Live data from Hacker News

Imgur geo-blocked the UK, so I geo-unblocked my network

blog.tymscar.com

81–90 of 194 posts

Re: Imgur geo-blocked the UK, so I geo-unblocked my network

#82

Earlier quoted context omitted.

This is not why imgur have left though, they didn't want to comply with Data Protection laws.

The "online safety act" introduced mandatory age verification starting in July 2025. The government announced "plans to fine Imgur after probing its approach to age checks and use of children's personal data" in September 2025 [1] Are you telling me those were unrelated? How are you going to fine a website over age checks without the law that requires age checks? [1] https://www.bbc.co.uk/news/articles/c4gzxv5gy3qo

[deleted]

Re: Imgur geo-blocked the UK, so I geo-unblocked my network

#83
post #57

Earlier quoted context omitted.

Two devices I use - both running Debian, and both being open-source hardware to some degree or other: PC Engines APU2, AMD x86_64, 4-core, 4GiB, 3x Gigabit Ethernet, 3 x mini PCIe, SIM slot, USB 3, Serial, SATA ports. Mine has dual band WiFi in one mPCIe, SSD in another. Turris Mox, Marvel aarch64. This can expand via plug and go via a range of extension modules. I've got one with 25 Gigabit (3 x 8-port modules) Ethe…

Just a heads up that PC Engines is winding down. The chip they use in the APU2 is EOL, and they've decided to shut down altogether. https://pcengines.ch/eol.htm

Wildly ironic that an EU company doesn't ship to the EU.

Regulatory compliance shouldn't be hard. The idea is to quell negative externalities, not to shut off innovation itself.

> Because of unbelievably bureaucratic recycling regulations, PC Engines will NOT sell directly to end users within the EU.

https://pcengines.ch/order.htm

> EU - a single market ?

> Far from it, there are separate registration and recycling schemes for each of the 28+ EU member jurisdictions (and even a few of their provinces). What part of COMMON MARKET was so hard to understand for EU lawmakers ? Since there is no single registration available, and separate registration would involve mindboggling complexity, bureaucracy and costs, we do not sell to EU end users until the EU gets their act together. Please order from EU based distributors, or as a business customer.

> Business customers are expected to meet their obligations by registering in the EU countries they sell in.

https://pcengines.ch/recycle.htm

Re: Imgur geo-blocked the UK, so I geo-unblocked my network

#84
post #75

I wonder how did you overcome https. As I understand the request that goes to rerouted Imgur proxy will have different cert.

AIUI, nginx doesn't terminate the SSL/TLS connection - it is just passed through as is. `ssl_preread on` extracts the server name from the Server Name Indication (SNI) send as part of the TLS handshake, which is unencrypted.

I just set up a similar system (Debian LXC permanently connected to a VPN, nginx proxying imgur.com and all its subdomains with the rest being dropped), and it works quite well. Setting DNS records for imgur.com and {api,i,s}.imgur.com seems to be sufficient to get the site and inline images working (not 100% if all are needed - I haven't fully tested it yet).

Re: Imgur geo-blocked the UK, so I geo-unblocked my network

#86
This can be done on UniFi using policy based routing too trivially if anyone wants to repeat this.

Instructions using the unifi mobile app as it’s what I have to hand:

1) download wireguard conf file from vpn provider. On mobile app settings -> vpn client -> add new -> wireguard. Upload the file and save it

2) settings -> policy engine -> policy based routes. New. Select what to route -> specific traffic. Source = all devices. destination = domain name. Here add any domains you like. Interface = add the vpn you added in step 1

Re: Imgur geo-blocked the UK, so I geo-unblocked my network

#88

This can be done on UniFi using policy based routing too trivially if anyone wants to repeat this. Instructions using the unifi mobile app as it’s what I have to hand: 1) download wireguard conf file from vpn provider. On mobile app settings -> vpn client -> add new -> wireguard. Upload the file and save it 2) settings -> policy engine -> policy based routes. New. Select what to route -> specific traffic. Source = al…

The only downside is this doesn’t work if you have IPv6 enabled as UniFi Network still allows those to bypass the VPN.

I ended up making a long list of firewall rules to block specific sites IPv6 ranges, which worked until I hit cloudflare backed sites.

I’m really hoping UniFi start supporting IPv6 WireGuard soon.

Re: Imgur geo-blocked the UK, so I geo-unblocked my network

#90
post #83

Earlier quoted context omitted.

Just a heads up that PC Engines is winding down. The chip they use in the APU2 is EOL, and they've decided to shut down altogether. https://pcengines.ch/eol.htm

Wildly ironic that an EU company doesn't ship to the EU. Regulatory compliance shouldn't be hard. The idea is to quell negative externalities, not to shut off innovation itself. > Because of unbelievably bureaucratic recycling regulations, PC Engines will NOT sell directly to end users within the EU. https://pcengines.ch/order.htm > EU - a single market ? > Far from it, there are separate registration and recycling s…

Being based in Switzerland, which is not a member state, PC Engines is not an EU company.
Post reply on HN