It’s been more than 7 years since cyberlocker piracy king Kim Dotcom was indicted for copyright infringement by U.S. authorities. He’s fought extradition from New Zealand tooth and nail, but earlier this month his final appeal was denied. Whether he ends up in a U.S. jail will apparently be determined by New Zealand’s Minister of Justice.
In the meantime, MEGA, founded in in 2013 to replace his shuttered Megaupload.com, is till in business and continues to host infringing conent uploaded by online pirates everywhere. The company is supposedly worth $210 million and, while Dotcom himself claims no direct involvement, conveniently his wife remains a primary shareholder. It’s a murky and twisted enterprise–but is that really a surprise?
In June, the site averaged 12 million visitors per day and it’s a safe bet most weren’t there for legit reasons. Aside from piracy, much of the traffic appears porn related. Visitors from Brazil, Mexico and the United States lead the pack.
Easy to find, watch and download pirated movies, music and books on MEGA
From the start, Kim Dotcom has claimed MEGA is perfectly legal. Supposedly, since the files are encrypted end to end, operators can claim ignorance as to what exactly is being shared. However, it’s not the truth. I easily found, and was able to view, pirated movies without a so-called encryption key. No account required.
Via link posted on Twitter I viewed Bird Box on MEGA without encryption key.
If one does want to actually download the files all that’s required is a free account and installing an app….easy as setting up an account on Netflix.
Google, YouTube, Facebook & Twitter help spread pirated content
In order draw traffic to the site, MEGA users depend on the usual intermediaries like Google, YouTube and Facebook to spread (illegal) links. Today, in the process of writing this post, I did a quick search for the recent hit Captain Marvel. Within seconds–thanks to Google and Facebook–I found a pirated copy hosted by Mega.
From Google to Facebook to a full stream of Captain Marvel
Viewing other content, like HBO’s hit “Big, Little Lies” or, as mentioned above, Netflix’s “Bird Box” (thanks Twitter), were also only a couple clicks away.
In addition, I quickly discovered episodes of the BBC/HBO production “Gentleman Jack” (via YouTube) and historian Anne Choma’s audible companion book (which I reported publisher and thankfully it’s been removed).
Link pirated episode on Mega found via YouTube
The full episode of Gentleman Jack can be screened simply by clicking the MEGA link found in the YouTube description. Piracy made easy.
In yet another example, thanks to Twitter I found a link that offered me season one of the subscription TV series “Vida” streaming on MEGA without any key required. No matter what anyone says, MEGA seamlessly offers tons of pirated content.
First season of Vida on MEGA available to stream for free
Of course, per usual, it’s not just Hollywood blockbusters and HBO fare that continue to be victimized. Independent creators, particularly those without deep pockets for anti-piracy defenses, also lose precious income to online thieves enabled by MEGA.
Why do people bother to pirate? As always, the incentive is the money they earn from ads. Pirates upload content to MEGA, post links on places like Twitter or Facebook and cash in when users click through ads on an intermediary site in order to get to view the actual link. I’ve been writing about this business model for nearly a decade and sadly, little seems to have changed.
It remains to be seen whether Kim Dotcom ends up behind bars in the U.S.–but no matter his fate, there’s little doubt that the online piracy eco-system he helped build continues to flourish, creators rights be damned. The role played by intermediaries like Google, YouTube, Facebook and Twitter in the U.S. cannot be ignored either.
PayPal has finally ceased doing business with Kim Dotcom’s Mega site and he’s pouting about it. The man who has made millions be monetizing content stolen from others continues to assert that Mega is a legit cloud-based serviceand that its operations are legal. A statement posted on the site announcing that, “PayPal has ceased processing MEGA customer payments effective immediately…” also makes the claim that the cyberlocker site is being unfairly targeted:
MEGA has demonstrated that it is as compliant with its legal obligations as USA cloud storage services operated by Google, Microsoft, Apple, Dropbox, Box, Spideroak etc, but PayPal has advised that MEGA’s “unique encryption model” presents an insurmountable difficulty. The encryption models claimed by various USA and other entities apparently do not represent any problem to PayPal or the parties behind PayPal.
Nice try but even if you dress a wolf in sheep’s clothing he’s still just a wolf. It’s important to note that Mega rose from the ashes of Megaupload, the granddaddy of cyberlockers where the piracy for profit model was perfected and later copied by dozens of other online entrepreneurial thieves. After the feds shut the site down in January of 2012, Dotcom got busy working a better way to circumvent copyright law and a year later launched a more nefarious piracy for profit site named Mega. The site uses encryption technology to protect its users (and site operators) from prying eyes. Dotcom claims Mega is full of folks’ baby pictures and the like, but in reality its business model continues to provide pirates with a profitable, and protected, haven for their transactions.
Until PayPal’s recent departure, officials at Mega even pointed to the relationship with the payment processor as a sign that Mega was “legit.” In response to charges in a study published last September by NetNames and the Digital Citizens Alliance, Mega CEO Graham Gaylard told TorrentFreak:
“We consider the report grossly untrue and highly defamatory of Mega…Mega has been accepted by PayPal because we were able to show that we are a legitimate cloud storage site. Mega has a productive and respected relationship with PayPal, demonstrating the validity of Mega’s business…”
For the past few years payment processors like Visa, Mastercard and PayPal have come under increasing scrutiny for their role in facilitating (and profiting from) pirate-linked transactions. Following publication of the NetNames study, Senator Patrick Leahy, Chairman of the Senate Judiciary Committee at the time, sent letters to the head of both Mastercard and Visa urging that the companies sever ties with piracy operations.
I’ve been reporting on this issue since 2010, and while some progress has been made as processors have severed ties with many of the worst offenders, much work remains. According to the study, PayPal was singled out for its business dealings with Dotcom:
PayPal was offered as payment option on only one site (Mega). This represents a major change in the cyberlocker universe compared to just three years ago. The fact that the vast majority of cyberlocker sites do not attempt to take PayPal through hidden or disguised means demonstrates that the payment method is not even considered as an option for accepting subscription payments.
Dropvideo still depends on PayPal
Apparently PayPal officials finally decided that doing business with Mega was no longer an option. Unfortunately, aside from Mega, PayPal’s involvement with pirate sites persists and extends beyond offering subscribers a way to pay for services.
PayPal remains an important cog in the the flow of money that’s central to the business model Dotcom perfected on Megaupload. It was essentially a pyramid scheme as I explained in this blog post from 2011. Basically, cyberlocker affiliates provide the fuel that drive the piracy machine. Individuals sign who up to be cyberlocker affiliates earn money for uploading (stolen) content based on the number of times a file was downloaded. They can also earn commissions for attracting other to enroll in various cyberlocker account offerings. Affiliate payments continue to be the lifeblood that sustain the cyberlocker eco-system and PayPal continues a popular means for affiliates to receive payment for their role in bringing traffic to sites. According to the NetNames report:
…PayPal is still used by some sites for affiliate or reward scheme payments. Of the thirteen sites that offered an affiliate scheme, eight (61.5 percent) offered PayPal as a way for affiliates to receive their payments (other online payment systems such as WebMoney and Payza were also used but PayPal was the most popular).
This morning I took a quick look at Dropvideo.com, a cyberlocker I’d recently sent DMCA notices to. Sure enough, they use PayPal for their affiliate payments. So while PayPal has distanced itself from Mega, the company still has a long way to go to clean up its dirty piracy profits.
Megalomaniac Kim Dotcom is at it again. With a launch of a new campaign announced via an all caps headline screaming that “THE TRUTH WILL COME OUT!” on his website, he’s ratcheted up his assault on the big, bad U.S. government, the so-called “copyright lobby” bogeyman and everyone else who views him as the criminal thug that he is.
As part of his campaign to get out his (version of the) truth he’s published a “white paper” called “Megaupload the Copyright Lobby and the Future of Digital Rights.”
In it he claims the case against him “represents one of the clearest examples of prosecutorial overreach in recent history.”He takes particular aim at the White House, claiming his arrest was “propelled by the White House’s desire to mollify the motion picture industry in exchange for campaign contributions and political support.”
He goes on to claim that it’s a case of him and “digital rights advocates, technology innovators and ordinary information consumers on the one side, and Hollywood and the rest of the Copyright Lobby on the other.” He characterizes his highly profitable pirate website as a wonderful public service, with piracy only a minor concern.
Megaupload operated for seven years as a successful cloud storage business that enabled tens of millions of users around the world to upload and download content of the users’ own choosing and initiative. The spectrum of content ran from (to name just a few) family photos, artistic designs, business archives, academic coursework, legitimately purchased files, videos and music, and – as with any other cloud storage service – some potentially infringing material. [emphasis added]
How about some real truth about Megaupload? Until its takedown in January of 2012 it was the largest and most profitable repository of pirated content in the world. Contrary to claims made in his “white paper” Dotcom’s business model was dependent on content theft to drive traffic to, and generate income for, the site. The pirated content on Megaupload included music, movies, e-books and more–and represented the creative work of artists, filmmakers, authors and musicians across the spectrum.
For Kim Dotcom it’s easy to create propaganda that points to the big, bad MPAA or RIAA as the enemy…after all they are in the business of making money right? Well, the fact is, so is Mr. Dotcom and, unlike Hollywood, he doesn’t play by the rules. Why invest in content (and employ thousands to make it) if you can just steal it?
As an independent filmmaker I’ve had plenty of opportunities to witness first hand the piracy supported by Mr. Dotcom’s illegal enterprise, and it wasn’t pretty. Our film, like thousands of others, was easy to find on Megaupload as a free download or streaming in HD, complete with subtitles in various languages. Meanwhile it could be also be streamed or downloaded (with subtitled versions) on legit sites like iTunes, Amazon, Netflix, Busk Films and others portals worldwide.
The difference between these legit online distributors and Dotcom’s Megaupload was that we earned income from our film’s distribution on the legit sites while it was Mr. Dotcom (and his uploading minions) that profited from our film on Megaupload. For indie filmmakers like us who don’t have theatrical releases, back-end distribution is the only way to recoup expenses. Megaupload’s pirated offerings forced filmmakers like us and other content creators to compete against FREE versions of their own creations. How crazy is that?
Despite his splashy spin minimizing the amount of “infringing material” disseminated through Megaupload (and Megavideo), the fact is that without stolen content, he would not be the “Mega” millionaire he is today.
How did the illicit Megaupload business model become a profit machine? Well, it’s helpful to think of a company like Amway. Amway’s business success popularized the multi-level marketing style pyramid business model (or scheme ) whereby the operators at the top of the pyramid recruit people to work for them. They, in turn, recruit more workers who, in turn, sell products to the public. Those at the top make money only if they can recruit, and keep, enough people below to do the actual work. Those doing the bulk of the work earn money, but at a much lower rate than those at the top. It’s the trickle up theory of profits.
Megaupload’s business was predicated on offering enticements to users (uploaders) to join this type of piracy-4-profit pyramid. This approach was essential to maximizing the number of visitors to the site. Another essential part of this equation was making sure the UCG (user generated content) that would attract eyeballs. Sorry, but your ” family photos, artistic designs, business archives” wouldn’t do the trick. No what better UGC carrots than popular movies, books or music? Dotcom didn’t seem too worried about copyright thanks to the “safe harbor” provision of the DMCA that allow UGC sites to easily look the other way (plead ignorance) when it came to vetting infringing content.
In order to set this eco-system into motion, Megaupload lured its worker bees. Simply put, the more downloads users generated for each file, the more money/rewards they earned. These rewards precipitated the next, and most insidious stage of piracy—the viral spread of infringing links. With dollar signs in their eyes, Megaupload’s affiliate armies took their links and posted them on web Warez forums far and wide. The more Megaupload links they “shared” across the web, the more money they made.
Pirate forum search results for new indie film showing more than 300 posts “sharing” download links.
In other words, Megaupload created, and was dependent on, an army of affiliates to do the dirty work for them. The scenario enabled Megaupload (and dozens of cyberlockers modeled after them) to shield themselves from legal liability, while their servers were simultaneously receiving thousands of (stolen) files every day–fresh content sure to attract new (and returning) customers.
Though the site claimed to respond to takedown requests, Megaupload was in fact playing a shell game, by not removing the actual infringing files and instead generating fresh links to replace those removed via the DMCA process. When Megaupload was first taken down in 2012 I wrote a blog post about this and put together a short video demonstrating how this worked (below).
[vimeo 35648310 w=500 h=375]
It’s also important to remember the impact Megaupload’s business model had on encouraging and sustaining piracy profiteering across the web. It’s takedown marked a significant turning point in the fight against online piracy profiteering. As I wrote in an earlier post in response to the launch of Kim Dotcom’s new site Mega:
…when U.S. law enforcement took his popular Megaupload offline a year ago, it marked a significant turning point in the battle against online piracy. Since then real progress has been made. Copy-cat sites that modeled the success of Dotcom’s business model closed their doors. At the same time, more options for timely and legitimate online distribution of movies and music emerged–options both profitable for creators and affordable for consumers. Advertisers and payment processors have also stopped partnering with some remaining pirate cyberlocker sites, diminishing their profits and popularity. Other companies, such as Google, have also had to address their role in aiding, abetting and profiting from piracy. Overall, the lure of online piracy as a cottage industry has been greatly diminished.
Kim Dotcom is not Robin Hood and he’s not a hero. He’s a (wealthy) thief who, thanks to technical know-how and a black market business acumen, was able to exploit the work of content creators across the globe for his own, personal gain. Dotcom’s lies cloaked as “truth” may gain him sympathy from his acolytes, but it won’t change the fact that stealing from others isn’t sharing, it’s theft.
Kim Dotcom’s much ballyhooed new venture, Mega, has gone live. and is, according to a tweet from the mastermind himself, already wildly popular, “250,000 user registrations. Server capacity on maximum load. Should get better when initial frenzy is over. Wow!!!” It’s no great surprise that there’s a lot of early interest in site, but the real question going forward is whether anti-piracy activists should be running scared? For now, it seems too early to tell. The key to whether this new cloud-based file-sharing site will become the new nexus for online piracy depends on what business model is used, and at this point, it’s difficult to decipher exactly how this will all play out.
There are already various cloud-based file-sharing sites, similar to the “new” Mega–sites DropBox and YouSendIt that already allow users to easily share large files across the web. However, unlike Kim Dotcom’s now-defunct Megaupload site, these services do not incentivize uploads. In other words, in contrast to cyberlocker favored by pirates, these legit sites don’t offercash rewards based on the number of times a file is downloaded. As a result, most people who use these cloud-based file-sharing services do so because they have actual business to conduct, or seek to share files with family or friends.
Certainly some file-sharing that’s technically “illegal” takes place, but without cash carrots offered to uploaders, it’s relatively inconsequential in terms of the big picture. The success of DropBox and YouSendIt is not predicated on the need to draw traffic and generate ad clicks. Theirs is a business model that does not incentivize piracy on a viral scale.
Perusing the new Mega website, I found some references to its planned business model, but no mention (yet) of any individual “partner” rewards programs like those found in its previous incarnation. Below is a solicitation for “Mega Storage Node” partners (located outside the United States). This program seems focused on attracting additional host companies that wish to integrate Mega’s infrastructure into their own businesses.
The new “Mega” is seeking partners to become a “storage node.”
Like Megaupload, Mega also offers tiered “Pro-memberships” which offer users greater storage and speed options. Prices range from $9.99 per month to $29.99 per month.
Although the new site has established its operations (and servers) outside of the United States, Mega’s “Terms of Service” does feature boilerplate language regarding intellectual property and copyright.
Note that Mega’s terms also includes language that includes references to protecting its own IP.
Our IP
13. The license that we give you to use the website and our services does not give you the right, and you can’t reproduce or use any of our copyright, intellectual property or other rights other than for the purposes of using the services and the website or as allowed under any open source licences under which we use intellectual property provided by others. The open source code that we use, where we obtained it, and licences for that code are all referenced in our FAQ.
14. You are not allowed to, and you can’t let anyone else, copy, alter, distribute, display, licence, modify or reproduce, reverse assemble, reverse compile (whether digitally, electronically, by linking, or in hard copy or by any means whatsoever) or use any of our copyright, intellectual property or other rights without getting our permission first in writing, unless in order to use our services and the website or as allowed under any open source licences under which we use intellectual property provided by others. The open source code that we use, where we obtained it, and licences for that code are all referenced in our FAQ.
At the moment the new site, not surprisingly, is running as slow as molasses due to heavy traffic. It remains to be seen if, and how, its presence will impact the online piracy landscape going forward. Right now this new site doesn’t seem all that revolutionary. For the end-user, it’s just another cloud storage solution.
No matter what transpires, Dotcom is clearly relishing his moment back in the spotlight. He’s already busy tweaking Hollywood posting this Tweet and image a couple of days ago. Despite his self-important cockiness, in the grand scheme of things, I don’t think he’ll be getting the last laugh.
Though Dotcom would likely disagree, when U.S. law enforcement took his popular Megaupload offline a year ago, it marked a significant turning point in the battle against online piracy. Since then real progress has been made. Copy-cat sites that modeled the success of Dotcom’s business model closed their doors. At the same time, more options for timely and legitimate online distribution of movies and music emerged–options both profitable for creators and affordable for consumers. Advertisers and payment processors have also stopped partnering with some remaining pirate cyberlocker sites, diminishing their profits and popularity. Other companies, such as Google, have also had to address their role in aiding, abetting and profiting from piracy. Overall, the lure of online piracy as a cottage industry has been greatly diminished.
Maybe Dotcom’s new Mega will be legit, maybe not. The world will be watching, but I’m not too worried. At least not yet.
As promised, Megaupload’s Kim Dotcom continues to work on a new cloud-based storage service called “Mega.” He’s even released some screen shots to gin up expectations. Of course the files featured on the example reflect a benign use of the site as a place to store medical records and family photos. According to Examiner.com’s Michael Santo, key to the new site is an encryption methodology controlled entirely by the user, not the site itself.
By using 2048-bit RSA encryption for files uploaded to the service, Mega will keep itself safely ensconced within the DMCA Safe Harbor provisions, which places any legal issues for content on the end user, not the site.
The question that remains unanswered is what business model will Mega use? How exactly does Kim Dotcom plan to make money? After all, given his track record, I imagine he’s developing this new business with profits in mind. The reason Megaupload was so insidious was not because it offered a convenient way to upload, store and “share” big files (like pirated movies). Rather, it was because its business model incentivized users to do so with cash rewards and other perks. There are plenty of cloud-based services out there that already do what Dotcom is proposing to do with his new site. And, while there are surely pirated copies shared via those channels, the problem is minimal because those sites aren’t designed to profit from piracy.
At any rate, I suppose we will have to wait a bit longer to see what pirate king Kim Dotcom has in mind for this new “Mega” venture. Somehow I expect that the profiting from piracy will remain a fundamental part of his business model. At least that’s my bet.
As an indie film and broadcast journalism veteran, I'll share my perspectives on issues of interest to the creative community and beyond--Ellen Seidler