Comment on ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm by Impossibly Stupid

Experts say it’s questionable whether TV apps with proxy SDKs can obtain meaningful consent from users

Some "Experts" those are; it's actually not questionable at all. That consent usually does not lie with the user, but their ISP. I don't know of a single one that has an AUP that allows proxies. My ISP's prohibitions lists:

Allowing others (not including members of your household) to use your US Internet account.

This is entirely an enforcement problem. And the ISPs aren't enforcing it because very few other ISPs are holding their feet to the fire over abusive traffic. That's why I will not hesitate for a second to drop even the largest organizations into my firewall when I see clearly "inhuman" traffic coming from their network space.

one of those control domains was not new: ninjatech[.]io

Which, hilariously, appears to be protected by Cloudflare. And, yes, all of CLOUD14 is already in my firewall. Thanks for asking!