The MPAA Will Let Amazon Touch Its Stuff, But Only If It Agrees To A Ton Of Stipulations

from the rules-on-top-of-rules-on-top-of-futile-efforts dept

TorrentFreak’s Andy reports that Amazon recently published the MPAA-required “best practices” for handling physical goods as well as content stored or hosted by its cloud services. This doesn’t just cover the obvious storage of movies for streaming services, but also works-in-progress by studios utilizing Amazon’s web services.

It’s comprehensive and loaded with restrictions and stipulations.

[I]n addition to carrying out background screening on all employees and third party contractors, the MPAA demands that all workers sign annual confidentiality agreements that forbid them from talking about protected content.

With an eye on local law, companies must also implement random searches of their workers for traces of MPAA content, including the removal of coats, hats and belts, the emptying of pockets, a full security pat-down, scanning with metal detectors and inspection of electronic devices.

Other obvious demands are included, all aimed at preventing the leak or physical theft of studio goods: no portable devices with storage capabilities, no baggy clothes, and employees’ meals must be brought to work in transparent bags.

Interestingly, the MPAA’s 2015 agreement with Amazon actually scales back some of its requirements. Demands that Amazon create an MPAA-specific security team and allow reps monthly access to inspect restricted areas are no longer in force. Other stipulations focused on the specific parameters of on-site, physical security have been loosened or removed completely, as well as specifications for CCTV footage storage, access and retention. The requirement that all involved third parties be CTPAT-certified (Customs Trade Partnership Against Terrorism) has also been dropped, suggesting the MPAA is about done humoring the DHS’s paranoiac assertions that everything has a potential terrorism nexus.

But the adjustments made between the 2013 and 2015 edition of the MPAA’s “rules” don’t reflect a change in the MPAA’s Ft. Knox mindset. Instead, it shows the MPAA shifting its priorities from physical protection to digital protection. The high-profile hacking of Sony likely contributed to new stipulations like these:

2015 MPAA added the requirements to perform quarterly vuln scans of external IP ranges, secure any point to point connections by using dedicated, private connections and by using encryption. Additionally the requirement to implement baseline security requirements for WAN network infrastructure devices and services.

2015 MPAA added controls around the encryption of content at rest and in motion. Additionally, procedures around the storage of public and private keys.

Also new to this ruleset is a whole section dedicated to “mobile security” that addresses the potential security holes created by a BYOD environment.

The documents show the MPAA can be forward-thinking when it comes to the distribution of content — especially when trying to figure out how to stop it.



Filed Under: , , , ,
Companies: amazon, mpaa

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “The MPAA Will Let Amazon Touch Its Stuff, But Only If It Agrees To A Ton Of Stipulations”

Subscribe: RSS Leave a comment
60 Comments
Anonymous Coward says:

But Amazon, the most invasive suspicious draconian corporation I've yet heard of, surpassing even Apple, LOVES this!

You seem to assume was forced on Amazon, the company that forces employees spend up to an hour of unpaid time every day waiting to be searched. Amazon treats them like convicted criminals, yet they’re under such economic stress that they can’t organize and fight it. So I’m sure Amazon is in league with MPAA and LOVES this.

Like Wal-Mart, Amazon is good from your (current) “consumer” view by being hellish for low-level employees — those in the offices have it great compared to the working stiffs.

This is just a hint of what the globalists plan for you too. You’re all within sight of being the serfs in neo-feudalism.


Tired of Techdirt wasting your time from slow page loads of javascripts and images, and of not seeing comments the fanboys have censored?

Use the mobile version, Techdirt Lite!
https://www.techdirt.com/?_format=lite

DannyB (profile) says:

Re: But Amazon, the most invasive suspicious draconian corporation I've yet heard of, surpassing even Apple, LOVES this!

Free clue for the clue challenged.

Censorship is when a point of view is being suppressed. Having one is a prerequisite in order for it to be censored.

Ignorance, Lies, Name Calling, and Trolling do NOT qualify as a ‘point of view’.

Please do not try to elevate it to such.

ottermaton (profile) says:

Re: Re: Re:3 Feeding the troll is pointless.

… but trust a troll to completely miss the point.

Yea, about that … that would only make sense if I was referring to myself in the 3rd person. Which I clearly wasn’t.

So, really, you’re just not very bright. 😉

Go back to what you’re good at: feeding the troll. (By the way, all those people who can’t think for themselves that you have to “save” from the trolls “ideas”, they thank you for “protecting” them with your “superior intellect.” Not.)

DannyB (profile) says:

Listen up other industries!

This is how you do security.

Hey, Nuclear Power? Nuclear Weapons Research? Three Letter Agencies? Are you paying attention?

If any of you think that the secrecy and security of your goodies approaches that of the MPAA, then you should be paying attention to best practices.

Coming soon!
* Harassing and Searching of everyone your employees meet! (including dating)
* Randomly performed surgical inspection procedures!

Anonymous Coward says:

Re: Re: Re:

When you consider that antidirt insists that corpses of artists still have to have tribute paid to them 75 years after death – it’s not surprising to see he has a thing for fucking over the dead.

Small wonder why he spends all his time trolling this site on his wife’s laptop instead of with his wife.

Anonymous Coward says:

Re: Re:

Believe it or not, some people’s hatred of Hollywood is far greater than any love for the digital effluent that spews from it.

Although I haven’t done so in many years, I used to make it a point to acquire things I had no personal interest in and share this often-unreleased material on the ‘wider’ internet just to stick it to the copyright corporations. (and I did it mostly anonymously, unlike some who seemed to enjoy the status that such actions tend to bring)

Uriel-238 (profile) says:

Re: No, it's far worse.

We hate Hollywood so much (and by that I mean the mean-spirited players of Hollywood, such as the MPAA, Sony, Disney, et al.) and yet simultaneously we’re constantly scheming to get content that doesn’t come from Hollywood.

For a while now, the content produced in Hollywood — even as far as the Skywalker Ranch north of here — has been mediocre at best and downright offensive at worst.

And Hollywood now has plenty of competition.

Anonymous Coward says:

…(Amazon) forces employees spend up to an hour of unpaid time every day waiting to be searched…

Despite the rambling the troll is right on this part. There was a court case that sided with Amazon on that issue. What wasn’t covered in that case: were those actually Amazon employees or contracted employees. There is an Amazon ‘fullfillment center’ in my area and they use contract employees. The basic issue still needs to be resolved either by legislation or by court case: if an employee is NOT free to leave the employer’s property they should be on the clock until they are free to leave. In the cited case the time clock was a significant distance away from the security checkpoint. Had the time clock been next to the security checkpoint there likely would have been no case.

Anonymous Coward says:

the fallacy of "airtight' security

Bennie Lydell Glover — “The Man Who Broke the Music Business” — worked at a music CD pressing plant back in the 1990s that was placed under military-grade security after repeated leaks, yet that still didn’t stop him from swiping unreleased albums and getting them out of the facility and onto the internet — year after year.

http://www.newyorker.com/magazine/2015/04/27/the-man-who-broke-the-music-business

That was before the era of the thumb-drive, devices that would seem custom-made for body-cavity concealment 😉

Uriel-238 (profile) says:

And THIS is why p2p provides the best end-user experience

Even if it means sifting through degrees of quality (from in-theater recordings to blu-rips) to resolution to compression methods, with torrents you’re plagued with an overwhelming abundance of choices.

In the meantime, the MPAA is trying to block anyone from offering a legitimate means to see Hollywood content except through their exorbitant, ad-ridden, high-suspicion processing machine, which only goes to highlight their attitude of artistic-media-as-manufactured-product.

No wonder they can’t compete with peer-to-peer, and no wonder all sorts of indie material is utilizing peer-to-peer as a distro model.

Sheogorath (profile) says:

No wonder they can’t compete with peer-to-peer, and no wonder all sorts of indie material is utilizing peer-to-peer as a distro model.
Peer-to-peer tends not to have subtitles even on professionally produced works, which is why I scour second hand market stalls in preference to purchasing indie films from the Internet. (I’m not deaf, I have auditory processing issues.)

Uriel-238 (profile) says:

Re: DO NOT WANT!

From what I’ve seen there are plenty of subtitles or closed-captions available, either attached to a given package or downloadable from specialty sites. Granted, some of them are of dubious quality, depending on the fluency of the translator.

Of course, this does sometimes mean having to actually hunt down a subtitles file, but in the rare times I’ve needed one independent of the original kit, I’ve always been able to find one.

tqk (profile) says:

Re: Re: Re:9 Some of us don't have option keys

Unless we’re sure something makes sense in çòňŧëɤʈ

Some of us get by with just cut+paste (see? :-). If I’m a unilingual Anglo-phone, why would I even want to know how to do what you did above? I’m sure I’d just muck it up through ignorance.

It’s great we have unicode. Stuff gets displayed correctly nowadays, even if I don’t know an umlaut from a hole in the ground. Or a doubly crossed “t”, or any of the rest of that stuff we decided we didn’t need here in the colonies or Britain.

Anonymous Coward says:

Something about this story reminds me of the following excerpt from the Gnu Manifesto:

Arrangements to make people pay for using a program, including licensing of copies, always incur a tremendous cost to society through the cumbersome mechanisms necessary to figure out how much (that is, which programs) a person must pay for. And only a police state can force everyone to obey them. Consider a space station where air must be manufactured at great cost: charging each breather per liter of air may be fair, but wearing the metered gas mask all day and all night is intolerable even if everyone can afford to pay the air bill. And the TV cameras everywhere to see if you ever take the mask off are outrageous.

tqk (profile) says:

2015 MPAA added the requirements to perform quarterly vuln scans of external IP ranges, secure any point to point connections by using dedicated, private connections and by using encryption. Additionally the requirement to implement baseline security requirements for WAN network infrastructure devices and services.

I’ve got to wonder how much of this Sony took seriously prior to their latest multi-terabyte hack. So, we should expend whoompteen yada yada to protect their stuff while they couldn’t be bothered to even lock down their network from script-kiddies stealing their Imaginary Property nor their executives’ emails discussing their valuable IP and their employee’s PII?

Er? Hey! Why’s anyone caring about doofus yammerers like them?

Lisboeta (profile) says:

An opportunity?

I hope someone makes a parody video of the MPAA brainstorming (I use that word loosely) session when those demands were formulated. They missed a couple of things though: the need to wear blindfolds and earplugs to prevent seeing/hearing the merchandise being handled. And what’s to stop a person concealing a monitoring/recording device in the transparent bag of cold spaghetti bolognese?

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Ctrl-Alt-Speech

A weekly news podcast from
Mike Masnick & Ben Whitelaw

Subscribe now to Ctrl-Alt-Speech »
Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...