Live data from Hacker News

How to get the whole planet to send abuse complaints to your best friends

delroth.net

121–125 of 125 posts

Re: How to get the whole planet to send abuse complaints to your best friends

#121

Earlier quoted context omitted.

>As a personal note, I know I’m a bit of an exception ...That’s critical for me, and if an ISP filters based on source, it’s a deal-breaker—I’ll switch to a different ISP. "...and obviously, Pennywise, I must spoof ingress and egress..." "Of course, Agent Bond."

If it's your real IP, it's not spoofing, even if you send the packet through a different ISP than the one which gave you the IP. If you think about it: if you got an IP directly from ARIN you wouldn't have to send your packets through ARIN to make them legitimate.

un-validated spoofed egress causes problems when everyone tests their egress-effectiveness at once.

there is no "ingress," just a firewall of bad peers.

Re: How to get the whole planet to send abuse complaints to your best friends

#122

Earlier quoted context omitted.

If it's your real IP, it's not spoofing, even if you send the packet through a different ISP than the one which gave you the IP. If you think about it: if you got an IP directly from ARIN you wouldn't have to send your packets through ARIN to make them legitimate.

un-validated spoofed egress causes problems when everyone tests their egress-effectiveness at once. there is no "ingress," just a firewall of bad peers.

What? It's not spoofing because it's their real IP.

Re: How to get the whole planet to send abuse complaints to your best friends

#123

> The internet was broken 25 years ago and is still broken 25 years later. Spoofed source IP addresses should not still be a problem in 2024, but the larger internet community seems completely unwilling to enforce any kind of rules or baseline security that would make the internet safer for everyone. Same with spoofed MAC addresses, email addresses, ARP messages, Neighbor Discovery, MitM TLS certificates ... It's ama…

There is a similar problem in cell phone networks (SS7) https://youtu.be/wVyu7NB7W6Y

Re: How to get the whole planet to send abuse complaints to your best friends

#124

Earlier quoted context omitted.

un-validated spoofed egress causes problems when everyone tests their egress-effectiveness at once. there is no "ingress," just a firewall of bad peers.

What? It's not spoofing because it's their real IP.

  >If you think about it:
I genuinely stopped reading there somehow subconsciously, and have a lil read to do, thank you.
Post reply on HN