Full Report
Breeze Liu has been a prominent advocate for victims. But even she struggled to scrub nonconsensual intimate images and videos of herself from the web.
Analysis Summary
# Main Topic
The systemic failure and extreme difficulty faced by a prominent victim advocate, Breeze Liu, in removing nonconsensual intimate images and videos (NCII/revenge porn) of herself from the internet, highlighting major shortcomings in platform content moderation, particularly concerning cloud service providers, and the broader obstacles for victims seeking digital erasure.
## Key Points
- Breeze Liu struggled for years to scrub approximately 400 nonconsensual images and videos of herself from the web, which originated from nonconsensual filming when she was 17.
- The content multiplied online, including subsequent dissemination on other porn websites and the creation of intimate deepfake videos.
- Microsoft faced significant criticism for prolonged inaction, reportedly failing to remove about 150 explicit images of Liu stored on its Azure cloud services for eight months, despite repeated pleas. Action was reportedly only taken after aggressive, in-person confrontation by Liu and advocates at a conference.
- The ordeal highlights the severe emotional toll on victims, including suicidal ideation.
- Victims face difficulty when age in the imagery is disputed or hard to confirm, as this can legally bar some aid organizations (like the Cyber Civil Rights Initiative mentioned) from assisting.
- Liu is now an entrepreneur developing Alecto AI to use face-recognition tools to assist victims in locating and removing NCII.
- Legislative action in the U.S. progressed with the reintroduction and eventual Senate passage of a bill (The "Take It Down Act") to require websites to remove unwanted explicit images within 48 hours, backed by Liu.
## Threat Actors
- **Uploaders/Distributors:** Anonymous individuals responsible for the initial and subsequent uploads of the NCII.
- **Cloud Infrastructure Abusers:** Mentioned in parallel context regarding Azure abuse, suggesting actors who circumvent safeguards to host harmful content.
## TTPs
- **Initial Dissemination:** Uploading nonconsensual intimate imagery to major public platforms (e.g., PornHub).
- **Distribution & Persistence:** Saving, cross-posting, and duplicating content across numerous pornographic websites.
- **Content Modification/Creation:** Using the original imagery to create deepfake intimate videos.
- **Infrastructure Exploitation:** Hosting content on major cloud services (Microsoft Azure) where content moderation delays occurred.
- **Systemic Obstruction:** Platforms and infrastructure providers exhibiting slow or deficient response times to takedown requests.
## Affected Systems
- **Hosting Platforms:** Pornographic websites (explicitly PornHub mentioned as a point of initial spread).
- **Cloud Infrastructure:** Microsoft Azure (failure to remove hosted content).
- **Victim Environment:** The victim (Breeze Liu) experienced severe mental health impact and professional disruption.
- **Legal/Regulatory System:** The complexity of navigating local law enforcement (as search warrants were ineffective overseas) and corporate compliance.
## Mitigations
- **Platform/Cloud Remediation:** Microsoft has committed to improving response times, aiming for action within 12 hours for such priority content (though Liu's experience took eight months).
- **Advocacy & Legal Change:** Advocacy led to progress on the "Take It Down Act" in the U.S. Congress, which threatens financial penalties ($50,000 per violation) for failure to remove unwanted explicit images within 48 hours.
- **Victim-Led Technology:** Development of specialized tools (Alecto AI) using face recognition to proactively detect and facilitate the removal of shared NCII.
- **Crisis Support:** Availability of national support lines (e.g., 1-800-273-8255 or text HOME to 741-741).
## Conclusion
The case of Breeze Liu underscores a critical failure in the digital ecosystem where technology giants (cloud providers) lag significantly behind content publishers in responding to severe violations like NCII, prolonging victim suffering. While legislative efforts are advancing towards stringent takedown mandates, victims currently rely on arduous multi-year efforts, personal resources, and direct confrontation to achieve digital erasure. The threat landscape is evolving with deepfakes, compounding the difficulty of remediation for victims.