Risk
1/18/2012
12:49 PM
50%
50%

SOPA: 10 Key Facts About Piracy Bill

Despite mass opposition to the SOPA and PIPA anti-piracy bills, both continue to move forward in Congress. Here's an update on what's at stake and where the bills stand.

What's the status of two controversial bills designed to block foreign, rogue websites and prevent U.S. residents from accessing pirated movies and music?

The proposed bills are the House's Stop Online Piracy Act (SOPA) and the Senate's Preventing Real Online Threats to Economic Creativity and Theft of Intellectual Property Act (Protect IP Act, or PIPA). Numerous businesses and technologists--for starters--have criticized the bills, leading an estimated 7,000 websites Wednesday to either black out their site (in the case of the English language version of Wikipedia) or to alter their site design to demonstrate their opposition to the bills (as in the case of Google and Mozilla).

[ Cyberattacks are expected to rise this year. Learn more about the 10 Security Trends To Watch In 2012. ]

With opposition mounting, here's where the bills now stand:

1. SOPA is still alive.
Are both SOPA and PIPA now stalling? In fact, SOPA's chief sponsor, Rep. Lamar Smith (R-Texas), said Tuesday that he expects to bring the bill to a House Judiciary Committee markup hearing in February. At such hearings, legislators can debate the bill and propose amendments, as well as vote on whether the bill should then be passed to the full House. "To enact legislation that protects consumers, businesses, and jobs from foreign thieves who steal America's intellectual property, we will continue to bring together industry representatives and members to find ways to combat online piracy," said Smith Tuesday in a statement.

2. Payment provider cooperation is required.
SOPA would encourage--though not require--payment providers such as Visa and PayPal to not facilitate business transactions with any website that the government had deemed to be hosting pirated content. According to Smith, "the bill maintains provisions that 'follow the money' and cut off the main sources of revenue to foreign illegal sites ... and it provides innovators with a way to bring claims against foreign illegal sites that steal and sell their technology, products, and intellectual property."

3. SOPA loses court orders.
One sticking point for SOPA has been that service providers would be required to comply with a court order, obtained by the government, requiring them to block access to rogue foreign websites, and which would indemnify their actions. But in response to criticism of the provision, Smith recently removed the court-order provision from SOPA. As a result, it's not clear how website-blocking orders might be obtained or policed.

4. Bills continue to evolve.
Both SOPA and PIPA have continued to evolve in response to criticism. Notably, PIPA author Sen. Patrick Leahy (D-Vt.) admitted that service providers wouldn't support any bill that filtered domain-name servers (DNS) for anti-piracy purposes. Likewise, to help prevent abuse, the bills' authors have added provisions that would impose damages--including costs and attorneys' fees--on anyone who makes a false claim.

5. DNS tinkering isn't popular.
As an anti-piracy technique, domain name filtering is proving to be quite unpopular. Notably, Google--which of course earns advertising revenue based on page impressions--has said it will resist any such measures. Likewise, both SOPA and PIPA have been derided by service providers, technology experts, as well as the Business Software Alliance, for being too sweeping in their approach.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
cxf
50%
50%
cxf,
User Rank: Apprentice
1/19/2012 | 3:19:35 PM
re: SOPA: 10 Key Facts About Piracy Bill
Content authors already have the civil and criminal remedies they need through existing piracy laws. I'm reminded by this with every copyrighted DVD I watch. It's clear, that if I violate Federal copyright laws, I could face 5 years in the pokie, and a $250,000 fine. Isn't that enough? It is for me.
Bprince
50%
50%
Bprince,
User Rank: Ninja
1/19/2012 | 2:21:36 AM
re: SOPA: 10 Key Facts About Piracy Bill
SOPA and PIPA seem basically dead at the moment. A lot of politicians are dropping support according to the Washington Post. The masses appear to have spoken.
Brian Prince, InformationWeek/Dark Reading Comment Moderator
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5208
Published: 2014-12-22
BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbit...

CVE-2014-7286
Published: 2014-12-22
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.

CVE-2014-8015
Published: 2014-12-22
The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.

CVE-2014-8017
Published: 2014-12-22
The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673.

CVE-2014-8018
Published: 2014-12-22
Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCur19651, CSCur18555, CSCur1...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.