Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Country restriction????? REALLY? #6

Closed
arash74 opened this issue Nov 25, 2022 · 9 comments
Closed

Country restriction????? REALLY? #6

arash74 opened this issue Nov 25, 2022 · 9 comments

Comments

@arash74
Copy link

arash74 commented Nov 25, 2022

"Access to this Invidious instance is country restricted"
WHAT IS THIS NOW? YOUTUBE OFFICIAL? This is unbelievable.
And you have the nerve to put Iran on the blacklist. A country in which the dictator government blocks Youtube access. WOW. JUST WOW.

@andrigamerita
Copy link

And you have the nerve to put Iran on the blacklist.

@arash74 Here I suspect that, most likely, they have put only Germany on the whitelist and thus all other countries are blocked.
I'm in Italy and until yesterday the instance was accessible to me, since today it isn't.


To the instance maintainer(s): I want to know why though? Too few resources to handle too many people for a free-of-charge service or what? From one day to the next without prior notice of any kind is kind of bad.

Also, I'd question the legality of the whole operation, since the instance is hosted in Europe, and it is a public service, it has to follow GDPR, but afaik (I might be mistaken, I'm not a lawyer) it's against the regulation to deny people access to the service without a prior notice if you don't both provide a data backup and allow for deletion of personal data from the servers.
I exported my data and then deleted my account by connecting to the server with a free VPN (German IP address), but I've been able to do this only because I know how to do this kind of stuff, some people might not. On the "access restricted" page, I think you should provide an email address for someone to contact you to ask for both a data export and account deletion.

@FuccDucc
Copy link

FuccDucc commented Nov 27, 2022

I didn't confirm that they blocked countries except for Germany (it seems to work for me at this moment), but if they did or are about to finalize such an action, it's not a big deal.. just use LibRedirect that dynamically chooses from invidious front-ends.

Then we report the indivious "NerdVPN.de" front-end to LibRedirect devs (to get it removed) for its egocentric action of blocking users on the basis of nationality, so that people no longer get it dynamically assigned & waste their time. NerdVPN should realize that they are just a tiny dot in the pool of available instances, in fact i only saw it existed after getting it assigned by LibRedirect once in the past year.. and that still, due to the high amount of LibRedirect users, actions like this will turn the trickle of their randomly selected users to nothing. Which is good on parties that exhibit this kind of antisocial/discriminatory behavior.

Imagine being an "internet freedom/privacy/OSS" developer kind of person, as the Individious NerdVPN.de operator Marvin Zurborg (Sommerwiesel) purports to be, and then not believing in equality, rather in limiting the tools you develop for the furtherance of internet freedom/privacy to certain nationalities & countries that they personally like, and discriminating a bunch of "blacklisted" countries from using it to further their privacy and internet freedom. That's rather contradicting and hypocritical.

@FuccDucc
Copy link

FuccDucc commented Nov 27, 2022

Update to my last comment.. i was able to confirm these negative practises. The block doesn't affect my own country (Netherlands) but affects many others, like France, USA etc, as tested from different connections/asking other people to test.

This is the "Your country is blocked" page that i was able to confirm:

image

As mentioned, i asked others to test it from their respective countries as well. They don't use VPN, so its truly a "discrimination based on nationality/country" matter. In addition, separately from that, it's real shady for them to try coerce privacy-aware users to turn off their VPN, as if they have to trust NerdVPN.de invidious instance operator on their blue eyes with that statement (as in the screenshot) "This site does not track your data". That can be a side catch for them (should they do something bad after all), but due to the non VPN tests it turns out to be that the instance operator wants to save his whitelisted country users from the block, if they can't access due to their VPN pointing to a country he doesn't like thus is in the blacklist.

Now that it's confirmed, i will turn right around and go ahead in asking LibRedirect to ban the NerdVPN Invidious instances.

// Edit: finished requesting NerdVPN's removal at their repo (libredirect/browser_extension#555)

@Sommerwiesel
Copy link
Owner

Sommerwiesel commented Dec 5, 2022

Cheers everyone,
sorry for the late reply, the past weeks have been kinda hard on me.
This whole thing started when my server was under hard attack and I had to start taking measurements against it.
Suddenly, within a few days, my 20TB of included monthly traffic was at 163TB (which I had to pay with a quite high price) and I wanted to look into the whole mess.
It was not legit traffic at this point but a lot of requests that tried to seemingly use my instance as a way to download huge portions of Youtube.
My first reaction was to try fighting this with the methods given to you by Invidious: disable downloading, disable local proxy. But that didn't work at all.
My second attempt was at including a rate limiter for everyone trying to fetch huge amounts of data but that didn't bode well with Invidious hourly restart.
My third attempt, and at this point I was angry, frustrated and mostly out of time to properly look into this problem, was to just block out everyone which data volume has gone over and beyond a reasonable value. And somewhere in my mind I thought "hey why not make it availably to Europe only - problem solved". Yeah... I'm a fucking idiot...
By doing this, I basically screwed everyone and and therefore I'm sorry.

I know now that with the last option, I was completely out of my mind and I want to take this opportunity to apologize to everyone involved.
I have disabled all limitations again and hereby vouch to never use such drastic and plainly wrong methods again.
I never wanted to indiscriminate everyone. I wasn't thinking clearly and made a huge mistake. A really dumb mistake which originated from me suddenly getting an over 200 bucks invoice from my hosting provider. I overreacted. I'm sorry :(

I'm currently thinking about moving the server to a place where traffic is not a monetary issue. Afterwards, I will take proper measurements to prevent misuse of the server without affecting everyone. I should have done that in the first place, but didn't find time for it.

Again, verry sorry about this.
I hope you can forgive me, I have absolutely learned this lesson ad will take it to heart.

Cheers,
Marvin

@Sommerwiesel
Copy link
Owner

Sommerwiesel commented Dec 5, 2022

Addendum:
@FuccDucc

Imagine being an "internet freedom/privacy/OSS" developer kind of person, as the Individious NerdVPN.de operator Marvin Zurborg (Sommerwiesel) purports to be, and then not believing in equality, rather in limiting the tools you develop for the furtherance of internet freedom/privacy to certain nationalities & countries that they personally like, and discriminating a bunch of "blacklisted" countries from using it to further their privacy and internet freedom. That's rather contradicting and hypocritical.

You're right and I deserve that harsh criticism. Thanks for setting me straight. Sometimes, we all need someone to tell us "This is stupid - don't do that!"
Sorry :(

@Ammako
Copy link

Ammako commented Dec 5, 2022

Hey mate, I apologize for behalf of everybody else for the completely irrational reactions. Though you really should've given some kind of prior warning to users so that they could've at least had the chance to download and/or delete their data beforehand. Or at least offer some kind of direct contact so that people could request download or deletion.

If you have issues running your instance, know that invidious is there to help if you need to get things under control.

If a maintainer of an instance struggle to handle the load, they can always ask for help. They shouldn't take a harsh decision without consulting the Invidious team.

iv-org/documentation#149 (comment)

unixfox added a commit to iv-org/documentation that referenced this issue Dec 5, 2022
In order to not having a case like this again: Sommerwiesel/invidious#6 (comment)
@unixfox
Copy link

unixfox commented Dec 5, 2022

@Sommerwiesel On these kinds of decisions, you may also consult the community of Invidious. Plenty of other Invidious instance maintainers have probably run into the same issue.

If you had reached out to the Invidious team, we would have given you better advices than straight blocking people. I run yewtu.be, and I would surely have helped you in overcoming this issue.

If you have a matrix account, we can add you in the matrix channel where a lot of invidious instance maintainers can talk between each other. Join our matrix channel and send us a ping if you are interested: https://matrix.to/#/#invidious:matrix.org

Anyway, for the future, like you said, it's hugely recommended to run the invidious instance on a server with unlimited traffic. Video playback consumes a lot of bandwidth, it's not lightweight on bandwidth like Nitter or Searx.

@FuccDucc
Copy link

FuccDucc commented Dec 5, 2022

I noticed the discussion surrounding this matter at places, like: iv-org/documentation#149 (comments at the very bottom, including what Ammako called him bringing it up with them), iv-org/documentation#241 (comment) and especially here, after which i believe and understand what the instance operator is saying. Looks resolved to me

Btw, when you described the Europe thing.. it's kinda odd that countries like France also ended up blacklisted then (as stated in my original posts). But whatever

@Sommerwiesel
Copy link
Owner

Sommerwiesel commented Dec 7, 2022

Btw, when you described the Europe thing.. it's kinda odd that countries like France also ended up blacklisted then (as stated in my original posts). But whatever

Short answer: IP-based blocking is shiiiiit, especially if you're not a paying Maxmind customer ;)

Thanks for all the feedback everyone, especially from @unixfox.
I have already taken proper measurements by migrating the instance to a new dedicated server without any kind of traffic limit.
I will, as soon as I find the time (which means after Christmas), reach out to you on matrix and continue discussing things like this over there. but until then, things are sorted out for now...

I have also thought about getting one of my friends involved in managing the servers as well as participating in decision making. It seems like managing all the services on my own isn't such a good idea after all...

Have a nice December and love from Germany,
Marvin

unixfox added a commit to iv-org/documentation that referenced this issue Mar 5, 2023
* Add mandatory unlimited traffic limit

In order to not having a case like this again: Sommerwiesel/invidious#6 (comment)

* Minimum not max
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants