The way scrolling is implemented on that page is absolutely abhorrent.
HTML frames in $CURRENT_YEAR!
How to get the whole planet to send abuse complaints to your best friends
101–110 of 125 posts
Re: How to get the whole planet to send abuse complaints to your best friends
#102Earlier quoted context omitted.
> but we do expect you to check it and to resolve any potential issues. That's the important part. If they receive another one (or two, or a few) more abuse reports, they assume it is not fixed, and will expect a response then. Which ends up being annoying.
Well they are hetzner, they should understand the issue. I don't know if they would go through the hassle to verify by themselves by running a capture on a router leading to your server though... I had a similar problem a good decade ago. Was running a game server for a while, and as it is with competitive games, some people get really angry when they lose. At some point I got DDoSed by a udp reflection attack, and a…
This kinda thing is so rough, and I can really relate to the questioning of your own sanity part when everyone around you is insisting something works in a particular way that is just factually incorrect.
I got hired into a pretty old small technology company that has over a decade of tech debt, and "how the whole system works" is different depending on which engineer you're talking to. You have to do a context shift to a different engineering reality just to do basic improvements to the system. Lots and lots of built up confusion over years of incremental changes, some of which under pressure no doubt, some well intentioned half-refactors, some almost dead code...imagine your well established corporate morass and then give it a shoestring budget.
It's scrappy in its own way, but the threads where people advocate "don't worry about the tech debt, if the company succeeds they will have the budget to fix it" don't account for the middle ground of not having huge success but having enough success to continue indefinitely. I guess that could mean you could fix the problem over longer time spans, but people do t stay at orgs like this long enough for that to happen, because the job of fixing it is no fun and you can't just throw huge amounts of money at the problem.
Re: How to get the whole planet to send abuse complaints to your best friends
#103Site seemed to be hugged when posting this comment, so:
Re: How to get the whole planet to send abuse complaints to your best friends
#104There's no in-band solution to this problem, but out-of-band solutions might exist! For example: (1) Notify the destination ISP that you're receiving backscatter. (2) That ISP checks where the packets are coming from, and notifies that ISP. (3) Repeat step 2 until source is found. (4) Quarantine that part of the network until it behaves better. At the end of the day, the internet is people.
Your steps 2&3 require a lot of people to put in work for free to solve someone else's problem.
But they're not arbitrarily-selected people: they're network administrators. Somebody spoofing IP addresses to the point of abuse reports is practically a personal insult to some of them. (Obligatory: https://xkcd.com/705/)
Re: How to get the whole planet to send abuse complaints to your best friends
#105[dead]
Re: How to get the whole planet to send abuse complaints to your best friends
#106Earlier quoted context omitted.
> the legitimate answer to the abuse report ("someone is spoofing my IP, it isn't me, and the machine is not compromised") is the exact same excuse that a malicious actor would provide. The legitimate answer would include some sort of real-world attestation about you from a trusted third party. Probably the very least, some evidence of your identity and jurisdiction. Maybe including a video call or something. Not jus…
> The legitimate answer would include some sort of real-world attestation about you from a trusted third party. It's annoying to find someone (or some service) that is willing to attest on your behalf and have that person (or service) be trusted by your provider more than whoever filed the abuse complaint. > Maybe including a video call or something. It's annoying to find someone at your provider who will take the ti…
> It's annoying to find someone (or some service) that is willing to attest on your behalf and have that person (or service) be trusted by your provider more than whoever filed the abuse complaint.
Isn't this precisely the role filled by notaries?
Re: How to get the whole planet to send abuse complaints to your best friends
#107> The internet was broken 25 years ago and is still broken 25 years later. Spoofed source IP addresses should not still be a problem in 2024, but the larger internet community seems completely unwilling to enforce any kind of rules or baseline security that would make the internet safer for everyone. Same with spoofed MAC addresses, email addresses, ARP messages, Neighbor Discovery, MitM TLS certificates ... It's ama…
Spoofed MAC addresses is pretty essential for wifi privacy though.
Spoofed and Randomized are not the same thing. Spoofing implies you are deliberately copying another machine’s MAC address in order to appear as that machine to the network.
Re: How to get the whole planet to send abuse complaints to your best friends
#108Earlier quoted context omitted.
> The legitimate answer would include some sort of real-world attestation about you from a trusted third party. It's annoying to find someone (or some service) that is willing to attest on your behalf and have that person (or service) be trusted by your provider more than whoever filed the abuse complaint. > Maybe including a video call or something. It's annoying to find someone at your provider who will take the ti…
> It's annoying to find someone (or some service) that is willing to attest on your behalf and have that person (or service) be trusted by your provider more than whoever filed the abuse complaint. Isn't this precisely the role filled by notaries?
I can rephrase it for you.
It's annoying to find a notary and pay for their services to attest that I'm not doing something.
Re: How to get the whole planet to send abuse complaints to your best friends
#109[dead]
I don't understand what you're advocating for. Are you against Tor because there was a vulnerability (that has since been mitigated) which led to the deanonymization of users or are you against Tor because there was an illegal service that used it? By killing existing good relays you're making it easier for someone malicious to come in, add a bunch of relays to the network, and have those relays be more likely to be used. And it won't be a saintly do-gooder either, it'll probably be some guy trying to mitmproxy crypto exchanges to steal money.
PS: The fake abuse report technique was invented like 5 years ago: https://www.theregister.com/2019/04/16/spamhaus_port_scans/
Re: How to get the whole planet to send abuse complaints to your best friends
#110This is likely a very naive question, but how did the spoofer know his IP was participating as an internal Tor node? From what vantage point can that be seen? I imagine internal Tor nodes must know to connect to each other, so it must propagate through Tor. Is the attacker also a Tor node? Is it trivial to map all Tor hosts?
Tor has something called a consensus that lists all relays and their flags. Clients need this to know which relays to make a circuit with. For most clients, they select a relay labelled as a guard from this file which is where their traffic first enters Tor. Some countries realized they could just block all of these IP addresses and stop people using Tor, so there are unlisted guard nodes called bridges designed for censorship circumvention that you have to get by filling out a captcha or say sending an email.