Re: Filtering "Illegal" Video

[joel jaeggli <joelja () bogus com>]

On 2/20/25 13:44, Christopher Morrow wrote:
> On Thu, Feb 20, 2025 at 1:21 PM Kevin McCormick <kmccormick () mdtc net> wrote:
> > Might want to look at Audible Magic.
> >
> > https://www.audiblemagic.com/
> >
> > They do identification and filtering of copyrighted content.
> >
> > University I worked at had a box that would identify students pirating content and would then black hole their IP 
> > addresses.
> Assuming that this isn't 'bittorrent' sorts of things where (aside
> from encrypted dht? I dont' know bittorrent, sorry) the traffic
> is probably encrypted/tls ... how would any of this realistically work?
>
>    1) install a CA on your client's machines - HAHAHAHAH no.
>    2) force-break the TLS inspect and send along - HAHAHAAHA also no.
>    3) by identifying already known 'bad sources' and classifying based on that?
>
> there are potentially a world of 'legit' streaming service endpoints,
> it seems like this sort of order (and work) is
> prone to huge failures in actually accomplishing the mission.
>
> > Helped the University avoid receiving and processing DMCA notices.
> >
> > Thank you,
> >
> > Kevin McCormick
> >
> > -----Original Message-----
> > From: NANOG <nanog-bounces+kmccormick=mdtc.net () nanog org> On Behalf Of Mike Hammett
> > Sent: Monday, February 10, 2025 2:58 PM
> > To: NANOG <nanog () nanog org>
> > Subject: Filtering "Illegal" Video
> >
> > CAUTION: This email originated from outside your organization. Exercise caution when opening attachments or clicking 
> > links, especially from unknown senders.
> >
> > I've never paid much attention to the abilities to filter traffic because I didn't care what my customers were doing 
> > until which time a lawful order told me to care.
> >
> > Someone recently asked me that since there was only one legal way in a particular country to consume television service over IP, was there 
> > any way to block the "illegal" streams. I put "illegal" in quotes because some of it really is the pirated crap, but 
> > some is likely just watching Netflix, Prime, Hulu, etc. over a VPN.
> >
> > With the tooling I have, no, I can't block that stuff. Well, at least not with any precision. I'd certainly miss a bunch and 
> > there would be a bunch of collateral damage. However, I also know that I'm not using overly sophisticated tooling or methods to 
> > achieve this.
> >
> > Are there platforms out there that can accomplish this with any precision?
> >
> > No, I don't know what constitutes "TV" in that jurisdiction, nor do I ask this group to weigh in on that. Are YouTube, Vimeo, and Rumble 
> > "TV"? Are Netflix and Prime "TV"?

Court orders received by network operators in countries where this is 
done frequently are typicallly either of the form:

* block this ip address, prefix or address/prefix set

* configure your recursive resolver to not resolve queries for the 
specified domain name or zone.

They can be more involved or assume the use of specialized equipment if 
implemented with coordination of the operator. e.g. port 443 handshakes 
with the following sni, but generally are not.


> > -----
> > Mike Hammett
> > Intelligent Computing Solutions
> > http://www.ics-il.com
> >
> > Midwest-IX
> > http://www.midwest-ix.com