If I were Cox, I suppose I would be incentivized to operate kind of like a VPN and just not store logs and not do any kind of traffic inspection or analysis. That way they might be able to argue that the plaintiff couldn't prove contributory infringement.
There's also business and legal reasons why ISPs need to log and inspect traffic. "No logging" means "no abuse desk" - i.e. if someone's using your ISP to send out spam or hack people, and you aren't logging or inspecting traffic, then you can't investigate that spam or that hacking. At a minimum it means every other online service is going to distrust your users - i.e send them through reCAPTCHA hell; up to an outright ban. Think like what it's like to use clearweb services through a Tor exit node, and now imagine that for a bunch of nontechnical users. They're going to switch to the ISP that doesn't result in them getting group punishment. But actual criminal actors are going to flock to the service, because they need someone in the middle to launder their packets for them, which makes them have a worse reputation, and so on.
Seems possible enough to keep logs of possible abuse for an account without keeping IP logs around. I'd also guess they have a lower standard for evidence needed to suspend/close an account for abuse than an ISP would. It's just not worth the trouble to keep a suspicious account open when it risks getting their IPs blacklisted.
[0] BTW, how is this not a massive industry-wide DMCA 1201 lawsuit? Advertising a service as being capable of getting around georestrictions sounds like it should be as illegal as advertising a DVD decryptor.
In other news; netflix themselves allow the usage of VPNs[0] provided you dont use the free (ad-supported) plan. Presumably to prevent the sort of thing I used to do with spotify years ago (be from a region where no advertisers paid them, so the space where adverts would usually be was just blank)
> how is this not a massive industry-wide DMCA 1201 lawsuit?
Is it illegal to bypass geoblocking in the US? I'd think that in the US using a VPN to get around geoblocking could count as 'circumventing a technological measure that controls access to a work' or whatever and could be considered illegal under the DMCA, but perhaps there's also a difference between using a VPN to access content offered outside of your own country you were never authorized to view vs using it to access the same content you'd normally have access to if you weren't just on vacation? I don't think I've heard about any lawsuits against VPNs for that.
Either way, I'd agree that advertising a service as a means to bypass geoblocking is probably a bad idea. As long as they don't outright tell people they should use the service to do that though I think an argument could be made that a VPN just provides internet access, and the VPN's ToS/AUP requires users to not to do anything illegal with the connection, and so the user is responsible for what they do with it.
This is a sufficient argument in many situations. To shore it up for cases where the electric company gets informed (by a court, for example, with or without the court actually ordering the electric company to do something about it) that subscriber Jackie Doe has been sued and penalized for copyright infringement, there has to be a complementary argument about whether placing mandatory enforcement on multiple providers in the service stack (website -> internet service provider -> electricity) is a reasonable legal framework. How many turtles on the way down should be forced to restrict known copyright infringers? Before internet access became nearly as necessary as it is today, former Senator Orrin Hatch proposed a law authorizing destruction of copyright infringers' computers by copyright holders. (In the service stack I mentioned previously, "computer" would be a link between internet service provider and electricity.) Meanwhile, my takeaway of the featured article is that bans of internet service are not a fringe idea, at least among big copyright publishers.
[1] https://en.wikipedia.org/wiki/Orrin_Hatch#Intellectual_prope...
This thread reminded me of an EFF article "Beyond Platforms: Private Censorship, Parler, and the Stack" [2] about the content moderation tech stack (social media site -> site hosting provider -> internet service provider). The article focused on voluntary moderation actions by site hosting providers and ISPs but is a useful prototype for examining tech stacks which involve third-party liability laws, including in copyright contexts.
[2] https://www.eff.org/deeplinks/2021/01/beyond-platforms-priva...
There are a number of reasons an ISP might not know who had a given IP at a given date and time. DHCP and CGNAT are two big ones. And the rare individuals who choose to fight do sometimes use that as a defense.
However, those technologies have a purpose other than anonymizing activity. A residential ISP who took active measures to obscure their customers activity would have a harder time defending against a complaint of negligence.
Any ISPs who made it impossible for themselves to tell which customer had an IP address is going to act as a safe haven for bad actors and they'll get blacklisted from many other networks pretty quickly. Only the largest ISPs can ignore abuse issues on their network without fear of being blacklisted and their IP space null routed.
It also fell flat on its head when it hit the "is an IP a person?" argument.
Every file crossing the line is fingerprinted and various ISPs give various copyright-track software vendors or licensors direct access to track those pre-determined fingerprints and report problem to ISP for customer to mitigate or help prepare for subpoena. There's a lot of other ways this stuff is tracked I won't get into and the environments even more direct now with all of the ML tools. Webhosts and social media apps do the same thing so they can have smaller abuse departments digging for CSAM content. Data exfiltration is a huge space.
As soon as a new lady gaga video is uploaded to Vevo, the fingerprint was already determined, and the copyright bots have alread been scanning the internet for that file for days/weeks. Watch a new music video release on youtube, you'll see attempts to copy it get hammered immediately.
DPI and MITM-TLS which a lot of people blindlyaccept by accepting various free ISP features basically takes most of the end users privacy away in the end anyway. They're all reselling your data, ISPs and most VPNs are scum.
These are scenarious that someone with experience at a major CDN would be very familiar with. We do the same thing tracking every unique object on the entire platform.
'2004 - https://www.technologyreview.com/2004/08/04/232539/fingerpri...
No ISP is happy about the fact that they're forced to spend significant amounts of time and money working as "copyright police" for the media industry for free, and they aren't happy that (so far) courts have insisted that they need to permanently disconnect people from the internet over nothing but unproved accusations from questionable sources, but it was a bad idea to talk openly about that in email because all of that was later used against them in court.
This is completely true, and yet many many countries place a fee on any writable media (drives, cards, disks) and funnel that bribe directly to the RIAA and MPAA by law. https://en.m.wikipedia.org/wiki/Private_copying_levy