Live data from Hacker News

Pondering routing more of my traffic via nodes outside the UK

neilzone.co.uk

81–89 of 89 posts

Re: Pondering routing more of my traffic via nodes outside the UK

#82

Earlier quoted context omitted.

What's dirty about it?

Companies tell their customers (i.e. people who wish to bypass streaming service region restrictions) that they "ethically source IP addresses". The people who provide the IP addresses (i.e. people installing f2p games on their phones or smart TVs that come with the VPN exit gateway SDK) don't know that, because no one reads the T&C. In the end, both are deceived. The customer thinks there are no ethical issues attac…

In what way is scraping Amazon prices "abuse" of anything?

Re: Pondering routing more of my traffic via nodes outside the UK

#83

Earlier quoted context omitted.

Sorry I don't understand, what am I believing that has always been the case?

That you could reimplement a software and then be license free. Or did I read you wrong?

That's true. You can write software that duplicates the functionality of existing software and by doing that you can evade the copyright of that software.

Re: Pondering routing more of my traffic via nodes outside the UK

#85

Earlier quoted context omitted.

>Honestly surprised that works given Google loves to hardcode DNS queries using their DNS Resolver into many things (Google TV, Android, etc). My Samsung smartTV has Google DNS hardcoded in it, that is why I do what I do. No matter if I set my phone DNS to Google, OPNSense NAT redirects any DNS to Piholes only, and since public DNS, DNS-over-TLS and DNS-over-HTTPS are blocked, only Piholes forward it to Unbound. Only…

> ..., DNS-over-HTTPS are blocked Not trying to be facetious, but how do you know you are blocking them all? I thought one of the reasons for using DNS-over-HTTPS was to be able to avoid detection.

You aer mixing two things together, and popular misundertanding: You cant never truly hide your DNS requests, your ISP can still see the traffic.

There are plenty of videos showing how you can use WireShark within your network to identify packages flagged as DNS, no matter if DNS, DOT, DOH, they have identifiers making it easier to identify them by analysing the packages. You just need to know how.

If your ISP really wanna know what you are accessing, they can, DOH isn't VPN.

1. Icannot just block 443, I have an aliases with every known public DOT and DOH on OPNSense

2. The firewall blocks any requests to those IPs on port 443-DOH and 853-DOT

If I type on my browser 8.8.8.8:443, it does not work and OPNSense firewall log shows the block message, so DOT:853 and DOH:443 are fully blocked.

Re: Pondering routing more of my traffic via nodes outside the UK

#86
post #68

Earlier quoted context omitted.

>Personally I think ipad as babysitter is more to blame, but until the proper studies are done it's all just speculation. Proper study?? Look around us, kids are talking to ChatGPT instead of running, playing, instead of being kids. Kids cannot speak and yet have a tablet to interact with, by adulthood those kids are cooked. Teens at school can't read, they have been using ChatGPT to cheat exams. If somebody tells me…

>Look around us, kids are talking to ChatGPT instead of running, playing, instead of being kids Isn't that a symptom of other things? I'm an elder 'millenial' playing out was already decreasing when all we had was a nes and 4 channels on TV. Unfortunately now we have to 'protect' kids from the dangers outside. Which necessarily means them spending time inside.

>Unfortunately now we have to 'protect' kids from the dangers outside. Which necessarily means them spending time inside.

That is the biggest bullsh1t of today's society, we aren't protecting the kids, it is the governments starting mass surveillance and before you call me a conspiracy theorist, looks what is happening world wide.

This is how it all started:

1. Australian activist group Collective Shout went after Steam +18 games to protect the kids

2. Steam ignored them so they used their political influence to go after Master/Visa/Paypal

3. Master/Visa/Paypal went after Steam which removed thousands of games bankrupting developers worldwide

4. UK pushed digital ID the following week, Collective Shout was the opportunity they all needed.

5. Countries worldwide followed suit

Mind you that same Collective Shout group supported a movie on Netflix showing kids being s*xual1zed.

People do not understand how serious this is, these services are now getting breached, your passport, photo, address, phone, etc, is all over the network.

Being victim of identity theft is the easiest thing in 2026, you trying to prove that you are you while somebody else being you is pulling your life apart.

Re: Pondering routing more of my traffic via nodes outside the UK

#87
post #79

Earlier quoted context omitted.

This is what protest is for/about. If enough people feel strongly about it to go onto the street and wave placards, that starts getting noticed and has to be acknowledged. Of course, the UK (and others) have started making protests illegal, because they are doing things that we should feel strongly enough about to go and wave placards at them.

The problem I've found is that enough people don't feel strongly about it. I've had plenty of conversations recently where people say "yeah, but social media is harming kids. Banning it is good". People broadly see the headline "think of the children" and think, "yup, let's protect children". To me, there's all sorts of downsides - the death of small discussion forums, pushing interesting online experiences out of th…

100% agree.

And because I don't have kids, I'm presumed to not have any skin in the game - like the websites are not going to ask me my age or something.

Re: Pondering routing more of my traffic via nodes outside the UK

#88

Australia isn't different, but homelab is my jam so solutions were implemented :) 1. Nginx Proxmox LXC container with domains that require digital ID such as X. I can easily add or remove domains to it via Ansible. 2. Mullvad VPN server/client setup on OPNSense 3. OPNSense Firewall rules with aliases from the local lists from step 1 4. Every time I access X or whatever, OPNSense firewall rule redirects that traffic v…

When I tried implementing something like this at some point, I found it impossible to actually implement reliably because DNS resolution changes all the time.

Unless you dynamically add rules as you resolve DNS requests and before responding to them, which seems painful to pull off.

Or do you point DNS records for the relevant domains at a proxy server, and have that server inspect SNI, look up the actual DNS records, and then tunnel the traffic? But this would rely on SNI which isn't a requirement (although it's probably always there...).

Re: Pondering routing more of my traffic via nodes outside the UK

#89
post #14
post #3

"people under 16", you mean children right? "who also have the rights to freedom of expression and privacy", plenty of outlets for people to be expressive in the UK (more so than in the US for example, where the right wing will obviously attack any social media restrictions) that don't involve being fed junk divisive content from mainly US tech companies. Privacy != anonymity. Feel free to route your traffic via Wire…

> Privacy != anonymity. In practice, if you lose one, then you also lose the other.

In practice, they are not the same and therefore, you are not losing anything by giving up the other.

Privacy: Not having your phone's app collecting all sort of information. Why does an album app wanna access your phone, contacts, geo location???

Why do I need to provide a personal document to have access to X?? Some posts won't show if I don't install X App and provide a digital ID which I don't do thanks to OPNSense.

Anonymity: You shouldn't be on the internet in the first place, everything you do and post stays here forever.

Even if you are using burner accounts, if you commit a digital crime, you can be tracked, full stop.

People are using VPN expecting to become "anonym", that is not what it is for.

Post reply on HN