Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If it becomes more common for a service to reveal the geography of a user, wouldn't these cyberwarfare farms stand up VPN servers?

This is certainly useful as a one-time reveal since the attackers didn't think this data would leak, but now can't they prepare better?



VPN farms and using remote servers are all with a bit of effort detectable. It starts a new arms race but all it takes is to catch the account misplaced once on a change to then keep that history and expose the discrepancy forever. Its going to be quite difficult to get and maintain a genuine domestic IP that is unique per account and doesn't then get shut down often.


Easy, you just ban all known vpn endpoints and cloud hosting provider IP ranges. 4chan figured all this out over a decade ago.


Interestingly enough, Twitter is excellent at that. Maybe they even jump the gun.

Ever since I noticed that when you register a decent domain, someone will instantly register a Twitter account with that name, I have started trying to preempt that.

I accidentally clicked a Twitter link the other day, while apparently still logged in to an account. I was on a VPN at that moment. Instant suspension within 15 seconds. It was astonishing.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: