Live data from Hacker News

Tell HN: Docker pull fails in Spain due to football Cloudflare block

news.ycombinator.com

241–250 of 444 posts

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#241

Maybe it’s time to reflect upon the reliance on centralized services? Not long ago docker hub started rate limiting access and we all turned to blanket solutions like the GitLab registry cache. I wonder if the IPFS distributed docker registry thing still exists/works.

This isn't really about centralization. ISPs are blocking at the IP level, not Docker Hub specifically. You could self-host a registry behind Cloudflare and still run into the same thing.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#242
post #108

This is the moral equivalent of shutting the water off for a whole city because one dude's house has a leak. The harms to society clearly and obviously outweigh any possible benefits to society. But if that one dude has the power to shut it all off, and doesn't care...

[flagged]

Just so everyone here has the full picture: the source linked — Assemblea Nacional Catalana — is not a human rights watchdog, an international observer, or a journalistic outlet. It is the main pro-independence criminal activist organization in Catalonia. Citing them as evidence of Spanish human rights abuses is a bit like citing the murderer's wife as an impartial witness.

For context, Spain is a full constitutional democracy, subject to the jurisdiction of the European Court of Human Rights, with a free(ish) press, independent judiciary, and regular elections — none of which Assemblea itself disputes, because it participates in all of them. The events OP is referencing (the 2017 independence referendum aftermath) were reviewed by European courts, and the outcomes were, shall we say, not quite the narrative Assemblea sells on its website.

If there are genuine, documented human rights concerns, I'd welcome impartial sources from the Supreme Court or the ECHR.

What I'd push back on is treating a political lobby's own press releases as neutral reporting. You should do better than that here, OP.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#243

Earlier quoted context omitted.

> It’s precisely because CloudFlare isn’t responding like other CDNs to reasonable demands to cut off pirate origin sites that this mess exists. If they reacted quickly to remove configurations that are obviously facilitating copyright infringement, Spain wouldn’t resort to full scale ASN blocking. Apropos of anything else, CF is (reasonably) requiring a court order to remove offending material rather than just "well…

At least the DMCA in the U.S. has guardrails: not just anyone can send a takedown demand for everything. The requester has identify the works and declare under penalty of perjury that they are operating on the behalf of the owner. I imagine the equivalent EU law has similar requirements. CloudFlare uses legal chicanery to try to subvert the DMCA by claiming that because they’re not the origin server, they’re not subj…

Nobody cares about the DMCA guardrails and they are never meaningfully enforced. Case in point, Anthropic DMCAing thousands of repositories that simply mentioned the word "claude".

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#244
post #30

Heh, lucky you, at least you get a message. My ISP just drops traffic to the affected IPs. No ping, no traceroute, just a spinner in the browser until it says "page not found". Every response and comment from LaLiga, the football organization responsible for this, has been so far that this is a minor issue that only affects a few bunch of nerds who talk about "docker images" or "github repositories" or "whatever that…

It's ridiculous and wrong what LaLiga does. But it's also a weakeup call to consider ditching cloudflare's centralization.

I agree with this take (that it’s a wake up call). Makes one question their entire app design and if using Cloudflare is “good enough” for managing CDN, tunnels, etc. for their apps.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#245

Interesting alternative. Cloudflare (market cap $58B) buys La liga (market value $5 billion), drops suit.

Real Madrid alone is more than $5B ? Maybe you mean to say league association is worth 5B ? That seems too high the association does not have lot of margins they pass through most of their revenue to the clubs .

The last domestic TV deal they signed recently was worth $6B for 5 seasons or so, which is what you are proposing they buy.

In enterprise value terms that $1B/year growing 6 %YoY is worth a lot more than $5B.

In contrast Cloudflare has a $2.5B revenue albeit growing much faster but also has much smaller earnings or free cash flow, I.e. money they are not spending to make their current revenue.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#246
I found out about this a month ago when a confused Spanish user showed me all downloads on https://apkmirror.com (powered by Cloudflare R2) are blocked in Spain during LaLiga soccer matches https://x.com/i/status/2030361569691898237. It was so idiotic, I couldn't believe it. Glad it's getting more attention now.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#247
[Meta comment]

Humankind is not doing well with implementing new policies. We should really strive for each new policy (like in this case - blocking access to some parts of internet during soccer games):

- Consider running policy in small scale scenario (e.g. testing blocking in small parts of Spain before whole country rollout)

- Implement channels to gather info from those who are faced with results of policy implementation (in this case: the op got webpage with description why the page is blocked - a bit of sanity! It would be better if it was served with HTTP code 451)

- Policy instructions

- When deciding on policy put a date at which policy should be reconsidered and revised using data collected during the time when it was in effect

- ... and some more I have not thought about.

Let's strive to cultivate this principles in all life areas where we can affect how new policies are implemented.

(edit: linebreaks)

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#248

Earlier quoted context omitted.

What would prevent a pirate site operator from registering a domain a few months in advance and sitting on it in the meantime? How do you propose customers ought to be vetted? Why should a host be expected to take on the duties of a hall monitor? Isn't that the judiciary's job? I think it is actually Spain using their residents as hostages in an attempt to extort Cloudflare and other large providers. The current situ…

> What would prevent a pirate site operator from registering a domain a few months in advance and sitting on it in the meantime? It's driving up the cost and expenses. Operators of legitimate sites don't have to worry during that probation time about anything with the exception of customers in Spain during LL match hours. LL has ~10 matches / weekend (Fri/Sat/Sun/Mon), that means pirates have to have about 40 domains…

> It's driving up the cost and expenses.

That's an interesting point. Are their margins so slim that they can't afford less than ~$50 per domain? I'm not familiar with their revenue model.

This is the sort of thing that could be done via the legislature if Spain were serious and playing by the rules. They could require ISPs to do DNS filtering based on domain age during matches. If they really wanted to do service level filtering they could require hosts such as CF to perform geoblocking in a similar manner during matches.

> Dangerous stuff (e.g. streaming) could only be made available upon a security deposit.

Let's set aside for a moment that I think this suggestion is completely absurd. Are these sites using some prepackaged streaming solution? Do you not realize that I can stream video from any machine using software I control? To an approximation the only thing required to scale streaming up to lots of customers is raw bandwidth. If you don't accommodate seeking you can potentially serve thousands of simultaneous streams with a single cheap VPS (in practice this won't work because a cheap VPS won't have a 100 Gbit pipe).

> So why shouldn't you need to pass some set of verification

Since when have you needed a license or verification to publish? You're acting as though a global impressum requirement is the natural state of affairs. Your demand is an affront to free society.

> we let ISPs get away with ignoring abuse@ emails

That seems like an entirely separate matter, if it's even true at all.

> No

Ah yes, a rousing argument. Obviously you must be correct.

You've failed to make a convincing case as to why deciding what is and isn't permissible isn't the job of the judiciary. If Spain wants to change that then they need to pass laws to that effect but in practice those won't have global reach. Thus they might (for example) engage in international lobbying efforts to incorporate a DMCA equivalent for illegal streaming into the global copyright regime.

Failing the above it is Spain that is in the wrong here and I'm happy to see that CF isn't going along with their overbearing and entirely unreasonable nonsense.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#250
post #86

Earlier quoted context omitted.

The companies relying on cloudflare won't be in Spain. If you buy a GPS tracker by a Canadian company, developed in India, manufactured in China, they are unlikely to know, even it they cared, that a single country that accounts for a tiny percentage of their sales breaks fundamental internet infrastructure on the regular "because fútbol y dinero". And when purchasing a product, there's no "bill of materials" telling…

>fundamental internet infrastructure I'm not saying this situation isn't bullshit, but the bigger problem is that CloudFlare is now "fundamental internet infrastructure". This is precisely the situation that the internet was designed to prevent. Yesterday I got stuck in endless CloudFlare CAPTCHA's, trying to access theretroweb.com. I had to give up. Many such cases. I hate CloudFlare so much, it's unreal.

It takes very little money to rent massive botnet capacity to perform crippling DDOS attacks. Unfortunately there are only very few CDNs capable of absorbing that kind of attack.
Post reply on HN