It should be pointed out that -- the SPECIFIC accusation from Netflix -- is that people on TunnelBroker are on a VPN or proxy unblocker.
The data does not bear that out. Hash tag just saying. </soapbox> On Mon, Jun 6, 2016 at 7:53 PM, Ricky Beam <jfb...@gmail.com> wrote: > On Mon, 06 Jun 2016 19:41:14 -0400, Mark Andrews <ma...@isc.org> wrote: > >> What lie? Truly who is lying here. Not the end user. Not HE. There is >> no requirement to report physical location. >> > > The general lie that is IP Geolocation. HE only has what I tell them (100% > unverified), and what MaxMind (et.al.) tell them (~95% unverified.) They > know my IPv4 endpoint address, but that doesn't give them a concrete street > address -- they're guessing in exactly the same way everyone else does. And > more to the point, HE doesn't share that information with anyone. (whois is > populated with your account information. they don't ask where your tunnels > are going.) > > Are they legally required to go to this level? >> > > Possibly, but Netflix isn't going to push this. Win or Lose, they still > lose distribution rights. > > Netflix (and their licensees) know people are using HE tunnels to get >>> around region restrictions. Their hands are tied; they have to show >>> they're doing something to limit this. >>> >> >> No, they do not know. The purpose of HE tunnels is to get IPv6 service. >> The fact that the endpoints are in different countries some of the time >> is incidental to that. >> > > YES. THEY. DO. There have been entire COMPANIES doing this. (which is > likely what sparked this level of response.) Neither HE nor Netflix are > naming names, but a short walk through the more colorful parts of the > internet should be enlightening. > > Garbage. You have to establish the tunnel which requires registering >> a account. It also requires a machine at the other end. Virtual >> or physical they don't move around the world in a DDNS update. The >> addresses associated with a tunnel don't change for the life of >> that tunnel. >> > > True. 'tho, you can list any nonsense address you want. They do nothing to > validate it. (Use my favorite BS address: Independence MT -- pop: zero. > It's a dirt road across a mountain in the middle of absolutely nowhere. > Google it!) > > The tunnel endpoint (your IPv4 address) is known only to HE, and not > exposed to ANYONE. That's not going to EVER change. Once your tunnel has > been setup, that address ("Client IPv4 Address") is not set in stone. > People have dynamic addresses, and HE recognizes this, so there are > numerous methods to change the tunnel endpoint address. (tunnel > configuration page, update through an http(s) request, etc.) THUS, a tunnel > can move; it can be terminated anywhere, at anytime. Not only can one > update the endpoint to a different address on the same box, but to a > completely different box entirely. > > Furthermore, one account can have several tunnels through different > servers that present addresses from different regions. Where I appear to be > in the world, thus, depends on which tunnel I have enabled. (and in which > countries HE has prefixes, which currently appears to be 4) >