3 ms·
Ultimately, maybe not, but I finally dabbled in geolocation on a property that was receiving comment spam. I ended up eliminated 100%, not nearly 100%, actually
by jws 3y ago
Ultimately, maybe not, but I finally dabbled in geolocation on a property that was receiving comment spam. I ended up eliminated 100%, not nearly 100%, actually 100% of the spam by blocking anonymous content from one country.
In another application I got rid of 90% of the flash wear on an IoT device by blocking a single country from a port.
A determined, targeted attack will go around a geoblock, but I have to reluctantly admit that it can be useful for the high volume attacks.
- neoromantique 3y agoPerhaps the takeaway is that you shouldn't leave ports wide open rather than go for xenophobia?
- jacquesm 3y agoBlocking an IP range isn't xenophobia.
- neoromantique 3y agoExtending the line of thought of OP sure is. It's not $country's fault that you don't use vpn or port knocking.
- jacquesm 3y agoIt is $country's fault that there is a free reign for criminals, either state sponsored or acting on their own.
- from 3y agoI'm guessing here but it seems that the majority of the world pursues cybercrime investigations with foreign victims at the same rate as Russia, which is about 0 (unless for some reason we're all just never hearing about this great computer crime police work in Africa/Latam). Several African countries can't even pay government employee salaries on time, are they really going to be sending records requests to Google or Yahoo or Binance, infiltrating underground forums, or developing informants? Nigeria in the best case hands off the BEC suspects to America but rarely does police work themselves.
- jacquesm 3y agoInterpol regularly goes after cybercriminals, they do require local cooperation but that happens more and more frequently. But obviously there are still places where this isn't a priority.
- neoromantique 3y ago1) if your threat model is blocking direct connections from countries you deem unworthy, then I don't even know where to begin unpacking levels of wrong here. 2) proxies exist, many of which are your "first world residential ip address" thanks to IoT in every toaster.
- jacquesm 3y agoCan you stop moving the goalposts. You said 'blocking countries equals xenophobia'. It doesn't.
- neoromantique 3y agoYou are talking in a thread where OP called such countries “self-proclaimed vermin” and you’re parroting terrible and restrictive opsec practices. No, it is not okay that many US websites decided to block access from EU instead of adopting a normal privacy policy, it is equally not okay to block access from whole regions of the world based on your prejudice, there are much better solutions.