Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare misidentifies Hetzner IPs as being located in Iran

gitlab.com

Post reply on HN
Print view View original

161–170 of 245 posts

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#161

Post by chipdart »

grishka wrote: post #153
chipdart wrote: post #151

Earlier quoted context omitted.

Random people in Russia complaining about the inconvenience of not being able to travel to Europe because of Russia's invasion of Ukraine and all around imperialism is also an expected effect. It's also telling that the reaction from those affected is to complain that sanctions should be reverted because they both don't work and are inconvenient and a nuisance.

I don't see how "they don't work" and "they are inconvenient" are contradictory statements. They would've been if there were feedback mechanisms that we could use to communicate our point of view the government, but there aren't any, so in the end it's just a punishment for having been born in a wrong place at a wrong time.

> I don't see how "they don't work" and "they are inconvenient" are contradictory statements. They would've been if there were feedback mechanisms that we could use to communicate our point of view the government, but there aren't any, so in the end it's just a punishment for having been born in a wrong place at a wrong time.

The feedback mechanism you're complaining about is a problem on the side of those being inconvenienced. If they want to complain, they need to direct their complains to their own regime, and address the problems they are causing everyone around them.

It's also very telling that the reaction is to complain about mild inconveniences while turning a blind eye to the whole war of aggression, terrorism, and pervasive threats of global Armageddon from their very own government. That, strangely enough, is not an inconvenience nor an issue requiring attention.

Tourism seems to be a right to them, but others don't even have a right to exist?

Does that warrant any accountability at all, or does the blame lie always elsewhere?

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#162

Post by chipdart »

voidr wrote: post #152
chipdart wrote: post #149

Earlier quoted context omitted.

> In my own opinion, a good step in the right direction would be if we could travel to European countries as easily as we used to be able to. I don't agree. Russia's regime threatens Europe with invasion and nuclear bombs almost on a daily basis, and vilify everyone who doesn't enthusiastically support their invasion of Ukraine. A few years ago Russia even had a nuclear bomber circling the coast of western Europe. Th…

[flagged]

> European here, Russia is not threatening anyone here, not sure who told you that nonsense.

I call bullshit. European here. Even if somehow you somehow ignore Georgia or Ukraine, and turn a blind eye to the baltic nations and pretend that Poland doesn't exist, for decades we can't go a single month without Russia throwing any veiled and not so veiled threat. Either tanks in Berlin in x days, tanks in Lisbon in x weeks, sinking Britain with nuclear tsunamis, etc etc etc.

And I'm not even touching on the terrorist and sabotage campaigns.

You need to be wilful ignorant to pretend Russia hasn't been threatening everyone left of right for decades.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#163

Post by wiredfool »

kodama-lens wrote: post #14
preisschild wrote: post #2

Yeah, google does it too. I could not use certain Hetzner IPs to download container image on my kubernetes nodes at all. Even the official registry.k8s.io registry is hosted on Google Cloud Services and basic stuff like the pause image cant be pulled.

I can confirm this. All Google container registries, including the official k8s repos are unaccessible via some hetzner ipv4 domains. There is a GitHub issue that also covers the problem and it states you should report thos IPS to their support. I did but support says they can't do anything until the ip region list is updated. IPv6 as a workaround is also difficult because some of the image I need are on GitHub and t…

For a while, Google was blocking IPv6 from Linode, to similar effect.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#164

Post by grishka »

chipdart wrote: post #161
grishka wrote: post #153

Earlier quoted context omitted.

I don't see how "they don't work" and "they are inconvenient" are contradictory statements. They would've been if there were feedback mechanisms that we could use to communicate our point of view the government, but there aren't any, so in the end it's just a punishment for having been born in a wrong place at a wrong time.

> I don't see how "they don't work" and "they are inconvenient" are contradictory statements. They would've been if there were feedback mechanisms that we could use to communicate our point of view the government, but there aren't any, so in the end it's just a punishment for having been born in a wrong place at a wrong time. The feedback mechanism you're complaining about is a problem on the side of those being inco…

> If they want to complain, they need to direct their complains to their own regime

And get arrested and charged with "discrediting the armed forces", right. Must be nice to write all that from the comfort of your Western home.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#165

Post by input_sh »

golergka wrote: post #130
input_sh wrote: post #45

Earlier quoted context omitted.

The adversary is the government and businesses associated with the government, not all of the 90 million people living in Iran.

As long as government controls the country, it's the country as a whole. Because that's where the government gets its resources.

That's just not true. You don't know what you're talking about.

I encourage you to skim through the sanctions. I promise you that you will find plenty of exemptions telling you not to block every Iranian citizen from communicating, not to block them access to information, not to block them from free-to-use services, not to prevent them from traveling etc etc.

If you just cut the whole country off the internet, how do you expect them to organise towards overthrowing the government? Via carrier pigeons?

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#166

Post by skjoldr »

thayne wrote: post #155
anonzzzies wrote: post #129

Earlier quoted context omitted.

You don't have to delete as soon as they cancel; you can store it in an encrypted backup which you remove after 90 days (and throw away the key). There are a lot of 'for a reasonable period' things; meaning, you cannot store PII (including IPs) forever and you cannot store it at all in case you do not need it in the first place for your app to function (example; SaaS asking for my home address which they don't ship a…

> you can store it in an encrypted backup which you remove after 90 days (and throw away the key) Sure. But that is much easier said than done. Especially if your previous strategy was to just keep everything, because storage is cheap, development cost is expensive, and then the data will still be there if the customer decides to return in a few years. And in many (most?) cases it's not like you just have a single fi…

I see this and I feel I must ask: why would you EVER engineer ANY application under the idiotic assumption that none of your users will ever want to remove the data that they had stored in it?! Absolutely baffling. Of course, if a business is that short-sighted and careless, it will struggle to implement GDPR.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#167

Post by skjoldr »

dns_snek wrote: post #91
literallycancer wrote: post #83

Earlier quoted context omitted.

Sadly the EU doesn't really communicate this very well, and doesn't care to call out outright propaganda from ad tech and surveillance businesses, but the regulation is not actually hard to be compliant with. It literally just asks that you don't spy on people. That's it. Not spying on users? Great, you don't even have to do anything. I would be extremely surprised to see any attempt at enforcement against a website…

It's slightly more involved than this, but not extraordinarily so. For example seemingly innocuous implementations like loading fonts directly off Google Fonts without consent (i.e. providing Google with information about visitors' browsing habits) would technically be on the wrong side of the GDPR, but I think it's very unlikely that anyone would complain about it, legally speaking.

There already exist ways to proxy those requests in ways that avoid exposing anything about the visitors to Google. It's in the grey area wrt Google's own ToS, but then, it's that or GDPR.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#168

Post by skjoldr »

reisse wrote: post #44
dathinab wrote: post #24

Earlier quoted context omitted.

but the traffic is _clearly coming from Germany_, the issue is that cloudflare/google have tagged certain ip addresses as Iranian no matter where the traffic actually originates from

> but the traffic is _clearly coming from Germany_ How do you know that if the only thing you see on the receiving side is an IP address, which is marked as Iranian?

BGP full view and traceroutes? It's pretty hard to fake the path that a packet takes to that IP address.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#169

Post by reassess_blind »

I was recently reviewing my Google account session history and saw an active session from some small town in western China. Obviously freaked out, rolled all passwords, spent hours scouring what they could’ve had access to, etc.

Only for the next day, when Google updates the exact same sessions location to my exact real location on another continent.

Google of course won’t show the IP address of sessions anymore, just the “location” so there was no way of confirming beforehand.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#170

Post by paraknight »

RadiozRadioz wrote: post #37

I'm frequently reminded how thankful I am to live in a country with a strong, positive international reputation. Even ignoring actual quality-of-life stuff associated with where I live - simply not being from a country with a "dodgy" reputation makes many things so much easier. I don't have to think about blocked websites. Companies accept my payments. Couriers ship to me. With my passport, I walk straight to the fro…

For half my life I had an Egyptian passport, and for the other a German passport. Having experienced both sides, that bit of paper is without a doubt the most valuable thing I own.

It's hard to quantify the kinds of doors it has opened for me. I was able to get a scholarship to study in the UK that covered home/EU rates (a third of international rates, while I might not have been able to get even a student loan otherwise), get government funding for a PhD that would not have been accessible to me otherwise and other grants, travel to international conferences without thinking twice about visas (unlike many colleagues) meeting people that would impact my career and skipping all sorts of and barriers along the way, and never had to worry about deportation because of the EU settlement scheme, easily become a founder (no visa sponsorship needed), and so much more! Even travelling/business in the the middle East, being German rather than Egyptian is an entirely different life, one that my cousins cannot even begin to imagine.

There's a parallel universe where I'm stuck making ends meet in Cairo where I was born, dreaming of a brighter future, feeling all my potential fade away. I know because my immediate family is that version of me - no less talented or worthy of the opportunities I got because of my nationality!

I see the kind of freedom that I have because of that passport as one of the biggest modern injustices.

Post reply on HN