New youtube-dl release: v2020.11.01.1
youtube-dl.org
youtube-dl.org
So maybe I should thank the RIAA for clueing me in!
For the Streisand effect to be an example of itself, there would have to be an attempt to ban or suppress the usage or knowledge of the idea of the effect. I don't think that's happened, so I don't see how it's self-referential.
the Streisand Effect is fake news.
"It is named after American entertainer Barbra Streisand, whose attempt to suppress the California Coastal Records Project's photograph of her residence in Malibu, California, taken to document California coastal erosion, inadvertently drew further attention to it in 2003."
My point is that more people know about Barbra Streisand and the Streisand Effect because of Streisand's attempts to suppress information.
Here’s a “pop up” version of the music video with more details about the song: https://youtu.be/i_QOeWflG9g
I remember first hearing this song playing on someones phone back when the best mobile game was that nokia red ball thing.
In my opinion, in ten or twenty years this will shift even further and young people will know the Streisand name only because of the "effect".
But I reckon I could still sing along with You Don't Bring Be Flowers Anymore and Woman In Love and get most of the lyrics right.
She's more my parent's era than mine, but like The Beatles and Cat Stevens, I grew up listening to my parents music...
People want to get tickets because ticket are hard to get
Shit, now I feel old.
That was 1998. Streisand was 2003.
Like for example, if something came out that some persons might use to try an embarrass me, I let it stay out for a while and don't really address it. Two to three people tweet it and it doesn't go further, hundreds of people weren't compelled to save it "for the lulz". Then a few weeks or months later I get the service to take it down, the person that posted barely notices or understands that their voice is not strong enough and the bar to change that is much higher and they've moved on to some other issue de jour.
Yes, there is a possibility that it circulates pretty far initially, or that the thing being shared gets ingrained into the consciousness as truth, but in those circumstances providing a reaction involving the law or lawyers would still amplify it.
people try ad hominem attacks but nobody cares, or think that I’m vulnerable because I’ve had public facing roles and try to act on that but it’s just them wasting energy
its basically something like "what you can't have an opinion online! I can damage you therefore I'll try to damage you!" and then realize they have no reach and the world doesn't work the way they think it does
Youtube DL was taken down because it was DMCA'd, to which we all (mostly?) agree was an abuse of DMCA, but nevertheless the premise seems to be that it was effectively a form of piracy - no? Isn't Piracy (and supporting Piracy/etc) "illegal"? Or is there a better word to use here?
Just because the RIAA cries foul doesn't mean there is actually anything wrong here. Piracy is illegal, but youtube-dl is not a piracy tool, just like VHS recorders were not piracy tools. Making personal copies of videos is absolutely legal, and seems to be the prominent way to use youtube-dl (Why else would you use it? The content is already available for free on youtube itself!).
So what you should call youtube-dl is "Something the RIAA doesn't like", basically.
My comment of illegal isn't a court of law, my intent was clearly discussing the idea that if the RIAA is accusing youtube-dl of piracy (effectively), and then they themselves increase popularity of youtube-dl, they would effectively be promoting piracy, aka something illegal.
Ya'll are getting hung up on the details. It was a joke.
The right words here are not "piracy" or "illegal," but it is not clear what statement you are trying to make. I can't recommend any better words without additional context.
Who is even using this for some kind of meaningful copyright infringement?
Downloading a copy for personal use isn't even copyright infringement - for copyright infringement to happen, you'd have to then share that copy you made. For instance, you are allowed to do VHS copies of TV shows, and that was confirmed by Supreme Court[0].
This whole thing doesn't make sense to me either.
[0]: https://en.wikipedia.org/wiki/Sony_Corp._of_America_v._Unive....
Stop repeating this RIAA nonsense.
Is the idea that the author didn't have the rights to publish the video in the first place, due to things like unlicensed background music?
Thus far, Youtube is under the safe harbor principle of the DMCA, and as long as they honor those takedown notices, the end user is not likely to be held accountable. The software they use is even less likely to be.
I’m not saying it’s right, but that’s how they’ve been trying to frame the discussion for a long time now.
It's good to see others recognise it for what it is. It needs to be strongly pushed back.
(Sure, many parts of the internet are still open, but youtube isn't one of them.)
How exactly the video file gets downloaded into the viewing device is an implementation detail. Whether it's a MythTV plugin, that free Android app, Firefox, or this Python tool isn't important. If one of them is declared illegal in some jurisdiction, they all are.
Courts aren't always concerned with technical differences, more often intent.
They are all interchangeable. Should one implementation be found problematic, in theory it can be swapped with another.
It's not comparable to DRM, where a particular software can be licensed for a particular digital protection mechanism. In this case either they all are, or none are.
While there is no technical difference, there is quite a difference of intent between watching a streaming video and downloading it to circumvent copy-protection.
Note that it wouldn't matter if youtube-dl contained no deobfuscating code at all, but merely downloaded and evaluated the JavaScript Google's web client uses to deobfuscate. The result is the same: youtube-dl circumvents copyright access controls and is therefore illegal.
https://www.adatitleiii.com/2017/03/uc-berkley-to-remove-mor...
You won't miss anything then...
The Streisand Effect applies when your attempts to block something simply increases the harm you were trying to prevent. Importantly, their is no remedy for the kind of harm at issue in the Streisand Effect.
But the RIAA does have a remedy: they can sue for a lot of money. And ultimately, as the harm they are trying to prevent is financial, the Stroganoff Effect does not apply
2) They can print out copies of Reddit, HN, other websites to show people bragging about using Youtube-DL to download music videos to "stick it to the RIAA." They only need to establish a specific number for purposes of statutory damages, if the case goes to trial. Otherwise, the specifics don't matter; only that many people are using the tool to infringe on RIAA-members' works.
I'm not sure such brags prove anything, I certainly don't always tell the truth on the internet.
youtube-dl.exe "https://vidsite.com/foo?bar"
youtube-dl -x --audio-format mp3 <mediaurl> youtube-dl() {
if [ $# -eq 0 ]; then
if [ "${WAYLAND_DISPLAY}" != "" ]; then
env youtube-dl -f best "$(wl-paste --type text/plain)"
else
env youtube-dl -f best "$(xsel -b)"
fi
else
env youtube-dl "$@"
fi
}
(Replace "-f best" if you just want audio.)Source here if anyone's interested: https://github.com/liskin/dotfiles/blob/home/bin/youtube-dl-...
Since lossy to lossy transcodes always cause some degradation due to the way perceptual codecs discard data, it's always best to use them as-is without converting.
AAC is widely compatible these days and is the broadcast industry (ITU / EBU) standard for distribution of end-user audio, the default recording format for most consumer and pro-sumer equipment, and also what Youtube's upload giudelines suggest. Therefore it's better just to get the `-f140 -x` for maximum compatibility, unless you know you can play the Opus audio and have reason to believe the upload was higher quality.
Thank you RIAA!!
""token" parameter not in video info for unknown reason; please report this issue on https://yt-dl.org/bug"
Considering the current political climate, youtube-dl is going to be my (and many's) literal weapon of choice against disinformation operations. Of course, the conspiracy theorist in me asks, what if that's the reason why youtube videos are suddenly breaking yt-dl? Making a video analysis tool unavailable during one of the most unstable times in history is beyond negligent, it's the kind of mendacity that polarizes and radicalizes people.
Surely an innocent mistake, that happened at the precise moment, at the worst possible time, affecting the one thing opposition would use, and with complete deniability.
"Oops." Indeed.
I can think of far more unstable times in history than the times we’re living in now, recent examples being WW1 & 2, nuclear threat during the Cold War.
Perhaps I am a little biased as I've been eyeball-deep in weeding through election-focused disinformation and working with people to expose these tactics the past few months and everything looks like a nail to me right now.
Surely info suppression tactics have often played a role?
In much of Europe you can't do any of those things right now, without incurring the wrath of state force.
The next equivalent event in history in western europe to this destruction of civil liberty was the nazi occupation of France.
My grandmother once told me her dad had to console a German soldier crying in the backyard because he wanted nothing more than being back home in Germany with his wife and children instead of occupying the Netherlands. It's not like he had much of a choice though.
My grandfather's dad (other side) had to work in Germany during the war. He sure as hell couldn't "just visit his family" and there was no realistic option to say no.
And then you have things like Anne Frank hiding in a bloody broomcloset for years. But the above are just two examples of "regular" folk who were not especially persecuted (or indeed, even the occupier).
Good heavens, this has got to be the most ignorant comment I've ever seen on HN. Please, study the daily lives of people in countries occupied by Nazi Germany and you'll find that any comparison to current events is absolutely ridiculous.
You seem to be acting like i'm saying this is worse when i clearly did not
The majority of the population, boomers and younger, didn’t live during WW2 and we probably are globally the least stable since then right now.
I mean, it sure is significant and all as the US, for better or worse, isn't "just another country", but it's also pretty narrow towards both the current time and specific location.
That...didn't happen.
Then there’s Russia and Ukraine. Turkey and Armenia. The Middle East conflict with Israel, Europe, and the US.
So no, it’s not just American history. Globally, things are the least stable since WWII.
Look at all the people who went supernova when Clinton downsized the military after the fall of the Berlin Wall and the collapse of the USSR.
"Generals and majors always seem so unhappy 'less they got a war."
No small threat; plenty of room for those, according to Daniel Ellsberg’s book ”The Doomsday Machine”.
https://www.bloomsbury.com/us/the-doomsday-machine-978160819...
It’s rather common for people to take down things that can be used against them later. Very common for youtubers but also somewhat common for politicians who may want to distance themselves from historical points of view.
1. look for artifacts of deepfaking.
2. extract audio for speech to text, translation, and searching.
3. look for patterns that indicate the video is churned out by disinfo content farms.
Threat actors use deepfakes, along with other forms of disinformation, to achieve their objective. The most commonly discussed are the Russians interfering with US elections, but many other nations are now getting in the game. We have also seen organized crime using elections or other hot-button issues to drive traffic to their ad-laden websites.
We are still in the early days of deepfakes. I am sure we will see many more sophisticated methods as the technology improves. As it becomes commoditized, it will become another tool used moving down market from geopolitical goals, to organized crime, to petty fraud.
This is seemingly fixed in commit 6d4733ce - " [youtube] Fix JS player URL extraction" at 2020-10-31 23:52 GMT.
I know I know, recency bias and all that, but the world is pretty great these days, even if 2020 seems a low point in our lives.
Pick your time post ww2 otherwise forget it. Even the roaring 20s were total and utter garbage compared to when penicillan existed.
In the west, Boomers did pretty well. When they were at their horny age there was this great new pill and STDs were all treatable. We really should rename the baby-boomers the boomer-bunnies. ;-) Probably had it the easiest economically, no world wars.
We sleep on the beds of emperors, kings and queens and banquets from the 4 corners of the earth is our norm.
You can make an argument that maybe this is a bad time in human history, and I would still disagree, but far less so than I would disagree with the claim I was replying to. If you can make the case that compared to just a decent sampling, doesn’t even have to be the entirety of human history, just a good sample, that today actually sucks, I’ll be impressed.
The front-page seems to be filled with fake-news and videos containing unnecessary jump cuts to keep the the attention of hyperactive 8-20 years olds, that can't concentrate for longer than 5 seconds.
You approach however is the same that I use to ween myself off things that I notice take up too much of my time. It is quite effective indeed.
1. Use RSS to subscribe to your Channels [1]
2. On iOS, use Shortcuts to forward to either HookTube, Invidious, or use YouTube PIP [2]. When you want to open a YT-Link, hold it, select share and then select your shortcut.(It seems cumbersome but it's actually faster than going to the website and dismissing the stupid sign-in prompt every time)
3. Use DDG !v and inline playback as an alternative player.
[1]: I love Reeder, but I'd also recommend Lire, NetNewsWire and FieryFeeds [2]: https://routinehub.co/shortcut/6622/
Compiling saves 1000ms of load time.
$ time python youtube-dl-original --version
2020.11.01.1
real 0m1.474s
user 0m1.356s
sys 0m0.111s
$ time python youtube-dl-compiled --version
2020.11.01.1
real 0m0.380s
user 0m0.328s
sys 0m0.049s
It might be nice if youtube-dl would be compiled to bytecode before release.The original author moved to gitlab and started GPG signing commits with his real GPG key. This gives packagers certainty they can replace old github links with new gitlab links, it tells us this project hasn't been compromised and is safe to be redistributed, unlike blackjack4494/yt-dlc
Signed commits from them go back at least 1 year. So its not "started", but rather "continued" signing.
I'm not totally sure which tool I should use, but I'm leaning towards the fork, because it has more support in general, and has fixed things faster.
That issue tracker was a great way to lose faith in humanity, just from the sheer number of people who couldn't follow instructions to search for existing issues before opening new ones, or to provide all the answers the issue template asked for.
Get the developers to never look at a bug unless it has the "triaged' label. Then have trusted volunteers who read each bug, assist the bugreporters to get stack traces and whatever is necessary, dedup, and then finally apply the label.
It's a good task for people who have some technical expertise but aren't yet confident to be submitting their own PR's.
Duplicate stack trace? Close and link. Missing relevant info? Close.
It supports dozens of sites btw. That's what I'm specifically referring to.
I think you are overestimating the amount of repositories that are affected by DMCA takedown threats (erroneous or legit).
However given that i work on some P2P services that could be argued scrape and/or distribute, i'm heavily debating moving. A nice host for a potential employer to view is not worth being DMCA'd.
I hope this causes a lot of additional desire to decentralize these portions of the dev workflow stack. Potential solutions exist, but no one cares.. i hope we collectively start caring more, and adopting solutions.
If you want to escape US law, feel free to use gitee.com located in China. Or, push your politicians to change the laws.
Microsoft has no way of overcoming the DMCA law themselves, other major companies have continued to lose lawsuits. It doesn't help that mega monopoly entities like Disney want it to stay taht way and will bribe politicians and others.
...assuming the DMCA request was valid. Some commenters in earlier HN threads were arguing that it wasn't.
The ban on circumvention tools allows for a claim in civil court, during which a judge may restrict availability of the program.
I, for one, heard a few too many times "this was the last straw" for every single privacy breach that happened in the past decade and resulted in no meaningful change for the better, so I find it hard to take this kind of statements seriously anymore. Is there any kind of basis that you'd like to provide for your speculation?
I think it's because it's a stretch of the law and can then abused to block a LOT more.
I still think it is bullshit (and so is DMCA) but that is how the law is written.
eg if you clone that repo, and run
git log --show-signature 34299510b
git says the commit is unsigned.That said, I have been able to find clones of the youtube-dl repo elsewhere with HEAD 416da574e, and the 3 commits the gitlab repo adds on top of that seem innocuous.
git log -p 416da574e..HEAD
just shows a regex fix and then version bumps.That way the command would "just work", "always work", and it can be switched from one host to another anytime without breaking that.
I think hosting the development repository in a country that doesn't respect the DMCA is a simpler solution. Git is a blockchain too, after all.
Interestingly, the DMCA notice RIAA sent GitHub isn't a typical DMCA notice either. It seems to be more of a cease and desist along the lines of "we noticed this repo is a tool used to infringe on our rights -- sure would be a shame if you were to get caught up in the legal shitstorm that's about to happen, thanks!"
Let's take this objective:
>it can be switched from one host to another anytime without breaking that.
... that flexibility of any unknown host in the future then breaks the following code:
>if we could make a youtube-dl that dynamically fetched the latest working version
... and youtube-dl would download the latest version from where? What kind of "intelligence" does one put in the code to download from a future unknown http source?
One could try to be clever and embed a "intelligent algorithm" inside youtube-dl to scan the Google SERs[0] for the latest host source but that's not foolproof. Google may also later block results with the all-too-common censorship message "In response to multiple complaints we received under the US Digital Millennium Copyright Act, we have removed 6 results from this page."
Would youtubel-dl scan a well-known Twitter account or SMTP mailing list server to find the latest version? (My previous comment exploring that[0])
Storing binary blobs in popular blockchains like Bitcoin or Ethereum would be near impossible because of technical and architectural limits. (E.g. youtube-dl binary is about 1.7MB and thus miners will reject your non-standard transaction.)
I'm unaware of a foolproof way to share future versions aka future sources that can be programmed into deterministic code. Discovery will have to involve humans coordinating in some way. E.g. PirateBay moves from host to host but humans (not code) spread the new location.
[0] https://www.google.com/search?q=youtube-dl+latest+download
>History youtube-dl was created in 2008 by Ricardo Garcia.[4] Initially, only YouTube was supported, but as the project grew, it began supporting other video sharing websites.[5] Ricardo Garcia stepped down as maintainer in 2011 and was replaced with phihag, who later stepped down and was replaced with dstftw.[6]
Would that be 3 different gpg signatures?
- gpg for Ricardo Garcia
- gpg for phihag
- gpg for dstftw
What would be the deterministic programming code algorithm to find the future unknown gpg signature for the latest non-malware version of youtube-dl on the blockchain?
Conceivably, one could create a project-specific gpg signature (private key shared with future authors) instead of human-author-specific gpg signer. Is that collaboration scenario common?
Doesn't work if latest maintainer loses access to their private key or dies or anything like that though.
This is entirely possible :)
You would use an "USK" ("updatable subspace key") address of Freenet to achieve that: https://en.wikipedia.org/wiki/Freenet
Also see my other comment to the parent for an explanation of why Freenet would be preferable to blockchains here.
This is small enough that embedding it in a major blockchain is entirely feasible. There is also the much more boring option of hardcoding many different locations to find the URL.
A blockchain is overkill for this:
Its central goal of providing a clear ordering of events by the time at which they happened (t1 < t2 < t3) is not necessary to distribute software updates.
You merely want to be able to sort things by a number, the version of the software, which their author has provided on their own.
Remember, the blockchain was invented so Bitcoin could prevent double-spending of the same coins. I.e. if someone attempts to send the same money to multiple different addresses and thus fool multiple people into believing they were paid it can use the blockchain to determine which attempt was the first and ignore all others.
Such attacks would happen within milliseconds typically, hence the need for a strong mechanism against them.
This is not needed for merely distributing downloads:
You already trust the author enough that you would run their code, so you can as well trust them that the number which they say is the latest version in fact is the latest one. That's also because they have no incentive to fool you into using an older one, there's no money involved.
What you'd want instead is Freenet, the goal of which is preventing censorship and providing anonymity: https://en.wikipedia.org/wiki/Freenet
It's "updatable subspace key" (USK) address type is suitable here.
I guess that's not strictly necessary just to provide a binary update, but this feature could also be used to make the blockchain itself host the repo and its commits. Branches, pull requests, reverts, and everything could be stored as events on the blockchain. Differential commits do need that clear ordering of time to work.
Basically, imagine a decentralized version of Github.
Code is a well-chosen piece of logic to make sense as a whole. You can't just arbitrarily take to pieces of code and mash them together just because two random developers on the planet happened to write them one after the other in a sequential fashion of time.
E.g if you ask a classroom "What's 1 + 1 ?" then someone might say "3" right after you asked but before someone else says "2", but that does not make "3" right.
Proper order of commits is established by a MUCH more simple mechanism in fact: A git commit includes the hash of the previous commit in the history.
So the plain aspect of "storing some bytes" is needed, not a blockchain :) As someone else said, Git provides just that.
FWIW, censorship-resistant networks such as the aforementioned Freenet can and are used to publish Git repositories in a robust fashion. But no blockchain magic is required here either :)
Sounds like what you actually want is IPFS.
I think a better strategy would be to separate the youtube-dl core "engine" from the set of rules/exceptions/offsets that it uses to iterate and download the media.
So the core youtube-dl could not download anything (or, perhaps, only a simple file at a static URL) and you would add a set of rules, or specs, that give it the ability to download from youtube or vimeo or whatever.
Then you would not worry about blocking youtube-dl or having it barred from github, etc. and all of the "rules" could be simply shared, or published, as simple text via pastebin or email or whatever.
However, neither Adguard nor DNS based blocking will block ads in the iOS Youtube App.
Vanced is a modded YT app, while NewPipe is open source and has a background player too, with download feature.
I recommend going with the APK version of NewPipe as the FDroid install often takes a while to catch up to breaking changes on youtube.
https://archive.newpipe.net/fdroid/repo?fingerprint=E2402C78...
If, for some reason, I really wanted to download a video to have a copy of it forever, I'd use youtube-dl
For example NewPipe (Android) and FreeTube (Windows MacOS, Linux)
As someone pointed out recently, [1] this presumably breaks the YouTube terms of service, as presumably does any use of youtube-dl.
How do you host a thing so Uncle Sam’s (US)powerful hands can’t touch it?
https://old.reddit.com/r/youtubedl/comments/jktx5b/how_to_an...
"As a technical aside (to the main topic of this HN thread), I had written a blog post some years ago, describing some uses of youtube-dl, and some commentary giving an overview of what its source does:"
One of the many reasons I got out of the world for providing random tools for Windows users was this sort of pain.
Updating to version 2020.11.01.1 ...
ERROR: unable to download latest versionThanks for confirming
Updating to version 2020.11.01.1 ...
Updated youtube-dl. Restart youtube-dl to use the new version.How? It's not like China has the greatest respect for intellectual property.
Maybe that's the point.
If all the valuable engineering projects leave the West because the West's laws are that dysfunctional, maybe the West will be forced to reevaluate them.
Git itself works just fine without one.
There are many other project hosting alternatives as well. E.g. Canonical's Launchpad, GNU Savannah, etc.
Also, aren't both Launchpad and Savannah both code hosting repositories too?
But my inbox, and everyone's inbox that participates in it, would have a copy.
I think mailing lists solve A LOT of problems that we are having now.
Not sure what RIAA's endgame is though. I'm somewhat fearing that they are coordinating with Youtube in an attempt to prevent any organised effort against youtube's next obfuscation or something.
And, yeah, by the way: let's not forget that it's youtube and the likes of it who are actually the enemy of youtube-dl. All these RIAA notices and stuff are just tools.
Even if you are against these downloads, there are laws that let you prohibit such downloads by using DRM. Ignoring those laws or trying to claim that publicly available links count as DRM means these programs should be allowed.
The constraint on the majority of cases is bandwidth, not storage.
For mobile, that is not necessarily true, I concede.
From a purely technical perspective, streaming makes little sense.
This is really a manifestation of legal constructs.
I personally wouldn't touch contributing to youtube-dl right now with a 10 foot pole, but I'm also a bit on the paranoid side :).
It sounds like your perspective is of someone paranoid and from the US. But it seems the author is not, he's like from Russia or something, and most contributions don't seem to come from the US either, and international community outside of the US doesn't care about DMCA, RIAA and US laws. There doesn't seem to be a way for RIAA to get their way and kill the project.
Like many products, youtube-dl can be used for legal and illegal purposes (just like a baseball bat can be). However, it was foolish to include links in their documentation to works where infringing uses are more likely. They should have pointed to the MANY works released under CC-BY or CC-BY-SA. Here's one I posted: https://www.youtube.com/watch?v=XC1g8FmFcUU
If this is a real DMCA takedown, then GitHub doesn't really have a choice, GitHub must take it down. youtube-dl should immediately file a DMCA counter-claim. A lawyer can help with this.
I think it's clear that youtube-dl has many non-infringing uses. I've posted many videos on Youtube where I own the copyright, & I really hope that people use youtube-dl to download and see those videos. But youtube-dl needs to do a better job making it obvious that it has many clearly legal uses.
AFAICT all the documentation examples are test videos uploaded by the youtube-dl authors themselves and ones by the Linux Foundation.
The complaint submitted to github was not a DMCA takedown (17 U.S. Code § 512), though it was superficially formatted like one. It was a complaint regarding 17 U.S. Code § 1201 anti-circumvention. There is no counter-claim (or takedown, for that matter) provision in that law because there is no safe harbor.
Moreover, your description of a §512 takedown is simply incorrect. Github is not obligated to take down a work when they receive a well formed DMCA notice: rather, they obtain an immunity from lawsuit for that particular infringement if they follow the procedure. In cases where there is transparently no infringement that immunity isn't worth much. In all cases it's simply a business decision to accept the liability or not vs the interruption in customer relationships, distrust, and loss of goodwill that can result from cutting off a user... no different than the decision to take on liability in any other business activity.
Maybe try avoiding such strong language when you haven't personally researched the subject in great detail?
Moreover, there would be a risk that unethical actors would exploit the URLs that don't work in order to conduct unarchivable fraud.
My main point still stands, though: They need a lawyer.
You are legally correct that GitHub in isn't obligated to take down a work if they receive a DMCA notice. But that would be very bad advice to take. GitHub handles millions of repos. GitHub could take a huge gamble by keeping the material posted after a DMCA request, or just take it down, wait for the DMCA counterclaim, and put it up after the counterclaim was filed. A CEO could easily get fired for risking the entire company when there was a no-risk alternative with the same result. The legal penalties are so stiff, and so easily avoided, that it would be improbable for a company to do anything else. This apparently isn't a DMCA takedown anyway, but I thought I should comment on your response.
Anyway, I'll repeat myself yet again: They need a lawyer.
Github is unusual in my experience in that they act on even transparently fraudulent DMCA notices (I am reminded of a few years ago where they took all of Mozilla's repost offline because of a obviously bogus DMCA complaint filed by a intern that was furious that their changes weren't merged or something along those lines).
And while copyright penalties look pretty stiff, they're pretty non-threatening compared to ordinary state product liability-- which is almost completely non-disclaimable. Liability is just one of the consequences of doing business.
I certainly wouldn't suggest that Github should be ignoring DMCA complaints as a general practice (though plenty of providers sure seem to do so), but in this case I think they could make a calculation that the risk might be worth it: I know quite a few parties that have moved off github as a result of this incident.