@lina np.

I think it's important to highlight such projects like https://cuiiliste.de and actually point people at it in the hopes that @ooni and @citizenlab add it to their test lists...

• Personally I did add it to my blocklist lists not as an endorsement [far from it!] but as a point of reference for #CUII...

Maybe someday I (or someone else) can get around and make a #VirusTotal - style #URL / #Domain checker that provides more than a mere "is clean" / "is sus" / "is dangerous" assessment but a more nuanced answers like:

• "This domain is blocked by CUII for alleged copyright infringement"

or

• "This domain belongs to #NSAbook"

and allow for granular, informed decisions (i.e. allow accessing it as a client, but blocking the entire #ASN from accessing one's Servers and thus block non-consensual #Scrapers that violate #RobotsTXT.)

• I'm just shit at programming anything with a #GUI but hey, I'm just a #Sysadmin not a #Frontend person...

@alex @FediPact

I'd not rely solely on .htaccess for that matter, as that's trivial to forge and #NSAbook refuses to obey to robots.txt so might just go maximum "asshole" and ban the entire #Facebook #ASN with #Firewalling!

https://infosec.space/@kkarhan/115000534433456964

@lydialurch @FediPact It's never to late.

• Best option if financially and technically feasible would be #SelfHosting and literally blocking #NSAbook's entire #ASN and their hosters / upstream providers!

@FediPact I guess the #Fediverse needs to go maximum "asshole" and not just block #StasiBook's entire #ASN incl. #Upstream providers but literally "#ZipBomb" all their Requests!

https://infosec.space/@kkarhan/115000534433456964

@iris @FediPact The only good way to protect against that shite is to literally block #NSAbook's entire #ASN and their #Upstream / #Hosting providers as well.

• This worked well when it came to #StopKiwifarms!

@landley @pmevzek @jschauma @ryanc @0xabad1dea And that is espechally baffling considering that #APNIC as #RIR ran out of #IPv4|s first.

• And right now I'm between a rock and a hard place and either become a @ripencc member or cough up equal amounts in monthly installments just to get some properly geolocated #IPv6.

Cuz people telling me "Oh, just use HEnet's Tunnelbroker"" never experienced the shitshow that is #Geoblocking and #GDPR-#Noncompliance with #Malvertising to slap their faces!

• Cuz believe me, I tried, but since some idiots decided to #GeoIP entire #ASN|s and not #IP - #Allocations the PoP in FRA (FFM actually) will get me mislocated to the #USA!

@janvlug Wow je hebt een #asn mailadres gekregen. Heb deze week de 2e #id mail gekregen en als je niet meewerkt ... Walgelijk! Telefonisch heeft de ASN medewerker aangegeven dat het een proef is, en dat in een later stadium je je ook mag komen identificeren op een kantoor. Maar de huidige werkwijze staat mij niet aan. En inderdaad ik gebruik de browsercode om gewoon via een browser te bankieren zonder #app Langleve #unappsen

@janvlug @kkeijzer met hun laatste verplichte ID check via de app, ervaar ik met name bij de #asnbank zeker de #appdrang. Ik ben blij met de #browsercode , maar heb al meerdere keren meegemaakt dat deze optie niet altijd wordt geboden. Wat ik een groot nadeel van #asnbank vind, is dat je geen vraag per mail kan stellen. En de AI chat vindt ik ook niet bij #asn passen. Ja heb al jaren geleden bewust voor aan gekozen maar de #appdwang moet stoppen. Gelukkig ook geen #nfc en ik wil geen bankapp

@netresec Just block he entire #CloudFlare #ASN and be done with it!

@anirvan @404mediaco the only way to deal with this is the same as with any other #malware and #DDoS:

• Block the entire #ASN|s of every single hoster that allows "#scraping"!

I do maintain a #blocklist of those and will happily accept suggestions and pull requests...

https://github.com/greyhat-academy/lists.d/blob/main/scrapers.ipv4.block.list.tsv

@f4grx @nixCraft @torproject not really.

1. #aws has pretty chunky blocks like /14.
2. They don't use #IPv6, only #IPv4.
3. Blocking entrie #ASN|s is easy.

I do this with #pfSense & #pfBlockerNG for quite a while…

And the same #blocklist also works for other applications like #nginx, #HAproxy, #httpd, etc.

@fx @julialuna I think that this makes #Anubis really #ableist and bad for #blind people cuz #JavaScript won't work on #LynxBrowser.

• The better option would be to literally #block all the #GAFAMs and their #ASN|s as well as any hoster allowing #bots and #scrapers.

Given how #IRC, #Tor and #Mining is a big no-no on most hosters, it stands to reason that it's trivial to force them to ban "#AI" and related #scraping workloads as well!

• There are better alternatives, espechally on #OnionServices, to prevent and stall #DDoS|ing like several #OnionServices deployed presently...

@Jarek I mean, I have entire #ASN|s on my blocklist due to being #RogueISP|s that refuse to handle #AbuseReports at all (or only upon LEA subopenas for CSAM & terrorism as in armed masked SWAT units kick in their doors and hold staff at gunpoint)…
https://github.com/greyhat-academy/lists.d/blob/main/drop.asn.block.list.tsv

@landley @jschauma @ryanc @0xabad1dea
I guess the only way "out of this mess" for me would be to cough up €500 p.a. in @ripencc membership fees and start my own #ASN and get a /48 of #IPv6 & /24 of #IPv4 allocated.

• TBH, I have more pressing dues to pay for and I shouldn't have to worry about this at all...

@QueerMatters yes and no.

• Problem is that #LynxBrowser is the ultimate test for #accessibility and that will display any junk hidden.

It's more effective to #block the #ASN|s of #GAFAMs and #Crawlers instead, limit the amount of connections and bandwith per IP and thus make it expensive to crawl.