Risk
1/18/2012
12:49 PM
Connect Directly
RSS
E-Mail
50%
50%

SOPA: 10 Key Facts About Piracy Bill

Despite mass opposition to the SOPA and PIPA anti-piracy bills, both continue to move forward in Congress. Here's an update on what's at stake and where the bills stand.

What's the status of two controversial bills designed to block foreign, rogue websites and prevent U.S. residents from accessing pirated movies and music?

The proposed bills are the House's Stop Online Piracy Act (SOPA) and the Senate's Preventing Real Online Threats to Economic Creativity and Theft of Intellectual Property Act (Protect IP Act, or PIPA). Numerous businesses and technologists--for starters--have criticized the bills, leading an estimated 7,000 websites Wednesday to either black out their site (in the case of the English language version of Wikipedia) or to alter their site design to demonstrate their opposition to the bills (as in the case of Google and Mozilla).

[ Cyberattacks are expected to rise this year. Learn more about the 10 Security Trends To Watch In 2012. ]

With opposition mounting, here's where the bills now stand:

1. SOPA is still alive.
Are both SOPA and PIPA now stalling? In fact, SOPA's chief sponsor, Rep. Lamar Smith (R-Texas), said Tuesday that he expects to bring the bill to a House Judiciary Committee markup hearing in February. At such hearings, legislators can debate the bill and propose amendments, as well as vote on whether the bill should then be passed to the full House. "To enact legislation that protects consumers, businesses, and jobs from foreign thieves who steal America's intellectual property, we will continue to bring together industry representatives and members to find ways to combat online piracy," said Smith Tuesday in a statement.

2. Payment provider cooperation is required.
SOPA would encourage--though not require--payment providers such as Visa and PayPal to not facilitate business transactions with any website that the government had deemed to be hosting pirated content. According to Smith, "the bill maintains provisions that 'follow the money' and cut off the main sources of revenue to foreign illegal sites ... and it provides innovators with a way to bring claims against foreign illegal sites that steal and sell their technology, products, and intellectual property."

3. SOPA loses court orders.
One sticking point for SOPA has been that service providers would be required to comply with a court order, obtained by the government, requiring them to block access to rogue foreign websites, and which would indemnify their actions. But in response to criticism of the provision, Smith recently removed the court-order provision from SOPA. As a result, it's not clear how website-blocking orders might be obtained or policed.

4. Bills continue to evolve.
Both SOPA and PIPA have continued to evolve in response to criticism. Notably, PIPA author Sen. Patrick Leahy (D-Vt.) admitted that service providers wouldn't support any bill that filtered domain-name servers (DNS) for anti-piracy purposes. Likewise, to help prevent abuse, the bills' authors have added provisions that would impose damages--including costs and attorneys' fees--on anyone who makes a false claim.

5. DNS tinkering isn't popular.
As an anti-piracy technique, domain name filtering is proving to be quite unpopular. Notably, Google--which of course earns advertising revenue based on page impressions--has said it will resist any such measures. Likewise, both SOPA and PIPA have been derided by service providers, technology experts, as well as the Business Software Alliance, for being too sweeping in their approach.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
Bprince
50%
50%
Bprince,
User Rank: Ninja
1/19/2012 | 2:21:36 AM
re: SOPA: 10 Key Facts About Piracy Bill
SOPA and PIPA seem basically dead at the moment. A lot of politicians are dropping support according to the Washington Post. The masses appear to have spoken.
Brian Prince, InformationWeek/Dark Reading Comment Moderator
cxf
50%
50%
cxf,
User Rank: Apprentice
1/19/2012 | 3:19:35 PM
re: SOPA: 10 Key Facts About Piracy Bill
Content authors already have the civil and criminal remedies they need through existing piracy laws. I'm reminded by this with every copyrighted DVD I watch. It's clear, that if I violate Federal copyright laws, I could face 5 years in the pokie, and a $250,000 fine. Isn't that enough? It is for me.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Must Reads - September 25, 2014
Dark Reading's new Must Reads is a compendium of our best recent coverage of identity and access management. Learn about access control in the age of HTML5, how to improve authentication, why Active Directory is dead, and more.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2003-1598
Published: 2014-10-01
SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable.

CVE-2011-4624
Published: 2014-10-01
Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.

CVE-2012-0811
Published: 2014-10-01
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used in backup files gene...

CVE-2012-5485
Published: 2014-09-30
registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.

CVE-2012-5486
Published: 2014-09-30
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Chris Hadnagy, who hosts the annual Social Engineering Capture the Flag Contest at DEF CON, will discuss the latest trends attackers are using.