iamzenitraM

3 เดือนที่ผ่านมาdiscuss

Maybe, although I don't think a lot of blocks will happen about anything other than different kinds of football. Given their following in Spain and the market I'd expect much more rampant piracy on F1 or MotoGP much sooner than... golf? which likely has a very very niche following in comparison. Surprising they didn't puruse about either of both, maybe because of different rightholders in the middle.

iamzenitraM

3 เดือนที่ผ่านมาdiscuss

Cloudflare famously ignores DMCA themselves for content they don't host, with their point of view that since they're a proxy and not a host they are not forced to comply, only pass the DMCA claim to the upstream.

https://www.cloudflare.com/trust-hub/abuse-approach/

Other than that, the legal situation on Spain is pretty dire for LaLiga. The Supreme Court already ruled in Spain that, as per the current writing of the law, football transmissions are _not_ works subject to copyright as they're not works of "art, literature and science": https://www.poderjudicial.es/cgpj/ca/Poder-Judicial/Tribunal...

So it's likely that, if LaLiga sued Cloudflare or they made them party on any actual litigation, Cloudflare would defend themselves and possibly win. Therefore... they just don't sue them, only sue ISPs that have an incentive to just comply to any LaLiga request (as.. legal compliance and collaboration is one of the requirements for being able to buy rights to LaLiga matches in Spain. Yeah, no kidding, you can look it up in their public documentation).

Well, I lie. In a legal twist, they ended up suing Cloudflare for "participation in criminal activities", but not through the same avenue they sued the ISPs on (penal vs commerce court), with some interesting twists as accusations of "facilitating services to avoid the execution of a court order" - which doesn't make a lot of sense, as they're not even direct parties to that court order and they were denied taking part on it. https://okdiario.com/economia/empresas/justicia-imputa-ceo-c...

iamzenitraM

3 เดือนที่ผ่านมาdiscuss

They just did not block anything today, the YES/NO is based on some frontend logic about the amount of IPs being blocked over multiple ISPs. The enforcement and exactitude of these blocks is pretty sloppy on their end so, despite the news today, I wouldn't be surprised if it takes them a bit longer to start blocking during these matches.

iamzenitraM

3 เดือนที่ผ่านมาdiscuss

The site tracks not football matches, but when blocks occur, and, right now, there are not any.

(The whole joke about the site is trying to detect football happening via internet blocks, as otherwise myself personally I wouldn't know at all otherwise about matches happening)

iamzenitraM

3 เดือนที่ผ่านมาdiscuss

Oh hi HN, I'm one of the folks behind https://hayahora.futbol, we monitor the blocks via a varying set of homelab infrastructure to at least try to make a bit more transparent when they occur and what gets blocked (which isn't public, and we have to guess). Feel free to AMA!

iamzenitraM

10 เดือนที่ผ่านมาdiscuss

Some of us are tracking their blocking over at:

https://hayahora.futbol https://tinyuptime.sconde.net

It's not only Cloudflare, but also other not so tiny CDNs are being blocked - currently an entire Backblaze B2 region is blocked in 3 out of 5 ISPs (!).

Particularly hurtful, the entire Cloudflare R2 is blocked during football matches so you can't pull Docker images or Ollama models.

iamzenitraM

ปีที่แล้วdiscuss

Orange and Vodafone are also implementing the blocking but users are not noticing because they are doing it wrong: instead of blackholing the IPs or only blocking when connecting through ECH, they are blocking by DPI the access when using the IP address as the SNI/Host header.

  # curl http://104.21.16.1
  <META HTTP-EQUIV="Pragma" CONTENT="no-cache"><META HTTP-EQUIV="Expires" CONTENT="-1"><html>Por causas ajenas a Vodafone, esta web no est� disponible</html>
  # curl http://104.21.16.1 --header "Host: blockedsite.com"
  error code: 1001

(1001 is the expected output from Cloudflare)

Which is really useless, but I guess fulfills the court order (pandereta meets undefined specifications).

iamzenitraM

7 ปีที่แล้วdiscuss

It's not required to have DOCSIS 3.1 to have 100Mbit/s symmetry, 3.0 can provide that. Vodafone in Spain has a mixture of HFC footprint (the widest), its own small FTTH footprint, and Telefonica (Spain's DTAG) wholesale FTTH. Prices and speeds for the three of them are the same, but if you are on an FTTH zone you get symmetric upload speeds, while on HFC zones they provide 100Mbit/s upload with all their plans (min download is also 100MBit/s).

They argue they will be able to have symmetry on 1Gbit on HFC when they complete their DOCSIS 3.1 rollout, but that has been going on for years with no news. Ironically their own FTTH footprint is pretty small so they end up, in most cases, providing better upload speeds when reselling Telefonica infrastructure than with their own.

iamzenitraM

7 ปีที่แล้วdiscuss

Nice! I had been thinking for a while on building something like this but that provided reverse PTR records, too.

Some providers like Tunnelbroker easily allow you to change the delegation for the reverse records for your delegated range: if you have the 1234:5678:9abc:def0::/64 subnet, they let you change the delegation of the *.0.f.e.d.c.b.a.9.8.7.6.5.4.3.2.1.ip6.arpa DNS zone or add records to it as you please.

So having a public service that responded to those (following the example, all you would need is the server to respond to 0.f.e.d.c.b.a.9.8.7.6.5.4.3.2.1.0.f.e.d.c.b.a.9.8.7.6.5.4.3.2.1.ip6.arpa with a PTR record to 1234-5678-9abc-def0-1234-5678-9abc-def0.has-a.name) would enable you to also make reverse DNS work for all your network easily, as long as you delegate your reverse zone to that server.

Unfortunately probably only Tunnelbroker and hosting providers allow you to do this - I don't expect any residential ISP would (they would also probably provide their own reverse DNS, though).

iamzenitraM

8 ปีที่แล้วdiscuss

If you want more data that what you can probably get from Google Sheets easily, an alternative could be modifying this script to make it output a Beancount[0]-formatted ledger text file. The format is pretty readable plain-text (and so you could store it on Git to track changes easily) and you can generate nice reports out of it with the Beancount CLIs and a web interface with Fava[1]. Also adds another additional level of self-hosted :)

Also Beancount has some nice support for implementing importer scripts inside it if need be, although I haven't played with those yet.

[0] http://furius.ca/beancount/ [1] https://beancount.github.io/fava/

iamzenitraM

10 ปีที่แล้วdiscuss

OVH recently received a 150gbps DDoS from the biggest ISP on Spain (Telefonica) not long after they deployed symmetric 300mbps to almost all of their domestic customers at a decent price - OVH had to divert traffic over two different routes to be able to even _filter_ all of the incoming traffic.

https://forum.ovh.es/showthread.php?14451-Informaci%F3n-rela... (use Google Translate)

As those connections spread (and they will - if you have optic fiber coverage, the slowest you can get is symmetric 50mbps), things will only get funnier

iamzenitraM

10 ปีที่แล้วdiscuss

Back in the 2000's (age of J2ME featurephones and when 3G networks were only starting to flourish) there was this Spanish carrier that had a separate APN for sending MMS (with a proxy that only allowed access to the actual MMS server, that billed by sent message) and another one for ordinary data (which was, of course, expensive at the time).

After some fiddling, I found out that the filtering proxy was banning access to anything other than http://mms.provider.es*. Note how there was not a trailing slash. You could access any domain like http://mms.provider.eswhatever.freedns.org and it would happily proxy you to the outside internet. As the billing was done on the MMS server and not in the proxy, you could pretty much open any HTTP connection to any proxy that had a domain like that pointed to it.

Some deep browsing (too much free time) led to Filipino forums sharing hacked versions of Opera Mini and other popular apps that let you change the Opera proxy endpoint to other custom domain that then was pointed to Opera's own servers - probably because of similar separate tricks.

Oh, old times...

iamzenitraM

10 ปีที่แล้วdiscuss

Hey! could you shoot an invite? We're fighting with Vagrant for our development environments and considering moving slowly into Dockerizing all the things to unify them with production deployment :)

Docker ID: zenitram

iamzenitraM

10 ปีที่แล้วdiscuss

Well, I've found the contrary: at least on Spain their app/web/ATM experience is much better designed than other banks with atrocious UX and WebView-based mobile apps.

iamzenitraM

14 ปีที่แล้วdiscuss

after meeting him on a Github drinkup, I certainly agree.

comments