viv

programmer & tinkerer with adhd

generalist software engineer at microsoft and author of https://twitter.com/dkpunchbot. check out @hell-labs for some other cool stuff

other places: @viv@snoot.tube, https://github.com/vivlim, https://twitter.com/vivviridian


staff
@staff

in response to a lot of feedback that we're sure everyone is aware of by now, we've worked with our lawyer to change our Terms of Use -- mostly to clarify the way we understood the rules before, but there's also a few small material changes as well.

here's the new version, effective immediately.

the most important bits:

  • removed the broad and confusing set of IP rights granted to us for Community Forums (to be clear, we did not consider the Community Forum provisions in the old Terms to apply to posts in general and would not have enforced them in that context);
  • clarified that while it's against the Terms to sign up with multiple user accounts, cohost allows and encourages you to create multiple pages for all your projects and sideblogs under your account;
  • clarified that we do not consider registering under a fictional name or alias to be against the Terms, nor do we consider impersonation for the sake of parody to be against the Terms;
  • clarified that we do not expect you to provide customer support for things you post to cohost, but insofar as anyone does, it's your responsibility rather than ours;
  • added a carveout to the arbitration clause allowing you to skip arbitration for matters small enough that they can be tried in small claims court;
  • removed the blanket prohibition on reverse engineering from the Terms, since a lot of reverse engineering (user scripting, discovering and root-causing bugs, etc.) is something we consider good and genuinely helpful; however, reverse engineering cohost with the intent to copy the software, distribute posts in violation of the poster's copyright, or interfere with the site's operation is still not allowed.

we hope this provides some clarity and peace of mind. thanks for using cohost :eggbug:


You must log in to comment.

in reply to @staff's post:

Thank you for these changes! That being said, I noticed that this part is still here:

You must own all rights, title, and interest, including all intellectual property rights, in and to, the User Content you make available on the Services.

This is the bit that's been of most concern for my fanartist friends. Will there be another revision that clarifies that this doesn't mean "you may not post fanart?"

I could have sworn this got changed. Looking into what happened there.

to clarify: we allow fanworks, the terminology change clarified that you must not be violating copyright (fanworks are considered fair use under US copyright law and thus do not violate the copyright of their original material)

The other thing about this section is that it's overly strict even outside of fanworks. The ownership requirement precludes sharing, say, works with highly permissive licenses like Creative Commons or your friend's art that they gave you permission to post. The corresponding terms of the major services tend to be something along the lines of simply requiring that you have the rights or permissions or otherwise be legally entitled to post the content and grant the service the necessary license.

what's the significance of the part in 6. User Content that mentions ASSC having a license to "prepare derivative works" from the User Content (i.e. the stuff we post here)? I notice it doesn't claim any rights to sell it, or ownership of the User Content, but what derivative works would ASSC be making from the User Content?

"Derivative works," in regards to content hosting, includes things like "encoding the image you upload to strip geolocation data." It's overly-broad but it has to be. Every social media platform has the same or similar terminology and has since at least early deviantart days.

Could it be possible to clarify the usage ? For example it states "By posting User Content on the Services" but doesn't state afterward this is only for the purpose of the given services. What ensure that content we provide cannot be used elsewhere or another platform ?

My one concern with the TOS continues to be that the license Cohost is given for UGC is not revokable in any way. The user content license to ASSC appears to be unchanged in the new TOS.

Although it is accurate that all social networks need (and currently request) very broad licenses to work, the license being entirely unrevokable is unusual. YouTube's granted license "continue[s] for a commercially reasonable period of time after you remove or delete your Content from the Service" (with a straightforward provision for ordinary retention such as backups). Facebook's current TOS says "This license will end when your content is deleted from our systems." (with exceptions for content naturally taking time to be deleted, and to allow for ordinary use of content resharing features). Tumblr's user-content IP license provision does continue indefinitely but the license itself is very narrowly tailored "for the limited purposes of allowing Tumblr to operate the Services in accordance with their functionality", and rather than explicitly labeling itself as "nonrevokable" it outlines examples of reasonable situations (such as content resharing) under which the license might outlive deletion of the content (meaning a court would probably not consider this time-unlimited license to cover "surprising" reuses such as Tumblr selling t-shirts with previously posted art).

Twitter does have a super-broad content license that by my read survives deletion of your account (and which explicitly allows "surprising" reuse of content such as Twitter commercially exploiting content you posted without compensation). However Twitter also serves as a good example of why a user glibly agreeing to such a license can be dangerous, in that Twitter has recently been taken over by new management whose values seem different from its previous operators.

I wouldn't say that, say, the Cohost license necessarily needs to terminate on content deletion like with Facebook and YouTube. But it makes me uncomfortable I do not have some means of withdrawing usage rights to my posted creations— manually sending a content removal request by letter, something?— for exceptional circumstances, such as a future change of corporate control at ASSC (which, after all, in unusual circumstances could happen without being planned or consented to by the current leadership) which could result in new leadership using that sublicensable license to "use, reproduce, distribute, perform, publicly display or prepare derivative works of your User Content" in a surprising way other than that which reasonably relates to the operation of cohost.org itself.

while you may not expect that we would get support requests around "this person's CSS post doesn't work in my browser": we do, and it's dumb, and we are codifying that it's Not Our Fucking Problem

this one is basically saying that if you post, let's say, a game youve made on cohost, you the game developer are responsible for providing tech support/bugfixes for that game, not us. You don't HAVE to provide them, but WE can't.

thanks!

I know you have no intention to enforce things like this, but "you may not register under the name of another person" is still a confusing prohibition. Isn't almost everyone's name the name of another person? And is this going to cause people who read the terms to fear that cohost wants their "legal name" because legal terms are setting requirements on the names of people?

What "name" even is this referring to, given that you mention the username separately, and I don't think I ever had to provide a different name to cohost?

Thank you for such a speedy update to the issues brought up about the terms of service.

The person who made the initial thread highlighting issues in Cohost's TOS just made another thread on Twitter: https://twitter.com/rahaeli/status/1592972642465861633

She mentions in particular that the following big issues have not been addressed:

  1. The binding arbitration clause;
  2. The class action preclusion clause;
  3. The tax indemnification clause and consent to arbitrary fee charging;
  4. No purpose limitation on the rights grant clause

Is this update to the terms the first revision in response to these issues, with more to come?

+1 to removing/fixing these. Requiring arbitration and precluding class actions are two of the red flags for me that "this company is going to try some shady shit," and while I don't think ASSC is planning to, it's not reassuring, especially for a company with such a community-focused mission. Another reason to remove them, in ASSC's direct interest, is that occasionally people have filed individual arbitration claims en masse to get justice and prove a point by clogging up the system and costing the company a ton of fees.

Another reason to remove them, in ASSC's direct interest, is that occasionally people have filed individual arbitration claims en masse to get justice and prove a point by clogging up the system and costing the company a ton of fees.

This strikes me as a problem that ASSC does not have ("so many users that are so mad at the company that they want to file individual arbitration claims en masse") and does not ever want to have (as in, I don't think ASSC ever wants to have so many users that this would be a viable tactic).

+1 from me too, I'd very much like to use this site, from a design standpoint this is probably the best potential social media site I've seen I love the philosophy behind it all, but I don't feel comfortable posting my content on here until these issues are fixed for all the reasons expressed already and it's a real shame.

Yeah, the binding arbitration and class action waiver (and possibly other conditions in the TOS) makes giving money to this site a no-go for me. Having a carve-out for small claims does not resolve this issue. These are two of the biggest business red flags for me, and not just because of that Twitter post. These are routinely used to strip customers of their rights (here's one discussion of that here: https://www.gsb.stanford.edu/insights/why-binding-arbitration-game-rigged-against-customers) and even Tumblr, who I won't give money to, doesn't have this problem with their TOS. Dreamwidth and Pillowfort certainly don't.

I've given money to both platforms before because I think there should be choices beyond the terrible giant megacorps like Tumblr or Twitter or Facebook out there. A big part of the problem I have with big tech is how they have routinely used software licenses and terms of service and privacy agreements as a legal cudgel to harm. So regardless of what your stated intent is on how you plan to enforce your TOS, what is actually in that document is, to me, a central concern to the question of whether this site pushes back on the biggest problems with big tech.

nice updates! your reverse engineering note made me think of a suggestion for a future revision: "safe harbor" policies a la bug bounty programs at e.g. microsoft https://www.microsoft.com/en-us/msrc/bounty-safe-harbor for good faith security research.

i don't expect y'all to fund or administer an actual bug bounty rewards program, but these policies typically codify a waiting period before a reporter is allowed to publicize an issue which i bet you'd find appealing + the safe harbor and an intake process might attract some nerds who will bughunt just for fun or to help the site succeed

I'm still concerned about this vague clause which gets no further clarification as to what counts as "commercial purpose":

You may not use the Services for any commercial purpose (except when transacting business with ASSC or with another User via the Services)

This feels extremely broad to me - "any commercial purpose" could be interpreted as, for instance, linking to a site where someone could buy an author's independently published work. I'm guessing this is not the intent, so it would definitely be good to clarify this.

Edit: Also possibly relevant to this - the "Defining Noncommercial" report from the folks at Creative Commons, which demonstrates that users have vastly different ideas of what "commercial use" entails: https://creativecommons.org/2009/09/14/defining-noncommercial-report-published/

Edit #2: There's also this related clause, which seems to override authors' decision on whether their own content may be commercially used (e.g., if they published content under a Creative Commons license without the noncommercial clause):

If you access, purchase, or subscribe to another User's User Content: (i) you may not use such User Content for any commercial purpose or for any unlawful or wrongful purpose; (ii) you agree not to rent, retransmit, disclose, publish, sell, assign, lease, sublicense, market or transfer the User Content or any portion of it or use it in any unauthorized manner

That does stand out to me as a little odd, and I think it'd be good to clarify. As written, it sounds like no businesses would be welcome to have accounts whatsoever, because marketing, customer support, and community engagement are commercial purposes.

Disclaimer: I have no personal qualm with the TOS, but I'm seeing persistent shit-slinging from twitter.
The only thing that seems potentially bothersome to me is that in section 11, there isn't any specific clarification of users' specific rights of ownership to content they post, to distinguish it from, say, the stuff written and produced by ASSC as part of the site.

I think you should still specify EXPLICITLY and DIRECTLY rather than opaquely in your TOS that users are not surrendering their IP rights when they post to your site and that they retain them. It would also not hurt getting another, additional lawyer that has more knowledge and experience with IP rights. If the costs of the additional lawyer is prohibitive, I would suggest crowdfunding that session for the good of all those who want to see your service succeed. Your lawyer is trying and that's admirable but this TOS still falls short of both covering all your bases, being clear that no rights infringement is going to happen (or communicating that in an accessible way). Having read the new TOS, I have some notes (caveat, I am not a lawyer):

In section 6, User Content: "You must own all rights, title, and interest, including all intellectual property rights, in and to, the User Content you make available on the Services. ASSC requires licenses from you for that User Content to operate the Services. By posting User Content on the Services, you grant ASSC a royalty-free, perpetual, irrevocable, non-exclusive, sublicensable, worldwide license to use, reproduce, distribute, perform, publicly display or prepare derivative works of your User Content."

It would be a good idea to add/clarify in this paragraph that posting to cohost does not transfer copyright or other IP rights beyond those in the stated license that cohost needs to post and host User Content. I understand that since "full transfer of rights" is not part of the license cohost says they need to host User Content that this is implied but a clarifying sentence to this fact would go a long way. This may also alleviate concerns raised by Section 11. It also would not hurt to define what derivative works cohost means here because there is an entire universe in those two words. [ETA: For instance, cohost could also specify what derivative works it will not make with User Content to assuage concerns.]

Re: Section "7. User Content License. If you make your User Content available to other Users, whether for free or on a purchase or subscription basis, you grant other Users a revocable, nontransferable, nonexclusive license to access, view information contained on, and interact with such User Content for the other User's personal, non-commercial use. If you access, purchase, or subscribe to another User's User Content: (i) you may not use such User Content for any commercial purpose or for any unlawful or wrongful purpose; (ii) you agree not to rent, retransmit, disclose, publish, sell, assign, lease, sublicense, market or transfer the User Content or any portion of it or use it in any unauthorized manner; and (iii) you agree to not copy, translate, port, modify or make derivative works of any portion of the User Content without the User's express permission."

The wording on this section is clunky and seems to imply that a User who is providing content to other Users on a subscription or purchase basis cannot offer commercial licensing options. Image, if you will, that someone is making fonts and they want to advertise them and sell them through your site. Say this hypothetical User wants to offer a "free to use commercially" font every month to their subscribers. Section 7 would seem to say that this situation is against TOS. If it is not against TOS for Users to be able to offer commercial rights to their own IP via the vehicle of subscription on cohost, this section needs to be clearer. If I may suggest an alternative edit:

If you access, purchase, or subscribe to another User's User Content: (i) you may not use such User Content for any unlawful or wrongful purpose; (ii) you may not use such User Content for any commercial purpose without the User's express permission; (iii) you agree not to rent, retransmit, disclose, publish, sell, assign, lease, sublicense, market or transfer the User Content or any portion of it or use it in any unauthorized manner; and (iv) you agree to not copy, translate, port, modify or make derivative works of any portion of the User Content without the User's express permission.

Here, I split the first item into two because a User cannot authorize someone to use their User Content in an unlawful way but a User should be able to authorize commercial use of their User Content as in the example provided above. Kept previous (ii) and made it (iii) because that bullet point also addresses how the User Content gained access to via subscription or purchase is used on and off the platform and seeks to deter any unauthorized use, whether unauthorized by the User providing User Content or cohost.

Additionally, as it stands, Section 5.e is hostile to trans individuals and is confusing about whether registering with a fictitious name (which most usernames are) is against TOS.

(e) choose a username for the purposes of deceiving or misleading our users and/or us as to your identity

My handle/username on here is plastic-red; as you can imagine, that is not my legal name. I do not plan to use my account for parody, which is what allows fictitious names on cohost as per the TOS at the moment [(d) except for the purposes of parody, [you agree not to] choose a username to impersonate another person (real or fictitious) or to pose as a representative of a person or entity when you are not]. As the TOS stands now, it is not clear that cohost is not expecting users to register with their legal names the way Facebook does and as you may intuit, this poses a problem for anyone in general that doesn't wish to make their handle or their display name their legal name. It is also hostile to trans individuals whose legal names could be their dead name and ones which no longer reflect their identity/themselves.

Looking forward to hearing your thoughts and fixes on this.

Hi, thanks for updating the Terms of Service, however, I feel it does not provide enough clarity with regards to ownership of material posted on the site.

Here's the problem: I still hear people say they don't trust Cohost because, essentially, the TOS gives ASSC ownership of everything we post on your site. Now, this might be false, and this post seems to reassure us that you will not claim ownership of our posts. However, when I read Section 11 of the TOS, I can't easily find anything that disproves their claim. Can you point me to the clause where we, not ASSC, are granted ownership of our posts?

'clarified that while it's against the Terms to sign up with multiple user accounts, cohost allows and encourages you to create multiple pages for all your projects and sideblogs under your account;' So this tells me having sideblogs here is fine, but I'm not finding anything on how a person can go about MAKING a sideblog. I make music, I write, and I'm starting to draw again, and I'd like to make separate sideblogs for each of these. If anyone can point me in the direction of how to make them, I'd really appreciate it