[kvdveer]

Yesterday I fought off someone/something doing Chinese language crypto-blogspam on my website. Ip-addresses were all unique (mixed ipv4&ipv6), but all were 'located' within 100km of my server in central Europe.

If crypto-scammers can bypass geo-restrictions for blogspam, I'm confident that state-level actors can do that even better for geopolitics.

[KaoruAoiShiho]

Did you read the article? It's not about using IP addresses...

[frotty]

right - it's about using latency to the requester.

...which is what fails via 100 methods. I personally can't believe this is omitting addressing the things that would basically ruin this.