Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Piracy The Courts

Court Upholds Piracy Blocking Order Against Cloudflare's 1.1.1.1 DNS Resolver 101

The Court of Rome has confirmed that Cloudflare must block three torrent sites through its public 1.1.1.1 DNS resolver. The order applies to kickasstorrents.to, limetorrents.pro, and ilcorsaronero.pro, three domains that are already blocked by ISPs in Italy following an order from local regulator AGCOM. TorrentFreak reports: Disappointed by the ruling, Cloudflare filed an appeal at the Court of Milan. The internet infrastructure company doesn't object to blocking requests that target its customers' websites but believes that interfering with its DNS resolver is problematic, as those measures are not easy to restrict geographically. "Because such a block would apply globally to all users of the resolver, regardless of where they are located, it would affect end users outside of the blocking government's jurisdiction," Cloudflare recently said. "We therefore evaluate any government requests or court orders to block content through a globally available public recursive resolver as requests or orders to block content globally." At the court of appeal, Cloudflare argued that DNS blocking is an ineffective measure that can be easily bypassed, with a VPN for example. In addition, it contested that it is subject to the jurisdiction of an Italian court.

Cloudflare's defenses failed to gain traction in court and its appeal was dismissed. DNS blocking may not be a perfect solution, but that doesn't mean that Cloudflare can't be compelled to intervene. [...] Cloudflare believes that these types of orders set a dangerous precedent. The company previously said that it hadn't actually blocked content through the 1.1.1.1 Public DNS Resolver. Instead, it implemented an "alternative remedy" to comply with the Italian court order.
This discussion has been archived. No new comments can be posted.

Court Upholds Piracy Blocking Order Against Cloudflare's 1.1.1.1 DNS Resolver

Comments Filter:
  • Solution (Score:1, Interesting)

    by Anonymous Coward

    Block Italy from cloudflare

    • Re:Solution (Score:5, Interesting)

      by Opportunist ( 166417 ) on Wednesday November 09, 2022 @07:54PM (#63039899)

      "Sorry, Italy, but you can't use our DNS. If you don't like it, get a better government"

      • by Z80a ( 971949 )

        It's just not dns, cloudflare protects most websites from ddos attacks etc..
        If they stopped the network from touching italy at all, the internet there would be completely crippled.

        • by Calydor ( 739835 )

          Sounds like something the Italians should tell their government they don't want.

          • Yandex, run by Russians who care not for western copyright regimes is the place to search for the 123 movies type sites that dissapeared from other search engines. It also appears to mostly have the pre-2016 web in terms of raw search results. Still I don't trust it...

            https://youtu.be/hxloU6vX3yw [youtu.be]

            • Cloud flair can use regional AS numbers for Italian ISPs and answer queries coming from Italy one way, and all other AS numbers another way. Presumably all ISPs operating in Italy have AS numbers specific to those eyeball networks. Maybe even route 1.1.1.0/24 to a different server in Italy.
          • How many Italians will care? The majority of those who bothered to go to the polls recently did already tell the election administration what they want, they made fascists the ruling party (yes, the real thing, the word and the political movement originated in Italy exactly 100 years ago and these people are in that same tradition).

      • Re:Solution (Score:4, Funny)

        by youngone ( 975102 ) on Wednesday November 09, 2022 @08:57PM (#63040021)
        Italy has been trying that three times a year since world War II. You'd think they'd give up, but they're an odd bunch.
    • Comment removed based on user account deletion
      • Re:Solution (Score:4, Insightful)

        by Aighearach ( 97333 ) on Thursday November 10, 2022 @04:34AM (#63040539)

        That's complete nonsense. Perhaps you're Italian or something.

        Refusing to have Italian websites as clients would force Italian companies wanting a reliable web presence to hire 3rd parties in another European country to administer their websites. And most of them would do so. Cloudflare would lose very little business.

        Compared to the cost of geolocating DNS responses before responding to them, it would probably be cheap. This isn't some small matter; they would probably have to increase their DNS datacenter resources by 10x globally to comply with this ruling in a way that only had minimal performance degradation. It's a huge lift to add that sort of processing to something that is normally done very simply and is heavily cached. They'd probably have to develop custom ASICs just for this one feature, and deploy all their DNS loads to them. It's crazy the expense of this request, if you assume that performance needs to be maintained.

      • Re:Solution (Score:4, Insightful)

        by Joce640k ( 829181 ) on Thursday November 10, 2022 @08:21AM (#63040749) Homepage

        Most of Cloudflare's bread and butter is acting as a front end for client websites.

        What does that have to do with Cloudflare DNS?

        (Answer: Nothing)

    • In corp vs government, I believe the traditional response is:
      1. Respond with lawyers keeping it tied up in litigation as a delaying tactic.
      2. Put out feelers and learn the appropriate member of the government to bribe and make this go away. And then, make it go away.
      3. In the press, leave a vague impression that the people acting against the corp won, so as to head off investigation of the purchased legislation by making the story boring. And besides, news outlets are much more vulnerable to ddos attacks
  • don't need anything so fancy as VPN, a whole world of nameservers will oblige. or host entries.

    usually European courts are smarter, hopefully millions show them their idiocy

    • by sfcat ( 872532 )

      usually European courts are smarter

      Citation needed

    • usually European courts are smarter, hopefully millions show them their idiocy

      This wouldn't even make a top 100 list of crazy Italian court rulings in the past decade.

    • by znrt ( 2424692 )

      don't need anything so fancy as VPN, a whole world of nameservers will oblige. or host entries.

      usually European courts are smarter, hopefully millions show them their idiocy

      this is political. from tfa:

      The dismissal is a win for Sony Music, Warner Music, and Universal, the companies behind the complaint. It’s also seen as a clear victory by Enzo Mazza, CEO of the Italian music industry group FIMI.
      (...)
      Global music industry group IFPI agrees. According to Chief Executive Frances Moore, the order sets an important precedent.
      (...)
      “By upholding the original order against CloudFlare, the Court of Milan has set an important precedent that online intermediaries can be required to take effective action if their services are used for music piracy,” Moore notes.

      so it's not about blocking any traffic (let alone effectively) nor about stopping any "piracy" (it won't), but about showing tech providers who owns the courts (and thus is the boss). not that those companies will get anything out of it, on the contrary, it's just waste of money, buy for their epeen they can happily spend that kind of money and then some!

  • It's like taking a spam caller out of the phonebook instead of disabling their phone number. Why don't they just order service providers to block access to IP address that resolve from that address?
    • Because 85 year old judges know Jack Shit about how the internet works.
    • In Australia, ISPs block sites via DNS, which is easily circumvented by using a third party DNS. Which is presumably what they are trying to prevent here.
    • Re:Why DNS? (Score:5, Insightful)

      by Bert64 ( 520050 ) <.moc.eeznerif.todhsals. .ta. .treb.> on Wednesday November 09, 2022 @07:52PM (#63039895) Homepage

      Because it's possible to host hundreds of websites on a single IP, and this is an extremely common configuration due to the cost and scarcity of legacy IPv4. With IPv6 it becomes practical to use unique IPs per site again.

      If the site you're trying to block happens to use shared hosting, or a shared CDN etc - you could end up blocking huge numbers of legitimate sites along with it.

      • by mysidia ( 191772 )

        Because it's possible to host hundreds of websites on a single IP, and this is an extremely common

        It is ALSO possible to host hundreds or thousands of websites and services on a single DNS name, and this is also extremely common particularly in shared web hosting using URL schemes such as "blogspot.com/Username" for example, and the Hosting of DNS zones themselves... Blocking a DNS service disrupts many services unrelated the web, such as DNS and email - It may even prevent the delivery of legal notic

    • Re: Why DNS? (Score:2, Interesting)

      by Alypius ( 3606369 )
      Didn't the summary say they've already been blocked by the ISPs?

      Sounds like the govt is looking for a precedent to point to for some future use: the fight against "Disinformation," hate speech, anti-Environmental organizing, or whatever else the elites decide they don't like the normals knowing about.

    • They did, "three domains that are already blocked by ISPs in Italy following an order from local regulator AGCOM".

      As for why they think that isn't enough, I don't know.

  • Comment removed (Score:5, Insightful)

    by account_deleted ( 4530225 ) on Wednesday November 09, 2022 @07:40PM (#63039883)
    Comment removed based on user account deletion
    • Ah Italy, the new China.

      • Re: (Score:1, Troll)

        Comment removed based on user account deletion
        • by Anonymous Coward

          Really? I would think trying to restrict outside of jurisdiction is United States claim to fame.

          Accusing other countries of doing what the US is doing themselves is also a very notorious American trait.

          As Democrats like to say, "Every Republican accusation is a confession", what the Democrats failed to realize is that applies to all Americans as well.

          Every American accusation is a confession.

        • Might want to ask the Chinese about the Uyghurs, ethnic Kazakhs, and other Muslim minorities they are using as slave labor. And whose children they take to educate as Chinese and punish the parents if they don't fall in line as they work to totally destroy their culture and language. Or maybe the conquered people of Tibet. Seem to recall a lot of saber rattling at Mongolia and Taiwan too. That enough 'what's China trying to' for you, or do you need more?
        • Are you kidding? This is the first time I've heard of one of these coming out of Italy specifically... usually it seems the France is the worst culprit after the US and the first case I personally heard of came out of Spain... but the EU is no stranger to claiming the right to export its laws beyond its borders. It is usually censorship cases like this, with the EU asserting that they have the "right" to legislate what content I can read about on the internet. I don't give a rip if it's about torrenting

    • by mysidia ( 191772 )

      Or for that matter: Just stop selling services in Italy, so the courts there have no jurisdiction and No authority over their company, then leave 1.1.1.1 open and disregard blocking orders.

      • by Luckyo ( 1726890 )

        First of all, Cloudflare offers DNS as a free service. It sells plenty of services in Italy that are actually revenue generating.

        Second, Italian court would likely be able to escalate the order to EU wide due to non-compliance.

        • by sfcat ( 872532 )

          First of all, Cloudflare offers DNS as a free service. It sells plenty of services in Italy that are actually revenue generating.

          Second, Italian court would likely be able to escalate the order to EU wide due to non-compliance.

          If Cloudflare pulled the service sites pay for from Italian sites, Italy loses its entire technology sector overnight. 2nd, there is no reason Cloudflare needs to provide DNS resolution to Italian IPs. Problem solved for everyone other than the Italian businesses who lose their websites and IT services overnight and the government that gets to enjoy getting blamed for it. I doubt it would take a week for them to come crawling back and I doubt losing 1 week of their revenue from Italy would even be a roun

          • by Luckyo ( 1726890 ) on Wednesday November 09, 2022 @10:48PM (#63040179)

            I can tell that you don't understand anything about the legal system. Private entity playing chicken with large sovereign actor who has a valid court order ends in tears. And not for the sovereign actor.

            Acting the way you suggest would immediately cause two things. First every single major and medium sized company world wide would order their CTO to conduct complete severance of any and all contracts with Cloudflare in a prompt manner without risking contractual fines, as risk of sudden cessation of services is an unacceptable risk and cloudflare would have demonstrated that it's willing to risk your business on idiocy of "we got a legal order and we didn't want to comply". This is a clear message that this is not a corporation that you would trust running an ice cream kiosk for you, much less critical infrastructure of any kind.

            Second it would cause the case to escalate to contractual severance statutes for impacted services in Italy, with many companies immediately suing cloudflare for interruption of service for reasons of legal noncompliance with nation state law. This is a open and shut case, the moment lawyer walks in and states "yes your honor, they broke the contract because they had a verdict against them in this very legal system, and they openly refused to comply, causing us to lose service, here's the court verdict from that case", you're just done in the court and looking at maximum contractual damages. This would rapidly propagate across interconnected economic system, with cloudflare having to either pay heavy contractual fines to everyone at once, which would be a severe hit to their cash reserves, or face confiscation of property such as servers across EU as warrants are served. Which would rapidly propagate more outages and contract breakage clauses, with no ability to argue force majore as "we refused to comply with a legal order of a court of law and therefore caused these problems" automatically nullifies this argument in its entirety in any reasonable court.

            All this over a free service that brings zero revenue. So the far more likely scenario should someone as ignorant as you ever get to be a CEO of cloudflare is that within the hour of making this decision public, you would have two security guards escort you off the company property as the relevant corporate organ responsible for overseeing the CEO would publish a very public apology for "CEO having a severe nervous breakdown", noting that "we're looking to get him all the mental help he needs in this hard time for him" and ending in "of course we'll follow and any all legal obligations as required by Italian legal system".

            • by sfcat ( 872532 )

              Acting the way you suggest would immediately cause two things. First every single major and medium sized company world wide would order their CTO to conduct complete severance of any and all contracts with Cloudflare

              And said CTO would either a) tell the legal council to F*off, we are not taking down all our Internet sites or b) do what you suggest and be fired a week later when their revenue is down to 0. So no, nobody outside of Italy would do a thing.

              Second it would cause the case to escalate to contractual severance statutes for impacted services in Italy, with many companies immediately suing cloudflare for interruption of service for reasons of legal noncompliance with nation state law.

              I'm sure there are clauses in there when governments interfere with the contract. Cloudflare would be cancelling their contracts due to inability to deliver services due to Italian law. Those businesses are then going to complain to the government as to why their cont

              • by Luckyo ( 1726890 )

                >And said CTO would either a) tell the legal council to F*off, we are not taking down all our Internet sites

                Legal forwards the answer to CEO and board of directors. CTO is terminated with cause within an hour (no severance pay). Next CTO does as is told.

                >do what you suggest and be fired a week later when their revenue is down to 0.

                Cloudflare is neither a monopoly in its field, nor a provider of something that cannot be replaced on a decent schedule. It would just increase costs.

                >I'm sure there are

                • We're out of cute and cuddly anarcho-libertarian nonsense and well into "I'm ungovernable, antifa for lyfe!" realm.

                  I'm really not sure what you mean by this. Love to hear how anarcho-libertarians and Antifa are related. They seem to be polar opposites in by my definition, or maybe that's what you are saying? Are you asserting that a private company cannot simply cut ties in a locality that's turned hostile? Do you need a couple dozen examples of that happening to try and rationalize away with some paralegal hand waving?

                  • by Luckyo ( 1726890 )

                    Ideologically, both operate on fundamental principle of maximum freedom from oppression at the cost of everything else. The primary ideological difference is that former recognize individuals as independent actors, which enables things like binding contractual obligations between individuals.

                    Whereas latter (radical communists) do not recognize individuals as such, and only believe in identity groups being such actors. Additionally they believe in Marxist conception of reality that all dialogue between said

                    • Ahh, yes, I'm familiar with Karl Marx: the political novice academic rabid antisemitic racist. Here's a quote: “What is the worldly religion of the Jew? Huckstering. What is his worldly God? Money. Money is the jealous god of Israel, in face of which no other god may exist. Money degrades all the gods of man—and turns them into commodities. The bill of exchange is the real god of the Jew. His god is only an illusory bill of exchange. The chimerical nationality of the Jew is the nationality of
                    • by Luckyo ( 1726890 )

                      Ah yes, "On the Jewish question". The part that tries to explain Marxist tenet of class consciousness in relationship to Jews of Europe in mid 1800s, and how Jews are special because they are uniquely resistant to adapting class consciousness because they have a culture and a religion that inoculate them against this genocidal world view.

              • I'm sorry do you think Cloudflare *is* the internet? Why would your website be offline if you terminated services with them and went to somewhere else?

            • by mysidia ( 191772 )

              would order their CTO to conduct complete severance of any and all contracts with Cloudflare in a prompt manner without risking contractual fines, as risk of sudden cessation of services is an unacceptable risk...

              No. Wow, you have an extremely vivid imagination there. The buyer of service believing their service provider has a new risk doesn't change their contract.

              with many companies immediately suing cloudflare for interruption of service

              No. First of all, Their Terms of service has a No Warranties clau

              • by Luckyo ( 1726890 )

                The first thing you quoted precluded your objection to it. Your second is irrelevant when dealing with parts that are superceded by national law. You cannot deny things legally guaranteed within total body of law, you can merely argue within the scope of total body of law. Here, you would be arguing that termination of service is because you refused to comply with total body of law. Now imagine being the poor lawyer trying to argue this point in an Italian court.

                Italy's justice system has real problems with

                • by mysidia ( 191772 )

                  The first thing you quoted precluded your objection to it.
                  Nonsense.
                  Your second is irrelevant when dealing with parts that are superceded by national law.
                  False. The national laws of countries don't have authority over the company that doesn't exist within their boundaries. They only have the police power over the people and properties that are actually inside their country.

                  If a global provider of service decides to disobey Italian law and removes all their property from that country first, then Italian

                  • by Luckyo ( 1726890 )

                    Best part in this argument: a claim that sovereign actors cannot claim sovereign privilege because private party says so in a contract.

                    I must say, it's rare to see someone so disconnected from real world as you.

      • Hate to break it to you, but if they have the capability to block all of Italy from accessing their DNS, they could also narrow their block of the specific websites to only affect Italy instead,
        • Hate to break it to you, but if they have the capability to block all of Italy from accessing their DNS, they could also narrow their block of the specific websites to only affect Italy instead,

          Hate to break it to you, but stopping selling services in Italy doesn't require any technical changes to the DNS at all. It is something that the humans can implement.

      • Or for that matter: Just stop selling services in Italy

        Before you do that consider if the cost of compliance is more or less than the cost of avoidance. I mean you're talking about not serving a customer base of 60million. What would your shareholders thing, and on top of that, who would you still serve if you packed your bags and fled every time a stupid court decision comes up?

        I guess you could provide DNS to some native tribe in central Africa, at least until they have their first court case against you for stupid reasons.

        • by mysidia ( 191772 )

          I mean you're talking about not serving a customer base of 60million.

          Not exactly. They would not be losing any business by doing this.. Only the investments that they already made in the past to build datacenter facilities in Italy would be a loss, But they could transfer ownership and operation of the hardware and facilities they have in Italy to a different company, So it's not necessarily a total loss.... In fact, if they chose they could spin off the operation of the 1.1.1.1 DNS service to a

    • They can still use standard DNS until the people grow irritated enough to force change from the government, if they ever

      People don't have a clue what you're talking about. Not only would this not force a change of government, but it wouldn't even make it on the agenda for any election.

    • by brunes69 ( 86786 )

      This.

      Cloudflare does not make revenue from 1.1.1.1 - it is actually a cost center. They may write it off as a marketing expense, who knows - but it does not make then revenue in Italy so I don't see why they just don't block all access to their resolver there.

    • As long as Cloudflare has a legal presence in Italy (or the EU), it can be compelled. It's in the court's jurisdiction. Blocking everything would be a satisfactory but unnecessarily broad implementation of the order, as long as that includes the named domains and is effective in all of Italy. The latter part is the problem though. Blocking a few domains everywhere is much easier than reliably blocking everything just in Italy.
    • If it is feasible for Cloudflare to block all access from Italy, then it is not unreasonable for Italy to demand that specific access from Italy be blocked.

      Italy is nowhere demanding that access be blocked outside of Italy.

  • And he talked about how it's much cheaper for him to store things on the blockchain. So... if people store enough pirated content on the blockchain, will countries start blocking blockchain infrastructure stuff?
  • will they try to block AWS or GCP due do some sites on there? Ask them to block X to users in Italy

  • Court of Rome (Score:4, Insightful)

    by PPH ( 736903 ) on Wednesday November 09, 2022 @09:42PM (#63040085)

    Not until you pay reparations for the occupation of England.

    • Re:Court of Rome (Score:4, Insightful)

      by sfcat ( 872532 ) on Wednesday November 09, 2022 @09:59PM (#63040115)

      Not until you pay reparations for the occupation of England.

      I'm pretty sure the UK won't want to play that game. They would owe about 1/3 of the planet if they did.

      • by WallyL ( 4154209 )
        Everybody's conquered, or been conquered, by somebody at some point in history. Some conquerings are just remembered as worse than others.
        • by PPH ( 736903 )

          Some conquerings are just remembered as worse than others.

          Granted, the Romans were not the worst conquerors ever.

          Apart from the sanitation, medicine, education, wine, public order, irrigation, roads, the fresh water system and public health, what have the Romans ever done for us?

  • If that doesn't work, simply deny Italy access as others have said.

    I'm sure their business in Italy isn't that big a chunk of their revenue.

    • If that doesn't work, simply deny Italy access as others have said.

      There's nothing simple about suddenly exiting a market of 60million people. That kind of rash decision has the ability to end companies.

  • Piracy just costs someone or a group an amount of lost sales ($). No one is physically harmed when someone copies data. Some websites actually promote ending lives, like pro abortion websites. Get the precedent set to regulate various parts of the internet (chokepoints of information spreading), and then use it more aggressively in the future. If such blocking could be used for just money, why not use it to save lives?

    • by kn ( 167667 )

      I don't think piracy really costs anyone anything, at least not much, because most pirates would probably not purchase the products even if they were unable to pirate them.

      You do, however, make the important point that this rabbit hole will probably go much deeper than expected once the precedent is set.

"Mach was the greatest intellectual fraud in the last ten years." "What about X?" "I said `intellectual'." ;login, 9/1990

Working...