Author: tio

  • UEFA Secures Pirate Site Blocking and (Global) Domain Suspension Order in India

    UEFA Secures Pirate Site Blocking and (Global) Domain Suspension Order in India

    The European football association (UEFA) protects the multi-billion-dollar interests of European football around the globe.

    To better protect its content, including the prestigious Champions League competition, it joined the Alliance of Creativity and Entertainment (ACE) last October.

    At the time, it seemed likely that the anti-piracy group could help UEFA with their international site-blocking quests. While the organizations did not confirm this at the time, this is precisely what happened.

    UEFA Secures Broad Blocking Order

    Earlier this month, UEFA obtained a new injunction at the High Court of Delhi. The order was obtained in cooperation with ACE and targets 79 live sports streaming sites, aiming to protect Champions League broadcasts.

    The targets include sites such as livetv.sx, vipbox.lc, and footybite.to, which each had several million monthly visits. According to UEFA, all domain names combined were good for 2 billion annual visits, which makes this one of the most significant anti-piracy injunctions in recent times.

    The order mentions 23 “rogue” piracy operations as defendants, with many using multiple domains. Indian ISPs, who are also listed as defendants, must block these domains across their network.

    Importantly, the order also includes twenty domain name registrars as defendants. This includes U.S. based and globally operating intermediaries such as GoDaddy, Tucows, Squarespace Domains, and Dynadot. These companies must lock and suspend all 79 listed domains.

    Lock and suspend

    lock and suspend

    In addition to suspending the domain names, the registrars must also share any personal information they store on the operators, including their email addresses, payment details, and mobile numbers.

    Global Reach

    The new blocking order is valid for the remainder of the Champions League season. UEFA can notify registrars and ISPs directly when it discovers new infringing sites. These intermediaries must then lock or block the newly identified domains immediately, without the need to go back to court.

    This so-called “Dynamic+” blocking mechanism, which Indian courts have been refining since at least 2019, aims to make it harder for pirate operators to simply register a new domain and continue as if nothing happened.

    The strategy has proven to be effective in India, where ISPs are swift to implement the blocking orders. However, UEFA was quick to highlight that the reach of the order extends beyond Indian borders.

    “Implemented in India through Internet Service Providers and also domain level intermediaries with global reach, these measures are expected to significantly disrupt access to the targeted services, including through global domain suspension mechanisms,” UEFA commented.

    The phrase “global domain suspension mechanisms” refers to the fact that internationally operating registrars are defendants. This could mean that domain suspensions can take effect worldwide, not just for users in India. After all, a locked or suspended domain is inaccessible everywhere, regardless of which ISPs are blocking it locally.

    Mixed Results

    These types of orders have been successful in the past, with registrars including NameCheap, NameSilo, and Porkbun taking action in response to Indian court orders. However, site operators are increasingly aware of this and may choose more resilient alternatives.

    At the time of writing, only the Namecheap-registered domain livetv819.me appears to have been placed on clienthold. The majority of the 79 listed domains remain active at the registrar level, with some redirecting to new domains.

    This includes LiveTV and VIPBox, which had 10 and 13 million monthly visits in January of this year, according to Similarweb data.

    VIPBox

    vipbox

    While none of the registrars has commented publicly on the order, it seems likely that some refrain from taking action because they don’t fall under the jurisdiction of an Indian court.

    UEFA and its commercial arm, UC3, remain optimistic, with Managing Director Guy Laurent Epstein celebrating the win as a step forward.

    “These orders represent a clear step forward: dynamic blocking strengthens the protection of our global family of broadcast partners, preserving the value they deliver to fans and enabling continued investment throughout the European football ecosystem.”

    UEFA is not alone in this assessment. Earlier this month, the International Intellectual Property Alliance applauded the Indian “lock and suspend” orders in their annual “Special 301” recommendation to the U.S. Trade Representative.

    A copy of the order handed down by the High Court of Delhi is available here (pdf).

    The order names 23 piracy operations as defendants, spread across 79 domains. The table below lists each defendant, its domains, and the registrar responsible for suspending them.

    # Defendant Domains Registrar(s)
    1 livetv.sx livetv.sx, cdn.livetv860.me, cdn.livetv861.me, cdn.livetv863.me, livetv819.me, livetv872.me, livetv869.me, livetv863.me, livetv868.me, livetv854.me, livetv855.me, livetv858.me Ascio Technologies Inc.; Hosting Concepts B.V.; NameCheap Inc.
    2 streameast100.is streameast100.is, istreameast.app N/A
    3 strmd.link strmd.link, streamed.pk, streamed.su, streamed.st, streami.su Tucows Inc.; R01-Su; Immaterialism Limited; Rucenter-SU
    4 librefutboltv.su librefutboltv.su, librefutbol.su, futbollibre-tv.su, futbollibre.mx, futbollibreonline.org, futbollibre-tv.org Active-Su; Ardis-Su; R01-Su; Hosting Concepts B.V.; Tucows Inc.
    5 totalsportek.army totalsportek.army, live4.totalsportek007.com, totalsportek007.com, totalsportekfree.com, totalsportek7.com, totalsportek1000.com, live3.totalsportek777.com Tucows Inc.
    6 pirlotv2.pl pirlotv2.pl, pirlotv.pl Key-Systems GmbH
    7 rojadirecta.golf rojadirecta.golf, rojadirecta.men, pirlotv.cc, www.futbolgratis.de, pirlotv.business, rojadirectaenvivo.pl, rojadirecta.ec, rojadirect.site, pirlotvhd.vip, rojadirectatv.lol, rojadirectatvenvivo.me, rojadirectaenvivo.de, rojadirectatv.cv, tarjetarojaenvivo.cx, rojadirectatv.de, rojadirectafhd.com, rojadirecta-tv.net, rojadirectahd.com Dynadot LLC; Key-Systems GmbH; GoDaddy.com LLC; DonDominio; NameSilo; CentralNic Ltd; Tucows Inc.; TurnCommerce Inc.
    8 tarjetarojaenvivo.club tarjetarojaenvivo.club Squarespace Domains II LLC
    9 viprow.nu viprow.nu Hosting Concepts B.V.
    10 vipleague.pm vipleague.pm, vipleague.st Hosting Concepts B.V.; Immaterialism Limited
    11 livesports088.com livesports088.com GoDaddy.com LLC
    12 pelotalibrevivo.net pelotalibrevivo.net, pelotalibretv.su, pelotalibre.org, pelotalibrehd.org Squarespace Domains LLC; Ardis-Su; NameCheap Inc.; Tucows Inc.
    13 fawanews.sc fawanews.sc Name.com Inc.
    14 redditsoccerstreams.biz redditsoccerstreams.biz, redditsoccerstreams.name TLD Registrar Solutions Ltd.; Key-Systems GmbH
    15 streambtw.live streambtw.live N/A
    16 footybite.to footybite.to Government of the Kingdom of Tonga
    17 sportsurge100.is sportsurge100.is N/A
    18 hesgoal.footybite.to hesgoal.footybite.to, hesgoal.watch Government of the Kingdom of Tonga; TLD Registrar Solutions Ltd.
    19 soccer-1000.com soccer-1000.com, soccer-free.com, socceronline.me Tucows Inc.; Immaterialism Limited
    20 daddyhd.com daddyhd.com, dlhd.dad, daddylivestream.com, dlhd.link Tucows Inc.
    21 streameasthd.com streameasthd.com Tucows Inc.
    22 vipbox.lc vipbox.lc Immaterialism Limited
    23 vipstand.pm vipstand.pm Hosting Concepts B.V.

    From: TF, for the latest news on copyright battles, piracy and more.

  • Who is the Kimwolf Botmaster “Dort”?

    Who is the Kimwolf Botmaster “Dort”?

    In early January 2026, KrebsOnSecurity revealed how a security researcher disclosed a vulnerability that was used to build Kimwolf, the world’s largest and most disruptive botnet. Since then, the person in control of Kimwolf — who goes by the handle “Dort” — has coordinated a barrage of distributed denial-of-service (DDoS), doxing and email flooding attacks against the researcher and this author, and more recently caused a SWAT team to be sent to the researcher’s home. This post examines what is knowable about Dort based on public information.

    A public “dox” created in 2020 asserted Dort was a teenager from Canada (DOB August 2003) who used the aliases “CPacket” and “M1ce.” A search on the username CPacket at the open source intelligence platform OSINT Industries finds a GitHub account under the names Dort and CPacket that was created in 2017 using the email address jay.miner232@gmail.com.

    Image: osint.industries.

    The cyber intelligence firm Intel 471 says jay.miner232@gmail.com was used between 2015 and 2019 to create accounts at multiple cybercrime forums, including Nulled (username “Uubuntuu”) and Cracked (user “Dorted”); Intel 471 reports that both of these accounts were created from the same Internet address at Rogers Canada (99.241.112.24).

    Dort was an extremely active player in the Microsoft game Minecraft who gained notoriety for their “Dortware” software that helped players cheat. But somewhere along the way, Dort graduated from hacking Minecraft games to enabling far more serious crimes.

    Dort also used the nickname DortDev, an identity that was active in March 2022 on the chat server for the prolific cybercrime group known as LAPSUS$. Dort peddled a service for registering temporary email addresses, as well as “Dortsolver,” code that could bypass various CAPTCHA services designed to prevent automated account abuse. Both of these offerings were advertised in 2022 on SIM Land, a Telegram channel dedicated to SIM-swapping and account takeover activity.

    The cyber intelligence firm Flashpoint indexed 2022 posts on SIM Land by Dort that show this person developed the disposable email and CAPTCHA bypass services with the help of another hacker who went by the handle “Qoft.”

    “I legit just work with Jacob,” Qoft said in 2022 in reply to another user, referring to their exclusive business partner Dort. In the same conversation, Qoft bragged that the two had stolen more than $250,000 worth of Microsoft Xbox Game Pass accounts by developing a program that mass-created Game Pass identities using stolen payment card data.

    Who is the Jacob that Qoft referred to as their business partner? The breach tracking service Constella Intelligence finds the password used by jay.miner232@gmail.com was reused by just one other email address: jacobbutler803@gmail.com. Recall that the 2020 dox of Dort said their date of birth was August 2003 (8/03).

    Searching this email address at DomainTools.com reveals it was used in 2015 to register several Minecraft-themed domains, all assigned to a Jacob Butler in Ottawa, Canada and to the Ottawa phone number 613-909-9727.

    Constella Intelligence finds jacobbutler803@gmail.com was used to register an account on the hacker forum Nulled in 2016, as well as the account name “M1CE” on Minecraft. Pivoting off the password used by their Nulled account shows it was shared by the email addresses j.a.y.m.iner232@gmail.com and jbutl3@ocdsb.ca, the latter being an address at a domain for the Ottawa-Carelton District School Board.

    Data indexed by the breach tracking service Spycloud suggests that at one point Jacob Butler shared a computer with his mother and a sibling, which might explain why their email accounts were connected to the password “jacobsplugs.” Neither Jacob nor any of the other Butler household members responded to requests for comment.

    The open source intelligence service Epieos finds jacobbutler803@gmail.com created the GitHub account “MemeClient.” Meanwhile, Flashpoint indexed a deleted anonymous Pastebin.com post from 2017 declaring that MemeClient was the creation of a user named CPacket — one of Dort’s early monikers.

    Why is Dort so mad? On January 2, KrebsOnSecurity published The Kimwolf Botnet is Stalking Your Local Network, which explored research into the botnet by Benjamin Brundage, founder of the proxy tracking service Synthient. Brundage figured out that the Kimwolf botmasters were exploiting a little-known weakness in residential proxy services to infect poorly-defended devices — like TV boxes and digital photo frames — plugged into the internal, private networks of proxy endpoints.

    By the time that story went live, most of the vulnerable proxy providers had been notified by Brundage and had fixed the weaknesses in their systems. That vulnerability remediation process massively slowed Kimwolf’s ability to spread, and within hours of the story’s publication Dort created a Discord server in my name that began publishing personal information about and violent threats against Brundage, Yours Truly, and others.

    Dort and friends incriminating themselves by planning swatting attacks in a public Discord server.

    Last week, Dort and friends used that same Discord server (then named “Krebs’s Koinbase Kallers”) to threaten a swatting attack against Brundage, again posting his home address and personal information. Brundage told KrebsOnSecurity that local police officers subsequently visited his home in response to a swatting hoax which occurred around the same time that another member of the server posted a door emoji and taunted Brundage further.

    Dort, using the alias “Meow,” taunts Synthient founder Ben Brundage with a picture of a door.

    Someone on the server then linked to a cringeworthy (and NSFW) new Soundcloud diss track recorded by the user DortDev that included a stickied message from Dort saying, “Ur dead nigga. u better watch ur fucking back. sleep with one eye open. bitch.”

    “It’s a pretty hefty penny for a new front door,” the diss track intoned. “If his head doesn’t get blown off by SWAT officers. What’s it like not having a front door?”

    With any luck, Dort will soon be able to tell us all exactly what it’s like.

  • Pluralistic: California can stop Larry Ellison from buying Warners (28 Feb 2026)

    Today’s links



    The Warner tower, toppling over, surmounted by the bear from the California flag, posed on an old timey map of Los Angeles.

    California can stop Larry Ellison from buying Warners (permalink)

    For months, the hottest will-they/won’t-they drama in Hollywood concerned the suitors for Warners, up for sale again after being bought, merged, looted and wrecked by the eminently guillotineable David Zaslav:

    https://www.youtube.com/watch?v=izC9o3LhnVk

    From the start, it was clear that Warners would be sucked dry and discarded, but the Trump 2024 election turned the looting of Warners’ corpse into a high-stakes political drama.

    On the one hand, you had Netflix, who wanted to buy Warners and use them to make good movies, but also to kill off movie theaters forever by blocking theatrical distribution of Warners’ products.

    On the other hand, you had Paramount, owned by the spray-tan cured tech billionaire jerky Larry Ellison, though everyone is supposed to pretend that Ellison’s do-nothing/know-nothing/amounts-to-nothing son Billy (or whatever who cares) Ellison is running the show.

    Ellison’s plan was to buy Warners and fold it into the oligarchic media capture project that’s seen Ellison replace the head of CBS with the tedious mediocrity Bari Weiss:

    https://www.wnycstudios.org/podcasts/otm/articles/the-centurylong-capture-of-us-media

    This is a multi-pronged media takeover that includes Jeff Bezos neutering the Washington Post, Elon Musk turning Twitter into a Nazi bar, and Trump stealing Tiktok and giving it to Larry Ellison. If Ellison gains control over Warners, you can add CNN to the nonsense factory.

    But for a while there, it looked like the Ellisons would lose the bidding. Little Timmy (or whatever who cares) Ellison only has whatever money his dad parks in his bank account for tax purposes, and Larry Ellison is so mired in debt that one margin call could cost him his company, his fighter jet, and his Hawaiian version of Little St James Island.

    Warners’ board may not give a shit about making good media or telling the truth or staving off fascism, but they do want to get paid, and Netflix has money in the bank, whereas Ellison only has the bank’s money (for now).

    But last week, the dam broke: Warners’ board indicated they’d take Paramount’s offer, and Netflix withdrew their offer, and so that’s that, right? It’s not like Trump’s FTC is going to actually block this radioactively illegal merger, despite the catastrophic corporate consolidation that would result, with terrible consequences for workers, audiences, theaters, cable operators and the entire supply chain.

    Not so fast! The Clayton Act – which bars this kind of merger – is designed to be enforced by the feds, state governments, and private parties. That means that California AG Rob Bonta can step in to block this merger, which he’s getting ready to do:

    https://prospect.org/2026/02/27/states-can-block-paramount-warner-deal/

    As David Dayen writes in The American Prospect, state AGs block mergers all the time, even when the feds decline to step in – just a couple years ago, Washington state killed the Kroger/Albertsons merger.

    The fact that antitrust laws can be enforced at the state level is a genius piece of policy design. As the old joke goes, “AG” stands for “aspiring governor,” and the fact that state AGs can step in to rescue their voters from do-nothing political hacks in Washington is catnip for our nation’s attorneys general.

    Bonta is definitely feeling his oats: he’s also going after Amazon for price-fixing, picking up a cause that Trump dropped after Jeff Bezos ordered the Washington Post to cancel its endorsement of Kamala Harris, paid a million bucks to sit on the inaugural dais, millions more to fund the White House Epstein Memorial Ballroom and $40m more to make an unwatchable turkey of a movie about Melania Trump.

    Can you imagine how stupid Bezos is going to feel when all of his bribes to Trump cash out to nothing after Rob Bonta publishes Amazon’s damning internal memos and then fines the company a gazillion dollars?

    It’s a testament to the power of designing laws so they can be enforced by multiple parties. And as cool as it is to have a law that state AGs can enforce, it’s way cooler to have a law that can be enforced by members of the public.

    This is called a “private right of action” – the thing that lets impact litigation shops like Planned Parenthood, EFF, and the ACLU sue over violations of the public’s rights. The business lobby hates the private right of action, because they think (correctly) that they can buy off enough regulators and enforcers to let them get away with murder (often literally), but they know they can’t buy off every impact litigation shop and every member of the no-win/no-fee bar.

    For decades, corporate America has tried to abolish the public’s right to sue companies under any circumstances. That’s why so many terms of service now feature “binding arbitration waivers” that deny you access to the courts, no matter how badly you are injured:

    https://pluralistic.net/2025/10/27/shit-shack/#binding-arbitration

    But long before Antonin Scalia made it legal to cram binding arbitration down your throat, corporate America was pumping out propaganda for “tort reform,” spreading the story that greedy lawyers were ginning up baseless legal threats to extort settlements from hardworking entrepreneurs. These stories are 99.9% bullshit, including urban legends like the “McDonald’s hot coffee” lawsuit:

    https://pluralistic.net/2022/06/12/hot-coffee/#mcgeico

    Ever since Reagan, corporate America has been on a 45-year winning streak. Nothing epitomizes the arrogance of these monsters more than the GW Bush administration’s sneering references to “the reality-based community”:

    We’re an empire now, and when we act, we create our own reality. And while you’re studying that reality – judiciously, as you will – we’ll act again, creating other new realities, which you can study too, and that’s how things will sort out. We’re history’s actors…and you, all of you, will be left to just study what we do.

    https://en.wikipedia.org/wiki/Reality-based_community

    Giving Ellison, Bezos and Musk control over our media seems like the triumph of billionaires’ efforts to “create their own reality,” and indeed, for years, they’ve been able to gin up national panics over nothingburgers like “trans ideology,” “woke” and “the immigration crisis.”

    But just lately, that reality-creation machine has started to break down. Despite taking over the press, locking every reality-based reporter out of the White House, and getting Musk, Zuck and Ellison to paint their algorithms spray-tan orange, people just fucking hate Trump. He is underwater on every single issue:

    https://www.gelliottmorris.com/p/ahead-of-state-of-the-union-address

    Despite the full-court press – from both the Dem and the GOP establishment – to deny the genocide in Gaza and paint anyone (especially Jews like me) who condemn the slaughter as “antisemites,” Americans condemn Israel and are fully in the tank for Palestinians:

    https://news.gallup.com/poll/702440/israelis-no-longer-ahead-americans-middle-east-sympathies.aspx

    Despite throwing massive subsidies at coal and tying every available millstone around renewables’ ankles before throwing all the solar panels and windmills into the sea, renewables are growing and – to Trump’s great chagrin – oil companies can’t find anyone to loan them the money they need to steal Venezuela’s oil:

    https://kschroeder.substack.com/p/earning-optimism-in-2026

    Reality turns out to be surprisingly stubborn, and what’s more, it has a pronounced left-wing bias. Putting little Huey (or whatever who cares) Ellison in charge of Warners will be bad news for the news, for media, for movies and TV, and for my neighbors in Burbank. But when it comes to shaping the media, Freddy (or whatever who cares) Ellison will continue to eat shit.


    Hey look at this (permalink)



    A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

    Object permanence (permalink)

    #25yrsago Mormon guide to overcoming masturbation https://web.archive.org/web/20071011023731/http://www.qrd.org/qrd/religion/judeochristian/protestantism/mormon/mormon-masturbation

    #20yrsago Midnighters: YA horror trilogy mixes Lovecraft with adventure https://memex.craphound.com/2006/02/26/midnighters-ya-horror-trilogy-mixes-lovecraft-with-adventure/

    #20yrsago RIP, Octavia Butler https://darkush.blogspot.com/2006/02/octavia-butler-died-saturday.html

    #20yrsago Disney hiring “Intelligence Analyst” to review “open source media” https://web.archive.org/web/20060303165009/http://www.defensetech.org/archives/002199.html

    #20yrsago MPAA exec can’t sell A-hole proposal to tech companies https://web.archive.org/web/20060325013506/http://lawgeek.typepad.com/lawgeek/2006/02/variety_mpaa_ca.html

    #15yrsago Why are America’s largest corporations paying no tax? https://web.archive.org/web/20110226160552/https://thinkprogress.org/2011/02/26/main-street-tax-cheats/

    #15yrsago Articulated cardboard Cthulhu https://web.archive.org/web/20110522204427/http://www.strode-college.ac.uk/teaching_teams/cardboard_catwalk/285

    #15yrsago Freeman Dyson reviews Gleick’s book on information theory https://www.nybooks.com/articles/2011/03/10/how-we-know/?pagination=false

    #15yrsago 3D printing with mashed potatatoes https://www.fabbaloo.com/2011/02/3d-printing-potatoes-with-the-rapman-html

    #15yrsago TVOntario’s online archive, including Prisoners of Gravity! https://web.archive.org/web/20110226021403/https://archive.tvo.org/

    #10yrsago _applyChinaLocationShift: In China, national security means that all the maps are wrong https://web.archive.org/web/20160227145529/http://www.travelandleisure.com/articles/digital-maps-skewed-china

    #10yrsago Teaching kids about copyright: schools and fair use https://www.youtube.com/watch?v=hzqNKQbWTWc

    #10yrsago Ghostwriter: Trump didn’t write “Art of the Deal,” he read it https://web.archive.org/web/20160229034618/http://www.deathandtaxesmag.com/264591/donald-trump-didnt-write-art-deal-tony-schwartz/

    #10yrsago The biggest abortion lie of all: “They do it for the money” https://www.bloomberg.com/features/2016-abortion-business/

    #10yrsago NHS junior doctors show kids what they do, kids demand better of Jeremy Hunt https://juniorjuniordoctors.tumblr.com/

    #10yrsago Nissan yanks remote-access Leaf app — 4+ weeks after researchers report critical flaw https://www.theverge.com/2016/2/25/11116724/nissan-nissanconnect-app-hack-offline

    #10yrsago Think you’re entitled to compensation after being wrongfully imprisoned in California? Nope. https://web.archive.org/web/20160229013042/http://modernluxury.com/san-francisco/story/the-crazy-injustice-of-denying-exonerated-prisoners-compensation

    #10yrsago BC town votes to install imaginary GPS trackers in criminals https://web.archive.org/web/20160227114334/https://motherboard.vice.com/read/canadian-city-plans-to-track-offenders-with-technology-that-doesnt-even-exist-gps-implant-williams-lake

    #10yrsago New Zealand’s Prime Minister: I’ll stay in TPP’s economic suicide-pact even if the USA pulls out https://www.techdirt.com/2016/02/26/new-zealand-says-laws-to-implement-tpp-will-be-passed-now-despite-us-uncertainties-wont-be-rolled-back-even-if-tpp-fails/

    #10yrsago South Korean lawmakers stage filibuster to protest “anti-terror” bill, read from Little Brother https://memex.craphound.com/2016/02/26/south-korean-lawmakers-stage-filibuster-to-protest-anti-terror-bill-read-from-little-brother/

    #5yrsago Privacy is not property https://pluralistic.net/2021/02/26/meaningful-zombies/#luxury-goods

    #1yrago With Great Power Came No Responsibility https://pluralistic.net/2025/02/26/ursula-franklin/#franklinite


    Upcoming appearances (permalink)

    A photo of me onstage, giving a speech, pounding the podium.



    A screenshot of me at my desk, doing a livecast.

    Recent appearances (permalink)



    A grid of my books with Will Stahle covers..

    Latest books (permalink)



    A cardboard book box with the Macmillan logo.

    Upcoming books (permalink)

    • “The Reverse-Centaur’s Guide to AI,” a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
    • “Enshittification, Why Everything Suddenly Got Worse and What to Do About It” (the graphic novel), Firstsecond, 2026

    • “The Post-American Internet,” a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

    • “Unauthorized Bread”: a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, 2027

    • “The Memex Method,” Farrar, Straus, Giroux, 2027



    Colophon (permalink)

    Today’s top sources:

    Currently writing: “The Post-American Internet,” a sequel to “Enshittification,” about the better world the rest of us get to have now that Trump has torched America (1022 words today, 40256 total)

    • “The Reverse Centaur’s Guide to AI,” a short book for Farrar, Straus and Giroux about being an effective AI critic. LEGAL REVIEW AND COPYEDIT COMPLETE.
    • “The Post-American Internet,” a short book about internet policy in the age of Trumpism. PLANNING.

    • A Little Brother short story about DIY insulin PLANNING


    This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

    https://creativecommons.org/licenses/by/4.0/

    Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


    How to get Pluralistic:

    Blog (no ads, tracking, or data-collection):

    Pluralistic.net

    Newsletter (no ads, tracking, or data-collection):

    https://pluralistic.net/plura-list

    Mastodon (no ads, tracking, or data-collection):

    https://mamot.fr/@pluralistic

    Medium (no ads, paywalled):

    https://doctorow.medium.com/

    Twitter (mass-scale, unrestricted, third-party surveillance and advertising):

    https://twitter.com/doctorow

    Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

    https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

    When life gives you SARS, you make sarsaparilla” -Joey “Accordion Guy” DeVilla

    READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies (“BOGUS AGREEMENTS”) that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

    ISSN: 3066-764X

  • Envisioning the End of Anti-Immigrant Politics

    Envisioning the End of Anti-Immigrant Politics

    Nearly 30 years ago, in writings published in 1997 and 1998, the philosopher Richard Rorty offered some spookily prescient speculations on the future of the United States. Looking at the widening gap between rich and poor, and Americans’ increasing pessimism that their children would have better lives than them, Rorty warned we were headed for a society “divided by class differences of a sort which would have been utterly inconceivable to Jefferson, or to Lincoln, or to Walt Whitman.” The Clinton-era Democratic Party had been “distancing itself from the unions and from any mention of redistribution, and moving into a sterile vacuum called ‘the center,’” meaning the party that should have been talking about inequality was silent as it continued to worsen. Rorty pointed out that only “scurrilous fascists like Pat Buchanan and, in France, Jean-Marie Le Pen, seem willing to talk about” economic insecurity.

  • German Court Sentences Key Figure in Massive Call Center Scam Operation Exposed by OCCRP

    Following an 11-day trial “conducted under heightened security measures,” a German court on Thursday sentenced a central figure in a massive call center scam operation previously exposed by OCCRP.

    The Bamberg Regional Court in Bavaria announced a sentence of seven years and six months due to two counts of commercial and organized fraud. 

    The court’s announcement did not name the person sentenced. However, an OCCRP reporter who visited the court prior to the hearings photographed a schedule that matched the time and date of the sentencing in the case. 

    The hearing schedule also cited the same charges included in the court’s announcement. And the schedule identified the same judge, with the surname Götz, who was named in the announcement.

    The hearing schedule identified the man on trial as Mikheil Biniashvili, who is a citizen of both Georgia and Israel, according to the indictment. 

    The verdict is not yet final, and Biniashvili retains the right to appeal. His lawyers could not immediately be reached for comment.

    The court found that between January 2017 and May 2019, Biniashvili ran a scam call-center operation based in Albania that at its peak employed up to 600 people, including “specially trained personnel who misled numerous individuals.” 

    The court announcement said that after victims registered online for a fraudulent investment scheme, the employees contacted them by phone and “personal trust was immediately built in order to persuade them to ‘invest’ as large sums of money as possible.”

    According to the court’s announcement, “the presiding judge at the regional court, Götz, stated in his oral explanation of the verdict that the victims had been ‘lied to through the nose,’ as the funds obtained through the deposits were never invested but simply pocketed.”

    The court found that deposits made by victims — primarily in German-speaking countries — resulted in losses of about 8 million euros ($9.4 million). It attributed an additional 42 million euros ($49.5 million) in damages to Biniashvili’s role in supplying software to other fraudulent operations. 

    “Entire savings were lost, and entire livelihoods were destroyed,” the court said.

    Biniashvili was also responsible for creating and supplying specialized software that underpinned the scam. After leaving the Albanian call center, he went on to sell the software to other criminal groups, allowing the fraud model to be replicated elsewhere, the court said.

    In 2020, OCCRP reported on a network of call centers spanning Georgia, Albania and Ukraine, which employed large teams of salespeople to pitch bogus investments to victims worldwide. While the call centers used different brand names with customers, they were known internally as Milton Group in Ukraine and Morgan Limited in Georgia.

    Another Georgia-based scam call center exposed last year in OCCRP’s “Scam Empire” investigation utilized a “customer relationship management” software called PumaTS to track its engagement with potential victims. The same software is also named in Biniashvili’s indictment. 

    The indictment states that he “provided IT services, namely the PumaTS software, to fraudulent call centers. Through these acts, the accused enriched himself considerably at the expense of his victims.”

    Alongside the prison sentence, the court ordered the seizure of 2.4 million euros ($2.8 million) in proceeds linked to the fraud. Biniashvili admitted his role in the operation, according to the court statement.

    “The defendant had fully confessed as part of a plea agreement during the main hearing and apologized to the victims in his final statement,” the court said.

  • Fear is the Message: How the Jalisco New Generation Cartel Weaponized Algorithms to Paralyze Mexico

    On Sunday, February 22, the streets of the Mexican city of Puebla were bustling with costumed carnival dancers when word spread that one of the country’s most powerful organized crime leaders, “El Mencho,” had been killed in a shootout with the military around 800 kilometers away.

    Within minutes, social media was flooded with shocking reports and images: El Mencho’s Jalisco New Generation Cartel (known by the Spanish acronym CJNG) erecting hundreds of roadblocks and setting fire to vehicles; a passenger plane, banks, businesses, supermarkets, fuel stations and a church torched; gunmen taking over Guadalajara airport. 

    In Puebla, a rumor of a shooting and a burning vehicle sparked panic. People hid behind shuttered market stalls and the carnival was abandoned. 

    “We all ran to our homes to hide,” said Mariana Ávila, who had come down to the neighborhood to watch the dancers.

    But while it was true that highways were blocked and cars were burning in 20 of Mexico’s 31 states, not all the chaos was real. 

    Whereas two decades ago the CJNG may have hung a banner on an overpass to spread their message, online trolls connected to organized crime syndicates now use a mixture of spectacle and disinformation to pump fear straight into people’s phones.

    The cartel’s online response to the killing of their boss, whose real name was Nemesio Oseguera Cervantes, was the most powerful example yet of how propaganda — and disinformation — can be spread by social media accounts that experts believe to be linked to Mexican criminal syndicates. 

    According to Alberto Escorcia, a Mexican journalist specializing in disinformation and artificial intelligence, it is common for these accounts to share fake, misleading, or AI-generated images of violence alongside real ones.

    “It was amplified to appear as though the whole country was on fire, and the truth is that it wasn’t,” Escorcia said.

    The gunfire in Puebla turned out to be a false alarm, as was the claim that armed men had taken over Guadalajara airport. 

    A widely shared photo of a burned-out passenger plane on a runway was debunked as fake, as was another of the main church ablaze in the beach resort of Puerto Vallarta. 

    In the southern city of Mérida, an alert from the public transport authority announcing that services had been suspended also turned out to be bogus.

    Escorcia immediately traced a significant number of these false images back to three X accounts that, through his years of research, he believes are connected to the cartel. 

    “What the Jalisco Cartel trolls do is generate a critical mass. They know how to game the Twitter [X] algorithm,” Escorcia told OCCRP. 

    Mexico’s security minister Omar Garcia Harfuch said authorities were investigating whether organized crime was behind “numerous” online accounts they had identified as “spreading lies” during the crisis.

    More opportunistic accounts not linked to crime groups, including right-wing handles in Mexico and the United States, also fanned the flames, circulating the images and messages further afield.

    The Evolution of Narco Propaganda 

    When President Felipe Calderón launched the so-called “war on drugs” in 2006, the primary way that organized crime groups communicated with the broader public was by hanging large banners known as “narcomantas” from overpasses or in other highly visible public spaces. Journalists would then flock to the sites to photograph and report on the banners, spreading the messages of the crime groups far and wide.

    Narcomantas worked really effectively [in the age of] print and TV,” said Philip Luke Johnson, a political scientist and professor at Flinders University in Australia who studies how organized groups communicate with the public. 

    By the end of the decade, Mexican criminal groups had moved online to broadcast announcements such as the imposition of curfews on towns they controlled, or gory videos of beheadings and torture. 

    Meanwhile, dedicated narco blogs and webpages maintained by anonymous citizen journalists flourished, helping fill the information void in areas that were simply too dangerous for local reporters to cover.

    The 2023 emergence of a video showing five kidnapped teenagers — one forced to murder his friend — marked a horrific watershed in the weaponization of digital content. It wasn’t clear who was responsible for the brutality or uploading it, but it sent shockwaves across the country.

    “That was when journalists were saying that [their job shouldn’t be] just going around finding narcomantas on fences anymore,” Johnson says. “[Propaganda] gets into people’s inboxes, it gets on WhatsApp, where it spreads more rapidly and organically.”

    One early incident of disinformation about narco violence translating into real-world terror was in September 2012, when videos circulated on social media showing scenes of mass hysteria in different parts of greater Mexico City. 

    “These incidents were fueled by rumors that armed members of the Familia Michoacana cartel, traveling in pickup trucks, were attacking businesses and firing shots into the air,” said Paloma Mendoza-Cortes, a senior analyst at PHLX Consulting. 

    The rumors led to the suspension of classes in some schools, and residents even claimed that a curfew had been imposed, which never actually happened, she said.

    Cartel messaging is most effective when there are few other sources to rely on.

    As the events unfolded on Sunday, the government provided little clear information, allowing disinformation, misinformation and AI imagery to pour into the vacuum.

    Mexico’s security ministry posted on X that Jalisco State’s commercial centers were unaffected by the outbreak of violence, just as malls were announcing that they had closed over security concerns. 

    In Puebla, where roadblocks had appeared on highways, the state government claimed that schools would be closed only because of “strong winds.”

    Burning Roadblocks

    While the photo of Puerto Vallarta’s burning church had been created by Google Gemini, an AI platform, other images of the city engulfed by columns of black smoke from the vehicles that CJNG members set ablaze were real.

    Setting up fiery roadblocks is by now a well-trodden tactic used by Mexican criminal groups to get public attention and make a scene .

    These “narcobloqueos” were pioneered by the now-fractured Zeta Cartel around the same time as the criminal groups moved online, in the early 2010s. Other groups quickly adopted the tactic. 

    The CJNG, for example, brought Guadalajara traffic to a standstill in 2012 by blocking roads with burning vehicles after Mexican authorities arrested another of its leaders.

    (The cartel later hung up a narcomanta apologizing to the population for the inconvenience, claiming that the blockade was simply pushback against the government for interfering in cartel business.)

    They’re designed to “impact the biggest arteries to get the maximum effect”, said Johnson. “Everyone in the city feels it because it’s peak hour, and nothing is moving. [But] you’re not immediately in danger a lot of the time.”

    Cheap and easy to pull off, they require no more than a small team with firearms and a gas canister to ambush a car or truck, force the driver out, and set it alight. But their impact can be significant. 

    “The central objective of the narco roadblocks is to hinder the security deployment in a city, so that forces can’t arrive to help whoever’s in charge of an operation, such as capturing a criminal leader,” says Víctor Manuel Sánchez Valdés, a security researcher and professor at the University of Coahuila.

    “At the end of the day, it’s impactful to see an avenue in your city that you transit every day blocked, and that they set fire to a vehicle on it. It creates fear, right? A collective fear,” said Sánchez Valdés.

    This is exactly the tactic used by the CJNG’s rivals, the Sinaloa Cartel, on October 17, 2019, when Mexican armed forces captured the son of its former leader, Joaquín “El Chapo” Guzmán Loera, in the city of Culiacán. 

    The cartel’s fierce response, which involved not just roadblocks but also arson, shootouts, and the dissemination of both real and fake videos, forced the president to order the immediate release of El Chapo’s son.

    The battle became known as the ‘Culiacanazo,’ and made news around the world. “It’s using the people to make the government squirm,” said Johnson.

    Mendoza-Cortes said the event “was interpreted as a major victory for organized crime against the federal government, and other cartels imitated this behavior.”

    For many in Mexico, the Culiacanazo loomed large when the CJNG responded to El Mencho’s killing.

    “It was like a Culiacanazo at the national level,” said Escorcia.

    Force Multiplier

    Even though Mexicans are by now accustomed to narcobloqueos, the scale and coordination of last week’s roadblocks was unprecedented. 

    In the 2019 Culiacanazo, the Sinaloa Cartel erected around 20 roadblocks, Sánchez Valdés said. On Sunday, the CJNG set up 252 across 20 different states, according to the government’s security agency.

    “I think that was the objective,” said Sánchez Valdés. “Get attention at the same time as creating fear, and try to do it in the largest number of cities and places possible.”

    When the message is fear, taking violence viral acts like a force multiplier.

    Sunday’s havoc left 42 alleged cartel members and 25 national guardsmen dead, according to the government.

    For now, however, only one civilian appears to have been killed across the country, a pregnant woman caught in the path of a shoot-out in the city of Zapopan.

    Given the cartel’s proven capacity for indiscriminate murder, the Instagram-ready unrest was a quick and effective show of strength.

    Unlike the Culiacanazo, in which the criminal group had a clear tactical goal —  to free their leader’s son —  CJNG created turmoil after their leader had been killed, making it appear more like a retaliatory public relations campaign.

    In Puebla and other cities across the country, the group’s hybrid warfare — blending real-world violence with digital tactics — triggered a wave of national panic.

    “They said they’d set fire to one of the dance troupe’s trucks,” said Ávila, the woman in Puebla who had come to watch the carnival. “All the troupes stopped dancing…. We went into a sort of psychosis.”

    As with many previous instances of law enforcement using the “kingpin strategy” to take down the leader of an organized crime group, a far more deadly reaction to El Mencho’s killing could yet unfold.

    “Even though it looks like what was happening on Sunday was ‘You kill a leader and there’s immediately all this violence,’ the weekend was not the intense version of it,” said Johnson. 

    “The intense version of it will be if, over months in different areas that Jalisco control, there are these turf wars where things get really violent.”

  • Nepal’s Post-Uprising Election: Anti-Corruption Promises Vs Public Skepticism

    Six months after the protests driven by fury over entrenched corruption toppled Nepal’s elected government, political parties are now campaigning for the March 5 general elections with a shared message: each claims to be the best choice to curb graft. 

    Their proposals span sweeping asset investigations of senior officials, the use of artificial intelligence to detect corruption, and – in one case – a call to reinstate the death penalty for major offenses, despite the country having abolished capital punishment in 1990.

    And it is the same parties that were targets of the protests that are now touting themselves as champions of integrity. But many of those who took part in the demonstrations — sparked by a ban on social media and fueled by anger over endemic corruption — remain skeptical that the current crop of candidates will deliver real reform.

    “They say they will investigate corruption, but we aren’t sure if they will totally implement this,” said 25-year-old Rakesh Kumar Mahato, who was shot in the spine during the protests and remains paralyzed.

    Since September, the country has been under an interim government led by former Chief Justice of Nepal Sushila Karki. She moved the general election forward nearly two years ahead of schedule in response to the youth-led Gen Z movement.

    It is the first time on the election rolls for 915,000 youth among the 8.9 million voters eligible to cast a ballot for the 275-member House of Representatives.

    But the young protestors who shook the foundations of Nepal’s establishment are not widely represented in the contest. According to Election Commission of Nepal data, candidates below the age of 30 account for just 5.6 percent of those standing for office.

    For its part, the Election Commission has this year introduced stricter transparency rules, requiring all campaign expenses to flow through dedicated bank accounts. Any donation higher than Rs. 25,000 ($172.50) must be deposited directly into those accounts, and donors of larger sums must provide tax identification numbers.

    This seeks to address a clear place for reform. A Nepal Investigative Multimedia Journalism Network investigation last year revealed that political parties had evaded taxes, submitted statements of income and expenditure that were lower than the actual figures, and systematically flouted donation disclosure laws.

    Yet a pre-election assessment by the Asian Network for Free and Fair Elections found the new political finance rules had “weak enforcement and minimal deterrence, reinforcing a perception that expenditure limits do not meaningfully constrain the real campaign economy.” This risked vote-buying, patronage and inducements and also keeping out marginalized candidates, concluded the assessment.

    When interviewed by OCCRP, Nepali human rights defenders also questioned whether the major political parties were committed to following finance rules.

    “What’s lacking is internal transparency,” National Human Rights Commission Secretary

    Murari Prasad Kharel said. “Will these leaders disclose their own assets? How will they manage internal party governance?”

    Activists, voters, and election observers also questioned the lack of specific proposals on how political parties would carry out their anti-corruption strategies.

    “Forming a commission is not enough if they lack an implementation strategy,” former Acting

    Auditor General Shukdev Bhattarai Khatri said. “We have seen two dozen commissions and committees in 70 years to investigate corruption … Their reports are buried.”

    Widespread anger over that kind of inaction triggered last year’s protests, in which more than 2,000 were injured and 77 killed, many of them shot by security forces. Amid the violence, crowds burned a number of buildings, including the Supreme Court and parliament itself.

    As the March 5 vote nears, security remains a concern. Following reports of clashes between rival party members, interim premier Karki has ordered security agencies to remain on high alert.

    The most watched race is in the constituency of Jhapa 5, where four-time Prime Minister KP Sharma Oli — forced to resign during the September uprising — is fighting for his political survival against Balendra Shah.

    Shah, a rapper and former Mayor of Kathmandu, recently joined the Rastriya Swatantra Party to challenge the “old guard” on their home turf. While there is no official opinion polling for elections in Nepal, his new party is widely considered the frontrunner.

    In his election commitment letter, Balen pledged to “raise strong voices against irregularities and corruption.”

    In his own commitment letter, former PM Oli pledges that if his Communist Party of Nepal is re-elected again, this time will be different. 

    “In the past, when our party was in government, we started the work of curbing corruption and made some progress,” the letter said. “Zero tolerance will be adopted in curbing corruption.”

  • Google Invokes First Amendment to Shield Gmail Users from Piracy Subpoena

    Google Invokes First Amendment to Shield Gmail Users from Piracy Subpoena

    Flava Works is an Illinois-based adult entertainment company specializing in content featuring Black and Latino men.

    The company has pursued copyright infringers aggressively for years, including a $1.5 million damages award against a defendant who shared its films on BitTorrent and a high-profile clash with an unnamed television executive that was eventually settled.

    Last March, Flava, together with Blatino Media, filed a new lawsuit targeting an alleged Canadian leaker of its videos alongside 47 John Doe defendants. The rightsholders claim the maximum of $150,000 in statutory damages from each defendant, bringing the total damages claim to over $8 million.

    This case stands out from the typical torrent lawsuits as the defendants were identified by their usernames on the private torrent tracker GayTorrent.ru, where they allegedly shared the pirated videos.

    Today, nearly a year has passed since the case was started, and most of those Doe defendants still haven’t been formally named. According to Flava, that’s largely due to one company: Google.

    Google Rejects Broad Subpoena

    In a status report filed this week, Flava informs the Illinois federal court of the progress thus far. The company reports that it signed a confidential settlement with one defendant, while several others were named and formally served. However, most defendants are still “John Does.”

    According to an affidavit filed by Flava’s president, Phillip Bleicher, they can’t properly name the defendants because Google raised objections and refused to fully comply with the subpoena. This, despite complying with an earlier subpoena in a similar case.

    Initially, Google incorrectly claimed the subpoena was issued by a pro se party. After Flava provided documentation that a licensed Illinois attorney had signed it, Google requested a copy of the complaint. That was provided in early December.

    Shortly after, Google formally objected, raising “potential First Amendment concerns,” while stating it would only provide data for the “primary user who allegedly distributed the copyrighted works,” not the broader list of “John Doe” defendants.

    Google objects

    googleobject

    Google’s objection affects 28 defendants whose primary or sole email addresses are Gmail accounts. Without Google’s subscriber data, Flava says it cannot confirm their identities with sufficient certainty to name them in the lawsuit.

    How Flava Identifies Its Targets

    It is unclear what Google means exactly by raising First Amendment concerns. The company may believe the John Doe defendants are not necessarily direct infringers, a question that touches on how they were identified in the first place.

    The complaint does not explain this. Typically, rightsholders identify torrent pirates by joining a swarm, collecting IP addresses, and subpoenaing ISPs to match those IPs to account holders. In this case, however, Flava already had usernames and email addresses before any court-ordered discovery.

    One possible explanation is that some of these defendants were also paid subscribers on Flava’s own platforms. Membership sites log IP addresses at login. So, if the same IP that appeared in the GayTorrent.ru swarm also appeared in Flava’s own server logs, the company could have linked a torrent username to a registered account and its associated email address entirely from its own internal records.

    Wrongly Accused Pirates

    Critics of BitTorrent lawsuits have long argued that IP addresses do not reliably identify individuals. In this case, Flava makes that same argument in its own favor, using the risk of misidentification as a reason for Google to hand over subscriber data.

    The affidavit acknowledges that an email address alone is not sufficient to confirm an identity either. In at least one instance in a related case, a subpoena response pointed to someone who turned out not to be the infringer. The email address had been used by someone else, and the identified individual contacted prior counsel to clarify the error.

    To avoid naming the wrong people, Flava needs both Google and Microsoft to comply with their subpoenas, which seek information sufficient to identify the defendants by name and current address.

    From the discovery motion

    disco motion

    “Naming the wrong individuals in this Case could embarrass the individuals named or expose Plaintiffs to claims of abuse of process, and waste the Court’s resources,” the affidavit cautions, using the fear of wrongful accusations squarely in its own favor.

    Naming the wrong person

    justified

    What’s Next

    The legal paperwork notes that Microsoft, which also holds data for some of the remaining defendants, indicated it is willing to comply with its subpoena if there is an agreement on fees. Flava’s counsel is working to finalize those terms.

    For the moment, however, the case for the 28 Gmail-linked defendants is effectively on hold pending Google’s cooperation. Flava says it is prepared to file a motion to compel if Google does not respond, but that hasn’t been filed yet.

    If a motion to compel is filed, Google is expected to explain its stated First Amendment rationale in more detail. Then, it will be up to the federal judge to weigh the arguments from both sides.

    A copy of the status report, filed at the United States District Court for the Northern District of Illinois, is available here (pdf). The supporting affidavit of Phillip Bleicher can be found here (pdf).

    From: TF, for the latest news on copyright battles, piracy and more.

  • World News in Brief: Epstein scandal highlights ‘silencing’ of women, Danish breakthrough on HIV transmission, Belarus rights update

    UN human rights chief Volker Türk warned on Friday that the Epstein and Gisèle Pellicot scandals are an illustration of intensifying threats to women and girls forced to suffer in silence.