Cloudflare Warns EU About Extensive Piracy Overblocking, Calls for Safeguards

American Internet infrastructure company Cloudflare is pushing back against increasing calls to broaden pirate site blocking in the EU. The company notes that since similar efforts in Spain and Italy have resulted in extensive collateral damage, there’s a need for more transparency and constructive collaboration on the anti-piracy front. Cloudflare also wants rightsholders to pay for their overblocking mistakes.

From: TF, for the latest news on copyright battles, piracy and more.

cloudflare logoTwo years ago, the European Commission published a non-binding recommendation to tackle the problem of live-streaming piracy, sports in particular.

For instance, the EU encouraged member states to introduce measures to facilitate prompt takedowns of live streams, while service providers and rightsholders were encouraged to tackle challenges through collaboration.

To the disappointment of many rightsholders, the recommendation required no mandatory action by EU member states. So, when the Commission recently launched an evaluation asking stakeholders to share their views on the recommendation, many asked for more robust legislation.

Advanced piracy blocking systems are high on the agenda. Semi-automated mechanisms capable of blocking sources quickly are preferred. These should be implemented by ISPs, but rightsholders see a role for DNS services and VPNs too.

Variations on this type of mechanism are currently active in Italy, Spain and France. Rightsholders, including the MPA and DAZN, mentioned this in their responses to the Commission, calling for expansion in the EU. However, not everyone agrees that broader and more automated blocking efforts are the right path forward.

Cloudflare Issues Stark ‘Blocking’ Warning

American tech giant Cloudflare, which provides CDN, proxy and DNS services, is fiercely against automated blockades. The company has been at the center of various blocking actions in recent months, as its infrastructure was targeted in Italy, Spain, and France.

In some instances, this has led to overblocking where legitimate Cloudflare customers (and their users) were hit as collateral damage.

“Over the past two years, we have witnessed disproportionate and damaging efforts by rightsholders to use blocking measures to tackle piracy online, particularly in relation to unauthorized live streaming of sports,” Cloudflare writes.

From Cloudflare’s submission

cloudsub

Cloudflare notes that pressure from rightsholders has led some European national governments to implement “problematic and imprecise” blocking mechanisms. It says that these blocking tools “often lack due process” and result in “significant collateral damage” for legitimate internet users and businesses across the EU.

As an intermediary, Cloudflare’s infrastructure and IP-addresses are used by pirate sites and services. However, since these are shared with innocent sites, blocking renders those inaccessible too.

“Blocking one IP address, thus can render thousands, tens of thousands, or even hundreds of thousands of domains unreachable,” Cloudflare warns.

Italy, Spain, and France

Cloudflare specifically highlights Italy, Spain, and France as countries where problems have emerged. The Italian “Piracy Shield” law has resulted in “overblocking on a massive scale,” the company says, adding that it violates the Charter of Fundamental Rights and EU law.

In Spain, blocking orders also caused substantial collateral damage. Cloudflare explains that, due to a broad court order that included Cloudflare IP-addresses, millions of Spanish users were blocked from accessing thousands of non-targeted websites.

“This blunt approach not only demonstrates a fundamental misunderstanding of how the Internet works, it also raises significant questions about compliance with the European Union’s Open Internet Regulation,” Cloudflare writes.

In France, meanwhile, courts have ordered VPN providers and DNS resolvers to block pirate sites. At the same time, there are plans to update the law to enable blockades of pirated live sports broadcasts in real-time, which also raises overblocking concerns.

No VPN and DNS Blocking

Cloudflare urges the EU to tread with caution going forward. Instead of updating the law to enable broader blocking powers, it calls for limiting the blocking efforts.

For example, it argues that blocking orders should never extend to core, global Internet technologies such as global DNS resolvers and VPNs. These services operate globally and can’t easily restrict blocking measures geographically, the company notes.

“Blocking applied to an ISP-owned DNS resolver will have a geographically restricted effect, since an ISP typically only serves users in one country. In contrast, public DNS resolvers or VPN providers operate globally.”

Aside from the technical challenges, Cloudflare notes that VPNs and proxies are widely used to protect free expression. Interfering with these services through onerous regulation could amount to a violation of privacy and freedom of expression.

Transparency, Safeguards and Compensation

Cloudflare recognizes that piracy is a real problem that needs to be addressed. However, it believes that more extensive blocking is not necessarily the answer. Instead, it calls for more transparency, proper safeguards, and cooperation between all stakeholders.

Cloudflare’s suggestions include the following (abbreviated and summarized).

Last Resort Only: Blocking should only be used as a final option to reduce local access to pirated content.

Protect Core Internet Technologies: Blocking orders must not apply to essential global internet technologies like global DNS resolvers and VPNs.

Prioritize Notice-and-Takedown: Rightsholders must first attempt notice-and-takedown procedures with hosting providers before requesting blocking.

Independent Verification: All blocking requests need formal justification and independent verification by a designated governmental or independent regulatory body.

Transparency: Transparency reports should detail the blocked domains, implementation times, and the identities of requesting parties.

Rapid Rectification: Publicly available rapid response systems should be in place to quickly correct any incorrect or overly broad blocking measures.

Independent Dispute Resolution: An independent body should hear appeals from any affected parties, ensuring legal review and procedural fairness.

Liability for Overblocking: Rightsholders should be held liable for any economic or reputational harm caused to non-targeted third parties due to overblocking.

EU Urged to Resist One-Sided Blocking Calls

More drastic blocking demands are not the way to tackle piracy, according to Cloudflare. Instead of drafting new legislation, the EU is encouraged to facilitate healthy cooperation where all stakeholders are heard.

“The European Commission should resist excessive requests to expand network level blocking as a means to tackle piracy,” Cloudflare writes.

“Effectively dealing with piracy of live events will depend on multiple solutions being deployed simultaneously, combining sharing of data, law enforcement measures, industry cooperation, and measures for distribution of legal content that better satisfy the demand.”

This can all be done without new legislation, Cloudflare says. While that may be true in theory, previous calls for increased collaboration haven’t led to concrete progress. And with tensions rising to the point where disagreements are fought out in public, cooperation between some parties might be a challenge.

A copy of Cloudflare’s submission in response to the European Commission’s assessment of the May 2023 Commission Recommendation to combating online piracy of sports and other live events is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

(g+) Stiftung als Unternehmensnachfolge: Langfristige Sicherheit, die etwas kostet

Ausstiegswillige Unternehmer müssen oft die langfristige Sicherung der Firma und finanzielle Interessen abwägen. Eine Stiftung sichert nur eines von beidem. Ein Bericht von Mike Faust (Unternehmen, Wirtschaft)

Ausstiegswillige Unternehmer müssen oft die langfristige Sicherung der Firma und finanzielle Interessen abwägen. Eine Stiftung sichert nur eines von beidem. Ein Bericht von Mike Faust (Unternehmen, Wirtschaft)

Seltene Erden: Wie man die Rohstoffe ersetzt und was wirklich kritisch ist

Seltene Erden, die in Motoren, Smartphones und Akkus stecken, werden immer wieder als politisches Druckmittel eingesetzt. Dabei sind sie weder selten noch alternativlos. Von Mario Petzold (Seltene Erden, Energiewende)

Seltene Erden, die in Motoren, Smartphones und Akkus stecken, werden immer wieder als politisches Druckmittel eingesetzt. Dabei sind sie weder selten noch alternativlos. Von Mario Petzold (Seltene Erden, Energiewende)

Anzeige: Mit E-Learning Schritt für Schritt zum eigenen Business

Recht, Marketing, Projektmanagement – ein Onlinepaket mit acht Kursen und 18 Stunden Lerninhalt vermittelt zentrale Grundlagen für den erfolgreichen Start in die Selbstständigkeit. (Golem Karrierewelt, Wirtschaft)

Recht, Marketing, Projektmanagement - ein Onlinepaket mit acht Kursen und 18 Stunden Lerninhalt vermittelt zentrale Grundlagen für den erfolgreichen Start in die Selbstständigkeit. (Golem Karrierewelt, Wirtschaft)

Anti-vaccine quack hired by RFK Jr. has started work at the health department

David Geier was previously disciplined for practicing medicine without a license.

Notorious anti-vaccine advocate David Geier has begun working at the US Department of Health and Human Services and is seeking access to sensitive vaccine safety data that the Centers for Disease Control and Prevention had previously barred him from accessing—at least twice—according to reporting from The Wall Street Journal.

Geier and his father, Mark Geier, who died in March, are known for peddling the thoroughly debunked falsehood that vaccines cause autism, publishing a long list of dubious articles in low-quality journals that push the idea. In particular, the two have blamed the mercury-containing vaccine preservative, thimerosal, despite numerous studies finding no link. Thimerosal was largely abandoned from vaccine formulations in 2001 out of an abundance of caution.

In 2011, an investigation by the Maryland State Board of Physicians found that the Geiers were misdiagnosing autistic children and treating them with potent hormone therapies in a treatment they dubbed the "Lupron Protocol." Mark Geier was stripped of his medical license. David Geier, who has no medical or scientific background and holds only a bachelor's degree, was disciplined for practicing medicine without a license.

Read full article

Comments

Anthropic releases custom AI chatbot for classified spy work

“Claude Gov” is already handling classified information for the US government.

On Thursday, Anthropic unveiled specialized AI models designed for US national security customers. The company released "Claude Gov" models that were built in response to direct feedback from government clients to handle operations such as strategic planning, intelligence analysis, and operational support. The custom models reportedly already serve US national security agencies, with access restricted to those working in classified environments.

The Claude Gov models differ from Anthropic's consumer and enterprise offerings, also called Claude, in several ways. They reportedly handle classified material, "refuse less" when engaging with classified information, and are customized to handle intelligence and defense documents. The models also feature what Anthropic calls "enhanced proficiency" in languages and dialects critical to national security operations.

Anthropic says the new models underwent the same "safety testing" as all Claude models. The company has been pursuing government contracts as it seeks reliable revenue sources, partnering with Palantir and Amazon Web Services in November to sell AI tools to defense customers.

Read full article

Comments

Nintendo Switch 2 can make your old Switch games feel brand new again

Differences range from “nonexistent” to “subtle” to “night and day.”

The Nintendo Switch 2 is launching with a handful of new games, but for many of the people getting one this week, the main thing to play on it is software made for the original Switch.

We’ve known for months that the Switch 2 would maintain backward compatibility with the vast majority of Switch games, but one major question was whether the Switch 2’s improved hardware would benefit older Switch games in some way. Especially in recent years, first- and third-party Switch games have struggled with the original system’s aging Nvidia chipset, which was already a bit dated when the system came out in 2017.

After a day or so of testing various Switch games on the Switch 2, we can report firsthand that Switch games can look dramatically better on the new system. For games that Nintendo has taken the trouble to update—those with Switch 2 upgrade packs and those with free updates—players can expect higher resolutions, better frame rates, less texture and character pop-in, and smoother animations all around. Even games that haven’t been updated for the Switch 2 can run a bit more consistently on the new systems, though games without Switch 2-specific updates don’t improve as much as games with updates.

Read full article

Comments

Ted Cruz bill: States that regulate AI will be cut out of $42B broadband fund

Cruz attempt to tie broadband funding to AI laws called “undemocratic and cruel.”

Sen. Ted Cruz (R-Texas) wants to enforce a 10-year moratorium on AI regulation by making states ineligible for broadband funding if they try to impose any limits on development of artificial intelligence.

The House previously approved a budget bill that contained a fairly straightforward provision to ban state AI regulation for 10 years. Cruz, chairman of the Senate Commerce Committee, yesterday released budget reconciliation text that takes a different approach to preventing states from regulating AI.

Cruz's approach may be an attempt to get around the Senate's Byrd Rule, which limits the inclusion of "extraneous matter" in budget reconciliation legislation. He wants to make it impossible for states to receive money from the $42 billion Broadband Equity, Access, and Deployment (BEAD) program if they try to regulate AI. Cruz released a summary that says his bill "forbids states collecting BEAD money from strangling AI deployment with EU-style regulation."

Read full article

Comments