Live data from Hacker News

Tell HN: Docker pull fails in Spain due to football Cloudflare block

news.ycombinator.com

321–330 of 444 posts

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#321
post #312
post #242

Earlier quoted context omitted.

Just so everyone here has the full picture: the source linked — Assemblea Nacional Catalana — is not a human rights watchdog, an international observer, or a journalistic outlet. It is the main pro-independence criminal activist organization in Catalonia. Citing them as evidence of Spanish human rights abuses is a bit like citing the murderer's wife as an impartial witness. For context, Spain is a full constitutional…

Or to put it another way: Catalunya (Barcelona and surroundings) is one of 3 Spanish regions that want to break away from Spain, not counting overseas territories. And yes, the population really wants this: there was a referendum and the outcome was: 92% want out of Spain. https://en.wikipedia.org/wiki/2017_Catalan_independence_refe... (why? Let's be honest: Catalunya would benefit enormously from independence, but w…

[dead]

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#322
post #4

They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral. When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working. There's even a website made for checking if the match is on: https://hayahora.futbol/ You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

Great, time to proxy through AWS, Azure and GCP so that these muppets block Spain from everything.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#323
post #23

This is why technology businesses and professionals need to take a little bit of an active role in local politics. Otherwise you get nonsense.

We also need more tech-savvy politicians in office. There are a lot of politicians who are expected to legislate on important technology issues that barely know how to use a cellphone.

Probably not, the tech-savvy politicians know about things like "DPI" and "traffic signatures".

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#324
post #312
post #242

Earlier quoted context omitted.

Just so everyone here has the full picture: the source linked — Assemblea Nacional Catalana — is not a human rights watchdog, an international observer, or a journalistic outlet. It is the main pro-independence criminal activist organization in Catalonia. Citing them as evidence of Spanish human rights abuses is a bit like citing the murderer's wife as an impartial witness. For context, Spain is a full constitutional…

Or to put it another way: Catalunya (Barcelona and surroundings) is one of 3 Spanish regions that want to break away from Spain, not counting overseas territories. And yes, the population really wants this: there was a referendum and the outcome was: 92% want out of Spain. https://en.wikipedia.org/wiki/2017_Catalan_independence_refe... (why? Let's be honest: Catalunya would benefit enormously from independence, but w…

That referendum result is quite debatable, since the legal situation meant most people against it simply didn't vote. While in the past it was close, nowadays polls strongly suggest a comfortable majority against independence: https://www.democrata.es/politica/39-catalanes-apoya-indepen...

I agree the Rajoy government's handling of this was very problematic, but the rest of this isn't really accurate. And the morals of the economy argument is terrible - the rest of the country needs us, so we should cut them off? The same argument would apply for Barcelona cutting off the rest of Catalunya. It's not a good direction.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#325

Earlier quoted context omitted.

You should be able to use things like sshuttle or even tunnel through HTTPS whatever you want, right? As you can control both sides of the tunnel with encryption (comes by default), no MITM-ing unless you are forced to use solutions that install and eavesdrop on your secure traffic too.

1) they do protocol sniffing, and any inconsistency (including statistical) gets you blocked 2) "white list mode" which engaged sometimes (poorly implemented atm), means nothing goes outside of country at all (means 99.9% of everything is broken). They really want to become North Korea soon

Are any streaming sites allowed? It should be really easy to make a VPN through HTTPS tunnel appear to have a traffic pattern exactly like you are streaming videos and/or music (depending in the bandwidth needs) by throwing discardable traffic through when no valuable traffic is needed.

Obviously, everything can be cut off, but the point is that if encrypted something is allowed, there should be a way to get anything through.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#326
Probably the only even slightly relevant thread I’ll ever find for this so here goes. There is a certain visitor in the “Madrid Autonomous Community” (whatever that is) which frequently requests just my homepage, no other page on my site, over and over again.

It comes in waves, and it’s not enough to affect anything, but it’s very weird because when I did some digging by looking at the ASN there was actually only one active IP address and if I browse to it I get someone’s Synology NAS login page.

Why would someone setup their NAS to randomly keep pinging my homepage?

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#327

Earlier quoted context omitted.

If this is done at the DNS level, run your own DNS. If not, use a VPN. Taking this to the courts is a long term solution, but in the short term you want to act on your own to evade censorship and oppression.

> run your own DNS Can you expand on that? How would you go about running your own DNS that wouldn't be affected by football leagues?

If it's purely DNS blocking (no IP redirection or blocking), your own recursive resolver (eg, unbound) shouldn't be affected, assuming the ISP doesn't also intercept unencrypted DNS queries. If there's also interception, encrypted DNS upstream might help (assuming they're not blocked entirely, repressive countries do this, so far not in EU)

I don't think any of them will help in Spain case though, I believe the ISP/court choose to block the IP range entirely, which hit Cloudflare customers. DNS hijinks won't solve those.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#328

Earlier quoted context omitted.

Yes, but that's not something many can do easily. Also already having to use a VPN is not the "right" solution. The right so solution is to beat some sense inside some politician's head, and force them to write and approve laws that don't let stupid (or conniving) judges pass orders like this one we are talking about.

Given the context of the HN audience, it's probably something you can do.

I wasn't strictly speaking about HNers. Using NordVPN and the likes is already done by slightly savvier users. Just look at where those products are advertised.

Spinning up and provision a VPS to act as a VPN exit node in some other country raises the bar 10x or more.

Re: Tell HN: Docker pull fails in Spain due to football Cloudflare block

#329
post #299
post #4

They block the whole of Cloudflare R2, I believe the Docker hub is just (heh) a collateral. When the La Liga match starts, everything that's proxied via CF (including zero access reverse tunnels) stops working. There's even a website made for checking if the match is on: https://hayahora.futbol/ You can check if your host is affected: https://hayahora.futbol/#comprobador&domain=docker-images-pr...

Who exactly is blocking and on what legal base? If it's Spanish ISPs and they are massively over blocking, why are there no legal actions against them? (E.g. for not fulfilling their contracts)

On the one hand, you have money and famous footballers. On the other hand, you have a bunch of nerds whining about the internet being broken. The average voter (and politician) is out watching the soccer match, and doesn't care about the internet.
Post reply on HN