Coordinated by Italy last month, a huge law enforcement operation reportedly ‘dismantled’ a pirate IPTV service with 22 million users. That’s an extraordinary number and shows why countries like Italy have adopted mass site blocking measures. Logic suggests that the removal of such a huge player from the market might reduce the need for blocking measures, if only temporarily. The data shows that in the wake of the action, blocking demands significantly increased.

  • hendrik@palaver.p3x.de
    link
    fedilink
    English
    arrow-up
    8
    ·
    1 year ago

    Btw, you can get around domain blocking by choosing a different DNS provider than your ISP’s. But pay attention if that one is tracking or logging your requests, if privacy is important to you.

    • doeknius_gloek@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      8
      ·
      1 year ago

      I’d recommend Quad9 or Mullvad as both have a good record on privacy. DNS is also often unencrypted by default, so make sure to use DoT or DoH while you’re at it.

      • hendrik@palaver.p3x.de
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        We already have that. It’s usually not used for this use-case though. And it’d be hard to do so, as nowadays most traffic is encrypted, we have certificate pinning etc. So it won’t work.

        The alternative would be IP based blocking. And the article mentions this, and it’s contained in the graphs. That’s much harder to circumvent. But also harder to do, since websites share IPs, they’re in the cloud on AWS…

        • khorovodoved@lemm.ee
          link
          fedilink
          English
          arrow-up
          0
          ·
          1 year ago

          It would not be hard at all. China, Iran and Russia already do that. Clienthello is not encrypted and that is all you need.

          And ECH would not solve this as you can just block cloudflare-ech (or other, depending on CDN) domain itself and force clients to fallback to non-encrypted clienthello.