Double censorship (derpibooru+ISP)
The Frowning Pony
Administrator
13 blinks per minute
@SeraphimDawn
Apparently they stopped blocking some time ago, at least on the government level; not sure if every ISP followed suit.
Apparently they stopped blocking some time ago, at least on the government level; not sure if every ISP followed suit.
Vaidelot 
Humble Dash-worshipper
@SeraphimDawn
@The Frowning Pony
Well, can confirm that at least 3 providers I work with stopped blocking it. For how long though… we will see. Anyway, there is a lot of ways to circumvent it. TOR, browser extension like AnonymouX or FriGate, foreign proxies - just to name a few.
@The Frowning Pony
Well, can confirm that at least 3 providers I work with stopped blocking it. For how long though… we will see. Anyway, there is a lot of ways to circumvent it. TOR, browser extension like AnonymouX or FriGate, foreign proxies - just to name a few.
HMage 
I eat tea
@SeraphimDawn
No, as of now, derpi isn’t in the list.
This list is accurate and the same used by ISP’s when they’re required to enforce the blocks. If willing and time allows, site admins could possibly set up monitoring of this list so they have a few days of warning — the blocks happen a day or two after an URL appears there.
No, as of now, derpi isn’t in the list.
This list is accurate and the same used by ISP’s when they’re required to enforce the blocks. If willing and time allows, site admins could possibly set up monitoring of this list so they have a few days of warning — the blocks happen a day or two after an URL appears there.
Barhandar 
(twi|pony)booru.org
@The Frowning Pony
Judging from the list’s current contents, government’s porn-ban-happy parts calmed down and the 99% of additions are drug-selling sites with their mirrors (and they deserve to get blocked and/or taken down).
There are examples of very local (single city level) idiots forcing country-wide bans on sites through badly done jury, though.
Judging from the list’s current contents, government’s porn-ban-happy parts calmed down and the 99% of additions are drug-selling sites with their mirrors (and they deserve to get blocked and/or taken down).
There are examples of very local (single city level) idiots forcing country-wide bans on sites through badly done jury, though.
Clover the Clever 
We have monitoring of the TLS certificate that clients are sent when connecting to derpibooru.org via the RIPE Atlas monitoring infrastructure; if it’s blocked, clients don’t get our certificate, they get one issued to their ISP. This is a far more accurate way of checking if we’re blocked or not.
One of my $DAYJOB side projects is heavily related to censorship avoidance and monitoring, so we do a little of that for derpi.
Lord and Saviour
No, as of now, derpi isn’t in the list.This list is accurate and the same used by ISP’s when they’re required to enforce the blocks. If willing and time allows, site admins could possibly set up monitoring of this list so they have a few days of warning — the blocks happen a day or two after an URL appears there.
We have monitoring of the TLS certificate that clients are sent when connecting to derpibooru.org via the RIPE Atlas monitoring infrastructure; if it’s blocked, clients don’t get our certificate, they get one issued to their ISP. This is a far more accurate way of checking if we’re blocked or not.
One of my $DAYJOB side projects is heavily related to censorship avoidance and monitoring, so we do a little of that for derpi.
HMage
I eat tea
@Clover the Clever
Yup, that’s for seeing the block after the fact, though, reactive protection.
The suggestion is more along the lines of proactive-like warning, since the list is usually few days ahead, as additional measure.
Either way, you seem to know what you’re doing, and knowing a few days ahead won’t change much on bigger scale of things, anyway.
Thank you for paying your attention to forum posts like these <3
Yup, that’s for seeing the block after the fact, though, reactive protection.
The suggestion is more along the lines of proactive-like warning, since the list is usually few days ahead, as additional measure.
Either way, you seem to know what you’re doing, and knowing a few days ahead won’t change much on bigger scale of things, anyway.
Thank you for paying your attention to forum posts like these <3
Clover the Clever
Yeah, we could be a bit more proactive, but given the latency on removals is measured in months, not that much point in knowing to ask for it to be removed a day earlier :-)
Lord and Saviour
@Clover the Clever
Yup, that’s for seeing the block after the fact, though, reactive protection.The suggestion is more along the lines of proactive-like warning, since the list is usually few days ahead, as additional measure.Either way, you seem to know what you’re doing, and knowing a few days ahead won’t change much on bigger scale of things, anyway.Thank you for paying your attention to forum posts like these <3
Yeah, we could be a bit more proactive, but given the latency on removals is measured in months, not that much point in knowing to ask for it to be removed a day earlier :-)
Barhandar
(twi|pony)booru.org
Time for some necromancy!
Derpi’s two primary domains (derpibooru.org and derpiboo.ru) result in generic “connection to server dropped” error characteristic of ISP-blocked sites not actually in Registry.
Surprisingly, the secondary domains (trixiebooru.org and ponibooru.org) work. Even more surprisingly, so does celestia.derpibooru.org.
I suspect DNS shenanigans.
Derpi’s two primary domains (derpibooru.org and derpiboo.ru) result in generic “connection to server dropped” error characteristic of ISP-blocked sites not actually in Registry.
Surprisingly, the secondary domains (trixiebooru.org and ponibooru.org) work. Even more surprisingly, so does celestia.derpibooru.org.
I suspect DNS shenanigans.
SuperSupermario24 
fluffy sylveon
@Barhandar
I’m guessing they just don’t know about the other sites and so couldn’t block the domains.
The celestia.derpibooru.org working is weird though.
I’m guessing they just don’t know about the other sites and so couldn’t block the domains.
The celestia.derpibooru.org working is weird though.
Background Pony #8FA9
Time for some necromancy!
Also, that annoying “One More Step” thing is now not only on derpicdn.net, but on main site too. And it’s pop up much more often.
Barhandar
(twi|pony)booru.org
@SuperSupermario24
The same CDN is utilized by all domains and would get blocked first instead of the site (like how Furaffinity is currently image-blocked because Roskompozor consistently (almost a year now) fails to report a single image), thus “DNS shenanigans”.
Especially since Derpi is Cloudflare-protected and Cloudflare is known for periodically rotating its IPs… as well as notorious for stupid-ass ISPs blocking said IPs and not domains, so legit and fair sites could get blocked after a rotation.
P.S. Fun fact: despite FA’s CDN being very explicitly present in the Registry, it still gives the “connection dropped” error instead of “Censorship Alert” page.
The same CDN is utilized by all domains and would get blocked first instead of the site (like how Furaffinity is currently image-blocked because Roskompozor consistently (almost a year now) fails to report a single image), thus “DNS shenanigans”.
Especially since Derpi is Cloudflare-protected and Cloudflare is known for periodically rotating its IPs… as well as notorious for stupid-ass ISPs blocking said IPs and not domains, so legit and fair sites could get blocked after a rotation.
P.S. Fun fact: despite FA’s CDN being very explicitly present in the Registry, it still gives the “connection dropped” error instead of “Censorship Alert” page.
Vaidelot
Humble Dash-worshipper
@Barhandar
Well, looks like my provider is blocking it again too… Strangely, I don’t see (at least in reestr.rublacklist.net) any new URLs containing derpibooru/derpicdn… So, your version about Cloudflare seems to be true…
Well, looks like my provider is blocking it again too… Strangely, I don’t see (at least in reestr.rublacklist.net) any new URLs containing derpibooru/derpicdn… So, your version about Cloudflare seems to be true…
Just_Another_Pony 
www.trixiebooru.org still works for me.
derpibooru.org and derpiboo.ru doesn’t work.
derpibooru.org and derpiboo.ru doesn’t work.
Clover the Clever
Lord and Saviour
It’d be really helpful to have more info than “doesn’t work”. Do you get connection issues? Resolver failures? Have to go through the Cloudflare “please unblock me I’m human” page? (The latter should only show up once a month, unless you’re doing something nefarious)
We’ve had to set up CF on the main site because CF were not happy with us just hosting the images through them, hence the change. Sorry if this does cause issues - we’ll work to resolve them. Our main advice for people affected by government censorship remains to use the Tor Browser Bundle and the Tor anonymity network to access the site.
We’ve had to set up CF on the main site because CF were not happy with us just hosting the images through them, hence the change. Sorry if this does cause issues - we’ll work to resolve them. Our main advice for people affected by government censorship remains to use the Tor Browser Bundle and the Tor anonymity network to access the site.
Vaidelot
Humble Dash-worshipper
@Clover the Clever
Sadly, the connection issues here are unrelated to Cloudflare’s own security systems. As @Barhandar previously said, the problem is that the IP Cloudflare is currently assigning to the Derpibooru was previously used (or maybe IS used - I don’t know whether Cloudflare assigning single IP per domain, or one IP used to protect multiple domains simulteniously) to protect one of the sites that was blocked in Russia. Since Russian censorship is IP-based (at least in case of https-protected sites), Derpibooru just ends up being blocked along with that site…
Sadly, the connection issues here are unrelated to Cloudflare’s own security systems. As @Barhandar previously said, the problem is that the IP Cloudflare is currently assigning to the Derpibooru was previously used (or maybe IS used - I don’t know whether Cloudflare assigning single IP per domain, or one IP used to protect multiple domains simulteniously) to protect one of the sites that was blocked in Russia. Since Russian censorship is IP-based (at least in case of https-protected sites), Derpibooru just ends up being blocked along with that site…
Clover the Clever
Yeah, I get it - hence my comment about Tor. We can’t do anything to avoid Cloudflare getting collaterally blocked, though the large volume of affected sites usually results in stuff getting unblocked eventually (in the internet freedom community, we call this collateral freedom).
Lord and Saviour
@Clover the Clever
Sadly, the connection issues here are unrelated to Cloudflare’s own security systems. As @Barhandar previously said, the problem is that the IP Cloudflare is currently assigning to the Derpibooru was previously used (or maybe IS used - I don’t know whether Cloudflare assigning single IP per domain, or one IP used to protect multiple domains simulteniously) to protect one of the sites that was blocked in Russia. Since Russian censorship is IP-based (at least in case of https-protected sites), Derpibooru just ends up being blocked along with that site…
Yeah, I get it - hence my comment about Tor. We can’t do anything to avoid Cloudflare getting collaterally blocked, though the large volume of affected sites usually results in stuff getting unblocked eventually (in the internet freedom community, we call this collateral freedom).
Background Pony #8FA9
Results of using TOR:
Our main advice for people affected by government censorship remains to use the Tor Browser Bundle and the Tor anonymity network to access the site.
Results of using TOR:
Background Pony #8FA9
We’ve had to set up CF on the main site because CF were not happy with us just hosting the images through them, hence the change.
That’s… concerning. I wouldn’t surprised if they would force you to ban all (or some) explicit and grimdark images altogether (especially related to foalcon and suicide).
(FIMFiction had similar ‘wonderful’ experience with another monopolist - AdSense.)
(FIMFiction had similar ‘wonderful’ experience with another monopolist - AdSense.)
Clover the Clever
AdSense is a very different beast. And yes, you’ll note we don’t run ads from any commercial networks. We’d love to - we have more traffic than most FIM sites, and eg Adsense would pay for the servers outright in a month. But we can’t because of content. We’ve had no such complaints from CloudFlare at this time.
We are not held to ransom by CF - there’s nothing preventing us from ditching them, and our infrastructure continues to be designed accordingly. However, for the vast majority of our users, CF provides a significant improvement to browsing the site.
Tor users can, as ever, use https://ronxgr5zb4dkwdpt.onion/ to bypass CloudFlare.
http://derpinews.tumblr.com/post/96133881848/browsing-derpi-as-a-tor-hidden-service
Lord and Saviour
We’ve had to set up CF on the main site because CF were not happy with us just hosting the images through them, hence the change.That’s… concerning. I wouldn’t surprised if they would force you to ban all (or some) explicit and grimdark images altogether (especially related to foalcon and suicide).
(FIMFiction had similar ‘wonderful’ experience with another monopolist - AdSense.)
AdSense is a very different beast. And yes, you’ll note we don’t run ads from any commercial networks. We’d love to - we have more traffic than most FIM sites, and eg Adsense would pay for the servers outright in a month. But we can’t because of content. We’ve had no such complaints from CloudFlare at this time.
We are not held to ransom by CF - there’s nothing preventing us from ditching them, and our infrastructure continues to be designed accordingly. However, for the vast majority of our users, CF provides a significant improvement to browsing the site.
Tor users can, as ever, use https://ronxgr5zb4dkwdpt.onion/ to bypass CloudFlare.
http://derpinews.tumblr.com/post/96133881848/browsing-derpi-as-a-tor-hidden-service
Background Pony #8FA9
ronxgr5zb4dkwdpt.onion is acting up again. To be precise, derpicdn.net that ronxgr5zb4dkwdpt.onion is linking to: broken pics and styles. That wasn’t the case until recently. I have to change TOR IP 5-10 times every time it happens.
Clover the Clever
This is an issue - we should be providing all the assets on that hidden service. It’ll get looked at.
Lord and Saviour
ronxgr5zb4dkwdpt.onion is acting up again. To be precise, derpicdn.net that ronxgr5zb4dkwdpt.onion is linking to: broken pics and styles. That wasn’t the case until recently. I have to change TOR IP 5-10 times every time it happens.
This is an issue - we should be providing all the assets on that hidden service. It’ll get looked at.
Background Pony #D292
The hidden service seems no loger works for me for past 3 days:
400 Bad Request
No required SSL certificate was sent
400 Bad Request
No required SSL certificate was sent
Clover the Clever
Lord and Saviour
@Background Pony #5799
We’re aware - it’ll be sorted out this weekend.
We’re aware - it’ll be sorted out this weekend.
Interested in advertising on Derpibooru? Click here for information!
Help fund the $15 daily operational cost of Derpibooru - support us financially!