• utopiah@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    4 hours ago

    I mean… detecting (some) VPNs is as trivial as

    fetch('https://github.com/NazgulCoder/IPLists/raw/refs/heads/main/output/vpn-ipv4.txt').then( res => res.text() ).then( res => console.log( res.includes( "1.2.3.4" ) ) )

    thanks to https://github.com/NazgulCoder/IPLists/

    FWIW though I did try, connected via a random VPN from ProtonVPN from Argentina… and it wasn’t in that list. So it’s not perfect. Also ProtonVPN has apparently today 13K servers according to https://protonvpn.com/vpn-servers

    That being said I can imagine that Google, which is literally built on crawling the Web, has all the infrastructure and expertise needed to have such lists and up to date ones.

    I’m not justifying blocking VPN here, only trying to clarify that unless you self-host in a rather specific setup (i.e. not relying a popular cloud provider but truly self hosting) it’s technically not hard to block VPNs.

  • moopet@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    4
    ·
    4 hours ago

    Tip: Peertube Companion is a good extension for directing you to duplicates of the video you’re trying to watch if it can be found elsewhere.

  • canofcam@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    4 hours ago

    Everything detects VPNs. Reddit has an error screen I’ve never seen before about network activity when I use a VPN and I’m not logged in. YouTube refuses to let me watch embedded videos when I’m on my VPN. Many pages simply refuse to load.

  • foggianism@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    4 hours ago

    I watched youtube religously 10-15 years ago. Now when I try to enjoy some content, I struggle to find anything of quality that’s in my feed. Sometimes I’m scrolling for 10 minutes and give up. Their algorithm for what might interest me was so much better back then.

  • tym@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    2
    ·
    4 hours ago

    I love that this complaint is posted to Lemmy: a platform that forces me to pause my VPN to make a comment.

  • FreddiesLantern@leminal.space
    link
    fedilink
    English
    arrow-up
    22
    ·
    9 hours ago

    Oh, so what they’re really saying is that a platform owned by GOOGLE has trouble FINDING the best content?

    Everyone knows.

  • Matt@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    1
    ·
    9 hours ago

    It’s time to switch to Newpipe or Invidious, YouTube clients focused on privacy, without adverts and without Google’s clutches.

    • imetators@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      5
      ·
      8 hours ago

      Been trying out Invidious lately. Nice stuff if it is not down for a reason or two.

      Oh! Speaking of a devil. It is down right now!

      • Zwrt@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        5 hours ago

        Yeah, i even made a script just to log into its container (proxmox lxc) and pull the latest image when i see video stop loading.

        It’s almost always google actively changing things, sometimes directly targeting invidious.

        What did also helped was give its container 2 cpu cores rather than just 1. The internally errors and timeouts causes by google changes cause a big strain on it so it often crashed in combination with needing an update (leaving me unable to backup my up to date subscription list)

    • buttnugget@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      4 hours ago

      Google bought YouTube in like 2006. I liked it before they bought it, sure, but I would be hard pressed to say it’s been all downhill after the first year.

  • Bennyboybumberchums@lemmy.world
    link
    fedilink
    English
    arrow-up
    64
    ·
    14 hours ago

    They always could. What appears to be happening is that channels now have the option to turn on “a switch” so that content wont play if a VPN is detected. Most VPN ip addresses are well known, because they arent a secret. Everyone who uses the VPN goes through it.

    If you come across the above message, its because the content creator turned it on. I had it come up with “stick to football”. Its the only thing that it comes up with. I just unsubbed and wont watch anymore. Im not turning off my VPN for anyone or anything. Id rather just go with out. I encourage all of you to do the same.

    • GenosseFlosse@feddit.org
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      11 hours ago

      You could probably just record the users ID and it’s IP address. IP addresses that see a lot of different user IDs are either VPNs, companies or universities.

      • fatalicus@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        7 hours ago

        Or they are just home users behind a CGNAT, which more and more ISPs use.

        And even if they aren’t, home users usually have dynamic IPs, meaning it can change.

      • finitebanjo@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        10 hours ago

        Another thing that only very large companies can do is see the response time and compare packet size from different servers to narrow down your location, effectively defeating the VPN in a lot of cases.

        Hypothetically, a specific amount of bytes gets sent to server B, response time indicates it was received 300 miles away which matches the response time of going from Server B to Server A where the user lives.

        Of course it’s still important to use a VPN, if only because those big companies don’t want us to.

        • i_am_not_a_robot@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          2
          ·
          9 hours ago

          The latency to your VPN server is a constant added to the latency between your VPN server and whatever servers you are connected to. As long as the user’s VPN service doesn’t use different VPN servers for different destinations, it is impossible to determine the location of the user behind the VPN based on latency, and in general it is impossible to determine how far a user is from their VPN server because of varying latency introduced by the user’s own network or by bad infrastructure at the local ISP level. You can only know how far they aren’t based on the speed of light across the surface of the earth.

          But, without a VPN, this is a real attack that was proven by a high school student using some quirks of Discord CDNs. Even without using Discord’s CDNs, if somebody wanted to locate web visitors using this technique, they could just rent CDN resources like nearly every big company is doing. Of course, if you have the opportunity to pull this off, you normally have the user’s IP address and don’t care about inferring the location by latency. The reason why it was notable with Discord was because the attacker was not able to obtain the victim’s IP address.

          • finitebanjo@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            ·
            edit-2
            9 hours ago

            You say what I described is impossible but it’s been demonstrated by researchers such as “CPV: Delay-Based Location Verification for the Internet” by AbdelRahman Abdou with the Department of Systems and Computer Engineering, Carleton University Ontario.

            Furthermore, on top of that method, if a company has access to data from servers in multiple places along the chain between endpoints, then they can see that a series of packets of specific size are traveling in a specific direction, narrowing down the location of the other endpoint. A company like Amazon, whose AWS servers make up almost 30% of the internet.

            One of the more convoluted methods to defeat this approach was to simply add more stops along the chain, fragment the encrypted data into multiple parts, and pass it along random paths to the endpoint. I believe, but I could be wrong, that Tor utilizes this method. The problem with that is: it’s slower.

        • Seefoo@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          10 hours ago

          This…sounds a bit like bs. Can you share a more detailed writeup? At best you could get a radius, but that wouldn’t really be helpful

          • finitebanjo@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            8 hours ago

            Yeah there was a cool paper on Delay Response method by AbdelRahman Abdou with Department of Systems and Computer Engineering, Carleton University called “CPV: Delay-Based Location Verification for the Internet”.

            The other method I mentioned, checking packet size and general direction, would require accessing data along multiple stops before reaching the other endpoint with which to compare the sizes of encrypted data packets and use that to identify what is traveling where, which either has not been demonstrated or the companies utilizing it haven’t admitted to it, yet. It’s not a stretch to think it’s happening, though, with massive companies like AWS and CloudFlare or telecom giants like AT&T.

          • rami@ani.social
            link
            fedilink
            English
            arrow-up
            2
            ·
            10 hours ago

            I imagine they could compile large datasets of ping times and server locations and do some extrapolation. I don’t think it ever goes past a best guess but they’d have an idea (if what this person said actually happens).

            • lazylion_ca@lemmy.ca
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              9 hours ago

              Companies dont really need to know where you are. They just need to know where you aren’t. If you are not within a certain threshold of response time to certain cdn servers, then its reasonable to assume that you are outside their contractually obligated broadcast region.

  • COASTER1921@lemmy.ml
    link
    fedilink
    English
    arrow-up
    34
    ·
    16 hours ago

    My ISP has started throttling YouTube to ~2mbps when viewed from desktop. Using a VPN gets around this and lets me watch in HD. Luckily I’ve not encountered this error yet, but if I do I guess it’s no more YouTube for me, 480p is just way too blurry to put up with.

  • skuzz@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    59
    ·
    17 hours ago

    When I see content blocks like that anymore, I just leave the content behind and go elsewhere. Malicious companies will not get my clicks. They can fuck right off.

    Good sign though, means they are getting desperate. It is our duty to starve them of traffic.

    • definitemaybe@lemmy.ca
      link
      fedilink
      English
      arrow-up
      9
      ·
      15 hours ago

      Sure, but there are also lots of other ways around it. Non-chrome browsers (or Chromium-based browsers) still allow for good extensions that can block YouTube ads.

      Firefox + uBlock Origin still works great, even when all the front-ends are broken.