News for hackers. Stuff that matters.
Re:Cloudflare Starts Blocking Pirate Sites for UK Users by specproc on Tuesday July 15, 2025 @11:10AM (#44571969)
The site suggests that VPNs may be effected. What's the mechanism here? Is this likely to cause trouble for all VPNs?
Re:Cloudflare Starts Blocking Pirate Sites for UK Users by johnisgood on Tuesday July 15, 2025 @12:00PM (#44572543)
This is how I block VPNs for game servers: https://zolk3ri.name/cgit/schachtmeister2/about/. It could work for any servers. It is very easy to do so. It gives you a "score" of the IP address (README.md explains it) that connected to your server, and you can decide what to do based on that, for example in my game servers there are certain thresholds. It has been working great.
Re:Cloudflare Starts Blocking Pirate Sites for UK Users by grumpyinfosec on Tuesday July 15, 2025 @11:22AM (#44572120)
realistically blocking low cost personal VPNs / proxies is pretty easy. Any new servers they stand up are gonna get picked up by commercial threat intel services with an hour and then just blocked. Especially if the CDNs are working with the government.

You could roll your own but wireguard/openvpn going to random hosting provider is gonna achieve the same thing if they are playing hardball.

Re:Cloudflare Starts Blocking Pirate Sites for UK Users by pjc50 on Tuesday July 15, 2025 @11:30AM (#44572208)
They're not playing hardball, it's all on a "will this do" basis, like the US state-level bans. They're certainly not going to start blocking random IPs in hosting providers, that's reserved for email spammers.
Re:Cloudflare Starts Blocking Pirate Sites for UK Users by instagib on Tuesday July 15, 2025 @12:41PM (#44573086)
DNS blocking via 1.1.1.1 is suggested. So, change to another dns.

https://www.cloudflare.com/trust-hub/abuse-approach/

Re:Cloudflare Starts Blocking Pirate Sites for UK Users by JdeBP on Wednesday July 16, 2025 @12:07AM (#44578576)

    You <----> residential ISP <----> VPN endpoint <----> CloudFlare CDN <----> actual site
The older blocks were being done by residential ISPs, so using a VPN (even simply with an endpoint inside the U.K.) bypassed them. One could obtain the same effect by having a business ISP instead.

Now CloudFlare is also doing the blocks in its CDN, which means that it does not matter whether the ISP is business or residential, or whether a U.K. endpoint VPN is being used. All three end up talking to CloudFlare's CDN from inside the U.K., and that CDN is now blocking the content.

The tinfoil hat brigade can rest easy. (-: They aren't detecting VPNs. They're just blocking things at a point that is closer to the content origin than all of the U.K. VPNs and ISPs, rather than at a point that that is further away than the U.K. VPNs are.