Hacker News Reader

Comment by pelorat | Hacker News Reader

Why not? I netblock everything from .ru and .cn from my own servers. It's the way to go.

And what benefit do you gain from that? Still enough proxies and other ways around.

I did that as well. One benefit I got was learning that GeForce Now will store your PII on CCP controlled servers at nvidia.cn by default. This happened from the USA. I have never been able to come up with a non-conspiratorial reason as to why this choice was made.

I was able to get around this is by changing the login POST to use nvidia.com and everything worked just fine, and the ping to .com was obviously faster.

It is lightyears beyond dumb that this is even legal in the USA.

Would love to be talked down from this with a rational explanation.

NOTE: This happened in 2021

How did you catch the traffic? Wireshark?

No, I geoblocked .ru and .cn in pfSense and a week later tried to register with GeForce Now.

When it failed I opened devtools and saw the .cn attempt.

It doesn't matter under which TLD a domain is registered, the IP address it refers to can still be located anywhere in the world.

That's the wrong question. The right question is what did he lose because of that. And the answer is likely 'nothing'. So it's a free gain with zero downside, makes good sense to me.

Uhhhhhhh... real people live in those countries and might want to use his site? I'm not saying they are entitled to his service but the amount of irrational paranoia people have over port scans and SSH bruteforcing is truly phenomenal.

Nobody anywhere has an automatic right to use any service on the web. Half of Europe can't visit US sites because instead of complying with the law they decide to take it out on the citizens. That's fine by me. Corollary: it is also fine by me that parties that have weighed the ups and downs of serving certain countries have decided that the balance is in favor of blocking them outright.

Portscans and SSH bruteforcing are not necessarily the problem, but they can be preludes to a problem.

You should add .top

Reply on news.ycombinator.com