Cloudflare starts blocking pirate sites for UK users
torrentfreak.com
torrentfreak.com
The shocking part of this isn't that they aren't participating in that form of crime in the UK, it's that they're somehow able to participate in it in the rest of the world.
And I say this as someone who thinks that copyright laws are largely unjust, preventing people from engaging with their own culture, but that doesn't make them not the law.
I understood from the article that it was for users in the UK, not for hosts in the UK.
Personally, it's always sad when a company agrees to censor on their own merit when they don't have legal obligation to.
> This is geo-blocking, by definition.
Do you also refer to steam games that only sell in some regions as "geo-blocking"? I don't. Steam doesn't (they call them region restrictions). There's no blocking going on, merely declining to offer something in the first place. Cloudflare is the host here, they aren't blocking anything, they just aren't providing the pirate site in the first place.
> when they don't have legal obligation to.
While I know relatively little about UK law I'm extremely skeptical of the idea that cloudflare does not have a legal obligation to not knowingly host websites committing copyright infringement.
So I am not blocked from buying a game based on my geographic location, I am merely restricted from it based on my region...
Similarly you can block a punch, but not if it was never thrown.
Otherwise, probably yes.
It's like saying that laws against shoplifting prevent people from eating food at a supermarket.
Moreover it is simply unacceptable to say that poor people (which in many cases here means less than multi millionaires given the minimum deal size most copyright holders are interested in for derivative works - and less than centi-millionaires if we mean "affordably as a hobby") cannot legally engage with the work of the culture they grew up in.
And really, your point about poor people is true about everything. Why shouldn't they get free food for life just because they "grew up" eating? Or a free bicycle because they rode one when they were five?
I'm not excusing theft. Theft involves depriving someone of something that belongs to them, copyright infringement never does that. I'm also not advocating for copyright infringement, I'm advocating for doing away with the laws that establish copyright in the first place (I'd accept various other positions like "amend the time limit on copyright down to a year" - though I'd argue there's not much point to retaining copyright at all at that point).
The relevant question is "what are the odds a particular work is part of my cultural background", but "what are the odds that a particular work in my cultural background is copyrighted without a license to create derivative works available either freely or under fair reasonable and non-discriminatory terms". Those odds are approximately zero, everything is copyrighted these days, licenses to create derivative works are almost never available for notable cultural works (or really anything other than open source software, and wikipedia).
If you're a kid growing up Pokemon, and not part of the 0.001%, you can't afford a license to legally make up stories involving Pokemon. That's fundamentally unjust. Being able to tell stories about our experiences is fundamentally something that we should be entitled to do.
This isn't the case of a nominal, affordable, cost like food. We absolutely hold that food should be available to everyone at a price they can afford (and yes, if they can't afford it we should still feed them - see various UN resolutions and so on about food being a human right). This is the case of "you can only do this legally by making bespoke negotiated business-to-business style deals for huge sums of money" when it should be a right widely available.
The status quo is just that people break the law and make themselves criminals (intentional copyright infringment is a crime, and that's what you do when you write "fanfiction" without a license), and that's not right.
Usually we only describe the last link in the chain as the host. Everything else is usually not "the host" for a website. DNS providers, TLD registries, Domain registrars, IP address providers, VPNS, reverse proxies, web caching, CDN (which often, but not always, act as caches), DDOS protection, IT management layers, micro services, backups, IP management, (and many more) do not call themselves hosts for websites. The ones that call themselves as host are usually web hosting providers, web shops, "cloud", and vps. Hardware as a services seems like a bit more of a grey zone, similar to rented space in a data center.
The article specify that the pirate shops used cloudflares services of pass-through security and CDN. The more accurate description I would describe that is that cloudflare are selling services to pirate sites, and that this services has been blocked. How shocking that is depend on how much responsibility we as a society want to place on people who provide those kind of services. How much liability should a service provider have, say a security management services, when their customer is known to break local law?
Reminds me a bit of the specific case law in Sweden used in the pirate bay case. The law that the prosecutor used was a law directed toward biker gangs that targeted the bars that those gangs tended to use as a base. The law specified that even if the bar itself operated legally, the fact that the biker gang used it as a base made the owner legally liable if the bar provided services to those members.
This is definitely how Cloudflare attempts to defend themselves! In essence, my above comment is rejecting Cloudflare's interpretation.
They aren't a preliminary step in the chain like DNS/domain stuff, they are the final step, they are the service the user asks for the actual content of the pirate site, and they return the actual content.
They aren't a tool being used by the user like an ISP or VPN that might have a privacy defence of being deliberately blind to the traffic they are forwarding, they are rather specifically contracted by the pirate site.
There's no expectation on the users behalf that when they query the pirate site hosted by cloudflare that query will go beyond cloudflare (like with a proxy). The user is perfectly happy if cloudflare serves that request entirely by returning data stored on their own servers. So is cloudflare, and as much as the time as feasible that's exactly what cloudflare does.
So I'm rejecting the notion that cloudflare is distinct in any relevant way from a typical webhost here.
--
> The more accurate description I would describe that is that cloudflare are selling services to pirate sites, and that this services has been blocked.
I'd be happy if the title read "court blocks Cloudflare from providing services to pirate sites" (though that's not the editorial slant the article was going for). Your phrasing leaves the blocking party ambiguous, which is sort of missing the point of my complaint.
If you mean "this services has been blocked [by Cloudflare]" like the original title, it runs into the same problem as the original title. You've changed the party Cloudflare is declining to transact with from the end-user to the pirate site. It's still the case that this is merely Cloudflare declining to provide services, not those services being blocked (which would only be possible if Cloudflare chose to provide them) by Cloudflare.
The distinction here matters because this isn't Cloudflare acting as an extension of law enforcement to step in and block a crime from occurring, this is merely Cloudflare itself choosing not to commit the crime. Maybe because a court ordered them not to, or maybe just because they decided not to (which the article seems to be trying to suggest).
You can also access 4chan, Tattle Life, and other nasty gossip websites that the UK nanny state wants to ban.
And you can access the porn on Reddit and Twitter (though in some cases you'll have to make an account). And of course the "tube" sites work fine.
After you've done that, as a UK citizen, please go to https://petition.parliament.uk/petitions/722903 and ask the government to repeal their awful law.
Bonus for using Nitter here, you can also see the latest posts from an account instead of the most popular posts, and see replies/interactions to individual tweets. Oh, and it gives you plain HTML.
Reddit pisses me off so much that despite the fact that I don't even use Reddit, just so that my experience sucks less when I'm linked to Reddit or have another reason to lurk it,
- I use the "Old Reddit Redirect" extension to force the browser to go to old reddit
- I use the "Load Reddit Images Directly" extension to bypass Reddit's hideous image viewer that tries to load if your browser makes the mistake of having text/html in the "Accept" headers when opening an image in a new tab. (Dear Firefox/Chrome/etc: maybe stop doing that? If I open an image in a new tab, there is a zero percent chance I want HTML.)
It might be some kind of phased rollout of course.
if you make a Reddit account, you can flip an obscure setting so that www.reddit.com serves the same site as old.reddit.com
You can browse though
> please go to https://petition.parliament.uk/petitions/722903 Signed!
But on a macro scale, the entire Tor network has fairly limited bandwidth and torrenting is a very easy way to saturate it. (Existential risk to the network / tragedy of the commons)
Probably going to be slower than over the Tor network without any manual tweaking.
...would also help with privacy and nasty telco letters.
Hey, we pay $100B/yr of tax money into the NSA/CIA/etc budgets every year so they can run exit nodes among other activities, I wouldn't exactly call it donated
bandwidth is a scarce resource on tor.
So, you anonymously make the requests through an exit node, but the request contains your IP, which defeats the entire purpose of Tor.
Make no mistake, the plan is to require 'KYC' for Google, reddit, Facebook, X soon and all that and then later require it for all web sites, even this one.
Australia recently passed a law requiring Google to KYC Australian account holders to check ages to decide if the user will be allowed to control the "safe search" setting.
There will always be something you could maybe do as a workaround, but they are going to make it extremely hard.
I’m reminded of all-around-good-guy @patio11’s evergreen The Optimal Amount Of Fraud Is Non-Zero…
https://www.bitsaboutmoney.com/archive/optimal-amount-of-fra...
Polling has shown that the Online Safety Act had 70+ % of the population supporting it.
Something like 60% don't think it goes far enough.
I almost said "solution" instead of workaround, but of course the only actual solution is to fix the legislation.
It is reasonably decent these days. Generally there are periods where Tor network is slow.
> A VPN is a more realistic workaround to this kind of geofencing
Generally I tend to use a combination of Tor / VPN depending on what I am doing. Some gossip sites have onion urls and I will use Tor if visiting those. Other sites that are geo-fenced (sites like Odysee) are easier to get to via VPN.
> I almost said "solution" instead of workaround, but of course the only actual solution is to fix the legislation.
That isn't going to get fixed anytime soon. In fact I expect it to get worse over time.
And get to solve a dozen whack-a-mole intentionally-slow-loading reCAPTCHAs just to see the page, or worse, end up in a Cloudflare redirect loop.
Though at that point might as well use Tor in Brave, because the additional ad&trackers blockers improves drastically the load times.
Now, if only Brave would go the extra mile of having the Tor browser window better mimick the Tor Browser.
That procedure depends upon your platform and client.
http://www.b3rn3d.com/blog/2014/03/05/tor-country-codes/
Edit: Use this link instead (thanks mzajc!):
https://web.archive.org/web/20180429212133/http://www.b3rn3d...
"uBlock filters – Badware risks"
Cloudflare does plenty of sketchy stuff, like deliberately hosting DDoS-for-hire sites because it increases the demand for anti-DDoS products. But they will take them down if they are ordered to - and reveal their origin IP. They are not going to jail for you.
There is literally no point in signing those petitions. The only disagreement between the major political parties in the UK is how draconian it should be.
They may work out that UK has a 2 party system where each one just takes turns and none of it makes much difference.
There would be more of an impact if, perhaps, everyone in the UK who has had to shut a web site because of this law wrote to their MP.
I don't think so. It says on the site "At 100,000 signatures, this petition will be considered for debate in Parliament".
I've seen people get excited about petitions before that got to 100,000 signatures and it all fizzled out, or it wasn't debated seriously in parliament. Often you will get a cookie cutter response with these petitions that is a paragraph long.
The reality is that most of the public are indifferent or supportive of the current legislation and most MPs know that.
> There would be more of an impact if, perhaps, everyone in the UK who has had to shut a web site because of this law wrote to their MP.
Each MP would get maybe a max of 10s of emails/letters each. Many of those MPs wouldn't even bother answering you. Those that do will often will probably give you the brush off.
I've written to my MP before (about encryption legislation), spent a lot of time presenting a clear and cogent argument and I got a "well I might have a chat with the home secretary" and they were still singing the same tune years later. What I was telling them was largely the same as other industry experts. They don't care and that is the unfortunate reality.
The fact is that the direction the UK government (doesn't matter whether it was Red Team or Blue Team) has been going in has been clear for well over a decade at this point. It would take a major political shake up for this to change IMHO.
MPs have been known to respond to letters. I have had responses to various issues. It obviously depends on the MP. Many MPs were very much opposed to this issue.
I think they are both ineffective. So I don't believe that is true.
> MPs have been known to respond to letters. I have had responses to various issues.
Getting a response is one thing. Having something done is another.
> It obviously depends on the MP. Many MPs were very much opposed to this issue.
The legislation was going to happen at some point or another. The direction of travel was quite clear. There are always going to be some dissenters, but the awful legislation got passed anyway. So what did their dissent achieve? Nothing.
I came to the realisation a number of years ago that for the majority of people, the only care about being able to use their Netflix, shopping on amazon, check their email and post photos on Facebook. Concerns outside of that are simply too abstract/distant to care about.
I disagree that writing to MPs is always ineffective. Some campaigns have been successful. Whether it will be effective in this case is another matter. Maybe when people start to experience the block it will gain traction.
Of course if you don’t even make low-effort attempts to make your voice heard and exercise your democratic rights, you can be certain that you’ll lose them.
It won't be effective in this case. It been going in the same direction of travel and none of the parties (including outsider parties such as the Greens, Reform etc) proclaim to believe in in reversing this direction of travel. They are much more interested in other issues that are much more hot button. Those issues are easy for the public to understand because they are likely to have encountered them often.
> Maybe when people start to experience the block it will gain traction.
No it won't. People will either find a way to circumvent via VPN/Tor or some other mechanism (which is what they already do) or they will simply shrug their shoulders and won't bother.
There has already been a large number of forums/sites that have been shutdown or site been blocked in the UK and there hasn't been any significant traction on this issue.
> Of course if you don’t even make low-effort attempts to make your voice heard and exercise your democratic rights, you can be certain that you’ll lose them.
I don't really know how to respond to something like this because I believe it is naive on a number of levels. I consider myself a realist. I believe "making your voice heard and exercising your democratic rights" is about as effective as talking to a brick wall (at least on a national level).
I have personally made attempts. I wrote to my MP often. I cited links, news articles etc to back up my argument. It was an utter waste of time. At best you may get a short response. I realised I was ultimately wasting my time, I stopped and will never do it again. I actually feel stupid for believing that I could make any difference at all. I suspect this is the experience for other people and is often not spoken about.
Moreover much more notable people have tried to make themselves heard around a number of related concerns about freedom of speech, threats to privacy, iffy counter-terrorism laws etc. More often than not has always been either ignored entirely, responses that completely ignored the crux of the issue, or straight up lies from successive governments for almost two decades now.
Realistically our options will be to learn to live with the poor legislation, circumvent it, or leave the country.
This is partly a perception issue. You need to adjust your expectations.
Individually you are unlikely to make a difference. You write a letter and are knocked back, you see no immediate impact and all your human senses are telling you “this didn’t work”. That is how the human mind works. It’s very demoralising (arguably by design).
You feel like you are the only one acting, because you do not see anyone else acting, and therefore you feel alone on this issue, and knowing you do not have the individual pressure to move the needle, you feel it is shouting into the void.
This is a human feeling but it is not necessarily reality. You don’t know who else has acted on this, who has written letters, what the various MP Signal chats are saying. You have no way to gauge support.
Therefore you should make the efforts even if there is no positive feedback, because there are unseen forces.
You might also need less political pressure than you think. MPs are human. Put yourself in the shoes of a MP receiving letters from the public. If one person sends a letter on this issue, it’s lost in the noise, one of many crazies talking about irrelevant topics, dismissed. If only 10 people send letters on the same topic, that starts to put the issue on your radar, no? 10 letters, then you hear about a 100k petition on the same topic that’s going to get noticed, do some research, maybe even discuss it between MPs. You’ve given a reason for them to make a self-important speech in parliament.
Continual pressure on all fronts. Keep pushing, help efforts that gain more support and build more pressure. It’s all you can do but also the least you can do.
> Put yourself in the shoes of a MP receiving letters from the public. If one person sends a letter on this issue, it’s lost in the noise, one of many crazies talking about irrelevant topics, dismissed. If only 10 people send letters on the same topic, that starts to put the issue on your radar, no? 10 letters, then you hear about a 100k petition on the same topic that’s going to get noticed, do some research, maybe even discuss it between MPs. You’ve given a reason for them to make a self-important speech in parliament.
Lets pretend this did happen.
What happens next is when some tragedy occurs (there are plenty that happen unfortunately) e.g. a teenage girl committing suicide because she was bullied on Instagram.
Then every major news website, news paper and news broadcast runs with "Dangerous Internet Trolls caused the suicide of lovely teenage girl".
Then there is a series of "discussions" about the issues on Question Time or LBC. The solutions presented will be various draconian measures which means more censorship, monitoring and surveillance. They will have a token person (that is often unlike-able) arguing against more draconian measures for "balance" which will be derided by the rest of the panel (and often the audience). After that you are back to square one, because it is now politically toxic.
This is known as "manufacturing consent".
I've seen this play out literally hundreds of times now.
Sure, that can happen.
What if tomorrow's headline is "porn habits of everyone in Britain revealed", or "6 in 10 people's bank accounts stolen after ID leak". Would there be room for change then?
We can then have the trustworthy, familiar face of Martin Lewis on the news telling people how to protect their identity, and he can highlight how this terrible problem was caused by mandatory rules set by Ofcom, and they can have some squirmy little git from Ofcom promising to "look into the problem", and by day 4 of the ongoing national identity theft disaster, the government will yield.
We can be cynical, but can hope too.
It has happened! Quite a number of times in fact. That why I used that particular example.
> What if tomorrow's headline is "porn habits of everyone in Britain revealed", or "6 in 10 people's bank accounts stolen after ID leak". Would there be room for change then?
No. It will be spun in a way where they can justify more draconian measures or something else will be into the news cycle and it will be forgotten about after a few weeks.
> We can then have the trustworthy, familiar face of Martin Lewis on the news telling people how to protect their identity, and he can highlight how this terrible problem was caused by mandatory rules set by Ofcom, and they can have some squirmy little git from Ofcom promising to "look into the problem", and by day 4 of the ongoing national identity theft disaster, the government will yield.
I think it would be the ICO not Ofcom. Nevertheless, they will have some politician or spokes person blaming it on not enough funds and/or powers going to the appropriate regulator.
> We can be cynical, but can hope too.
It isn't cynicism. I am literally describing what happens more often than not.
Do you wait for the end of football matches before deciding which team to support, because only the one that won matters?
I advocate against laws I don't like, and try to give people practical advise about how to protest against them, as well as how to circumvent them, and minimize their effects, and encourage them to pass this knowledge on. I consider it a good use of my time, even if not everyone cares to retain that info or pass it on.
Politics is never a foregone conclusion (unless you completely give up and go silent, in which case your opposition has carte blanche to do what it likes)... but like "viral content", it's not something you can always whip in your your favour. People are irrational creatures, and you never quite know what will make them all sit up and take notice. You can never be sure what will set the nation's agenda, and what stories "have legs", until they happen. For example: the Post Office scandal was a dull boring thing that nobody cared about, and then... an ITV drama made people care? But there have been ITV dramas about political scandals before, and they didn't all have that effect. But that one did. And the writers of the drama didn't just make stuff up, they followed the details of campaigners and journalists who had been covering this for years, even if at times they felt they were shouting into the void.
You just keep trying and see what sticks and what doesn't. The standard UKGov petitions site has at least some quantum of usefulness in that it encourages people to think about the issue, and if they sign it, they know there are others that agree with them. Change is possible.
I believe it to be a statement of reality. I am simply spelling out how it is. It is not an endorsement.
Moralising about my assessment does not make it untrue.
> Do you wait for the end of football matches before deciding which team to support, because only the one that won matters?
I also read spoilers for movies before I watch them in the cinema. I am truly awful ;-)
> I advocate against laws I don't like, and try to give people practical advise about how to protest against them, as well as how to circumvent them, and minimize their effects, and encourage them to pass this knowledge on. I consider it a good use of my time, even if not everyone cares to retain that info or pass it on.
I would only bother talking about how to circumvent them. The other activities are a waste of time. It took me quite a while to come to this conclusions (about 20 years) but that is the conclusion I came to. Those who are interested in circumventing it will come and find you typically, those who aren't won't bother.
> Politics is never a foregone conclusion (unless you completely give up and go silent, in which case your opposition has carte blanche to do what it likes)... but like "viral content", it's not something you can always whip in your your favour. People are irrational creatures, and you never quite know what will make them all sit up and take notice. You can never be sure what will set the nation's agenda, and what stories "have legs", until they happen.
I don't believe it is a forgone conclusion. I believe that one has to obtain power to enact change.
I don't believe that anything is "bottom up" i.e. there is a ground swell of public opinion and this peculates up to those in power. I think it is "top down".
> People are irrational creatures, and you never quite know what will make them all sit up and take notice. You can never be sure what will set the nation's agenda, and what stories "have legs", until they happen.
It is actually well understood what makes them sit up and notice. It has been extensively documented.
> For example: the Post Office scandal was a dull boring thing that nobody cared about, and then... an ITV drama made people care? But there have been ITV dramas about political scandals before, and they didn't all have that effect. But that one did. And the writers of the drama didn't just make stuff up, they followed the details of campaigners and journalists who had been covering this for years, even if at times they felt they were shouting into the void.
This only proves my point. Until a major broadcaster in the United Kingdom e.g. run by people with power, money and connections, popularised something only then did people take notice.
> The standard UKGov petitions site has at least some quantum of usefulness in that it encourages people to think about the issue, and if they sign it, they know there are others that agree with them.
I don't think it does. The people that sign these petitions have often already decided that the law needs to be repealed. Ask someone working down the local shop if they even know if this petition exists? Probably not.
> Change is possible.
Not by us. This is a lie told to you to keep believing. It was a bitter pill to swallow that ultimately your voice will go unheard. However it is ultimately liberating as you can direct your energy elsewhere.
Well, I know doing nothing is ineffective. Might as well do something.
There is no support from the public and I don't be believe there ever will be, and there is no/very little support from any of the political parties.
Even in places where you would think they would be against such legislation, the disagreement is often how it is worded.
I would rather this not be the case. But I have to accept reality and exist within the confines of it.
Not a fake one, but the real deal trying to charge me £0.00.
I don’t have the patience to investigate that further but I am all behind banning scummy sites like that.
It's weird too how I don't want to prove my age, guess it's the taboo aspect of it vs. say showing your id at a bar.
Part of the issue is that for my entire life, age was either not enforced or a promise. It feels wrong having gates up where they previously didn't exist.
I get it; I wandered into gay porn sites and irc chats when I was in the 4th grade back in the 90s, and my friends and I loved chatting up those interested in our pre-teenage selves at the time. But I still will never provide a legit id for any age restricted services. Though I do have fakes for non us based companies to deal with financial kyc but haven't used them in some time (years), so no idea if they would work in the days of oligarchic identity management saas.
- The Silent Generation, in charge at the time, had no idea what was this Internet thing about.
- The US Intelligence community understood it was a powerful tool to operate abroad.
- Nobody dared derailing the only engine of growth and progress in many economies
It obviously got out of control and is very abnormal in fact if you consider how power really works.
As of today, as a user of a reputable VPN, I am blocked from a lot essential websites or have to prove I am an human every 5 minutes, it sucks.
Anyway we are one major cyber disaster away for our the state to switch from a blacklist to whitelist paradigm. A safer and better Internet for everyone.
We will probably still have ways to access the "Free" Internet. It is gonna be fun, slower and might get you in serious troubles.
Centralized power, centralized censorship.
At approximately the same time, social networks became less social and more propaganda feeds.... so it went from a feed of content made by your friends for other friends (from complaints in status messages to photos of their plates) and moved to whatever crap they try to serve you now,...
I have to do that using corporate and residential US networks, simply because I use Firefox.
As great as Cloudflares services might be to each individual user, the centralization of infrastructure, and by extension the centralization of power, doesn’t seem to be worth it at a macro level. The tragedy of the commons strikes again.
Can't they at least set a first-party cookie to avoid repeated captchas per site, given that they're terminating HTTP?
But as soon as you had ISPs started, centralization came. Now, most countries will have at most 5 major ISPs, and in reality geographical availability within countries make 1 or 2 available.
Then, originally people had their own websites (I was there!) in their own servers. But Geocities started the centralization trend. And then CDNs, and then MySpace/Facebook and all that.
The only way we are going to get the "freedom" network as it was before is through mesh-networks or similar technologies. Which maybe so far are very slow and cumbersome, but they will have to evolve. I know it is not very fashionable here in HN, but the only see that capable of happening is implementing some kind of "incentive mechanism" that incenvitives people to let data pass through their node in the mesh network; aaaand cryptocurrencies offer an possible solution for that.
I remember around 2010 there were cities with several small new ISPs providing fast home and mobile Internet for cheap and with very good coverage. Infrastructure costs were probably very low. Order of magnitude I guess compared to 4G, cable or fiber.
You could find phones supporting it (HTC was one of the maker) and it seemed to be the perfect solution for most users. I am not sure if those small ISPs already had a roaming system in place but it would have made a lot of sense.
Anyway, when Intel finally gave up I thought there are probably strong forces wanting to keep access to the Internet in a few hands, expensive and centralised.
Having a one WiMAX enabled smartphones was the cherry on top and probably more of a long term goal. The only one I remember was the HTC Evo 4G [0] (the first 4G enabled smartphone released in the US, and by 4G they meant WiMAX, not LTE).
My guess is there was for sure a big battle between Intel, major phone manufacturers, telcos, infra providers and various patents holders.
There was probably a chicken and egg dilemma for mobile phone manufacturer since they had to wait for the network to grow before risking launching their WiMAX phone but having a WiMAX enabled phone would make WiMAX at home really attractive.
My guess is also that since people usually get their phone from their telco, phone manufacturer had to be careful not to go against their interests. And since most telco wanted LTE, WiMAX couldn't take off.
But there might be more to this story, including the fact Intel was also trying to get in the phone SOC market at this time.
Not at all. Today there are hundreds of WISPs based on Wi-Fi(ish) or proprietary FWA technology in the US alone.
The Internet is just a commercialised ARPANet. ARPANet was designed to survive bombs taking out a fair percentage of it's nodes. The Internet still has that robust resistance to damage. You can see it in action when anchors cut ocean cables - barely anyone notices. And as the old saying goes, the internet treats censorship as damage and routes around it.
However, the commercial enterprises built on top of the internet love centralisation. CloudFlare is an interesting case in point. They have been champions of an uncensored internet for as long as I can remember, which is one of the reasons they grew to their current size. That growth was always going to compromise that core principle, because once a significant amount of traffic passed through them they would become an attractive target for groups wanting to inflict their views of what's proper viewing for the rest of the world.
But while CloudFlare can't exist without the internet, the internet will continue on without CloudFlare. So while the self appointed gatekeepers have indeed blocked the large hole in the sponge that is CloudFlare, underneath the sponge is still a sponge. Information people find interesting will just take other routes.
Or to put it another way, if they think they have stopped or even appreciably slowed down teenage boys from accessing porn, they are kidding themselves.
I find this hard to believe. In New Zealand, the tiny country I live in, I can name off the top of my head at least 10 ISPs. You're telling me most countries, which on average are far bigger than mine, have fewer? I don't believe it. Another made-up statistic.
The real problem with the internet, as I see it, is centralization. This is a product of monopoly, which is the core feature of copyright. A truly better internet would replace the authoritative structure of copyright with a truly decentralized model.
As far as I can tell, the only hard problem left in decentralized networking is moderation. No one wants to browse an unmoderated internet. The problem is that moderation is structured as an authoritative hierarchy, so it's not compatible with true decentralization.
I propose we replace moderation with curation. Every user can intentionally choose the subset of internet they want to interact with, defined by attestations from other users, all backed with a web of trust. This way everyone is the highest authority, and users can help each other avoid content they are disinterested in.
But if the blocking is happening somewhere other than the ISP, this is less effective. A hypothetical TPB user might want to proxy via Luxembourg now (seems like the shortest hop to somewhere with sane legislation)
They also exercise an IWF proxy so your already MiTM'd.
Cloudflare has said pirate sites as clients - they are not (and cannot) block any pirate sites that are not their clients. The remedy is for those sites to no longer be patrons of Cloudflare.
If an analogy helps anyone understand better - imagine you have a lemonade stand. You use your neighbor's yard to set up the stand for some reason (maybe since its closer to a main road, the why doesn't really matter). The city tells your neighbor that they will be fined if they continue to have a lemonade stand in their yard, so your neighbor parks their truck in front of the stand, hiding it from the street.
In that analogy, cloudflare is the neighbor and your lemonade stand is the pirate site. You aren't prevented from selling your lemonade, but you can no longer freely use your neighbor's yard unless you want to direct people around the truck ahead of time.
Now it's torrent sites and next it's going to be other things the party in charge doesn't like.
Nowadays... I actually think it might be a lesser evil. Picture such an ID, if there were a standard for it, enrolled into your computer.
If it were properly built, your computer could provide proof of age, identity, or other verified attributes on approval. The ID could also have micro-transaction support, for allowing convenient pay-as-you-go 10 cents per article instead of paywalls, advertising, and subscriptions everywhere. Websites could just block all non-human traffic; awfully convenient in this era of growing spam, malware, AI slop, revenge porn, etc. Website operators, such as those of small forums, would have far less moderation and abuse prevention overhead.
Theoretically, it would also massively improve cybersecurity, if websites didn't actually need your credit card number and unique identity anymore. Theoretically, if it was tied to your ID, it's like Privacy.com but for every website; much lower transaction friction but much higher security.
I think that's the future at this rate. The only question is who decides how it is implemented.
Politicians would be salivating at the idea of getting the real identities of dissenters, and religious fucks would finally have their way of banning porn and contraceptives.
We're already seeing it piecemeal, with Cloudflare supporting skipping CAPTCHAs on verified iOS and macOS devices; mobile driver's license enrollment options on iOS; age verification rollouts for websites with no-doubt people thinking how to streamline things; etc.
I personally think we are one big cyberattack from the whole concept returning fast. One big cyberattack from governments (and people in general) saying they've had enough of the free-for-all status quo. This isn't a good place to be.
What is this "one big cyberattack away" that you are talking about? Large sites get hacked all the time, and _nobody_ in power gives a single flying fuck. There are zero people held responsible for storing passwords in plaintext, or the admin password set to "123456" or passwords left as the default.
Seriously, what are you talking about?
The difference is we've grandfathered in a lot of older technology - x86, old desktop operating systems like Windows and Linux, old browsers, BIOS, etc. So the existing tools we have for censorship have to work around these existing platforms.
These platforms were created in a time where user control was paramount and security was an afterthought. They often do not have the mechanisms required to lock down the boot loader 100% of the time, or give a verified boot chain, or make sure the display signal isn't being intercepted. Our DRM and censorship, then, is very limited. I mean, even with secure boot - I can just turn that off. I can just turn on legacy MBR BIOS mode too. What now?
On other, newer, platforms, like your smartphone or smart TV, you'll notice the DRM is much stronger. Try changing out your OS on an iPhone. These platforms are ripe for the picking when it comes to censorship you can't circumvent.
So long as these older platforms exist, the usecases must be supported. Sure, we can "streamline" things on DRM heavy platforms like iOS - but we need to keep a trapdoor. Who is going to alienate Windows? Or x86 as a whole?
no, fuck this idea so hard. if this is inevitable, our duty is to build technology that defeats it
this is supposed to be HACKER news, not fucking bootlicker news
There are real problems that haven't been fixed; the driver's license concept correctly implemented might be better than continuing down this path. I view it as we can make a good standard; or let a bad standard be dictated.
Obviously. Why do YOU think I'm angry-posting about it on the orange shithole site with the username "dingnuts" ?
That doesn't stop cloudflares marketshare takeover. It doesn't stop CAPTCHA which will filter out bots using these ids. It provides an easy method for hackers to use. It filters out the curious kids.
In the end it solves nothing and creates more problems.
Clicking through some captchas and installing an adblocker just isn't the hard life you're trying to claim it is.
In an internet driver's license system, remember that your computer would have to be locked down, and only able to access government-approved websites using government-approved clients - something like they have in China, or like using an iPhone but worse.
Once the ability for any site to verify your identity was set up, all sites would have to verify your identity, or lose their own verification, under one of many standard excuses like protecting the children.
The answer, therefore, is not bitching on the internet about all the wet blankets who only see negative outcomes, but acknowledging that everything we know needs to end eventually including ourselves, and balancing optimism for the short term with cynicism for the long term. And thus discovering that a healthy cynicism for the future predictions is probably appropriate, unless you truly want to live forever and have infinite energy for everything. But that's a god.
From my perspective, negative expectations do have a higher chance of turning out real, but because negative expectations most often are just code for human misalignment. We have some philosophical, instinctual, or aesthetic (etc.) preferences, but then reality is always going to be broader than that. So you're bound to hit things that are in misalignment. It takes active effort to cultivate the world to be whatever particular way. But this is also why I find simple pleas to cynicism particularly hollow. It comes off as resignation, exactly where the opposite is what would be most required.
Naive implementations are easy and cheap. And, if these tools and their entire software tree is not open-source, we cannot verify it's security.
We just have to trust that the developers are good at what they're doing. When every company under the sun has had multiple data breeches, I'm not too keen to do that.
Open-source the entire stack, show me a few white papers proving it's cryptographically sound, then I'll consider it. Until then, we should do with these tools what they deserve: being shoved up the government's ass.
Second, if a porn website, social media, video game or whatever other thing regulators want to discourage people visiting kicks you off into an age verification takes requires you to some system/site, even an independent one, that requires you upload your ID, a fair number of people will simply refuse simply due to lack of understanding in how it works and trust that it actually is anonymous.
Third, every implementation I've seen doesn't work for some/all non-citizens/tourists.
And finally and more importantly, the ease at bypassing those systems means it's unlikely to stop anyone underage and ultimately is no better than existing parental control software, so all one is doing is restricting speech for adults.
- [2025-04-29] https://blog.google/products/google-pay/google-wallet-age-id...
- [2025-07-03] https://blog.google/technology/safety-security/opening-up-ze...
- [2025-06-11] https://zeroknowledge.fm/podcast/363/
mourn the loss of the internet we knew and be ready to sacrifice ease of use to return to lower-tech/still-underground options.
Of course, it doesn't eliminate my legal responsibility to carry my driver's license while driving, and while the printed piece of plastic lasts five years and my passport booklet is legal I.D. for 10 years at a time, the mobile driver's license needs to be updated every 30 days.
It is important that personal ID is only transparent and spoof-proof to legitimate government the individual identifies with, and that soft ID databases that private entities may build have limitations in its completeness.
That's not trivial to do right, especially through bureaucratic government processes.
Similarly, I struggle to believe they're not providing much of the data they collect to the CIA.
...because this is far from the first time this has happened with Cloudflare.
if cloudflare were to host malware on their own IPs, it would have been trivial to see CF's steps.
Unless you want to suggest that CF is developing and distributing sophisticated malware and making botnets across the world
https://github.com/qdm12/gluetun
However at some point I will have a machine setup in a foreign country as a jump box.
They stream them on streaming websites.
Easier for torrent sites to tell people to use VPNs.
You could roll your own but wireguard/openvpn going to random hosting provider is gonna achieve the same thing if they are playing hardball.
You <----> residential ISP <----> VPN endpoint <----> CloudFlare CDN <----> actual site
Now CloudFlare is also doing the blocks in its CDN, which means that it does not matter whether the ISP is business or residential, or whether a U.K. endpoint VPN is being used. All three end up talking to CloudFlare's CDN from inside the U.K., and that CDN is now blocking the content.
The tinfoil hat brigade can rest easy. (-: They aren't detecting VPNs. They're just blocking things at a point that is closer to the content origin than all of the U.K. VPNs and ISPs, rather than at a point that that is further away than the U.K. VPNs are.
And you can buy VPS using crypto.
Im just confused - can somebody explain me this?
I think a better Orwell reference for this isn't 1984 though but rather https://www.orwellfoundation.com/the-orwell-foundation/orwel.... This is the essay that was originally meant as a preface to Animal Farm - and, ironically, was itself censored (by publishers).
Anyway, few examples of many:
>A teenager who posted rap lyrics which included racist language on Instagram has been found guilty of sending a grossly offensive message.
https://www.bbc.com/news/uk-england-merseyside-43816921
>A man has been accused of sending a "grossly offensive" tweet in which he claimed "the only good Brit soldier is a deed one" the day after fundraising hero Captain Sir Tom Moore died.
https://news.sky.com/story/man-accused-of-sending-grossly-of...
>UK police arrest veteran because anti-LGBTQ post 'caused anxiety'
https://www.foxnews.com/world/uk-police-british-army-veteran...
>Officers from 37 police forces made 12,183 arrests in 2023 [over offensive posts on social media], the equivalent of about 33 per day.
IPFS have content blocking already: https://badbits.dwebops.pub/
Also, don’t they have bigger problems than this as country?
'Unavailable For Legal Reasons What happened?
In response to a legal order, Cloudflare has taken steps to limit access to this website through Cloudflare's pass-through security and CDN services within the United Kingdom. Find more information about the order, the party that requested it, and the authority that issued it here.'
It's a Dublin VPN though.
Trying to piece together the details, here's my undewrstanding:
- Until recently, major British residential ISPs were blocking access to torrent/pirate/porn sites for their customers ("BT, Virgin Media, Sky, TalkTalk, EE, and Plusnet account for the majority of the UK’s residential internet market")
- Cloudflare has recently been ordered by courts in the UK to block access to these torrent/pirate/porn sites
- The reason that Cloudflare is involved is because many of these sites use Cloudflare as a content delivery network. A CDN is <waves hands> basically an application-layer distributed cache that sits between end users' web browsers and the origin HTTP servers that they're trying to access.
- Cloudflare geolocates clients connecting to its CDN. It undoubtedly has many reasons to do this, besides just court-ordered geoblocking: these would include routing queries efficiently within its globally distributed datacenters, DDoS prevention, bot blocking, etc.
- Cloudflare's geolocation techniques are, unsurprisingly, more sophisticated than just determining a country based on a client's IP address.
If I've got all that right (do I???)… then the tl;dr is:
It used to be possible for UK users to circumvent the blocks of these sites simply by using any VPN to acquire a non-UK IP address. Now the order to block these sites has been imposed on Cloudflare, which plays a critical role as an intermediary in distributing their content in a scalable way. For a variety of reasons, some of which end-users probably approve of and others not, Cloudflare uses more sophisticated techniques to geolocate clients. So "just use a VPN" is not enough to circumvent the blocks anymore.
It's #24 on this list https://companiesmarketcap.com/software/largest-software-com... so I'd say it's big tech.
Don't defend them. Their decisions are arbitrary and it's really sad so much of the web has chosen to use their garbage services.
Visit others like ext.to and literally the entire front page is stuff like the new Superman movie, etc. You sound like a fool if you try to argue it's mainly for legitimate purposes. (Contrast with freenet and stuff, where if you've ever used it, you'll find most of the stuff there is people's boring ass personal webpages and stuff