Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare misidentifies Hetzner IPs as being located in Iran

gitlab.com

Post reply on HN
Print view View original

211–220 of 245 posts

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#211

Post by solardev »

johnklos wrote: post #146
anonzzzies wrote: post #132

Earlier quoted context omitted.

It is extremely hard to stop DDOS attacks without CF; my hoster has DDOS protection, but when there was a very large attack on our site, only CF could remedy it, and did so immediately when we panicked-moved dns and switched on bot fight. Entire attack that my hoster couldn't stop was gone. How do you do this without CF if you are a small company?

There are *so* many options out there. Saying you don't know how to do it without using an evil, monopolistic company is like saying you can't host email without using Google. It's lazy, untechnical and just plain untrue.

Like what? When I last tried to DIY it, weeks of work resulted in maybe a 20% decrease in spam traffic. Then we tried Cloudflare and overnight it pretty much went to zero.

That was like ten years ago though. What are some good alternatives?

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#212

Post by chipdart »

voidr wrote: post #209
chipdart wrote: post #162

Earlier quoted context omitted.

> European here, Russia is not threatening anyone here, not sure who told you that nonsense. I call bullshit. European here. Even if somehow you somehow ignore Georgia or Ukraine, and turn a blind eye to the baltic nations and pretend that Poland doesn't exist, for decades we can't go a single month without Russia throwing any veiled and not so veiled threat. Either tanks in Berlin in x days, tanks in Lisbon in x wee…

Yeah, no superpower would ever be bothered by another superpower wanting to put bases and missiles next to them.... https://en.wikipedia.org/wiki/Cuban_Missile_Crisis

> Yeah, no superpower (...)

Bullshit. Finland joined NATO and if anything Russia pulled out their military presence near the border.

Even Putin himself debunked the nonsense tall tale about NATO expansion. Are we expected to keep pretending this is a concern?

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#213

Post by chipdart »

thegrim33 wrote: post #94
Dylan16807 wrote: post #84

Earlier quoted context omitted.

The burden of not tracking people is quite small.

As someone that knows next to nothing about it, I was curious and googled how to adhere to the GDPR, and read through the top recommended article. Here's some choice quotes: "Complying with the GDPR is a huge undertaking" "GDPR compliance (occupies) a huge amount of IT time and resources" "Moving your organization into GDPR compliance is a process you ideally started long ago" The article links to some ICO GDPR data…

> "This is onerous because Data Subjects can make requests in writing or verbally, and you need to be able to comply with the requests “without undue delay"

I'm sure each case might be different, but I can't but help to think this is just a cheap excuse to inflate the work that is required ro comply with data Protection Regulation.

I've worked already on a few projects involving data protection, and they all boil down to two steps:

- only store anonymous data. No personal data? No problem.

- if you need to store personally identifiable information, support deleting it on request.

It might be easier to incorporate these requirements at the design stage, but by now this is a very basic set if requirements.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#214

Post by aguaviva »

chipdart wrote: post #210
grishka wrote: post #207

Earlier quoted context omitted.

> If those hypothetical tourists don't feel strongly about their own nation We do feel strongly about it but we can't act on these feelings. The government is not taking any feedback. Again, it's like screaming into the void at something you can't change, like weather. Except in this case, if you scream loudly enough, you will get arrested and charged with "discrediting the Russian armed forces" or "spreading fake in…

> We do feel strongly about it but we can't act on these feelings. The government is not taking any feedback. That's a problem you need to solve. Again, it's very telling that this only registers as a concern when the subject of mild inconveniences, such as not benefiting from the privilege of visiting some countries as tourists, is brought up. It's also very telling that the only argument that's expressed in favour…

Again, you keep bringing up the "mild inconveniences" angle, but that very clearly wasn't the commenter's complaint about the sanctions at all.

You're very plainly attacking a straw man here. Talk about puerile.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#215

Post by grishka »

chipdart wrote: post #210
grishka wrote: post #207

Earlier quoted context omitted.

> If those hypothetical tourists don't feel strongly about their own nation We do feel strongly about it but we can't act on these feelings. The government is not taking any feedback. Again, it's like screaming into the void at something you can't change, like weather. Except in this case, if you scream loudly enough, you will get arrested and charged with "discrediting the Russian armed forces" or "spreading fake in…

> We do feel strongly about it but we can't act on these feelings. The government is not taking any feedback. That's a problem you need to solve. Again, it's very telling that this only registers as a concern when the subject of mild inconveniences, such as not benefiting from the privilege of visiting some countries as tourists, is brought up. It's also very telling that the only argument that's expressed in favour…

> That's a problem you need to solve.

I'm open to suggestions about possible solutions to this problem.

And by the way, I'm not talking about myself as a tourist right now. I was saying that Russian people in general being able to easily visit European countries would lessen the Russian official propaganda's grip on the population.

And those sanctions against the civil aviation industry are nothing but straight vandalism.

And the inconveniences aren't mild.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#216

Post by voidr »

chipdart wrote: post #212
voidr wrote: post #209

Earlier quoted context omitted.

Yeah, no superpower would ever be bothered by another superpower wanting to put bases and missiles next to them.... https://en.wikipedia.org/wiki/Cuban_Missile_Crisis

> Yeah, no superpower (...) Bullshit. Finland joined NATO and if anything Russia pulled out their military presence near the border. Even Putin himself debunked the nonsense tall tale about NATO expansion. Are we expected to keep pretending this is a concern?

[flagged]

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#217

Post by menacingly »

Dylan16807 wrote: post #84
menacingly wrote: post #80

Earlier quoted context omitted.

I'm surprised I don't see it more. You can't impose a regulatory burden more troublesome than your traffic is worth

The burden of not tracking people is quite small.

sum the amount of "you simply " in this thread, then account for the fact that we're talking about running afoul of a regulation if you don't understand it, and you end up with a hassle. I'm not weighing in on whether or not it's bad, I'm just saying what I said. If you aren't accounting for a significant portion of revenue to justify it, you're going to get blocked because you represent a liability.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#218

Post by sam_lowry_ »

sam_lowry_ wrote: post #175
grishka wrote: post #111

Earlier quoted context omitted.

> For example, Apple store is working in Russia. Apple hasn't officially sold any hardware in Russia in the last 2+ years. Any Apple devices you can buy come from "parallel import" and are priced 1.5x compared to other countries. As far as I know, the only way you can pay on the app store is from your prepaid balance at some carriers. Play store doesn't accept payments at all, it pops up a modal saying "payments in R…

> They just make us angrier because there's nothing we can do besides wait it out. You are not angry enough. Get angrier, go out, kill the highest sitting official you can get your hands on, then be beaten, jailed, signed up to war where you will die and receive a posthumous medal?

Correction: Get angrier, go out, kill the highest sitting official you can get your hands on, then be beaten, jailed, signed up to war where you will detract to the Ukrainian side, fight gloriously and be the first ever Ukrainian solder to enter Moscow, inscribing you name in the annals of Victory next to Julius Caesar.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#219

Post by aguaviva »

voidr wrote: post #209
chipdart wrote: post #162

Earlier quoted context omitted.

> European here, Russia is not threatening anyone here, not sure who told you that nonsense. I call bullshit. European here. Even if somehow you somehow ignore Georgia or Ukraine, and turn a blind eye to the baltic nations and pretend that Poland doesn't exist, for decades we can't go a single month without Russia throwing any veiled and not so veiled threat. Either tanks in Berlin in x days, tanks in Lisbon in x wee…

Yeah, no superpower would ever be bothered by another superpower wanting to put bases and missiles next to them.... https://en.wikipedia.org/wiki/Cuban_Missile_Crisis

Except there were no missiles in Ukraine, nor any plans to put them there.

And Ukraine's NATO membership application was rejected, by NATO, 16 years ago.

Your analogy holds no water whatsoever.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#220

Post by johnklos »

solardev wrote: post #211
johnklos wrote: post #146

Earlier quoted context omitted.

There are *so* many options out there. Saying you don't know how to do it without using an evil, monopolistic company is like saying you can't host email without using Google. It's lazy, untechnical and just plain untrue.

Like what? When I last tried to DIY it, weeks of work resulted in maybe a 20% decrease in spam traffic. Then we tried Cloudflare and overnight it pretty much went to zero. That was like ten years ago though. What are some good alternatives?

You should design your site to be resilient to spam traffic, not try to filter until it's gone. By filtering, you've become unreachable by much of the world, spammers or not.
Post reply on HN