• chevron_right

      MPA: Site-Blocking Will Stop Pirate Site Owners Who Abuse Kids & Traffick Drugs

      news.movim.eu / TorrentFreak · Wednesday, 10 April - 17:45 · 9 minutes

    mpa It’s no secret that the Motion Picture Association (MPA) views site-blocking measures in the United States as the logical next step in their perpetual campaign against piracy.

    Working with U.S. Congress members, the plan is to propose judicial site-blocking legislation that will see local ISPs compelled by law to prevent consumer access to pirate sites. A similar but broader effort failed in 2012 but twelve years is a very long time; in the tech and internet world, it’s almost forever.

    In the years since the rise and fall of SOPA, the MPA has been the driving force behind site-blocking legislation around the world, modeling dozens of partner countries in the shape of its vision for blocking in the U.S.

    At this year’s CinemaCon ‘State of the Industry’ event at Caesar’s Palace in Las Vegas, MPA Chairman and CEO Charles Rivkin said that the United States now has plenty of catching up to do.

    “It’s long past time to bring out laws in line with the rest of the world,” Rivkin said, a reference to the MPA’s substantial body of overseas work it now hopes to replicate back home.

    Preparation for the Big Site-Blocking Push

    After reliving the high points of 2023 – Martin Scorsese’s Killers of the Flower Moon and the portmanteau of the moment, Barbenheimer – Rivkin turned to the bottom line. The MPA’s top man reported box office revenues in the U.S. and Canada up 20 percent on the previous year, and up nearly 30 percent abroad. An unquestionably great achievement, especially without protection from site-blocking.

    But while tradition allows for generous helpings of creative imagery in support of the magical silver screen, financial positives are dwelled upon only fleetingly; the fairy dust is quickly dispersed, bringing reality into sharp focus.

    Commentary explaining why the figures aren’t as good as they sound, or will take great effort to maintain, helps to calibrate expectations. After assuring everyone they’re in this together, and whatever needs to be done will be done, because that’s what Hollywood does, the groundwork to support demands for new legislation are carefully laid.

    It’s a tried and tested system that really does work; Rocky Balboa’s unbreakable determination in 2021 mid-COVID, a home/mobile entertainment market up 24 percent in 2022 and a billion at the box office in the first quarter. Avatar: The Way of Water surging past $2.3 billion in global ticket sales, Top Gun: Maverick at $1.5 billion and still plenty of jet fuel left in the tank.

    Then a short pause as the tension builds for the annual stark reminder; American creators are under attack, just as they were last year, the year before, and every year before that.

    We have no illusions about the scope and the severity of the problem……The challenges are as daunting as they are uncertain….. One of the biggest existential threats to our collective future.

    Used during the last three CinemaCons, the warnings above won’t be enough this year. Not at a time when Congress is listening.

    Piracy is Visible, Behind The Scenes Lies Worse

    Piracy rhetoric usually finds itself delivered in a way that counters notions of stability based on reported business successes. When an urgent drive for new legislation is imminent, there’s no room for complacency and at CinemaCon the nature of the threat left nothing to the imagination.

    “Remember, these aren’t teenagers playing an elaborate prank. The perpetrators are real-life mobsters, organized crime syndicates, many of whom engage in child pornography, prostitution, drug trafficking, and other societal ills,” Rivkin informed the audience.

    And it’s not just big companies facing immediate threat; the entire country is at risk.

    “They operate websites that draw in millions of unsuspecting viewers whose personal data can then fall prey to malware and hackers,” Rivkin said. “In short, piracy is clearly not a victimless crime.”

    People shouldn’t go about their work in fear, however. They should listen to a story first.

    Telling a Compelling Story

    Rivkin told CinemaCon that the MPA focuses on two pillars: Protecting content and the people who produce it, which together pave the way for the industry to reach even bigger audiences worldwide.

    “To make that happen, we need to keep doing what we do best: telling a compelling story,” the head of the MPA explained.

    “When I head to Capitol Hill in DC or State Capitols throughout the country, for example, I paint a picture of the ways our productions bolster communities: how film and television support 2.74 million American jobs; how production comprises 122,000 businesses; and how our incredible industry boasts a trade surplus with nearly every nation on earth.

    Today, our job involves another plotline countering a central threat to the security of workers, audiences, and the economy at large: Widespread, digital piracy.

    “This problem isn’t new. But piracy operations have only grown more nimble, more advanced, and more elusive. These enterprises are engaged in insidious forms of theft, breaking laws each time they steal and share protected content. These activities are nefarious by any definition, detrimental to our industry by any standard, and dangerous for the rights of creators and consumers by any measure,” Rivkin warnned.

    Mobsters, organized crime syndicates, child pornographers, prostitution, drug trafficking, malware and hackers. Hundreds of thousands of jobs stolen from workers and tens of billions of dollars from the U.S. economy, “including more than one billion in theatrical ticket sales.”

    As stories go, it’s as compelling as a synopsis accompanying a good film on Netflix which promises and then delivers, exactly as advertised. Or a bad one, where the exciting stuff appears in the synopsis yet somehow never makes it into the movie.

    Regardless, the MPA has a plan, one that will protect content, protect creators, return a potential one billion dollars to theaters, and by extension, keep all Americans safe.

    Blocking Piracy Websites

    As outlined directly to the audience at CinemaCon: The MPA’s Site-Blocking Plan.

    So today, here with you at CinemaCon, I’m announcing the next major phase of this effort: the MPA is going to work with Members of Congress to enact judicial site-blocking legislation here in the United States.

    For anybody unfamiliar with the term, site-blocking is a targeted, legal tactic to disrupt the connection between digital pirates and their intended audience. It allows all types of creative industries – film and television, music and book publishers, sports leagues and broadcasters – to request, in court, that internet service providers block access to websites dedicated to sharing illegal, stolen content.

    Let’s be clear: this approach focuses only on sites featuring stolen materials. There are no gray areas here. Site-blocking does not impact legitimate businesses or ordinary internet users. To the contrary: it protects them, too.

    And it does so within the bounds of due process, requiring detailed evidence establishing a target’s illegal activities and allowing alleged perpetrators to appear in a court of law. This is not an untested concept.

    Site-blocking is a common tool in almost 60 countries, including leading democracies and many of America’s closest allies.

    What key player is missing from that roster? Take a look at the map behind me. It’s us!

    There’s no good reason for our glaring absence. No reason beyond a lack of political will, paired with outdated understandings of what site-blocking actually is, how it functions, and who it affects.

    Yet experiences worldwide have now answered these concerns and taught us unmistakable lessons: Site-blocking works. It dramatically reduces traffic on piracy sites. It substantially increases visits to legal sites. Simply put, this is a powerful tool to defend what our filmmakers create and what reaches your theaters.

    To show what site-blocking could achieve in the United States, Rivkin homed-in on a site that has thus far proved impossible to shut down, one that was highlighted in a House Subcommittee hearing last December .

    FMovies Comment Reveals More Than Just Site-Blocking

    There’s little doubt that FMovies represents a primary enforcement target for Hollywood, or rather it would be a target if authorities in Vietnam wanted to do something about it, which apparently they do not. While obviously a negative for Hollywood, when advocating for site-blocking legislation, FMovies is a lobbying gift on a golden platter.

    “One of the largest illegal streaming sites in the world, FMovies, sees over 160 million visits per month and because other nations already passed site blocking legislation, a third of that traffic still comes from the United States”, Rivkin explained.

    The 160 million visits per month estimate seems conservative and may have been measured in February when the site experienced an unexplained dip. In January, FMovies received almost 198 million visits and in March, traffic was returning to normal levels of around 192 million visits per month.

    However, Rivkin’s follow-up comment to the theater-focused audience at CinemaCon may be an indication that the MPA has more on its mind than just blocking.

    “Imagine if those viewers couldn’t find pirated versions of films through a basic internet search . Imagine if they could only watch the latest great movies when they’re released in their intended destinations: your theaters. If we had site-blocking in place, we wouldn’t have to imagine it. We’d have another tool to make that real,” he said.

    Memories of SOPA: “Blocking Didn’t Break The Internet”

    Rivkin mentions the SOPA defeat in 2012 by citing one of the key claims by the opposition. They warned that eventually, one way or another, blocking would end up “breaking the internet” but a dozen years later, Rivkin noted that the “internet is doing just fine.”

    While that is still likely to be a hot topic for debate in the coming months, Rivkin’s search engine comment deserves more attention.

    Search engine removals or deindexing by companies such as Google don’t automatically happen just because a site is blocked by ISPs in a particular territory. What we know from blocking in Europe is that Google will remove sites from its results if a blocking order exists against a site, even if Google isn’t named in the order. In the SOPA era, that would never have happened, and certainly not voluntarily.

    Times Change, But By How Much?

    In today’s environment, there seems to be no obvious obstacle to prevent Google from doing the same, should site-blocking become available in the United States. If that type of cooperation does become the standard, perhaps Google will cooperate when it comes to blocking sites that use its DNS too.

    We don’t know what Google is thinking and it could go either way. What we suspect is that a re-run of 2012, with the entire tech world united in opposition to SOPA and blocking in general, seems much less likely today.

    The MPA could tip the scales even further in its favor by telling more detailed stories about the real-life mobsters and organized crime syndicates behind pirate sites it will actually name, in public, with supporting evidence.

    If not for the sake of Hollywood, bringing the child abuse, prostitution, and drug trafficking to an end might be the biggest PR coup ever seen. As the basis for a box office record-breaker in which Hollywood itself stars, would be all the more tempting, especially in the absence of piracy.

    Image credit: Stockcake

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Piracy Shield: Influential Consumer Union Attempts to Break AGCOM’s Silence

      news.movim.eu / TorrentFreak · Tuesday, 2 April - 18:45 · 6 minutes

    Logo piracy shield To say that Italy’s much-heralded pirate IPTV blocking scheme got off to a controversial start would significantly underplay events of the past two months. And yet pretty everyone knew it was coming.

    A TorrentFreak source familiar with the scheme’s development, introduction, and current operations, warned us in 2023 that the system and the ideas that underpin it are fundamentally flawed. We were even shown how the system could be subverted, the only surprise today is that it still hasn’t happened.

    Other technical details showed how over-blocking was always inevitable but could’ve been mitigated to an extent with a pragmatic approach to matters such as blocking duration and the rapid rectification of blocking errors. Yet, interest in these and similar proposals was brushed aside in favor of what Italy has now.

    Excluding the Experts

    The entities best placed to advise on these issues, Italy’s 300+ Internet service providers, were not invited to the discussions. Interlocutor status was granted to just four ISPs, all of which were (and still are) neck-deep in other complex matters, including merger and restructuring talks. Almost everyone else was summarily ignored.

    The end result is a substandard system that ISPs are mandated by law to use, purely for the benefit of other companies, but at their own expense. That same law carries financial penalties for ISPs who fail to block, yet carries no penalties whatsoever for those who overblock. The law does include provisions that allow overblocking victims to complain, yet is being executed in a manner that makes complaining impossible.

    These complaints and many more have been delivered to telecoms regulator AGCOM via several mechanisms, including letters, emails, FOIA requests, and countless times via the media. Yet despite the protection of citizens’ fundamental rights being one of its main tasks, and a mandate that includes dispute resolution, the authority has mostly shown a preference for one-way communication; an appearance at a recent hearing , for example.

    National Consumers Union Demands Answers from AGCOM

    Founded in the 1955, Italy’s Unione Nazionale Consumatori is a non-profit organization whose exclusive statutory purpose is to safeguard and defend the interests of consumers. Today that includes aspects of ecommerce and with a seat on the National Council of Consumers and Users (CNCU) at the Ministry of Economic Development, the government’s ear is never too far away.

    In a letter to AGCOM, titled ‘FOOTBALL: Does Piracy Shield Work?’ UNC seeks clarification on the functioning of the Piracy Shield platform and its intended purpose, i.e. blocking infringing streams.

    “As a consumer association we are on the front line against piracy, but it is obvious that only the culprits must be intercepted and obscured, i.e. the IP addresses intended exclusively and univocally for the illicit diffusion of protected content, not the innocent ones which have nothing to do with online piracy and who only have the misfortune of sharing the IP address with the sites targeted by AGCOM,” writes Massimiliano Dona, lawyer and president of the National Consumers Union.

    “As they say, better to have a guilty person free than an innocent person in prison,” Dona continues, highlighting the ambitious aim of blocking illicit streams within 30 minutes of being reported.

    “However, since it is one thing to design an instrument and another to put it into action, we ask AGCOM to report on how many innocent people have ended up in these traps, given the conflicting data that has emerged so far.”

    Why is it Impossible to Complain?

    As previously reported, those negatively affected by overblocking can file a complaint within five days of the blocked IP addresses being published on the AGCOM site. Thus far, however, AGCOM hasn’t published any IP addresses, rendering the complaint process impossible.

    UNC would like to know why AGCOM doesn’t publish the IP addresses in the same way that Consob ( financial scams ) and Ivass ( insurance ) do, after first taking a swipe at the lack of due process.

    “We ask AGCOM why it doesn’t do as Consob and Ivass do. When they block an illegal site they also issue a press release with the list of blocked sites […] which allows a possible right of defense to the interested parties, from which this law instead seems to derogate, given that in cases of seriousness and urgency, which concern live broadcast content, first viewings of cinematographic works, the precautionary measure can be adopted without any cross-examination,” the letter reads.

    “This could also be acceptable, if the right of defense were allowed at least ex post . Instead, the complaint against the blockades carried out must be presented within just five days, yet not from the notification to the direct interested party of the blockage, as happens for any type of other sanction, from fines of the Highway Code to tax bills, but, as AGCOM writes on its website : from the publication of the list of blocks carried out on this internet page.

    “It’s a shame that on that page there is no list of blocks carried out, but only the number of blocks day by day,” UNC’s lawyer concludes.

    AGCOM Has Been Rejecting Complaints From Cloudflare Customers

    After initially dismissing the wrongful blocking of Cloudflare as ‘fake news’, AGCOM eventually admitted that Cloudflare had indeed been blocked in error.

    Last month Cloudflare wrote to all of its customers affected by the rogue blocking urging them to file an official complaint with AGCOM. Some people had already complained but no matter how their complaints were presented, AGCOM used rules (known and unknown) to reject every single one.

    In this example, AGCOM claimed that since the block was removed “shortly after its blocking” (around four or five hours) there are no grounds for a complaint. Furthermore, people only have five days after the IP address is published to make a complaint; the response makes no mention of the fact that the IP address was never actually published.

    cloudflare agcom

    Another rejection, publicly posted on X by Ernesto Castellotti, concerned a legitimate FOIA request sent to AGCOM in February. The basis for the rejection was novel, if nothing else.

    “AGCOM responded to my FOIA, in short ‘denied due to motivated opposition from interested parties.’ This answer is MADNESS, I am legitimately interested in having access to that data as a direct interested party as a victim of the erroneous blocking,” Castellotti wrote.

    Source Code Spilled, Cloudflare Whitelisted?

    We haven’t been able to confirm that this information is accurate, but we can confirm that the source who supplied it has been reliable in the past.

    We’re informed that after the Cloudflare overblocking debacle, Cloudflare IP addresses are now on the Piracy Shield whitelist. Or, at least, IP addresses will be tested to ensure they don’t belong to Cloudflare before they’re blocked. Bottom line, Cloudflare IP addresses appear to be off-limits moving forward. We’ll see.

    Last week, someone apparently annoyed at AGCOM, Piracy Shield, and the entire “censorship” system, posted the anti-piracy platform’s source code on GitHub . In a normal world, that code would’ve been immediately removed following a DMCA takedown notice but, against all sensible predictions, somehow it remains live today .

    AGCOM hasn’t responded with an official statement, at least to our knowledge, which makes the lack of response here somewhat predictable, given its recent radio silence on almost everything else. But if logic says the repository should’ve been removed immediately, logic also says that there must be a reason for leaving it up.

    With the possibility that AGCOM may feel more inclined than ever to send deterrent messages, presumably any Italians who downloaded the repo did so using a VPN. We understand that rightsholders blame IPTV pirates and those affiliated with them for the leak, but whether there’s any proof of that is a complete unknown.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Banish OEM self-signed certs forever and roll your own private LetsEncrypt

      news.movim.eu / ArsTechnica · Friday, 15 March - 10:45 · 1 minute

    Banish OEM self-signed certs forever and roll your own private LetsEncrypt

    Enlarge (credit: Aurich Lawson | Getty Images)

    Previously, on "Weekend Projects for Homelab Admins With Control Issues," we created our own dynamically updating DNS and DHCP setup with bind and dhcpd. We laughed. We cried. We hurled. Bonds were forged, never to be broken. And I hope we all took a little something special away from the journey—namely, a dynamically updating DNS and DHCP setup. Which we're now going to put to use!

    If you're joining us fresh, without having gone through the previous part and wanting to follow this tutorial, howdy! There might be some parts that are more difficult to complete without a local instance of bind (or other authoritative resolver compatible with nsupdate ). We'll talk more about this when we get there, but just know that if you want to pause and go do part one first , you may have an easier time following along.

    The quick version: A LetsEncrypt of our own

    This article will walk through the process of installing step-ca , a standalone certificate authority-in-a-box. We'll then configure step-ca with an ACME provisioner—that's Automatic Certificate Management Environment , the technology that underpins LetsEncrypt and facilitates the automatic provisioning, renewal, and revocation of SSL/TLS certificates.

    Read 118 remaining paragraphs | Comments

    • chevron_right

      BuffStreams OK’d For Blocking in Germany But Unlikely to Lose Any Sleep

      news.movim.eu / TorrentFreak · Thursday, 7 March - 07:56 · 3 minutes

    de-block How can we be sure that site-blocking really works? Because if it didn’t work, I was informed recently, rightsholders wouldn’t keep filing new site-blocking requests at a record-breaking pace, and then return for even more soon after.

    While it’s true that demand for site-blocking measures has never been greater, the sarcastic response above alludes to something that doesn’t really work, or at least doesn’t remain effective for very long. Rising piracy rates, broad content availability, and easily circumvented blocking measures may even support that theory.

    Nevertheless, movie and TV show companies, broadcasters, and sports leagues insist that blocking remains valuable as part of a diverse anti-piracy toolkit.

    The anti-piracy arena has certainly come a long way. Among other reported blocking successes, early studies concluded that when pirate site domains are subjected to blocking, fewer visits are made to those specific domains. While a fairly obvious conclusion to arrive at years ago when that type of metric was first rolled out, today it’s pretty much meaningless and the supply of domains is endless.

    Germany Prepares to Take on BuffStreams

    As a relative newcomer to site-blocking, Germany doesn’t find itself shackled to the past. In the UK, where blocking measures have existed since the start of the last decade, the process is steeped in the traditions of legal scrutiny and judicial oversight. Proponents of site-blocking today prefer something less formal; in Germany, a partnership between copyright holders and ISPs was deemed appropriate.

    The Clearing Body for Copyright on the Internet ( CUII ) operates an administrative program ; sites suitable for blocking are detailed in reports which are sent for the consideration of an Audit Committee consisting of retired judges familiar with copyright.

    For a platform to be blocked by Germany’s ISPs, the committee must conclude that the site is structurally infringing, a standard applied in the UK’s first ever site blocking injunction back in 2011.

    The Audit Committee recently considered a proposal to block BuffStreams, one of the more popular live sports streaming portals boasting millions of visitors each month.

    BuffStreams Infringed the Exclusive Rights of *****

    The Audit Committee’s report notes that the applicant in the blocking matter has legal standing as the “owner of exclusive rights to an ancillary copyright of a broadcasting company.” Since all identifiers have been redacted, including references to the allegedly-infringing TV broadcast, it’s not possible to identify any of the parties involved.

    What is clear is that considerable effort was expended to make contact with BuffStreams but ultimately, nothing paid off.

    Audit Committee comments (translated from German) buffstreams-de1

    “Based on the user figures determined by the internet service *****, 15.03 million users visited BuffStreams in the period from August 1, 2023 to October 31, including around 500,000 visitors from Germany,” the report adds.

    Blocking Approved – One More Stage

    In conclusion, BuffStreams easily met the structurally infringing standard. A 14-day survey period last September found a total of 5,321 links to live broadcasts, reduced to 2,429 when accounting for duplicates. At least 96% of those links were considered unlicensed, leading to the conclusion that BuffStreams is indeed infringing and therefore suitable for blocking ( pdf , German ).

    The case will now be referred to the German government’s Federal Network Agency (BNetzA) to confirm that blocking BuffStreams will not violate net neutrality; things haven’t always gone smoothly . Once that hurdle has been passed, ISPs will receive the green light to tamper with their DNS records so that customers in Germany can’t reach the site. At least, those who don’t understand how DNS servers work.

    DNS Blocking / Backup Domains

    The CUII website references the domain buffstreams.sx but the Audit Committee’s report mentions only the headline brand BuffStreams, with other domains redacted. With at least a couple of dozen domains and other options at its disposal, BuffStreams seems likely to take any blocking attempts in its stride.

    Being listed in an Indian ISP blocking order ( CS(COMM) 470/2022 ) in July/August 2022 didn’t end in disaster, neither did its addition to Italy’s blocklist last September ( 326/23/DDA ). At least one confirmed domain has been on Indonesia’s blocklist for several years, and we’re informed that Portugal has blocks in place too

    Sites listed for blocking in Germany since 2021 include: s.to , canna.to, nsw2u.com, newalbumreleases.net, bs.to, streamkiste.tv, kinox.to, cine.to, serienjunkies.org, taodung.com, israbox, jokerlivestream, serienfans.org, filmfans.org

    Members of CUII include: 1&1 AG (telecoms), German Book Traders’ Association, Federal Music Industry Association (BVMI), German Football League (DFL), Freenet DLS (telecoms), German Games Industry Association, Motion Picture Association (MPA), Sky Deutschland, STM (publishers), Telefónica Germany, Telekom Germany, German Film Producers Association (VDF), and Vodafone Germany.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Njalla: Hundreds of Suspended .TV Domains Could Soon Return to Life

      news.movim.eu / TorrentFreak · Monday, 26 February - 11:07 · 4 minutes

    happy-pirate The last time over 200 pirate sites went offline at the same time was…..well, probably never. Certainly, so many sites have never gone down and stayed down for four days straight in what still amounts to a relatively tight niche.

    Yet that’s exactly what happened this week , when at least 200 .TV domains were suddenly rendered useless. WHOIS records revealed that the domains had a status of ‘serverHold’ which indicates a domain with no presence in the domain name system.

    Registry >> Registrar >> Domain Owner

    The suspended domains were all registered at Sarek Oy, the Finland-based domain registrar with connections to former Pirate Bay spokesman, Peter Sunde. Those in need of a liberal, privacy-focused domain registrar, with a pedigree supported by thousands of news articles, countless interviews, TV appearances, and a full-blown movie, have fewer reasons than most to shop for domains elsewhere.

    Site operators understand Peter and he understands their requirements, as other projects including Njalla demonstrate. Unfortunately, when everything went dark Tuesday/Wednesday with no sign of recovery by Thursday, lack of information from obvious sources seemed to have no solution.

    When domains are placed on ‘serverHold’ that’s the work of domain registries, not registrars, but domain owners still need to know where they stand.

    Frustrations Build

    One of those people is Jomo, the owner of Jomo.tv, which unlike most of the .TV domains currently suspended, isn’t a pirate site.

    “I use the affected domain for my tech blog and my email address. I have received zero information about what’s going on, and I don’t know if or when this is going to be resolved,” Jomo told TF early on Friday.

    “Njalla does not seem to know anything, the registry did not want to tell me anything and only referred to Sarek without any further info, and Sarek does not respond at all.”

    GoDaddy completed its takeover of registry services for .TV domains late 2022, after previous controller Verisign chose not to bid when .TV last came up for grabs. When attempting to contact GoDaddy for comment earlier this week, TorrentFreak’s first email received an automatic response saying “Message blocked” while a second to a different address informed us that “The recipient’s mailbox is full and can’t accept messages now.”

    While frustrating for us, domain owners like Jomo had serious issues to contend with.

    “It is extremely frustrating to not get any info or updates, in addition to being unable to send or receive any emails, and being unable to log in to several services. By now I’m sure some emails are lost forever as the domain has been unavailable for several days,” Jomo added.

    Problem Acknowledged on Friday

    When no official updates were provided on Thursday, the situation was looking increasingly grim. Then on Friday, Jomo suddenly had luck reaching GoDaddy via TurnOn.tv.

    “They actually replied fairly quickly,” Jomo says, “but only told me to ‘contact your sponsoring registrar, Sarek Oy.'”

    After logging into his Njalla account, a new message appeared: “Some .tv domains have been put on serverHold by the registry and we are in contact with them to resolve the issue.” There was no response to his support ticket filed earlier but at least the issue had been acknowledged.

    Then a few hours later, a ray of light appeared at the end of the tunnel.

    ‘Technical Issue’ Resolved With Registry

    After three days without any useful information, Jomo received a response from Njalla, sometime Friday evening we believe.

    “It is a technical issue. We’ve squared things out with the registry and we’re just waiting for them to lift the serverHold,” a message from Njalla reads.

    “That will happen anywhere between in a few minutes till Monday, but we’re hoping sooner than later of course. We apologize for the troubles it had caused.”

    At the time of writing, Jomo’s domain still hasn’t returned and when we last checked, the same was true for around 200 others. While there’s optimism that all domains will eventually return to service, the episode leaves big questions unanswered.

    The Information Age

    Perhaps the most pressing question from a consumer perspective is the decision by the registry to suspend so many domains in one swoop with zero notice. The fact that so many domains are used by pirate sites does muddy the waters somewhat but as Jomo will confirm, non-pirate sites are affected too.

    When a particular entity takes action to suspend domains, whose responsibility is it to keep customers informed? In this case the action was taken by the registry but when asked to provide information, the registry refused to supply it, referring questions back to the registrar instead.

    Problems Over, or More to Come?

    Then there’s the question of the issue that prompted the suspensions; what was it and is it likely to reoccur? Should domain registrants avoid .TV domains? Without information to the contrary, rightly or wrongly some will draw that conclusion.

    Of course, by offering domains with toughened privacy, Sarek Oy/Njalla find themselves disproportionately involved in legal proceedings where a plaintiff hopes to identify a domain operator but runs into firewall instead.

    A live case in the United States required various domain registrars including GoDaddy, Namecheap and Sarek Oy, to take action against several app stores to prevent apps with ‘Temu’ branding being made available to the public.

    As far as we can see, Namecheap, GoDaddy, and Sarek Oy were ordered to disable the platforms’ domains but to date, only domains registered through Sarek remain both intact and online.

    At least in part, that’s to be expected and to some extent, the service as promised. Also to be expected are complications arising from an accumulation of these types of cases and similar disputes that come with the territory, the supply of which seems endless.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      100s of Pirate Sites Go Dark as .TV Domains Placed on ServerHold

      news.movim.eu / TorrentFreak · Wednesday, 21 February - 02:45 · 2 minutes

    stupidtv-l A few hours ago a TorrentFreak reader linked us to a list of almost 200 domains with several things in common.

    The vast majority have naming conventions that almost certainly point to some type of piracy activity. No shortage of the word ‘streams’ for example, along with other familiar pirate terms such as HD, cine, film, movie, plus the likes of buff, cric and crack.

    Sites with ‘anime’ in their domain names also stand out; they include the popular Animebytes, a platform that above most seemed to be generating significant panic. A gloomy discussion on Reddit spoke of the site having just hours to live, a fate that may have since been suspended but with a root cause that remains unresolved.

    The Sun Doesn’t Shine on .TV

    The sites on the list have other things in common too. All operate from .TV domains that were registered at Finnish registrar Sarek Oy. As things stand, none have any functioning DNS and that means all are completely inaccessible, at least as far as site users are concerned.

    The list can be viewed here and given its size and the platforms on it, it feels safe to conclude that this blackout is currently affecting millions of pirates. It’s probably fraying the nerves of many site operators too, albeit some more than others.

    As far as we know, information and explanations for the unprecedented failure are in short supply, at least those announced directly from Sarek Oy. It’s the middle of the night in Finland, so it may be a few hours before any official announcement arrives.

    Domain Status: serverHold

    After checking a few dozen WHOIS records for domains on the list, all display a domain status of ‘serverHold’. ICANN’s official description notes that the status is set by domain registries to indicate that a domain is not activated in the Domain Name System (DNS).

    Given the way the current problem manifests itself, the explanation is accurate but not especially helpful.

    The bigger question is why hundreds of domains were suddenly placed on serverHold and why did that have to be done so urgently that there was no time to inform the domain owners? That will likely become evident during the next few hours, but we can confirm that sites operating .TV domains with other registrars remain functional.

    That may suggest an issue specific to the registrar. Some type of issue between the registry and registrar seems most likely, but it’s hard to imagine either party simply deciding to render so many domains inoperable, seemingly all at once, without any kind of warning.

    So at least for now, beads of perspiration will have to persist while soaking up the irony. Perhaps more than any other registrar in operation right now, Sarek Oy’s reputation for keeping sites online is extremely well known. That it’s currently at the center of one of the largest blackouts in recent history is unexpected, to say the least.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Doing DNS and DHCP for your LAN the old way—the way that works

      news.movim.eu / ArsTechnica · Friday, 16 February - 11:30

    All shall tremble before your fully functional forward and reverse lookups!

    Enlarge / All shall tremble before your fully functional forward and reverse lookups! (credit: Aurich Lawson | Getty Images)

    Here's a short summary of the next 7,000-ish words for folks who hate the thing recipe sites do where the authors babble about their personal lives for pages and pages before getting to the cooking: This article is about how to install bind and dhcpd and tie them together into a functional dynamic DNS setup for your LAN so that DHCP clients self-register with DNS, and you always have working forward and reverse DNS lookups. This article is intended to be part one of a two-part series, and in part two, we'll combine our bind DNS instance with an ACME-enabled LAN certificate authority and set up LetsEncrypt-style auto-renewing certificates for LAN services.

    If that sounds like a fun couple of weekend projects, you're in the right place! If you want to fast-forward to where we start installing stuff, skip down a couple of subheds to the tutorial-y bits. Now, excuse me while I babble about my personal life.

    My name is Lee, and I have a problem

    (Hi, Lee.)

    Read 127 remaining paragraphs | Comments

    • chevron_right

      DNS Block: Canal+ Sues Cloudflare, Google & Cisco to Fight Piracy

      news.movim.eu / TorrentFreak · Saturday, 30 December - 15:54 · 3 minutes

    The music industry obtained a pioneering injunction to compel Danish ISPs to implement site-blocking measures back in 2006 .

    The goal was to limit access to unlicensed Russian music download platform AllofMP3, but the action also represented the thin end of a site-blocking wedge still being tapped in today.

    Broadcaster and site-blocking proponent Canal+ believes that when service providers implement technical measures to prevent access to pirate sites, that helps to reduce piracy rates. Unfortunately, online roadblocks reliant on technical tweaks always run up against other technical tweaks designed to circumvent them.

    Protecting Live Sports

    A report from the French news outlet l’Informé outlines a fairly typical framework adopted by rightsholders in Europe. To limit access to pirated live sports streams, this year Canal+ went to court in France arguing that local ISPs should prevent customers from accessing several pirate streaming sites.

    Through Footybite.co, Streamcheck.link, SportBay.sx, TVFutbol.info, and Catchystream.com, internet users were able to watch Premier League and Champions League football, plus matches from the Top 14 rugby union club competition, without paying Canal+, the local rightsholder.

    After the decisions went in favor of Canal+, ISPs including Orange, SFR, OutreMer Télécom, Free, and Bouygues Télécom, were required to implement blocking measures. This meant that when the ISPs’ customers attempted to visit any of the above domains, the ISPs’ respective DNS resolvers provided non-authentic responses, thereby denying customers access to the sites.

    Circumvention and New Legal Action

    The response to ISP blocking by increasingly savvy customers was to change their network settings to replace their ISPs’ DNS servers with those offered by unaffected third-party providers. By switching to DNS servers offered by Cloudflare , Google , and Cisco ( OpenDNS ), the domains functioned as expected. This entirely predictable response is now being countered by another.

    After tapping in the wedge just far enough to obtain the initial blocking orders, Canal+ has now returned to court hoping to resolve the blocking orders’ shortcomings. After failing to achieve voluntary cooperation, l’Informé reports ( paywall ) that Canal+ is now suing Cloudflare, Google, and Cisco at the Paris judicial court, to compel similar DNS blocking measures.

    Legal Basis: Article L333-10

    According to Article L333-10 of the French Sports Code (active Jan 2022), when there are “serious and repeated violations” by an “online public communication service” whose main objective is the unauthorized broadcasting of sporting competitions, rightsholders can go to court to demand “all proportionate measures likely to prevent or put an end to this infringement, against any person likely to contribute to remedying it.”

    Proportionate measures include blocking, deleting or deindexing communication services (in this case pirate streaming sites) when they meet the above criteria.

    The judicial court may order these measures to be implemented “for each of the days appearing in the official calendar of the competition or sporting event, within the limit of a period of twelve months.” In respect of the competitions Canal+ hopes to protect, that means until May 19, 2024, for the Premier League, until June 1, 2024, for the Champions League, and until June 29, 2024, for Top 14.

    How Serious is the Circumvention Situation?

    According to detailed reports published by telecoms regulator Arcom, ISP-only DNS blocking measures have enjoyed massive success in France.

    Published in May 2023, Arcom’s report for 2022 noted that the overall audience for illicit sports broadcasts decreased by 41% between 2021 and 2022, down from 2.8 million internet users on average to 1.6 million.

    On circumvention of blocking measures, in May 2023 Arcom reported that when confronted with a blocked site, almost half of all infringing Internet users (46%) completely abandoned the idea of watching the content.

    Of all infringing users, just 6% attempted to circumvent blocking measures using an alternative DNS, VPN or similar method.

    > france-dns-vpn-blocking

    While circumvention of blocking measures doesn’t seem to be an especially big problem in France right now, Arcom notes that it will remain vigilant moving forward.

    For the sake of curiosity, we searched for signs of blocking in France using data supplied by the Open Observatory of Network Interference ( OONI ). The system appears to detect pirate site blocking in France as an ‘anomaly’ (yellow) rather than confirmed, outright blocking (red).

    The green sections may indicate that a relatively small number of users are managing to access domains well-known for their links to piracy. Whether that volume warrants dragging third-party DNS providers to court is another matter.

    However, it can’t be ruled out that there’s also a strategic element to the Canal+ complaint; another tap of the wedge, more incremental progress, and then ever-expanding DNS blocking in preparation for whatever comes next.

    From: TF , for the latest news on copyright battles, piracy and more.

    • chevron_right

      Piracy Shield: IPTV Blocking Orders Apply to All DNS & VPN Providers

      news.movim.eu / TorrentFreak · Monday, 11 December - 13:41 · 4 minutes

    italy-blocker Italy’s Piracy Shield anti-piracy system reportedly launched last week , albeit in limited fashion.

    Whether the platform had any impact on pirate IPTV providers offering the big game last Friday is unclear but plans supporting a full-on assault are pressing ahead.

    Technical and Operational Requirements

    A new document released by AGCOM describes Piracy Shield as a “single technology platform with automated operation” and elsewhere as a piece of “machine-to-machine platform management software.”

    The document goes into some detail on its operational and technical requirements including its stated purpose: Automated handling of reports from rightsholders for the purpose of ensuring timely and effective protection of rights and, specifically, intervention within thirty minutes of the report in accordance with the manner and procedure regulated therein.

    Various pieces of information reported last week by local news outlet DDAY.it are confirmed with extra detail. In addition to a roundtable meeting on September 7, 2023, attended by the National Cybersecurity Agency, the Guardia di Finanza, the Postal Police, and representatives of the Ministry of Enterprise, discussions were initiated with search engine providers and, more generally, “information society service providers involved in any capacity in website accessibility of illegal services other than ISPs.”

    IPv4 Scarcity and Other Technical Issues

    ISP-side user manuals for Piracy Shield were emailed on October 11 and on November 13, AGCOM’s position on various technical issues raised by anti-piracy groups, rightsholders including Serie A and DAZN, and ISPs, were finally clarified.

    One item mentioned in more detail concerns IPv4 IP addresses. They are often reported as running out and it appears AGCOM intends to block as many as it needs to.

    With reference to two specific issues, pertaining to the alleged and gradual depletion, following the implementation of the blocks, of IPv4 addresses, which constitute a scarce resource, and to the requested refreshments for the costs incurred for the implementations necessary for the operation of the platform, it was clarified that the law does not give the Authority powers in this regard, but that it reserves the right to make a report to the Government in the face of the evidence provided.

    Another issue appears to refer to service provider concerns over the volume of domains and/or IP addresses they could be expected to block during the transitional phase leading up to the “full deployment of the platform’s functionalities.”

    “In this sense, the indications regarding the maximum number of IPs and FQDNs [fully qualified domains] to be blocked in the thirty minutes and the distinction between theoretical SLA [service-level agreement] and actual SLA aimed at taking into account, at this stage, the limitations represented by some ISPs in terms of the maximum number of tickets to be handled in the thirty minutes should be understood,” the document adds.

    All Entities Involved in Accessibility of Pirate Services Must Block

    When lawmakers gave Italy’s new blocking regime the green light during the summer, the text made it clear that blocking instructions would not be limited to regular ISPs. The relevant section (Paragraph 5 Art. 2) for reference below;

    The document issued by AGCOM acts as a clear reminder of the above and specifically highlights that VPN and DNS providers are no exception.

    “[A]ll parties in any capacity involved in the accessibility of illegally disseminated content – and therefore also, by way of example and not limitation – VPN and open DNS service providers, will have to execute the blocks requested by the Authority [AGCOM] including through accreditation to the Piracy Shield platform or otherwise implementing measures that prevent the user from reaching that content,” the notice reads.

    Whether the DNS provider requirement will be affected by Cloudflare’s recent win over Sony in Germany is unclear. The decision was grounded in EU law and Cloudflare has already signaled that it will push back against any future blocking demands .

    How VPN providers will respond is currently unknown. Demands to block access to certain platforms have been handled differently depending on circumstances and geography.

    Some providers previously agreed to limited blocking in the United States as part of settlements in civil actions. When asked to block services in Russia, others simply pulled out. Whether that would prevent their IP addresses from being blocked in Italy seems unlikely.

    Search Engines Included Too, Google Appears to Be Playing Ball

    The relevant section of the new law is in some ways even more broad when it comes to search engines such as Google. Whether they are directly involved in accessibility or not, they’re still required to take action.

    AGCOM suggests that Google understands its obligations and is also prepared to take things further. The company says it will deindex offending platforms from search and also remove their ability to advertise.

    “Since this is a dynamic blocking, the search engine therefore undertakes to perform de-indexing of all websites/telematic addresses that are the subject of subsequent reports that can also be communicated by rights holders accredited to the platform,” AGCOM writes.

    “Google has shared a procedural mode for the communication of the blocking list, and the Company has also committed to the timely removal of all advertisements that do not comply with the company’s policies, having particular regard to those that invest the promotion of pirate sites referring to protected sporting events.”

    From: TF , for the latest news on copyright battles, piracy and more.