News for hackers. Stuff that matters.
Re:Rumble Turns Off Access in Brazil Because of Government's... by Zak on Saturday December 23, 2023 @02:31PM (#38747305)
I am curious as to how a court in Brazil can require a company that appears to be based in Canada and the USA to block access. If countries are allowed to assert extraterritorial jurisdiction, anyone running a website might need to know and obey the laws of nearly 200 countries.

Some of those laws prohibit criticism of their respective governments, sex education, or pornography (including things most people in the US or EU would not consider pornographic).

Re:Rumble Turns Off Access in Brazil Because of Government's... by friend_and_foe on Saturday December 23, 2023 @03:13PM (#38747726)
Yep, I miss the days where websites said "you want to keep your citizens from accessing our site, get fucked, do it yourself, build a great firewall because we don't have to enforce your laws for you" but those days are long gone since Facebook and Google created a precedent of doing it to keep foreign markets. It's unfortunate but this is the new status quo.
Re:Rumble Turns Off Access in Brazil Because of Government's... by philwelch on Saturday December 23, 2023 @11:25PM (#38751116)
The problem is that these sites are supported by advertising and if you can’t collect ad revenue in a country, you might as well not even let them access the site.
Re:Rumble Turns Off Access in Brazil Because of Government's... by figassis on Sunday December 24, 2023 @04:00AM (#38752249)
Why not do it the way Binance/Coinbase did it? Block the country and subtly hint at customers to use a VPN.
Re:Rumble Turns Off Access in Brazil Because of Government's... by benf76 on Sunday December 24, 2023 @10:57AM (#38754320)
Gab.com takes this approach today
Re:Rumble Turns Off Access in Brazil Because of Government's... by smegsicle on Sunday December 24, 2023 @11:55AM (#38754736)
wasn't that the place that protested themselves off aws, mastadon, twitter, and even fdroid?

sounds scarier than 4chan

Re:Rumble Turns Off Access in Brazil Because of Government's... by whatwhaaaaat on Sunday December 24, 2023 @12:31PM (#38755013)
I’ve never been to gab so I can’t say exactly what their content is but I do have a memory longer than a goldfish and I can firmly say that you are not being truthful.

Gab was kicked off those platforms for not touting the “party” line on the covid shot, trans stuff, and other social hot button issues.

Re:Rumble Turns Off Access in Brazil Because of Government's... by pridkett on Sunday December 24, 2023 @06:58PM (#38758238)
Re:Rumble Turns Off Access in Brazil Because of Government's... by loceng on Sunday December 24, 2023 @11:46AM (#38754672)
I've begun contemplating if these companies are complicit in whatever crimes against humanity these countries may be partaking in, wanting censored-suppressed - in the name of profit, party to industrial complexes working with authoritarian governments, being fascism.
Re:Rumble Turns Off Access in Brazil Because of Government's... by friend_and_foe on Sunday December 24, 2023 @11:55PM (#38759937)
They are absolutely 100% complicit, and not just by chance, they are knowingly complicit. They take contracts from governments to censor and oppress their people. Just like IBM helped catalogue Jews in Germany and Standard Oil fueled the Nazi war machine, these companies take money to control information flows within dictatorships, hide atrocities and even provide information technology to help then further their aims in more concrete ways like biometric tracking and hacking tools.
Re:Rumble Turns Off Access in Brazil Because of Government's... by saurik on Monday December 25, 2023 @02:54AM (#38760692)
And, btw, just to make this also explicit: if someone works for one of these companies--and aren't doing it in some way by force, or aren't working from the inside to actively sabotage the company's goals--they are also complicit.
Re:Rumble Turns Off Access in Brazil Because of Government's... by derefr on Saturday December 23, 2023 @02:46PM (#38747451)
> If countries are allowed to assert extraterritorial jurisdiction, anyone running a website might need to know and obey the laws of nearly 200 countries.

Yes, that's how it works. Specifically, the common argument that applies to most companies (incl. Rumble), is that you're trading within that country if anyone from that country is either paying for your product/service, or making money from your product/service; and therefore you essentially need to function as (if not actually legally have) a per-country corporate subsidiary amenable to the laws of that country, if you want to continue doing that.

And sometimes it's even worse; for at least the US and Canada, companies trading with people living in these countries have to know and follow the laws of the state or province their customers live in, when serving those customers.

These are mostly simple things like tax codes, yes; but sometimes it's things that are far more arcane — for example, Quebec prohibits promotional first-period pricing that automatically transitions into regular pricing (they consider this a predatory practice.) Companies that advertise promitions in Canada often have fine print that says "offer not valid in Quebec" because of this.

This tangled mess of required region-specific logic is, by and large, the moat of e-commerce platforms and payment processors. It's why even large e-commerce services like Steam, that build all this logic internally for most countries, will still integrate with payment processors like Stripe or PayPal — those services are made options to cover the long-tail of countries they don't want to learn and maintain regional rules for.

It's also why many companies don't bother to actually sell into every market; and instead allow companies that specialize in "partnering with foreign companies to sell their products into our own domestic market that we understand well" — a.k.a. importers — to do that for them (and skim off some of their margin in the process.)

Re:Rumble Turns Off Access in Brazil Because of Government's... by piotrkaminski on Saturday December 23, 2023 @03:47PM (#38748068)
> Yes, that's how it works. Specifically, the common argument that applies to most companies (incl. Rumble), is that you're trading within that country if anyone from that country is either paying for your product/service, or making money from your product/service; and therefore you essentially need to function as (if not actually legally have) a per-country corporate subsidiary amenable to the laws of that country, if you want to continue doing that.

I think an equally valid (and frankly more reasonable) interpretation is that if anyone from another country is paying for your product/service, then they're trading within _your_ country. If in doing so they contravene laws of _their_ country (e.g., forbidden speech, taxes, etc.) then that's their problem, not yours. This interpretation has the advantage of actually being enforceable, unlike the alternative.

And if a country doesn't like that then they're free to "protect" their citizens by building a Great Firewall, which is _totally and only_ for their people's benefit.

Re:Rumble Turns Off Access in Brazil Because of Government's... by derefr on Saturday December 23, 2023 @04:24PM (#38748378)
That's the interpretation that would apply if you were trading in e.g. equities. The stock exchange doesn't come to you; you come to it. (And therefore, you need to have a legal presence in the country where the exchange is located, with bank+investment accounts registered there, holding deposits denominated in that country's currency. You can't buy stocks from the NYSE using a European bank account, let alone one holding Euros — you have to first fund an American bank account with USD; then transfer that into a special American [government-]registered investment account; and then use that account to buy the stocks.)

In this scenario, the foreign investor is in a sense creating a legal "proxy person" — a virtual citizen of the country where the exchange exists. The foreign investor is then telling the proxy person to do the trades for them. If the pretend proxy person breaks the law, the real investor gets in trouble... but in ways that are more similar to the ways corporations get in trouble, than the ways citizens of the country get in trouble.

(And some countries don't even allow the creation of these pretend proxy persons; instead requiring you to employ, and hand your money over to, a real proxy person, who will face the domestic legal consequences for executing your trades! This is how e.g. Bahamian shell corporations work; it's also how foreign real-estate investments work in the Philippines. It's never a good time.)

"The purchaser representing themselves legally in the country they're buying from" is also how the aforementioned import arrangements work. The importer registers an export company in the source country — essentially a proxy-person, though in the shape of a corporation — and the export company is what buys the goods and sends them to the import company.

Most trade isn't like this, though, because most trade isn't between legal peers (like an exchange and an investor — both basically "typed as" corporations for the sake of the trade, even if one is a sole proprietor); but instead is between one large company and a potentially-huge number of individually-legally-naive individual consumers.

It is impractical to ask all the people who want to buy a product, to create a foreign trading presence for themselves in the country of origin of that product, as if they were a professional importer. Governments don't want to maintain — or especially to validate and audit — huge databases of hundreds of millions of foreign individuals trading locally. Banks don't want to have to open and maintain hundreds of millions of tiny, individual, unprofitable(!) foreign-deposit accounts for those individuals to use to operate legally in the country.

So instead, governments and banks choose the far simpler route: making the foreign corporations register themselves in the markets they operate in. There are far fewer corporations to keep on the books for both the governments and the banks; and it's far easier to manage their accounts (because corporations are on average more competent at that kind of thing; because unlike individuals, corporations can afford to pay ~hundreds-of-dollar levies to maintain the systems tracking them and keep the bank-accounts revenue-positive for the banks; and because corporations will coalesce bank transfers, turning billions of little daily transactions to individuals' foreign-deposit accounts, into just a few daily transactions to each corporate foreign-deposit account.)

Ignoring the pragmatics, though, there's also a key distinction even in theory: when a company X from country A, trades with consumers in country B, company X is seeking to pull money out of (or put money into) a credit card or bank account that exists in country B (and which is denominated in the currency of country B), and move that money to/from country A, where it will then get exchanged for the currency of country A and drop into the company's country-A bank account.

The manipulation of the country-B bank account, can only legally be done (for most values of country-B) by a company legally registered in country-B to operate on the payment networks of country-B. There has to be a payment server sitting there physically in country-B, connected by dedicated line to the inter-bank network the banks of country-B use; and that payment server has to have signing certs installed to emit messages on the line that will be accepted by the network — signing certs which required a bunch of legal and contractual and trust-handshake hoops to be jumped with the banks of country-B before they'd be issued.

So these are the only options for getting access to such a payment server. Either:

- company X forms a country-B subsidiary XB, that goes through the process of applying for the certs and setting up the payment server; or

- company X pays existing country-B-local payments company Y to use their payments server to do the money-moving-around for them; or

- company X pays multinational payments company Z to provide them a country-agnostic interface for moving money around; when requested by X to perform a country-B transaction, Z will then either signal the servers of their existing country-B-local subsidiary ZB — or will pass the message to their country-B-transaction-partner Y — to do the real money-moving around.

Anything that seemingly doesn't have one of these three fundamental shapes — but which still results in a company in country-A moving around money in a country-B bank account — is just window-dressing on top of underlying infrastructure that does have one of these shapes.

Re:Rumble Turns Off Access in Brazil Because of Government's... by piotrkaminski on Saturday December 23, 2023 @05:56PM (#38749135)
Thanks for writing this up — that's a really interesting perspective on the problem, and definitely worth pondering. I'm not familiar with the underpinnings of cross-country payments so I'll just take your description as valid.

I think it's not completely incompatible with my view, though: if you don't have a country B subsidiary (the assumption underlying this entire discussion!) then the most country B can do is tell the payment processing company you're contracting with to stop doing business with you. That's completely fair and I see it as a kind of "financial firewall" for country B.

Even this power is subject to some checks and balances, though: 1. If your service/site is popular, country B's population may object to no longer being able to do business with you and put pressure on country B's government. 2. You could bypass the financial system with crypto payments. (Yeah, not terribly practical for most use cases, but could become more popular in case of government overreach.) 3. Ad-supported businesses — like the one in the original article, apparently — are immune to this kind of intervention!

Ultimately, a country can only control entities with a physical presence inside its borders, and while some common commercial architectures necessitate this (to some degree) not all do. Countries that make laws that pretend otherwise just end up looking silly.

Re:Rumble Turns Off Access in Brazil Because of Government's... by patrakov on Saturday December 23, 2023 @11:07PM (#38751015)
> it's also how foreign real-estate investments work in the Philippines

Strange - here in Lapu-Lapu, a too-nasty salesperson has convinced me (a foreigner) to enter a contract to buy a not-yet-built condo unit. I just pay a certain amount every month using my bank account, they get the money, and on an agreed-upon date, the unit will be mine. I can go at any time and watch how the construction work proceeds. So far, their proposed date looks like a reasonable expectation of when the unit will be ready.

In other words, it's the same process as in my former home country.

Re:Rumble Turns Off Access in Brazil Because of Government's... by derefr on Sunday December 24, 2023 @01:51PM (#38755614)
Extremely fine point of distinction that's important here: a condo is treated as real-estate, but it isn't. (Condo ownership is really more of a transferrable, indefinite exclusive use-right.) Real-estate is fundamentally about buying and selling plots of land, and is only coincidentally about what's sitting on those plots. Buying a condo doesn't put you in top-level possession of a plot of land; even if the building is a residential co-op, what you'd get would be equity in a corporation that holds the plot of land. For non co-op buildings, you don't even get that.

For legal and tax purposes, most countries do abstract over the separate low-level concepts of plot-of-land ownership and condo ownership, resulting in a legal ADT called a "lot"; where each "lot" has its own title that can only be transferred through a notarized process; has yearly property taxes levied against it in proportion to its market value; etc. This isn't a natural abstraction, though — just a common legal "interface" used by the government to manage instances of the two separate underlying contractual implementations. Those implementations still each have their own separate laws that apply to them.

Which brings me to the point: foreigners are forbidden from owning plots of land in the Philippines.

That doesn't stop you from owning a condo — because buying a condo doesn't translate to buying any land.

But you can't legally buy a house in the Philippines — since that purchase would come with land. (Or rather, is a purchase of land, where that land happens to at this moment have a house on it.)

Instead, to do something equivalent to buying a house, you'd need

1. a Philippines citizen (a real proxy person) to buy the house for you, and then assign you

2. a 99-year transferrable https://en.wikipedia.org/wiki/Leasehold_estate on the land, explicitly written to come with

3. possession of the "materials that make up all current structures built on the land" (so you can tear the house down, if you like), and

4. the right to build whatever other new structures you like on the land, and use them for whatever purposes you see fit, including subletting.

(I'm actually not sure whether there's any legal instrument the proxy-person can grant you that would allow you to apply to re-zone "your" land. They might have to apply for that in your stead!)

Re:Rumble Turns Off Access in Brazil Because of Government's... by darth_avocado on Saturday December 23, 2023 @02:50PM (#38747491)
Yes that is how it works. If you want your website to be available in a country, you need to follow local laws. Otherwise, they can shut you down.

It is different in terms of enforcement for someone running a server in their apartment and a corporation. And it depends on the law broken. If you’re running a piracy server in Haiti, the US government can decide they want to shut you down. But if it’s something minor, the government will just ignore you. Companies are different because they’re easier to target when it comes to enforcement.

Re:Rumble Turns Off Access in Brazil Because of Government's... by Zak on Saturday December 23, 2023 @03:33PM (#38747930)
> If you want your website to be available in a country

Well sure, if Brazil wants to build the Great Firewall of Brazil, they can do so.

Re:Rumble Turns Off Access in Brazil Because of Government's... by darth_avocado on Saturday December 23, 2023 @03:49PM (#38748092)
Reminder, that this was in response to the Supreme Court of Brazil ordering this platform to remove certain users. They don’t need to build a firewall, this can be dealt with using international treaties and laws. US government often cracks down on websites that break US law without building a firewall. There are other levers to doing it.

Also, they don’t need a firewall, ISPs can block domain names (which the courts can force them to since they operate in the country) very easily and is used across the world.

Re:Rumble Turns Off Access in Brazil Because of Government's... by Zak on Saturday December 23, 2023 @04:16PM (#38748321)
I would include ordering blocking by local ISPs in "build a firewall". It seems what has happened here is Rumble is doing the blocking. A mechanism existing by which Brazil can force a company with no presence in Brazil to block access to web content strikes me as problematic.

Of course when a company is trying to do business in a country, it needs relationships with local companies, access to banking and payment infrastructure, etc... and governments can certainly prevent those from doing business with it. It doesn't sound like that's the issue here though.

If there is a mechanism by which the government of Brazil can force a company based in the USA or Canada to block visitors to its website, I would like to know the details so I can advocate that the USA withdraw from the relevant treaty. I'd apply the same logic to the USA trying to force foreign websites to shut down or block visitors from the USA.

Re:Rumble Turns Off Access in Brazil Because of Government's... by throwawaysugar on Saturday December 23, 2023 @03:42PM (#38748008)
False dichotomy. The choices aren't "100% open" or "great firewall of $country".

This happens all the time in every country.

Re:Rumble Turns Off Access in Brazil Because of Government's... by TylerE on Saturday December 23, 2023 @10:27PM (#38750812)
Yet people here routinely make that argument to say that US companies should be bound by whatever parts of GDPR that poster finds convenient...

I've asked essentially this same question several times of those people and never gotten more than vague handwaving in response.

Re:Rumble Turns Off Access in Brazil Because of Government's... by midasuni on Sunday December 24, 2023 @12:22PM (#38754941)
If a US company wants to do business in the EU it must follow EU laws. If a Brazilian country wants to do business in the US it must follow US laws.
Re:Rumble Turns Off Access in Brazil Because of Government's... by TylerE on Sunday December 24, 2023 @08:14PM (#38758663)
Define "wants to do business in the EU". If a US-based and targeted site gets one single visitor from the EU, are they now "doing business" there? Your reply is eactly the sort of vague handwaving about.
Re:Rumble Turns Off Access in Brazil Because of Government's... by baobun on Monday December 25, 2023 @12:38AM (#38760127)
Generally, no. It's more about (for example) selling ads to EU companies. The narrative is about EU users but the leverage is via the EU advertisement business.
Re:Rumble Turns Off Access in Brazil Because of Government's... by tibbydudeza on Sunday December 24, 2023 @03:32AM (#38752126)
A court order would have forced all Brazilian ISP's or the international peering operators on Brazilian soil to block it - Rumble simply pre-empted it to make drama around free speech.
Re:Rumble Turns Off Access in Brazil Because of Government's... by claytongulick on Sunday December 24, 2023 @10:14AM (#38753954)
> to make drama around free speech.

I remember when free speech was an ideal that was universally recognized as crucial to a functioning democracy.

"Making drama" by refusing to participate in a censorship program strikes me as admirable.

What a strange world we live in where so many people sneer at the concept of free exchange and the marketplace of ideas, and those that seek to support it.

Re:Rumble Turns Off Access in Brazil Because of Government's... by midasuni on Sunday December 24, 2023 @12:21PM (#38754929)
I don’t. I remember when every country and society have different views on freedom of speech and where the limits are.
Re:Rumble Turns Off Access in Brazil Because of Government's... by tibbydudeza on Sunday December 24, 2023 @02:29PM (#38756010)
US concepts are NOT universal - in South Africa we have strong laws against racist hate speech - call somebody a local slur for black person (k word) here you going to get prosecuted and fined and perhaps even jail never mind being dragged on social media.

We call it "crimen injuria" in our laws - right to dignity is defined in our constitution and frankly this has NO place in our society considering our history.

Re:Rumble Turns Off Access in Brazil Because of Government's... by claytongulick on Sunday December 24, 2023 @06:07PM (#38757911)
You don't remember when free speech was an ideal for democratic societies?

You must live in a very different world than I do.

"the end of law is not to abolish or restrain, but to preserve and enlarge freedom. For in all the states of created beings, capable of laws, where there is no law there is no freedom." - John Locke

Re:Rumble Turns Off Access in Brazil Because of Government's... by midasuni on Monday December 25, 2023 @01:48AM (#38760410)
Certainly never been in the US. The US decides holocaust denial is fine, but saying “I’m going to kill the President” isn’t. Other countries have different views. The US is happy to arrest people who work for companies who disagree with US limits on free speech who happen to visit the US (Skylarov), and even to use its economic might to get other countries to uphold its anti free speech agenda (Kim Dot Com)
Re:Rumble Turns Off Access in Brazil Because of Government's... by claytongulick on Monday December 25, 2023 @01:51PM (#38765023)
So, because we fail to meet it, the ideal isn't valuable?
Re:Rumble Turns Off Access in Brazil Because of Government's... by tibbydudeza on Wednesday December 27, 2023 @07:22AM (#38781297)
Not absolute free speech - there are limits.
Re:Rumble Turns Off Access in Brazil Because of Government's... by midasuni on Sunday December 24, 2023 @12:13PM (#38754873)
Sam’s pizzas in Albany don’t have to do anything with Brazilian law. However if it wants to do business in Brazil it has to follow those laws.

I don’t do business in North Korea so I’m not interested in upholding their law. I do do business in France so I have to obey their laws.

There tends to just be one country which holds its domestic laws as relevant to people not doing business in their country.