bauruine

In your defense I also wasn't sure for a minute and had to look it up. Could also have been three hops to the intro point from the onion service.

For a circuit to clearnet it's 3. Guard --> Middle --> Exit. For a onion service it's 6 and the connection is a bit more complicated [0]. The speed varies from very fast to unbearable depending on your circuit and how bad the ddos is at that moment. [1] You can try to create a new and hopefully faster circuit by clicking on the onion symbol on the left in the address bar.

[0] https://github.com/mikeperry-tor/vanguards/blob/master/READM...

[1] https://status.torproject.org/issues/2022-06-09-network-ddos...

But it's hitting their DNS zone and they have decided to add a CNAME to helpkit-ssr.onrender.com for leavemealone.helpkit.so.

Then you have to ask helpkit.so why they are using render.com to do the redirect.

Thanks for the explanation. I still don't know exactly what's going on here. How do the DNS records look on the Cloudflare UI?

help.leavemealone.com. is a CNAME to leavemealone.helpkit.so which again is a CNAME to helpkit-ssr.onrender.com. and so forth till you get the A records. Your browser then connects to that IP and there you get the 302 redirect. I'm still not sure what I should see here.

EDIT: This is a CNAME chain and although it's not recommended it's valid https://serverfault.com/a/309660

The domains resolves to an IP announced by AS397273 (https://render.com/) the web server at this IP returns a 302 redirect to https://dinkydani.gitbook.io/leave-me-alone-help/. What exactly can I see here?

Everyone that is willing to pay an initial 2400.- and yearly 1400.- to RIPE.

Yes we may have to constrain this a little more sometimes but we have plenty of IP space and therefore time before we have to consider this.

As a LIR you get a /32 by default, no questions asked. If you need more you need justification and from my experience with RIPE and PI space they can be a pain in the ass regarding that. AFAIK the biggest one they ever give a LIR is a /28 with the note that they never ever want to hear from you again. There are 268'435'456 /28 available. I don't think i will still life when we reach the only 200 Million /28 left mark.

Chloe Sagal was left alone for 8 months (not a single post in her thread) until she killed herself. If you are interested I recommend reading https://www.oregonlive.com/portland/2018/06/woman_who_set_se... It starts with her friends blaming Kiwi Farms but then goes deeper in to the issues.

EDIT: The "sexually explicit photos" are a video she did for a porn website. I'm not sure how this qualifies as "leaked" or "revenge porn".

>But there's really no gray area for KF

Is it? The problem I have is that this deplatforming campaign uses dubious media reports and Wikipedia to create this "It's the worst site ever and you absolutely have to drop it" narrative. e.g. The "The Kiwi Farms community considers it a goal to drive its targets to suicide" is sourced from the Book "Gaming the Dynamics of Online Harassment" which itself links to some random forum with a post saying that. Somehow this is enough to post everywhere that it's a forum with the sole goal to drive people to suicide.

If you get a court order you have to hand over everything you have. But in most jurisdictions if "everything you have" is nothing there is nothing they can do about it.

Which is a Chinese site hosted behind the GFW. I can't even access the site because they block my IP address. I really hope OSS projects don't consider them for their hosting.

>Would you prefer that they report publicly and drag people into the court of public opinion without an investigation instead?

Yes thats exactly what free speech is about. It's the public that decides what it thinks about it and not some secret council.

>Now we just build our stuff using wathever curated image is there that can be used and ship it without worrying about OS patches.

So you basically replaced the "we regularly have to update the OS" with "we regularly have to pull the newest image". It's possible because I have a Linux admin background but I don't see that big of a difference here. Oh and just using whatever curated image is there doesn't necessarily provide you with a secure environment. [0]

[0] https://snyk.io/blog/top-ten-most-popular-docker-images-each...

It's not the router that decides which IP version to use but the operating system and AFAIK all default to IPv6 if they have an address. And yes many ISPs have activated IPv6 by default that's the reason we see 80% IPv6 usage here. It's not because 80% of the users have actively activated it. Most of them have no idea what an IP even is.

>they essentially all become directly exposed to the internet through v6 don’t they?

Most consumer routers have a stateful firewall [0] for IPv6 that basically behaves like NAT. But it's less of a problem than on IPv4 anyway. It's possible to scan the whole IPv4 Internet in less than 5 minutes. [1] And this is done constantly by many people. The IPv6 address space is way to big to do this and you have to harvest addresses. [2] It's always a good idea to have a firewall but unlike IPv4 you don't get port and vulnerability scans seconds after you expose a host to the internet.

>which kinda makes v6 pointless doesn’t it?

IPv6 is mostly useful for ISPs. There are just not enough IPv4 addresses for everyone.

[0] https://en.wikipedia.org/wiki/Stateful_firewall [1] https://en.wikipedia.org/wiki/ZMap_(software) [2] https://isc.sans.edu/diary/Targeted+IPv6+Scans+Using+pool.nt...

Yes that's exactly whats not allowed for PI space. But you can get a PA subnet from your sponsoring LIR and use that for your end users.

If you click on the author you get to her github profile that contains her full name. It's https://en.wikipedia.org/wiki/Meredith_Whittaker

If you look at what really happened saying "Kiwi Farms killed her" isn't exactly fair.

- The thread about her didn't have a post for 6 months before she killed herself

- Facebook locked her profile when she posted about suicide. Why is Kiwi Farms to blame for this?

- She was thrown out where she was living a few days prior because the people she was living with decided they could no longer take care of her

- She had severe mental health issues unrelated to her being harassed

- She threatened to kill herself after that and was taken into custody, spent 2 days in triage at a mental health facility but was never properly hospitalized and left

- She cited homelessness and mental health problems as reason for the suicide

https://www.oregonlive.com/portland/2018/06/woman_who_set_se...

>They have many options other then cloudflare..

I guess you haven't read the article because the whole article is about why it's not that easy as you portray it. I don't want to to recite everything but for instance "NTT refuses to peer with any company that peers with my subnet" He can't use anything that peers with NTT (a Tier 1 transit provider).

>Having their brand linked to a site like this can be damaging to their brand\business\moral stance and they would be totally within their right to stop proving service for that..

Sure Cloudflare could drop them but the reason people want Kiwi Farms to loose Cloudflare is because they are DDoSing them. What is a DDoS protection worth if all it takes to circumvent it are a few people screeching on social media?

>buy their own servers and host it themselves

They are doing it already [0]

[0]: https://www.zerohedge.com/news/2021-10-28/where-sidewalk-end...

One of those murder attempts that allegedly! was done by members of Kiwi Farms was against Marjorie Taylor Greene, one of the worst anti Trans right politicians in existence. With a message that says "This is swatting. btw. I'm a moderator from Kiwi Farms" This just looks so obviously like a false flag that I'm actually not sure wtf's going on.

>They will dig through your accounts, archive everything you say, interpret it the worst way possible.

This sounds exactly like what the Twitter "good guys" do all the time to cancel people.

>Initially, EPB will charge residential customers $1,500 a month for the 25G service and $12,500 a month for commercial customers.

https://www.timesfreepress.com/news/2022/aug/24/chattanoogas...

>Initially, EPB will charge residential customers $1,500 a month for the 25G service and $12,500 a month for preferred business customers.

That's not exactly a price point that I call "residential internet" you can get 25G or even 100G or 400G literally everywhere as long as you have deep pockets. I'm not sure what's the news here.

Do you have source for that? The book in the Wikipedia article cites [0], [1] and [2] but i couldn't find anything related to suicide counter in them. Also I'm not exactly sure why Kiwi Farms gets _all_ the blame here. It's Facebook deleting the posts of people that need help because i guess it's against their guidelines.

[0]: https://variety.com/2018/gaming/news/chloe-sagal-death-12028...

[1]: https://wrongplanet.net/forums/viewtopic.php?t=308671

[2]: https://nymag.com/intelligencer/2016/07/kiwi-farms-the-webs-...

The owner of Kiwifarms, Joshua Moon has written an article about why being dropped by CloudFlare would he a huge threat to the site [0]

[0]: https://www.zerohedge.com/news/2021-10-28/where-sidewalk-end...

I work for an ISP in Switzerland. If you download a game you use 1Gbit/s+ for a few minutes instead of an hour or two. The average bandwidth used stays the same.

Both don't require a lot of bandwidth and you have caches for their content.

You can buy additional data if you've used your included data. That's basically the same.

>It would incentivize improving infrastructure

No it wouldn't. The actual usage has a negligible impact on the expenses for infrastructure. Most people barely use any bandwidth anyway. Even on 1 Gbit/s lines the average bandwidth used is in the single digit Mbit/s. And the usage basically doesn't differ if they have a 100Mbit/s or 10Gbit/s connection. Also those countries where data caps are still a thing are generally those with the worst Internet.