Hacker News new | ask | show | jobs
by JakeBrander 104 days ago
"The point about Geofeed (RFC 8805) manipulation is the most overlooked part of this. We’ve moved from an era where an IP’s location was determined by physical infrastructure to an era where it’s determined by whoever manages the CSV file.

The 'house of cards' exists because there’s a massive gap between registration (who owns the block) and routing/reputation (how the block is used). As long as reputation databases trust self-published geofeeds over verified RIR registry data, the incentive to 'launder' data center IPs into residential proxies will be too profitable to ignore. The only way to break the cycle isn't just to 'stop hoarding,' but to demand tighter verification between the actual network owner and the published Geofeed data."

In fact, Maxmind is actually working to help solve this problem