Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ban me at the IP level if you don't like me

boston.conman.org

Post reply on HN
Print view View original

211–220 of 516 posts

Re: Ban me at the IP level if you don't like me

#211

Post by BoredPositron »

zelphirkalt wrote: post #206
phplovesong wrote: post #53

We block China and Russia. DDOS attacks and other hack attempts went down by 95%. We have no chinese users/customers so in theory this does not effect business at all. Also russia is sanctioned and our russian userbase does not actually live in russia, so blocking russia did not effect users at all.

Which will ensure you never get customers from those countries. And so the circle closes ...

The regulatory burden of conducting business with countries like Russia or China is a critical factor that offhand comments like yours consistently overlook.

Re: Ban me at the IP level if you don't like me

#212

Post by antonkochubey »

closewith wrote: post #170
lxgr wrote: post #153

Earlier quoted context omitted.

Only if your bank isn't competent in using them. Visa/Mastercard chargeback rules largely apply worldwide (with some regional exceptions, but much less than many banks would make you believe).

No, outside the US, both Visa and Mastercard regularly side with the retailer/supplier. If you process a chargeback simply because a UK company blocks your IP, you will be denied.

One of requirements of Visa/Mastercard is for the customer to be able to contact merchant post-purchase.

Re: Ban me at the IP level if you don't like me

#213

Post by nailer »

tmp123456au wrote: post #207
nailer wrote: post #200

Earlier quoted context omitted.

Welcome to British English. The h in hero isn’t pronounced, same as hospital, so you use an before it.

This is wrong. Unless maybe you're from the east end of london.

I’m not claiming everyone pronounces it that way. But he’s an ero, we need to find an ospital, ninety miles an our. You will find government documents and serious newspapers that refer to an hospital.

Re: Ban me at the IP level if you don't like me

#214

Post by seer »

imiric wrote: post #126
lwansbrough wrote: post #17

We solved a lot of our problems by blocking all Chinese ASNs. Admittedly, not the friendliest solution, but there were so many issues originating from Chinese clients that it was easier to just ban the entire country. It's not like we can capitalize on commerce in China anyway, so I think it's a fairly pragmatic approach.

Lately I've been thinking that the only viable long-term solution are allowlists instead of blocklists. The internet has become a hostile place for any public server, and with the advent of ML tools, bots will make up far more than the current ~50% of all traffic. Captchas and bot detection is a losing strategy as bot behavior becomes more human-like. Governments will inevitably enact privacy-infringing regulation to…

I guess this is what "Identity aware proxy" from GCP can do for you? Outsource all of this to google - where you can connect your own identity servers, and then your service will only be accessed after the identity has been verified.

We have been using that instead of VPN and it has been incredibly nice and performant.

Re: Ban me at the IP level if you don't like me

#215

Post by rollcat »

q3k wrote: post #180
wraptile wrote: post #174

Earlier quoted context omitted.

> thousounds of requests an hour from bots That's not much for any modern server so I genuinely don't understand the frustration. I'm pretty certain gitea should be able to handle thousands of read requests per minute (not per hour) without even breaking a sweat.

Serving file content/diff requests from gitea/forgejo is quite expensive computationally. And these bots tend to tarpit themselves when they come across eg. a Linux repo mirror. https://social.hackerspace.pl/@q3k/114358881508370524

I think at this point every self-hosted forge should block diffs from anonymous users.

Also: Anubis and go-away, but also: some people are on old browsers or underpowered computers.

Re: Ban me at the IP level if you don't like me

#216

Post by closewith »

antonkochubey wrote: post #212
closewith wrote: post #170

Earlier quoted context omitted.

No, outside the US, both Visa and Mastercard regularly side with the retailer/supplier. If you process a chargeback simply because a UK company blocks your IP, you will be denied.

One of requirements of Visa/Mastercard is for the customer to be able to contact merchant post-purchase.

Only via the original method of commerce. An online retailer who geoblocks users does not have to open the geoblock for users who move into the geoblocked regions.

I have first-hand experience, as I ran a company that geoblocked US users for legal reasons and successfully defended chargebacks by users who made transactions in the EU and disputed them from the US.

Chargebacks outside the US are a true arbitration process, not the rubberstamped refunds they are there.

Re: Ban me at the IP level if you don't like me

#217

Post by spacecadet »

johnisgood wrote: post #154
pabs3 wrote: post #152

Earlier quoted context omitted.

Which site is it?

My own shitty personal website that is so uninteresting that I do not even wish to disclose here. Hence my lack of understanding of the down-votes for me doing what works for my OWN shitty website, well, server. In fact, I bet it would choke on a small amount of traffic from here considering it has a shitty vCPU with 512 MB RAM.

[flagged]

Re: Ban me at the IP level if you don't like me

#218

Post by debesyla »

thrown-0825 wrote: post #49
lwansbrough wrote: post #17

We solved a lot of our problems by blocking all Chinese ASNs. Admittedly, not the friendliest solution, but there were so many issues originating from Chinese clients that it was easier to just ban the entire country. It's not like we can capitalize on commerce in China anyway, so I think it's a fairly pragmatic approach.

Block Russia too, thats where i see most of my bot traffic coming from

And usually hackers/malicious actors from that country are not afraid to attack anyone that is not russian, because their local law permits attacking targets in other countries.

(It sometimes comes to funny situations where malware doesn't enable itself on Windows machines if it detects that russian language keyboard is installed.)

Re: Ban me at the IP level if you don't like me

#219

Post by johnisgood »

spacecadet wrote: post #217
johnisgood wrote: post #154

Earlier quoted context omitted.

My own shitty personal website that is so uninteresting that I do not even wish to disclose here. Hence my lack of understanding of the down-votes for me doing what works for my OWN shitty website, well, server. In fact, I bet it would choke on a small amount of traffic from here considering it has a shitty vCPU with 512 MB RAM.

[flagged]

Thanks, appreciate it. I would hope so. I do not care about down-votes per se, my main complaint is really the fact that I am somehow in the wrong for doing what I deem is right for my shitty server(s).
Post reply on HN