Thread

1. SoftTalker · 1790960547 · focus · HN ↗

   > platforms are left with an impossible choice: completely block all VPN traffic nationwide or withdraw access from Utah entirely

   Is it even possible to reliably know that a connection is from a VPN? Anyone can proxy through a random hosting provider.

   1. gorgoiler · 1790968067 · focus · HN ↗

      The classic: ping the endpoint address, then “ping” the code. If the IP address comes back in 30ms but the JavaScript responds in 330ms, then the client is probably 300ms further away than they say they are claiming.

      1. patrakov · 1790987557 · focus · HN ↗

         This will also catch a SIM card in roaming, which is not a VPN.

         1. someonebaggy · 1791028354 · focus · HN ↗

            except it is literally a VPN, actually. That's why it would have that characteristic. Except actually it wouldn't, because the test described only catches proxies at L4 and higher. It would catch a lot of CGNATs.

Unofficial Hacker News client; not affiliated with Y Combinator.