Made a transparent network bridge on #NixOS which sits between router & #LAN switch, monitoring traffic for #IDS #intrusiondetection , #Suricata and #Zeek capture and analyze packets → #Filebeat ships #logs → #Elasticsearch with #GeoIP ingest pipeline → #Grafana setup of dashboard to visualise data is defined in flake itself so using the flake will give the same dashboard. #flake details here https://codeberg.org/adingbatponder/reticulum_nixos_flake/src/branch/main/features/network-appliance
Hardware: HP EliteDesk 800 G1 SFF 16Gb RAM & https://www.jacob.de/produkte/Intel-Ethernet-Server-Adapter-I350-T4-I350T4V2-artnr-2094756.html #i350t4
#GeoIP
Weekend Reads
* A look at GeoIP
https://www.potaroo.net/ispcol/2025-12/geoip.html
* Tor network pentest report
https://blog.torproject.org/code-audit-network-health-tools/TTP-code-audit-network-health-report.pdf
* RPKI publication practices
https://arxiv.org/abs/2512.16369
* World's hottest data centers
https://restofworld.org/2025/data-center-heat-map/
* Measuring people to government paths
https://arxiv.org/abs/2512.13994
RE: https://mementomori.social/@levi/115334697961474628
2. Streetcomplete and #Openstreetmaps
On the topic of #geolocation , there's another FOSS project that relies on community submissions to build a privacy preserving map
let's face it, Google Maps is the most solid, polished and convenient maps app out there, it offers detailed business listings, phone numbers, open hours, photos and reviews, Streetview (which OSM lacks), live traffic, routing algorithms with turn by turn navigation.. Etc.
But as it's the case with proprietary software, convenience comes at a cost, a cost that no one can afford, loss of privacy.
Most people fail to recognize how sensitive location data is, how it's used against them and how it can be abused in the future.
if I ask.. where were you on February 9, 2012, at 3 o'clock? you have no clue, you can't even remember what you had for dinner last night! me too :-) our brains can't recall events with time and location with such great precision, if you can.. you must be Charles Xavier from X-Men :-P
But you know who can remember? Google. the Ad company profiles individuals by tracking queries, routes, and interactions, it records your movements by a feature called location history which is turned on by default, even when you don't use the app, your movements are still logged, heck.. even if you turn off location history altogether, Google keeps on tracking you.. this should tell you how much valuable location data is for E-Corp, where you work or study, what you're planning to buy, where you go for entrainment.. etc. all used to create a profile so that the surveillance machine can target you with ads..
The brightside is that we don't have to use a surveillance tool like Google Maps, OrganicMaps is a free and open source software that respects your privacy, does not collect or transmit your location, search history, or usage data and it encourages you to use it offline by letting you know that you have to download maps for your area.
Organic Maps uses OpenStreeMaps which is also free software, but as I mentioned it's not as rich as Google Maps in terms of data. :-(
Which brings us to Streetcomplete, a FOSS android app designed to make contributing to OpenStreetMap easy. It's really like a real life game and I find it fun, It uses a simple question and answer interface to gather missing OpenStreeMaps details like: surface types of paths, opening hours of shops, speed limits.. etc
Submitted data will appear on OpenStreeMaps, so all users of apps like @organicmaps and @CoMaps can benefit from :-)
If you're interested in volunteering to help us make a #freedom map so we don't live our lives under the constant surveillance of #bigbrother Google, check out the following links:
- https://streetcomplete.app/
- https://www.openstreetmap.org
- https://organicmaps.app
- https://www.comaps.app/
#opensource #geolocation #linux #programming #coding #technology #geoip #software #gis #openstreetmap #tech #github #iot #data #security #opensourceprojects #geotagging #locationdata #mapdata #opendata #fdroid #neostumbler #location #surveillance #privacy #street #streetcomplete #google
You can contribute to the #freesoftware movement even if you don't know how to write #code here's some practical examples:
1. @beacondb & #Neostumbler
BeaconDB is community-driven wireless geolocation database that serves as a replacement for Mozilla Location Services (MLS), which was discontinued in March 2024.
why is this project important?
because #Google collects extensive location data tied to user accounts for advertising and profiling (even if you turn off location history) Google doesn't understand consent, what a surprise! :blob_rollingeyes:
BeaconDB will provide privacy friendly geolocation, allowing #degoogled #android ROMs like #CalyxOS and #GrapheneOS to be used without relying on Google (Google's location services)
Neostumbler is an #opensource android app, that collects geolocation data from wireless signals such as Wi-Fi access points, cell towers, and Bluetooth beacons, NS does not collect personal identifying information, only anonymized wireless signal data and it can be turned off at any time. (can't say the same for Google)
you can start contributing to BeaconDB simply by downloading and installing NeoStumbler, enabling GPS, open NS and start a scan, start walking or driving, and after you cross a certain distance, you'll see some generated reports, press upload to upload them all (you can also go to settings and enable automatic uploading in the background)
If you want to volunteer and help us free our phones, laptops and smart watches from corporate ecosystems (like Google's location services) and achieve digital sovereignty in the aspect of geolocation, take a look at these links
- BeaconDB: https://beacondb.net/
- NeoStumbler: https://github.com/mjaakko/NeoStumbler
#opensource #geolocation #linux #programming #coding #technology #geoip #software #gis #openstreetmap #tech #github #iot #data #security #opensourceprojects #geotagging #locationdata #mapdata #opendata #fdroid #beaconDB #neostumbler #location #surveillance #privacy #mozilla #firefox
Merke: Mit #GeoIP Blocking „US“ zu blockieren ist schon mal keine gute Idee, wenn man das #ActivityPub Plugin in #Wordpress verwendet… mastodon.sdf.org steht nämlich in den US 😅
@goetz Have you tried it with https://gitlab.com/miyurusankalpa/IPv6-dns-server/ or https://codeberg.org/IPv6-Monostack/delegacy-rpz/ (shameless plug, and is less powerful)? In my limited testing, more or less all streaming services are #IPv6 capable if forced through one of the above methods. Maybe that helps with customer support: “I know your systems can rudimentarily support it, you just have to turn it on (and fix anything that breaks in your backend, but that happens anyway by me using the above methods 😈)”.
In particular, the #qobuz website is ipv6-only when having the required #akamai rules enabled. Their #geoip is clearly confused, moving everyone to gb-en.
@landley @pmevzek @jschauma @ryanc @0xabad1dea And that is espechally baffling considering that #APNIC as #RIR ran out of #IPv4|s first.
- And right now I'm between a rock and a hard place and either become a @ripencc member or cough up equal amounts in monthly installments just to get some properly geolocated #IPv6.
Cuz people telling me "Oh, just use HEnet's Tunnelbroker"" never experienced the shitshow that is #Geoblocking and #GDPR-#Noncompliance with #Malvertising to slap their faces!
- Cuz believe me, I tried, but since some idiots decided to #GeoIP entire #ASN|s and not #IP - #Allocations the PoP in FRA (FFM actually) will get me mislocated to the #USA!
@niklas @mattgrayyes worse even if one doesn't setup an account just to watch videos!
Then one cannot disable that shite which solely selects the used language based off vibes, which is really annoying when one has different #GeoIP "localizations" depending on whetger #IPv4, #IPv6 and whether one is on #Mobile or at home or at work!
Really makes me angry af!
A few months have passed and #Maxmind #GeoIP has yet again marked my #IPv6 /48 as "hosting" rather than "residential". This sets off alarms on various local streaming services, making them think I'm using a VPN.
My provider contacted them on multiple occasions, they fixed it once, and now it broke again.
So there you go, that one company that makes life difficult, because they can't figure out how to make persistent fixes to their darn database.
Seit einigen Tagen werden Medien meiner Mastodon-Instanz metalhead.club global verteilt über ein eigenes CDN ausgeliefert. :goose_hacker:
Das verringert die Latenzen für Benutzer aus nicht-EU Ländern und sorgt für weniger Frust bei den Ladezeiten.
Was ein CDN ist, welche Implementierungsmethoden es gibt und wie ich mein kleines CDN umgesetzt habe, erfahrt ihr in meinem neuen Blogpost:
"Ein eigenes kleines CDN für meine Mastodon-Instanz metalhead.club" - https://thomas-leister.de/mastodon-media-storage-cdn/
#metalheadclub #cdn #media #mastodon #instance #mastoadmin #hosting #selfhosting #nginx #scaleway #dns #geoip #geodns #hetzner
Как устроен CDN RUTUBE: железо, сеть, ПО
Привет, Хабр! Меня зовут Дмитрий Иванов, я начальник отдела эксплуатации IT-инфраструктуры RUTUBE, что на наши деньги переводится как SRE-тимлид. В этой статье разберу задачу доставки контента и расскажу и решениях, которые помогают нам в RUTUBE. Дано: с одной стороны у нас 17,7 млн ежедневных пользователей, а с другой — 400 млн единиц контента. Оба эти показателя постоянно увеличиваются, а география присутствия пользователей расширяется. Требуется: показывать всем нашим пользователям видео из библиотеки быстро, надежно и эффективно.
https://habr.com/ru/companies/oleg-bunin/articles/919360/
#cdn #rutube #кэширование #балансировка #видео #numa #psi #anycast #geoip #systemdnetworkd
#ebay needs to update their #GeoIP database.
I've just logged on from an old computer in my house, and it's sent me an email saying someone has logged in from Shropshire, which is over 100miles away, when most sites think I am based in North London (which is still wrong, but my ISP is at least based there).
No other site seems to ever think I'm in Shropshire.
I wish companies would just list the IP address and browser details in their "a new device had logged in to you account" emails, any other details seem to be totally wrong, and therefore useless 🤬
i get a decent ping but more than i figured, yabs looked pretty good now that i got the kinks ironed out should be pretty happy with setup, the control panel vnc does actually work - it has some lag. they have affiliate program with decent terms #geoip
- I can see the benefit of a miniaturized retro gaming system (I think legacy systems need to be served with properly maintained software & hardware).
https://www.youtube.com/watch?v=2P1E2vjpcRo
https://www.youtube.com/watch?v=B8WfiRRvQXo
As with #IPv4 the problem is that there is no mandate to provide users with static prefixes and I'm stuck on a /28 of IPv4's and can't even get a singoe /64.
- And before you ask: No, #Tunnelbroker is not a valid solution as HE.net's tunnel will get #USA #GeoIP'd even eith the PoP in FRA so it bricks a shitload of things due to #Geoblocking and bad #peering. Believe me, I tried that already!
[Перевод] Не пытайтесь угадать мой язык
Если вы всё ещё используете IP-геолокацию для выбора отображаемого языка, то хватит заниматься ерундой. Это ошибочное допущение, замаскированное под фичу. IP сообщает, откуда пришёл запрос, и на этом всё. Он не сообщает, какой язык нужен пользователю, на каком языке он говорит и какой язык понимает. Подобная система постоянно ломается — VPN, путешествия, эмиграция, страны с несколькими официальными языками. Это не умное, а раздражающее решение.
[Перевод] Не пытайтесь угадать мой язык
Если вы всё ещё используете IP-геолокацию для выбора отображаемого языка, то хватит заниматься ерундой. Это ошибочное допущение, замаскированное под фичу. IP сообщает, откуда пришёл запрос, и на этом всё. Он не сообщает, какой язык нужен пользователю, на каком языке он говорит и какой язык понимает. Подобная система постоянно ломается — VPN, путешествия, эмиграция, страны с несколькими официальными языками. Это не умное, а раздражающее решение.
OK maybe I'm seeing things, but I'm 100% sure when I asked ChatGPT to geolocate an image last night it said something like "based on your location in Glasgow" when it was making some guesses. I wasn't in Glasgow and I knew for a fact that the photo was taken in the USA, but then noticed my VPN was on and had an exit node in Glasgow. I didn't think much of it, told it to ignore my own location and continued. When I remembered that today I thought well that's kinda bad, taking the user's IP location into account when asked to geolocate a random photo. I tried to replicate the session, planning to switch to exit nodes in different countries and see if that changes the results. However I got completely different results than last night and also when asked directly, ChatGPT insisted that it can't see my IP nor my GeoIP location. No idea what happened there and since it was a temporary session I don't have the history of last night, but if indeed your own location (as perceived by ChatGPT) plays into its efforts to geolocate images, that's something one should keep in mind when using ChatGPT for OSINT.
Sometimes the situation with open source is paradoxical. I developed mmdb-server and GeoOpen to maintain a fully open toolchain for Geo IP lookup, yet now many people are submitting pull requests to reintroduce proprietary and closed databases.
🔗 Original code base - https://github.com/adulau/mmdb-server
#opensource #geoip #freesoftware
If you're curious, check out the current pull requests and network forks to support proprietary databases. Why not invest that effort into improving open GeoIP instead?
Маршрутизация силами Haproxy, DoH, GeoIP, защита сервисов через mTLS и выгрузка метрик в Prometheus, настройка ACME.SH
Работаем с Haproxy, маршрутизация по GeoIP и ограничения, настройка mTLS для защиты сервисов, выгрузка метрик в Prometheus. Настройка панели 3X-UI для работы с Unix Socket и персональный DNS over HTTPS.
Client Info
Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst