←back to thread

295 points AndrewDucker | 5 comments | | HN request time: 0s | source
Show context
miki123211 ◴[] No.45045491[source]
Is there even such a thing as a "Mississippi IP?"

I.E. Are US ISPs, particularly big ones like Comcast, required to geolocate ISPs to the state where the person is actually in? What about mobile ones?

Where I live (not US), it is extremely common to get an IP that Maxmind geolocates to a region far from where you actually live.

replies(5): >>45045606 #>>45045616 #>>45046119 #>>45046293 #>>45050727 #
kube-system ◴[] No.45045616[source]
GeoIP services are not 100% accurate, but that doesn't mean they're completely useless.

The law in question requires "commercially reasonable efforts"

replies(2): >>45045851 #>>45047998 #
beefnugs ◴[] No.45045851[source]
Remember that massive surveillance capitalism apparatus that has been created for years? Now everyone must pay for it to legally comply with whatever arbitrary bullshit no matter how expensive the data becomes
replies(2): >>45045869 #>>45046366 #
gruez ◴[] No.45046366[source]
>Remember that massive surveillance capitalism apparatus that has been created for years? Now everyone must pay for it to legally comply with whatever arbitrary bullshit

Calling geoip databases "surveillance capitalism" seems like a stretch. It might be used by "surveillance capitalism", but you don't really have to surveil people to build a geoip database, only scrape RIR allocation records (all public, btw) and BGP routes, do ping tests, and parse geofeeds provided by providers. None of that is "surveillance capitalism" in any meaningful sense.

replies(2): >>45046455 #>>45048399 #
TGower ◴[] No.45046455[source]
If selling the physical location information of users isn't surveillance capatalism, then the term doesn't mean anything. "We don't surveil people, we just try to find out where they live and sell that data"
replies(1): >>45046497 #
gruez ◴[] No.45046497[source]
If that's "surveillance capitalism", what's your opinion on databases that map phone numbers to locations? eg. when you get a phone call from 217-555-1234, and it shows "Springfield, IL"? Is that "surveillance capitalism"? That's basically all geoip databases are. Moreover there's plenty of non "surveillance capitalism" uses for geoip that make it questionable to call it "surveillance capitalism". Determining the region for a site, or automatically selecting the closest store, for instance. Before the advent of anycast CDNs, it was also basically the only way to route your visitors to the closest server.
replies(1): >>45046732 #
TGower ◴[] No.45046732[source]
Is there a single company out there making it's money selling access to an area code database? GeoIP databases are much higher resolution and use active scanning methods like ping timing. If a company was spam calling me to estimate distance based on call connection lag, yes that would be surveillance capitalism.
replies(4): >>45046807 #>>45048270 #>>45048809 #>>45049140 #
gruez ◴[] No.45046807{5}[source]
>Is there a single company out there making it's money selling access to an area code database?

So if someone is making money off of it it's suddenly "surveillance capitalism"? What makes it more or less "surveillance capitalism" compared to aws selling cloudfront to some ad company?

Moreover you can do better than area level code granularity. When landlines were more common and local number portability wasn't really a thing, can look at the CO number (second group) to figure out which town or neighborhood a phone number was from. Even if this was all information you could theoretically determine yourself, I'm sure there are companies that package up the data in a nice database for companies to use. In that case is that "surveillance capitalism"? Where's the "surveillance" aspect? It's not like you need to stalk anyone to figure out where a CO is located. That was just a property of the phone network.

>GeoIP databases are much higher resolution and use active scanning methods like ping timing. If a company was spam calling me to estimate distance based on call connection lag, yes that would be surveillance capitalism.

Why is the fact it's "active" or not a relevant factor in determining whether it's "surveillance capitalism" or not? Moreover spam calling people might be bad for other reasons, but it's not exactly "surveillance".

replies(1): >>45046865 #
TGower ◴[] No.45046865{6}[source]
Surveillance definition "Systematic observation of places and people by visual, aural, electronic, photographic or other means." If you are pinging someone's IP to determine their physical location, you are engaged in a form of surveillance. If you have a copy of the table of area codes to city mapping, you are not engaged in surviellance. If you aren't trying to make money, you are not engaged in capitallism.
replies(1): >>45047181 #
1. gruez ◴[] No.45047181{7}[source]
>Surveillance definition "Systematic observation of places and people by visual, aural, electronic, photographic or other means." If you are pinging someone's IP to determine their physical location, you are engaged in a form of surveillance.

Setting aside the problem with pinging home IPs (most home routers have ICMP echo requests disabled), your definition of "systematic observation" seems very flimsy. Is monitoring the global BGP routing table "systematic observation"? What about scraping RIR records? How is sending ICMP echo requests and observing the response times meaningfully similar to what google et al are doing? I doubt many people are upset about google "systematically observing"... the contents of books (for google books), or the layout of cities (for google maps, ignoring streetview). They're upset about google building dossiers on people. Observing the locations of groups of IP addresses (I'm not aware of any geoip products that can deanonymize specific IP addresses) seems very divorced from that, such that any attempts at equating the two because "systematic observation" is non-nonsensical.

replies(1): >>45047280 #
2. TGower ◴[] No.45047280[source]
It seems like you missed the specifier "of places and people". Books are not people or places, but an IP addresses at any point in time is tied to either a specific person or place.

> They're upset about google building dossiers on people.

Their location being in that dossier is part of what upsets people.

replies(1): >>45047318 #
3. gruez ◴[] No.45047318[source]
>but an IP addresses at any point in time is tied to either a specific person or place.

Except I'm not aware of any geoip databases that operate on a per-IP level. It's way too noisy, given that basically everyone uses dynamic IP addresses. At best you can figure out a given /24 is used by a given ISP to cover a certain neighborhood, not that 1.2.3.4 belongs is John Smith or 742 Evergreen Terrace.

replies(2): >>45047439 #>>45049175 #
4. TGower ◴[] No.45047439{3}[source]
Good to know, that does shift my opinion a bit. There is a spectrum from surveilling individuals to gathering population statistics. I'm not sure exactly where data that identifies a user to a group size of ~250 falls, especially given the geographic correlation, but it's definitely better.
5. miki123211 ◴[] No.45049175{3}[source]
Google does it I think?

At least in some cases, e.g. when multiple devices that are logged into their respective Google accounts are using that IP, and Google knows what location those usually reside at when together.

I've had Google pop up reliable location results for me, to the granularity of a small town, even if they had no information about me specifically to help them deduce this. It doesn't always happen though.