1. The actions in the article don't seem possible. Google search is forcibly https, using HSTS. In Chrome and Clank (android), maybe others, google is additiona

1. The actions in the article don't seem possible. Google search is forcibly https, using HSTS. In Chrome and Clank (android), maybe others, google is additionally cert-pinned. It is not possible, through DNS or any other trick, to get forcibly navigated away from the google search page or to have content injected. He says he "turned to a google search on his phone" but he must have done something else before actually searching google, to get the injected notice. I feel this is an important point. 2. This doesn't meet the requirements of the law. The person using the internet, especially at some arbitrary moment, is not likely the subscriber. The law is that the consumer must be notified, with consumer explicitly defined as the subscriber. Email to the address on record, or an insert in a mailed invoice, or a special mailing, seem the only reasonable ways to meet the requirements of the law.