In 2004 a software engineer in the north-east of England put a website online. It was pink and white. Its mascot was a cartoon pig. Its name — Oink’s Pink Palace — sounded like a children’s programme, and to join it you needed an invitation from someone already inside, who was staking a little of their own standing on your behaviour. It ran for three years, gathered roughly a hundred and eighty thousand members, and became, by the reckoning of the people who used it, the most complete collection of recorded music anywhere on the internet.
It was also, in the eyes of the law, a machine for copyright infringement on an industrial scale, and in October 2007 it was raided by British and Dutch police and switched off. We will get to that — honestly, because the ending is half the lesson. But start where the people who were there start. When the raid made the news, Trent Reznor of Nine Inch Nails admitted he’d had an account, and described the site as being “like the world’s greatest record store.” Not the world’s biggest download button. A record store — a place staffed by people who know the stock, argue about pressings, and light up when you ask for something obscure.
This essay is about what made that pink website feel more alive than platforms with a thousand times its budget — and what a piece of software that wants that feeling, without the felony, should actually build. It ends, as these essays do, with what we took from it when we built xNet. But the first thing to understand is that the Palace’s magic was not the music. It was the mechanics.
A commons with a quality bar
Three rules did most of the work.
You had to give to take. Every account carried a ratio of uploaded to downloaded bytes, and if you only ever took, your account withered. The genius of the ratio was that generosity could be passive: you left your client open, and while you slept your machine quietly served the albums you loved to strangers who wanted them. Thousands of people, seeding constantly, in the background of their lives. Rare records stayed alive for years because keeping them alive cost each member almost nothing and meant something anyway.
The bar was high, and the community held it. Transcodes — re-encoding a lossy file and passing it off as better — were banned. Rips were checked. If you uploaded something shoddy, people told you, the way a record-store clerk winces at a scratched sleeve. The quality standard wasn’t a moderation policy imposed from above; it was the community’s pride, enforced laterally, member to member. Getting a rip right was a small craft, and the craft was the culture.
The boundary meant something. Invitations flowed through people, so every member was vouched for by a chain of humans stretching back to the beginning. And inside the boundary, the norms got delightfully specific — the site famously required members to have cute avatars. That detail is easy to laugh at and important to take seriously: it was a community confident enough in its own character to legislate whimsy. Kitsch was the border fence. If pink offended you, you were free to leave, and the pig didn’t miss you.
A political economist would recognise all of this instantly. Elinor Ostrom spent a career documenting how communities govern shared resources without markets or states, and distilled eight design principles from hundreds of cases: clear boundaries, locally-fitted rules, collective choice, community monitoring, graduated sanctions, cheap conflict resolution, recognition by outside authority, nested governance. The Palace and its descendants hit the list almost point-for-point — the invite tree is a boundary, the visible ratio is monitoring, the warning-before-ban ladder is graduated sanctions. Nobody involved had read Ostrom. A few thousand music obsessives, governing a commons, rediscovered her principles from scratch, because those are the shapes that work.
Almost the whole list. Hold that thought.
The refinement, and the anxiety
When the Palace fell, its community did not disperse. Within four days, ex-members had launched What.CD, which over the next nine years refined every mechanic the Palace had sketched. Admission now ran through a live interview about ripping, transcoding and spectral analysis — an entire third-party site existed just to coach applicants. Inferior rips could be “trumped” by better ones. The staff wrote their own tracker software and open-sourced it, and it still powers much of that world today. By 2010 the collection had hit a million torrents; the eulogies later called it a library of Alexandria, and they weren’t reaching. It was very likely the most complete music archive ever assembled, built entirely by volunteers, governed entirely by its own rules.
But the refinement sharpened an edge that had always been there. On a site that well-seeded, most members mathematically could not upload enough to improve their ratio — everyone was already seeding everything. Users invented a name for the resulting condition: ratio anxiety. Researchers who measured these communities found extraordinary performance — download speeds dozens of times higher than public trackers — and, in the same data, a full-blown credit economy with deflationary pathologies, hoarding, and dread. The economists’ verdict is the one worth keeping: enforced ratio is not a gift economy. It is a scoreboard economy, and the scoreboard slowly eats the gift.
Lewis Hyde, in The Gift, put his finger on why decades before any tracker existed: a gift only remains a gift while it moves freely; price it, meter it, hoard it, and the thing that made it binding evaporates. The seeding itself — leaving your machine on overnight so a stranger in another hemisphere can hear a record — was one of the purest gift economies the internet ever produced. The ratio that enforced it was already the beginning of its corruption. Any system that wants the loop has to decide what to do about the ledger.
What we take from the record store — and what we leave
A metaphor that flatters itself is just more marketing. Here’s the honest version.
- ✕
We won’t pretend the files were theirs to share.
✓The music belonged to the people who made it, and the trial doesn’t change that. What we harvest is the community’s mechanics — the care, the quality bar, the reciprocity — which were never illegal and never stopped working.
- ✕
We won’t romanticise the ratio.
✓Ratio enforcement kept rare things alive — and manufactured chronic anxiety. Economists who studied it call it a credit economy, not a gift economy: the scoreboard crowded out the generosity. Our CI gate bans ratio scorekeeping outright, next to streak counters.
- ✕
We won’t promise that a platform can’t die.
✓Anything with a plug can be unplugged, including anything we run. What the architecture promises instead is that the scene outlives the server: your data, your log, and your keys are already on your device when the bad day comes.
The missing principle
Now the ending. In October 2007, following a two-year investigation by the record-industry bodies, police raided the Palace’s servers in Amsterdam and arrested its founder at his father’s house. He was charged with conspiracy to defraud — the first prosecution of its kind in Britain — and in January 2010 a jury acquitted him unanimously. The site never came back. In November 2016, French police seized What.CD’s servers; the staff shut the site down within hours and destroyed the databases themselves rather than let member data fall into anyone else’s hands. The greatest record store in the world went out the way it had lived: protecting its members first. And nine years of painstaking, volunteer-built archive — the interviews, the trumped rips, the liner notes, the forum threads — vanished in an afternoon.
Go back to Ostrom’s list. The tracker communities aced boundaries, monitoring, sanctions, self-governance. The principle they could never have was the seventh: recognition of the right to organise — the outside world’s agreement that your commons is allowed to exist. Their content guaranteed they’d never get it. But notice that the failure mode — everything lives on servers someone else can seize — has nothing to do with infringement. Geocities died this way. Google Reader died this way. Every Discord server, every subreddit, every group chat your scene lives in today sits on machines that can be sold, sunset, or subpoenaed by people who have never heard of you. The best offer the modern platform makes is the one in Mastodon’s server covenant: three months’ notice before your world ends. A gentler eviction is still an eviction.
The lesson of the Palace is not “don’t host infringing content,” though, yes. The lesson is that a community’s ethos is only as durable as its worst day, and on the worst day, what matters is where the data physically lives. Ostrom’s seventh principle can be granted by a state — or it can be made moot by architecture. If every member of the scene already holds the archive, there is nothing left to raid.
Scenes, and what they run on
Brian Eno coined a word for what the Palace had: scenius — “genius, only embedded in a scene rather than in genes.” Kevin Kelly, unpacking the idea, listed the conditions that nurture it: mutual appreciation, where risky moves are applauded and subtlety is noticed; rapid exchange of tools and techniques, where anything invented is immediately shared; success claimed by the whole scene; and a surrounding world tolerant enough not to crush the weirdness. His examples were Bloomsbury, Building 20 at MIT, Xerox PARC. He could have been describing a tracker forum at two in the morning: the rip guides, the interview-prep sites, the arguments about spectrals — a community teaching itself a craft and flaunting every advance.
Scenes still form constantly — on Discord, on Reddit, in group chats, in the unlisted corners writers call the cozyweb. What they lack is not energy. It’s ground. They rent their corner of space-time from landlords with other priorities, they can’t take their history with them when they go, and their tools — the shared crate, the collective log, the common archive — have to be improvised out of screenshots and pasted links. The scene has no data layer. The fourth of Kelly’s conditions, protection from the outside, is exactly the one a rented room cannot provide.
What we took
xNet is built to be that ground, and the Palace is all over its design — harvested, we hope, with the honesty box above kept in view.
The loop, without the leaderboard. The reciprocity that made the Palace hum is structural in a local-first network: holding a replica of your scene’s space is passive generosity, the way seeding was — your device keeps the archive alive just by being in the scene. What we refuse is the scoreboard. Stewardship should be legible — “this space lives on nine devices; yours is one” — and never scored. No ratios, no ranks, no streaks. That rule is enforced the same way our other charter commitments are: a CI gate fails any build that introduces ratio scorekeeping, right next to the rule that bans streak counters. The difference between “your device kept this alive for 340 days” and “you are #14 in this space” is the difference between a thank-you and a debt.
Vibe belongs to the scene. The Palace was pink because its people made it pink. The protocol underneath — BitTorrent — was calm grey plumbing with no opinion about pigs. That division of labour is the right one, and we wrote it into the design system as doctrine: the venue stays quiet — monochrome chrome, hairline borders, warmth as a choice — so that every scene can be as loud, as kitsch, as itself as it likes. xNet should never have a vibe monopoly. Two scenes on it should feel as different as a record store and a farm co-op, and both should feel safe in exactly the same way. Even our demo workspace now ships with a scene in it — a little record-archiving collective, crates and liner notes and a pressing-quality checklist — because the first thing you see in a tool teaches you what it’s for, and we’d rather you meet a scene than a fictional corporation.
The scene outlives the server. This is the one the Palace couldn’t have, and it’s the deepest promise in the stack. Your identity is a key you generate, not an account someone issues. Every change is signed and chained in a log you hold. The archive your scene builds is on your scene’s devices — the hub is a convenience, not a home. If any server dies — seized, sunset, or simply unplugged — every member walks away with the whole commons and the keys to re-home it. You can raid the palace; everyone leaves with a copy. We’ve written before about the right to say no and apps as views, not vaults; this is those essays with a pig mascot: exit is not a feature of the product, it is the product.
Infrastructure for the scene you love
There’s a word lately for the future this points at — solarpunk: the insistence that the hopeful timeline is a buildable one, and that it starts with infrastructure. One of the movement’s founding essays opens with a mayor’s line worth carrying around: dealing with infrastructure is a protection against being robbed of one’s self-determination. That is the Palace’s story compressed to a sentence — a community that had everything except infrastructure it was allowed to keep.
So picture the scenes that deserve better ground. A farming collective spread across three continents, accumulating seasons of planting data for themselves and for the commons. A film crew cutting a documentary across nine time zones. A fandom archiving a vanishing art form — legally, this time, with the artists in the room. Each one wants what the Palace had: a boundary that means something, a quality bar held with pride, reciprocity that runs in the background like a heartbeat, and a corner of space-time that is genuinely, durably theirs. None of that requires anyone’s permission any more. The mechanics were never the illegal part.
Somewhere in England there is a man who, for three years, ran the world’s greatest record store out of a rented server and a pink website with a pig on it. The courts settled what he wasn’t guilty of. What he was guilty of — proving that a few thousand people who love something can out-build an industry, for nothing, for the joy of it — has no statute of limitations. Build your scene. Keep your own log. Hold the quality bar because you care, not because anyone’s counting. And if your palace wants to be pink: mandatory cute avatars. We’ll smile.
Sources
- Wikipedia — Oink’s Pink Palace (founding, invite system, ratio, quality rules, the 2007 raid, and the 2010 acquittal), and TorrentFreak — the Trent Reznor interview (“the world’s greatest record store”).
- Wikipedia — What.CD (the four-day rebuild, the interview, Gazelle/Ocelot, the 2016 seizure and self-destruction), and Quartz — a eulogy for the greatest music collection in the world.
- Meulpolder et al. — measurements of private tracker performance (IPTPS 2010), and Bodó — “Set the Fox to Watch the Geese” (private trackers as self-governing commons).
- Elinor Ostrom, Governing the Commons (1990) — the eight design principles; summary at The Earthbound Report. Lewis Hyde, The Gift (1983).
- Kevin Kelly — “Scenius, or Communal Genius”, and Adam Flynn — “Solarpunk: Notes toward a manifesto” (quoting Mayor Chokwe Lumumba on infrastructure and self-determination).
- The Mastodon Server Covenant (the three-month shutdown-notice clause). The architecture and commitments referenced throughout: the Humane Charter.
This essay discusses historical file-sharing communities as social and economic systems. It is not an endorsement of copyright infringement; the mechanics we celebrate — reciprocity, quality standards, self-governance — are content-neutral, and xNet is built for scenes that own or have the right to share what they keep.