Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Docker pull fails in Spain due to football Cloudflare block

news.ycombinator.com

Post reply on HN
Print view View original

211–220 of 444 posts

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#211

Post by out_of_protocol »

necovek wrote: post #188
tryauuum wrote: post #123

Earlier quoted context omitted.

In my country (Russia) the politics followed, now the ISPs block the OpenVPN and wireguard packets. And sometimes the white list mode is enabled, so you cannot connect, with your clever custom VPN solution, to a host outside the country

You should be able to use things like sshuttle or even tunnel through HTTPS whatever you want, right? As you can control both sides of the tunnel with encryption (comes by default), no MITM-ing unless you are forced to use solutions that install and eavesdrop on your secure traffic too.

1) they do protocol sniffing, and any inconsistency (including statistical) gets you blocked 2) "white list mode" which engaged sometimes (poorly implemented atm), means nothing goes outside of country at all (means 99.9% of everything is broken). They really want to become North Korea soon

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#212

Post by HDThoreaun »

amarant wrote: post #168

I had to Google why this happens, blocking cloudflare during football games seems.. Arbitrary, to say the least. Maybe something to do with hooligans trashing entire cities when their team loses? I could almost get behind that, if I thought it would work.. But no, it's apparently to stop piracy!? Turning off half the internet, and mostly the legitimate parts at that (since when do pirates use cloudflare?) seems like…

Pirates use cloudflare because it solves their biggest problem, DOS attacks. Rights owners figured out that they can shut down these sites by DDOSing them which bypasses the courts and can be done instantly, so the pirates put their sites behind cloudflare ddos protection.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#213

Post by bartread »

swiftcoder wrote: post #193
Pay08 wrote: post #178

Earlier quoted context omitted.

So what, do they just block a range of IP addresses and are then done with it?

technically, LaLiga themselves doesn't even do the blocking. They have a court order from some years ago that allows them to compel all the individual ISPs to block any IP addresses they specify, with no oversight or review

This must negatively impact a huge number of businesses. Is there no move for them to all get together to take legal action against LaLiga to stop them doing this?

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#216

Post by chmod775 »

echoangle wrote: post #136
chmod775 wrote: post #33

Earlier quoted context omitted.

The only viable way to even get most of them is to shut down internet access entirely. It's not a realistic solution, unlike blocking a few well known IP ranges belonging to a large corp like Cloudflare. And even if you managed to get them all beforehand, some VPN providers will adapt and keep some servers in reserve, putting them online just as you managed to block the previous ones. Getting around internet censorsh…

You don’t really need to block all, you just need to annoy the users enough that paying is easier. And I think there are enough games to use up the IP reserve pretty quickly and getting new ones every time is pretty annoying.

I can provision a new VPS in about 5s of active work. I'd probably fully automate spinning up new servers and failing over because automatically detecting which got blocked is trivial. Bonus points if you use providers that let you attach multiple IPs to each VPS for cheap. Use some censorship resistant decentralized protocols to provide the next couple IPs to your client software and you're good.

And then they still need to monitor hundreds of VPN providers for whether they have new IPs, which is not neccssarily as easy as just grabbing a list of them. Once they have some, they then need to forward them to the ISPs and ask for them to be blocked. Their process is significantly less friendly to automation.

No country ever won this fight short of total shutdown/disconnects.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#217

Post by bombcar »

sneak wrote: post #166
ryandrake wrote: post #120

Earlier quoted context omitted.

Whenever I get a little down over how much power unelected corporations have in my country, I can at least cheer myself up a little by being thankful that something as stupid as football doesn't have enough power here to control whether or not I have internet access.

It would if it were bigger business in your country. Try torrenting an MCU movie and see what happens to your ISP account.

Someone in Texas torrenting an MCU slop doesn’t disconnect me from half the Internet.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#218

Post by jazzyjackson »

RiverCrochet wrote: post #154
pxc wrote: post #56

Earlier quoted context omitted.

> Heh, lucky you, at least you get a message. My ISP just drops traffic to the affected IPs. No ping, no traceroute, just a spinner in the browser until it says "page not found". This is generally how the GFW works in China. Instead of an overbearing nanny like a school or corporation's DNS blocker, you're left with a sense that you're on a version of the Internet that is just intermittently and somewhat mysteriously…

Your last paragraph: it is sad. But we had successful global networks before the Internet (the PSTN, telegraph) and we'll certainly have global networks after this at some point in human history. Perhaps in the the time between the Internet and what's next, the world will become a bit more mature about a few things.

this is teleological thinking. it's not necessarily the case that things get better over time.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#219

Post by bombcar »

embedding-shape wrote: post #93
encom wrote: post #86

Earlier quoted context omitted.

>fundamental internet infrastructure I'm not saying this situation isn't bullshit, but the bigger problem is that CloudFlare is now "fundamental internet infrastructure". This is precisely the situation that the internet was designed to prevent. Yesterday I got stuck in endless CloudFlare CAPTCHA's, trying to access theretroweb.com. I had to give up. Many such cases. I hate CloudFlare so much, it's unreal.

> This is precisely the situation that the internet was designed to prevent Right, but on the other hand, our constitution and laws are supposed to give us the rights to access a internet where the government cannot block entire companies who host websites, because a few bad websites are hosted there. Not to mention all us freelancers, contractors and just in general computing users, who sometimes want to continue wo…

I’d love for a way to put all my sites behind Cloudflare only during La Liga matches.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#220

Post by integralid »

Dibby053 wrote: post #130

Going to play devil's advocate here but I suspect if Cloudflare had been more cooperative about taking down illegal content, LaLiga would not have resorted to blanket blocking individual IPs. I would really like to understand more about the process that they should follow but didn't / followed but didn't satisfy them / doesn't exist, in order to remove infringing websites quickly from CloudFlare.

I work with actually malicious content (things that make people lose their life savings) and Cloudflare abuse is relatively helpful (compared to most ISPs who just don't care).

They just refuse to take down random things that some media company representatives send their way, without a court order or any oversight. And this is a good thing.

Post reply on HN