Live data from Hacker News

Google Drive flags file only containing “1” for copyright infringement

twitter.com

261–270 of 464 posts

Re: Google Drive flags file only containing “1” for copyright infringement

#261

Earlier quoted context omitted.

Turns out Google also hates 500, 174, 833, 285 and 302 (from generating files from -1000 to 1000).

Another bunch of numbers got flagged (186, 451, 336, 173, 266). I deleted the experiment, just in case I got my account deleted for too many naughty numbers.

That probably looks even more suspicious.

Re: Google Drive flags file only containing “1” for copyright infringement

#262
post #15

I'm curious if it was related to the file name. I created a few 1-byte files with just "1" in them, with different names, including "output04.txt". No problems so far. Also uploaded variations with "\n" and "\r\n" after the "1". And enabled sharing to anyone with the link. No issues so far. Google drive does support metadata like a description and comments. I wonder if someone posted some copyrighted text in a commen…

I wonder if this is an incredible hash collision. hash("1") == hash(disney_movie.mp4)

Not the case, since it also happens with other numbers.

Re: Google Drive flags file only containing “1” for copyright infringement

#263
post #15

I'm curious if it was related to the file name. I created a few 1-byte files with just "1" in them, with different names, including "output04.txt". No problems so far. Also uploaded variations with "\n" and "\r\n" after the "1". And enabled sharing to anyone with the link. No issues so far. Google drive does support metadata like a description and comments. I wonder if someone posted some copyrighted text in a commen…

Turns out Google also hates 500, 174, 833, 285 and 302 (from generating files from -1000 to 1000).

This is relatively new then. As part of some testing last summer for how to handle a migration from one Drive to another, I generated a folder that had I think 10k files in it. They were all named 1.txt, 75.txt, 8492.txt and their contents matched the filename (i.e. 1, 75, 8492). They never got flagged for me. That was for a Google Workspace account, though, and they were deleted a few days later once I was done with the tests.

Re: Google Drive flags file only containing “1” for copyright infringement

#264
post #122
post #15

I'm curious if it was related to the file name. I created a few 1-byte files with just "1" in them, with different names, including "output04.txt". No problems so far. Also uploaded variations with "\n" and "\r\n" after the "1". And enabled sharing to anyone with the link. No issues so far. Google drive does support metadata like a description and comments. I wonder if someone posted some copyrighted text in a commen…

Update: It has now flagged the file with "0\n" in it. So it's official, Both 0 and 1 are copyrighted :) https://imgur.com/a/xMgh6Xn

Careful there. My law firm in east Texas happens to own the patent rights to a system and method of concatenating a plurality of 1s and 0s for the purpose of generating an encoding of a creative work, and as such you are in peril of infringing on one of my claims with your concatenation of 1s and 0s!

Re: Google Drive flags file only containing “1” for copyright infringement

#265

Earlier quoted context omitted.

I definitely agree, but in america it's impossible to be legally employed without your employer having your SS# on record.

Well, yes. Employers need to talk to the Social Security Administration regarding your social security withholdings...

It's also your tax ID, unless you've filed for a separate one. While the original intent may have been that the SSN would only be used for Social Security, by now various places are required by law to collect your SSN even if they have nothing to do with the Social Security Administration. But that isn't even the real problem here. SSNs are an identifier (username). Merely knowing someone's SSN shouldn't grant you any extra privileges. It's not a secret—lots of people know it, and it isn't even hard to guess from age and birthplace—and yet people treat it as if it were something akin to a password, as if knowledge of a person's SSN were enough to establish identity. By this point in time we should very well know to use only zero-knowledge proofs for authentication and not even share the secret with the entity one is authenticating to, so they can't turn around and impersonate you to someone else.

The same goes for credit card and bank account numbers. As anyone you've ever paid with your card or by check has access to these they can't be considered particularly secret. The problem is that the system barely has any authentication built in. 4-digit PINs and hastily handwritten signatures only an expert can verify do not offer reasonable security. Chip cards are a bit better (non-clonable, require physical possession) but only work for in-person transactions.

Re: Google Drive flags file only containing “1” for copyright infringement

#266

Earlier quoted context omitted.

Just tested this myself. Got the same results as you while using different file names. Difficult to believe that Google has become so internally dysfunctional that it hasn't fixed this technical embarrassment twenty hours after first being being seen, and then five hours after being reported on front page of Hacker News.

It only affects sharing so it isn't a disaster if this happens, probably P3 medium if you went by their bug bounty priorities.

That is what I saw, I can still access the file. I do wonder, though, if there's some threshold of flagged files where they suddenly enact some other punishment.

Re: Google Drive flags file only containing “1” for copyright infringement

#267
post #7

"A review cannot be requested for this restriction" ML enforcing rules is bad enough, but not allowing false positives to be corrected is ridiculous. This is why I would never consider g-suite for any business application. Otoh, I think there is a legitimate business to be made helping small businesses and individuals secure themselves against arbitrary behavior from big tech. This kind of thing can have serious cons…

How long until cloud providers are forced to scan block devices, so you can't even self-host a file erroneously flagged by the ML? (Actually, how long until this is integrated with the "security engine" in CPUs, so you can't even hide with encryption? Everyone is talking about on-device voice-recognition and CSAM recognition, but no doubt the copyright lobby is going to push hard for this as well.)

client side rot13 to the rescue

(... I have actually used this in the past to work around my employer's moronic proxy)

Re: Google Drive flags file only containing “1” for copyright infringement

#268

Earlier quoted context omitted.

Turns out Google also hates 500, 174, 833, 285 and 302 (from generating files from -1000 to 1000).

This is relatively new then. As part of some testing last summer for how to handle a migration from one Drive to another, I generated a folder that had I think 10k files in it. They were all named 1.txt, 75.txt, 8492.txt and their contents matched the filename (i.e. 1, 75, 8492). They never got flagged for me. That was for a Google Workspace account, though, and they were deleted a few days later once I was done with…

I did notice it flagged "1", "1\n", but not "1\r\n". Then, it didn't flag "0", but did flag "0\n". So line endings seem to matter as well, but not in some consistent way.

Re: Google Drive flags file only containing “1” for copyright infringement

#269
post #258

Earlier quoted context omitted.

It'd be nice if the law had a escrow appeal process. Alleged violator now posts a $100 escrow, now accuser has to do the same. Then Google reviews it, makes a decision, and loser has to pay for it.

It should be the other way around. The claimant must "bet" $100 that he owns the copyright. Then the defendant can call the bluff and say "I raise $100000 that you do not in fact own this output04.txt file with a 1 in it". If the the claimant still thinks he can win he can call the $100k and prove ownership. Otherwise the defendant just made $100. How cool would that be?

An observation made by shrewd businesspeople throughout history is that you can only trust money. No amount of words, documents, statements, etc... matter unless someone is willing to put up real cash. If there are no consequences, then by definition misdeeds aren't punished and will be effectively incentivised.

E.g.: You can trust a legally enforced warranty with full refunds guaranteed by the government, because it costs real money to the manufacturer. You can't trust a "Best Quality!" sticker. It basically costs nothing. It's just words.

Copyright protection laws are the same kind of thing. While the marginal cost of enforcement is zero, there is similarly zero incentive to do it correctly and respectfully of the law.

If there was enforced financial penalties for each screw up, then it is assured that any errors like this will be ironed out very quickly.

No penalty? No bug fixing!

Post reply on HN