  I don't have the
   8   precise date.
   9   Q.  The posting that you've just referred to was done by who?
  10   A.  Who specifically posted the -- it was either myself or my
  11   webmaster.
  12   Q.  And was this a webmaster you preapproved?
  13   A.  Yes, I take responsibility for everything that's on the
  14   site.
  15   Q.  Is it true that prior to the preliminary injunction, any
  16   member of the general public was able to download DeCSS
  17   directly from the 2600.com website?
  18   A.  Any member who had a computer and a net connection could
  19   do that, yes.
  20   Q.  Is it true that 2600.com is currently linking to other
  21   sites that post DeCSS?
  22   A.  Yes, we have been linking from the beginning.
  23            THE COURT:  Let me ask this, I think I know the
  24   answer to this, but I think it ought to be in the record.
  25            What does mirror mean as you understood it when you


                                                                808

   1   answered Mr. Gold's question?
   2            THE WITNESS:  Mirror is basically a link to another
   3   site.  Actually, mirror is a duplicate of your site, so it's
   4   not entirely correct.  I think Mr. Gold is referring to links.
   5   A mirror is, say, our site goes down, you go to a site B and
   6   it's the exact same thing, so in that particular case, it's
   7   not the same.  I believe you're referring to links.
   8            THE COURT:  But he asked you right at the beginning
   9   of his examination whether in 1999 your site was mirroring
  10   DeCSS and you said it was.  What did you mean by that?
  11            THE WITNESS:  That refers to the specific program
  12   DeCSS, so that, yes, that program was mirrored on our site.
  13   The site itself, we were not mirroring the entire other site,
  14   just the program.
  15            THE COURT:  Yeah, but I asked you what mirroring
  16   means.
  17            THE WITNESS:  Mirroring means duplicating material
  18   that's on another website, whether it be one file or an entire
  19   site.
  20            THE COURT:  Thank you.
  21   Q.  In 1999, on the 2600.com site, did you encourage people
  22   who were interested in supporting you to mirror DeCSS?
  23   A.  We gave people various constructive ways of expressing
  24   themselves and that was one of them, yes.
  25   Q.  And did you continue to do that in 2000?


                                                                809

   1   A.  Yes, it's still up to this day.
   2   Q.  Is it true that with the links you have provided and you
   3   do provide on the 2600.com site, someone, anyone, can go to
   4   the 2600 site, click once on a mouse, which takes you directly
   5   to another site that is posting DeCSS?
   6   A.  Yes, they could do that.  They could do it in many other
   7   ways as well.
   8   Q.  In all the time that you were posting and all the time
   9   that you have been linking, did you know that DeCSS is
  10   designed to circumvent the encryption technology that protects
  11   the digital content stored on a DVD?
  12   A.  I knew that it did one thing and that it was --
  13            MR. GARBUS:  I object.
  14            THE COURT:  Ground?
  15            MR. GARBUS:  Use of the word "circumvent."
  16            THE COURT:  I take it in the colloquial rather than
  17   the legal sense.
  18   A.  We knew that DeCSS basically got around CSS, got around
  19   the encryption that was not holding up to the stress.
  20   Q.  Is it true, Mr. Goldstein, that DeCSS exists to decrypt
  21   CSS?
  22   A.  That's what it was written to do, yes.
  23   Q.  Is it true that in a write-up or article that appeared on
  24   the 2600.com site, DeCSS was described as a free DVD decoder
  25   that allows people to copy DVDs?


                                                                810

   1   A.  Yes, that was on our site, and I have since said that part
   2   of that statement is inaccurate, that it was not written
   3   solely to copy DVDs.  It was written to decrypt CSS.  I wasn't
   4   aware of the difference myself.  I didn't write that piece at
   5   the time that it came out.  I believed that was completely
   6   accurate, but it turns out that it's a bit more complicated
   7   than I had at first thought.  It's not simply about copying.
   8   It's about access control.
   9   Q.  You recall that you made that statement in your
  10   deposition, sir?
  11   A.  I'm sorry?
  12   Q.  You recall, sir, that you made that statement in your
  13   deposition?
  14   A.  Yes, I believe I clarified that.
  15   Q.  And when you say you have just gotten some other evidence,
  16   when did you get that?
  17            MR. GARBUS:  I object if we are going to the
  18   deposition.  If he wants to read in the question and the
  19   answer, he can do that.
  20            THE COURT:  I will sustain the objection as to form,
  21   because I think the question is muddy.  But let's see if we
  22   get another question.
  23   Q.  You indicated that you got some new information since the
  24   time of your deposition about your last answer, the one that
  25   you --


                                                                811

   1   A.  No, that's not what I said.
   2            MR. GARBUS:  I object.
   3   Q.  Could you tell me what was you said?
   4            THE COURT:  The objection is overruled.  He said he
   5   thought the statement was accurate when made it and now he
   6   thinks it's inaccurate.
   7            MR. GARBUS:  No, no, I think there are two different
   8   time frames we are talking about.
   9            THE COURT:  Obviously.  The deposition and now.
  10            MR. GARBUS:  No, no.  From the writing of the
  11   article, the deposition and now are three different time
  12   frames.
  13            THE COURT:  We are going to break for the day at this
  14   point anyway.  I will see you all at 9 o'clock tomorrow
  15   morning.
  16            MR. HERNSTADT:  Your Honor, could we address a
  17   scheduling matter?
  18            THE COURT:  Sure.  Address it.
  19            MR. HERNSTADT:  May we approach?
  20            THE COURT:  No.
  21            MR. HERNSTADT:  Fair enough.  Tomorrow, your Honor,
  22   we have one witness.  I know your Honor said that we have to
  23   keep the witnesses coming.  Unfortunately, every other witness
  24   we have, one of them has informed us that he couldn't come at
  25   all, and all the other ones are out of state.  We've got them


                                                                812

   1   lined up for Tuesday and Wednesday.  Depending on
   2   cross-examination we expect, if you permit us to continue, we
   3   expect to complete the witnesses by the end of Wednesday.
   4            MR. GOLD:  Your Honor, I was hoping that we would be
   5   finished with this case before Wednesday, and I would like to
   6   go to San Francisco Wednesday to try to present a part of the
   7   argument being made in court that day on Napster.
   8            THE COURT:  You better get your people here.
   9            MR. HERNSTADT:  Your Honor, unfortunately it's not
  10   possible.
  11            THE COURT:  I gave you a lot of advanced warning of
  12   this.  Do your best.
  13            MR. GARBUS:  Can I get some kind -- can Mr. Gold tell
  14   me how long he expects the cross-examination to be?
  15            THE COURT:  Tell them what you think.
  16            MR. GOLD:  I can't imagine it would take as long as
  17   as an hour and a half, and I think it will be shorter, but
  18   something like that, best guess.
  19            THE COURT:  Okay.  9 o'clock.
  20            MR. COOPER:  Your Honor, what we have been told, so
  21   that we are all clear, is that Mr. Peterson is available for
  22   tomorrow.  The other names we have been given are for Tuesday.
  23            THE COURT:  Who were the other people?
  24            MR. GARBUS:  Can I just say one thing?
  25            MR. HERNSTADT:  Your Honor, we have on Tuesday


                                                                813

   1   Olegario Craig.
   2            THE COURT:  Say the name again.
   3            MR. HERNSTADT:  Olegario Craig.  He is a systems
   4   administrator at the University of Massachusetts.  He can't
   5   get off from his job until then.  He is taking two days of
   6   vacation to come down for it.  Matthew Pavlovich who is the
   7   director of the LiViD project lives in Dallas, Chris DiBona
   8   who works with Linux and he is addressing the Linux operating
   9   system, he is in Palo Alto.  Peter Ramadge who is at
  10   Princeton, but he is going to do a demonstration and we were
  11   unable to get the monitors to do the demonstration until
  12   Monday.  Michael Einhorn who is in New Jersey.  Dave Touretzky
  13   is in Holland and Andrew Appel is in Hawaii.
  14            MR. GOLD:  I think none of our witnesses were from
  15   this area and they all disturbed their plans to meet their
  16   obligations to be in court.
  17            MR. HERNSTADT:  Your Honor, all of our witnesses are
  18   volunteers, pro bono, coming at their own expense.  We are
  19   doing the best we can to get them here.  We don't have -- we
  20   don't control them.  I apologize.
  21            THE COURT:  Look, Princeton, New Jersey, the last
  22   time I looked was about an hour from here.  Dallas is a three-
  23   and-a-quarter-hour airplane ride.  And there are planes this
  24   evening.  You do what you can.  I'm not making any ruling now,
  25   but I remind you that you were told there would be no gaps,


                                                                814

   1   both sides were told, you were warned about it, you were told
   2   that the plaintiff expected to rest on Thursday.  They did
   3   rest on Thursday.  There have been no surprises.
   4            Thank you, folks.
   5            (Trial adjourned to July 21, 2000, at 9:00 a.m.)
   6
   7
   8
   9
  10
  11
  12
  13
  14
  15
  16
  17
  18
  19
  20
  21
  22
  23
  24
  25


                                                                815

   1
   2                        INDEX OF EXAMINATION
   3   Witness                    D      X      RD     RX
   4   JON JOHANSEN.............616    627     641
   5   MIKHAIL REIDER...........646    676
   6   EDWARD FELTEN............731    763
   7   ERIC CORLEY..............774    806
   8
   9                         PLAINTIFF EXHIBITS
  10   Exhibit No.                                Received
  11    113, 114, 115, 116
  12    1.11, 1.1, 1.2, 1.4, 1.6, 1.8,
  13    1.7, 1.5, 1.3 and 1.12  ................... 794
  14
  15                         DEFENDANT EXHIBITS
  16   Exhibit No.                                 Received
  17    BBP .........................................735
  18    B to Exhibit BBS ............................755
  19
  20
  21
  22
  23
  24
  25



Please send any questions or comments to webmaster@eff.org

Return to   EFF   Welcome Page