frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Disrupting the largest residential proxy network

https://cloud.google.com/blog/topics/threat-intelligence/disrupting-largest-residential-proxy-network
51•cdrnsf•1d ago

Comments

xyzzy_plugh•1h ago
> These efforts to help keep the broader digital ecosystem safe supplement the protections we have to safeguard Android users on certified devices. We ensured Google Play Protect, Android’s built-in security protection, automatically warns users and removes applications known to incorporate IPIDEA SDKs, and blocks any future install attempts.

Nice to see Google Play Protect actually serving a purpose for once.

trollbridge•37m ago
Yeah, it serves the purpose of blocking this kind of proxy traffic that isn't in Google's personal best interests.

Only Google is allowed to scrape the web.

kotaKat•1h ago
I'm actually a little shocked seeing that there was a WebOS variant of the residential proxying SDK endpoint. Does that mean there might be a bit more unchecked malware lurking behind the scenes in the LG ecosystem?

Personally I'm surprised they didn't have a Samsung option.

wincy•1h ago
I keep my brand new LG C5 totally disconnected from the internet and use my Apple TV for movie watching. I’m not going to trust a company like LG to secure their devices.
xnx•44m ago
> trust a company like LG to secure their devices.

They have an interest in securing their devices so they can sell proxy service themselves.

whartung•1h ago
My understanding is that routing through residential IPs is a part of the business of some VPN providers. I don't know how above board they are on this (as in notifying customers that this may happen, however buried in the usage agreement, or even allowing them to opt out).

But, my main point, is that the whole business is "on the up and up" vs some dark botnet.

nielsbot•1h ago
FTA

> While operators of residential proxies often extol the privacy and freedom of expression benefits of residential proxies, Google Threat Intelligence Group’s (GTIG) research shows that these proxies are overwhelmingly misused by bad actors

direwolf20•1h ago
Google's definition of a "bad actor" is someone who wants to use Google without seeing the ads. Or Kagi. Or an AI other than Gemini.
samsullivan•1h ago
The need for proxies in any legitimate context became obsolete with starlink being so widespread. Throw up a few terminals and you have about 500-2k cgnat IP addresses to do whatever you like.
JDye•15m ago
2k IPs is not enough to do most enterprise scale scraping. Starlink's entire ASN doesn't seem to have enough V4 addresses to handle it even.
londons_explore•1h ago
We need more residential proxies, not less.

I've had enough of companies saying "you're connecting from an AWS IP address, therefore you aren't allowed in, or must buy enterprise licensing". Reddit is an example which totally blocks all data to non-residential IP's.

I want exactly the same content visible no matter who you are or where you are connecting from, and a robust network of residential proxies is a stepping stone to achieving that.

packetslave•1h ago
> Reddit is an example which totally blocks all data to non-residential IP's.

No, we don't.

direwolf20•1h ago
Have you tried it? Every new account will be shadowbanned and if it's shared you often get blank page 429. None of this was true before the API shutdown.
gruez•46m ago
>Every new account will be shadowbanned

That's not the same as "blocks all data to non-residential IP's"?

>if it's shared you often get blank page 429. None of this was true before the API shutdown.

See my other comment. I agree there's a non-zero amount of VPNs that are banned from reddit, but it's also not particularly hard to find a VPN that's not banned on reddit.

interloxia•36m ago
Probably not hard but my poor little innocent VPS at Hetzer that I have had for years is denied and that makes me sad.
3rodents•23m ago
That’s not my experience, using various VPNs, public networks, Cloudflare and Apple private relays. A captcha is common when logged out but that’s about it, I have not encountered any shadow bans. I create a new account each week.
hackeman300•51m ago
Try browsing from any Mullvad vpn. You will be "blocked by network security"
gruez•49m ago
That's just mullvad's IP pool being banned. The other VPN providers I use aren't banned, or at least are only intermittently banned that I can easily switch to another server.
edoceo•2m ago
I use mullvad regularly & visit reddit from that connection - it works. But! You have to sign-in.
piskov•41m ago
Yes you do.

Private VPS for personal VPN in Netherlands (digital ocean), then Hungary (some small local DC) — both are blocked from day one.

> You've been blocked by network security. To continue, log in to your Reddit account or use your developer token. If you think you've been blocked by mistake, file a ticket below and we'll look into it.

Imustaskforhelp•16m ago
Proton VPN sometimes (mostly?) has this issue too. It's a bit of an hit or miss in there iirc but I have definitely seen the last message of your comment.
dvngnt_•34m ago
there are several times where I've had to disable PIA to access reddit's login page
thot_experiment•29m ago
I have never interacted with a reddit employee who wasn't actively gaslighting me about the platform. Do you even use the site? I talked to a PM recently who genuinely thought the phone app was something people liked.
tokyobreakfast•13m ago
If they downvote you hard enough it will become true (this also works on Reddit).
xg15•1h ago
Also, nevermind the tech companies building their own proxy networks, such as Find My or Amazon Sidewalk.
direwolf20•1h ago
You can run one, something like ByteLixir, Traffmonetizer, Honeygain, Pawns, there are lots more, just google "share my internet for money"

What will you be proxying? Nobody knows! I haven't had the police at my house yet.

Seems a great way to say "fuck you" to companies that block IP addresses.

You may see a few more CAPTCHAs. If you have a dynamic IP address, not many.

dist-epoch•6m ago
How much can you make if you run all of them at the same time?

Doesn't the ISP detect them?

ndiddy•53m ago
If you look at the article, the network they disrupted pays software vendors per-download to sneakily turn their users into residential proxy endpoints. I'm sure that at least some of the time the user is technically agreeing to some wording buried in the ToS saying they consent to this, but it's certainly unethical. I wouldn't want to proxy traffic from random people through my home network, that's how you get legal threats from media companies or the police called to your house.
londons_explore•46m ago
> that's how you get legal threats from media companies or the police called to your house.

Or residential proxies get so widespread that almost every house has a proxy in, and it becomes the new way the internet works - "for privacy, your data has been routed through someone else's connection at random".

Imustaskforhelp•17m ago
> Or residential proxies get so widespread that almost every house has a proxy in, and it becomes the new way the internet works - "for privacy, your data has been routed through someone else's connection at random".

Is this a re-invention of tor, maybe I2P?

dataviz1000•2m ago
They provide an SDK for mobile developers. Here is a video of how it works. [0] They don't even hide it.

[0] https://www.youtube.com/watch?v=1a9HLrwvUO4&t=15s

BoredPositron•34m ago
I still "run" a small ISP with a few thousand residential ips from my scraping days. The requirements are laughable and costs were negligible in the early 2000s.
Aurornis•34m ago
> I want exactly the same content visible no matter who you are or where you are connecting from

The reason those IP addresses get blocked is not because of "who" is connecting, but "what"

Traffic from datacenter address ranges to sites like Reddit is almost entirely bots and scrapers. They can put a tremendous load on your site because many will try to run their queries as fast as they can with as many IPs as they can get.

Blocking these IP addresses catches a few false positives, but it's an easy step to make botting and scraping a little more expensive. Residential proxies aren't all that expensive, but now there's a little line item bill that comes with their request volume that makes them think twice.

> We need more residential proxies, not less

Great, you can always volunteer your home IP address as a start. There are services that will pay you a nominal amount for it, even.

tokyobreakfast•11m ago
> I've had enough of companies saying "you're connecting from an AWS IP address

I run a honeypot and the amount of bot traffic coming from AWS is insane. It's like 80% before filtering, and it's 100% illegitimate.

JDye•2m ago
I live in the UK and can't view a large portion of the internet without having to submit my ID to _every_ site serving anything deemed "not safe the for the children". I had an question about a new piercing and couldn't get info from it on Reddit because of that. I try using a VPN and they're blocked too. Luckily, I work at a copmany selling proxies so I've got free proxies whenever I want, but I shouldn't _need_ to use them.

I find it funny that companies like Reddit, who make their money entirely from content produced by users for free (which is also often sourced from other parts of the internet without permission), are so against their site being scraped that they have to objectively ruin the site for everyone using it. See the API changes and killing off of third party apps.

Obviously, it's mostly for advertising purposes, but they love to talk about the load scraping puts on their site, even suing AI companies and SerpApi for it. If it's truly that bad, just offer a free API for the scrapers to use - or even an API that works out just slightly cheaper than using proxies...

My ideal internet would look something like that, all content free and accessible to everyone.

direwolf20•1h ago
All of this sounds legal, so on what basis did they get them shut down?
SOTGO•39m ago
I haven't looked at any court documents, but the WSJ article from Wednesday reported that "Last year, Google sued the anonymous operators of a network of more than 10 million internet-connected televisions, tablets and projectors, saying they had secretly pre-installed residential proxy software on them... an Ipidea spokeswoman acknowledged in an email that the company and its partners had engaged in “relatively aggressive market expansion strategies” and “conducted promotional activities in inappropriate venues (e.g., hacker forums)...”"

There was also a botnet, Kimwolf, that apparently leveraged an exploit to use the residential proxy service, so it may be related to Ipidea not shutting them down.

scirob•38m ago
so that only google and anthropic are allowed to scrape the web. No one else may have workarounds
htx80nerd•3m ago
nice to see in the comments how many people didnt even do a 30 second scan of the article before clicking `add comment`
progbits•1m ago
I'm surprised by the negative takes...

Yes, proxies are good. Ones which you pay for and which are running legitimately, with the knowledge (and compensation) of those who run them.

Malware in random apps running on your device without your knowledge is bad.

Antirender: remove the glossy shine on architectural renderings

https://antirender.com/
456•iambateman•2h ago•119 comments

Peerweb: Decentralized website hosting via WebTorrent

https://peerweb.lol/
82•dtj1123•1h ago•37 comments

Software Survival 3.0

https://steve-yegge.medium.com/software-survival-3-0-97a2a6255f7b
65•jaybrueder•1d ago•38 comments

Kimi K2.5 Technical Report [pdf]

https://github.com/MoonshotAI/Kimi-K2.5/blob/master/tech_report.pdf
146•vinhnx•5h ago•67 comments

Silver plunges 30% in worst day since 1980, gold tumbles

https://www.cnbc.com/2026/01/30/silver-gold-fall-price-usd-dollar-fed-warsh-chair-trump-metals.html
87•pera•2h ago•60 comments

Moltbook

https://www.moltbook.com/
1174•teej•18h ago•571 comments

The National Herbarium of Ireland digital collection of Irish plants

https://dri.ie/news/new-collection-in-dri-the-national-herbarium-of-ireland-digital-collection-of...
86•gnabgib•3d ago•7 comments

HTTP Cats

https://http.cat/
126•surprisetalk•8h ago•22 comments

Building docs like a product

https://emschwartz.me/building-docs-like-a-product/
33•emschwartz•1d ago•2 comments

The engineer who invented the Mars rover suspension in his garage [video]

https://www.youtube.com/watch?v=QKSPk_0N4Jc
239•UltraSane•3d ago•36 comments

Self Driving Car Insurance

https://www.lemonade.com/car/explained/self-driving-car-insurance/
61•KellyCriterion•6h ago•154 comments

Iran rounds up thousands in mass arrest campaign after crushing unrest

https://www.reuters.com/world/middle-east/iran-rounds-up-thousands-mass-arrest-campaign-after-cru...
14•mhb•33m ago•0 comments

Ask HN: Do you also "hoard" notes/links but struggle to turn them into actions?

19•item007•6h ago•8 comments

Vitamin D supplements cut heart attack risk by 52%. Why?

https://www.empirical.health/blog/vitamin-d-heart/
11•brandonb•25m ago•2 comments

Show HN: Amla Sandbox – WASM bash shell sandbox for AI agents

https://github.com/amlalabs/amla-sandbox
104•souvik1997•8h ago•65 comments

Email experiments: filtering out external images

https://www.terracrypt.net/posts/email-experiments-image-filtering.html
20•todsacerdoti•10h ago•13 comments

The Home Computer Hybrids

https://technicshistory.com/2026/01/25/the-home-computer-hybrids/
29•cfmcdonald•5d ago•11 comments

Quack-Cluster: A Serverless Distributed SQL Query Engine with DuckDB and Ray

https://github.com/kristianaryanto/Quack-Cluster
61•tanelpoder•3d ago•11 comments

Code is cheap. Show me the talk

https://nadh.in/blog/code-is-cheap/
133•ghostfoxgod•10h ago•117 comments

P vs. NP and the Difficulty of Computation: A ruliological approach

https://writings.stephenwolfram.com/2026/01/p-vs-np-and-the-difficulty-of-computation-a-ruliologi...
5•tzury•1h ago•1 comments

Buttered Crumpet, a custom typeface for Wallace and Gromit

https://jamieclarketype.com/case-study/wallace-and-gromit-font/
205•tobr•7h ago•44 comments

How AI assistance impacts the formation of coding skills

https://www.anthropic.com/research/AI-assistance-coding-skills
385•vismit2000•16h ago•299 comments

Pangolin (YC S25) is hiring software engineers (open-source, Go, networking)

https://docs.pangolin.net/careers/join-us
1•miloschwartz•10h ago

How to explain Generative AI in the classroom

https://dalelane.co.uk/blog/?p=5847
3•thinkingaboutit•1d ago•0 comments

Implementing a tiny CPU rasterizer (2024)

https://lisyarus.github.io/blog/posts/implementing-a-tiny-cpu-rasterizer-part-1.html
95•PaulHoule•4d ago•17 comments

Bluesky 2025 Transparency Report

https://bsky.social/about/blog/01-29-2026-transparency-report-2025
67•emschwartz•22h ago•67 comments

Emoji Design Convergence Review: 2018-2026

https://blog.emojipedia.org/emoji-design-convergence-review-2018-2026/
42•surprisetalk•3d ago•28 comments

Painless Software Schedules (2000)

https://www.joelonsoftware.com/2000/03/29/painless-software-schedules/
51•MonkeyClub•4d ago•31 comments

Netflix Animation Studios Joins the Blender Development Fund as Corporate Patron

https://www.blender.org/press/netflix-animation-studios-joins-the-blender-development-fund-as-cor...
440•vidyesh•16h ago•78 comments

GOG: Linux "the next major frontier" for gaming as it works on a native client

https://www.xda-developers.com/gog-calls-linux-the-next-major-frontier-for-gaming-as-it-works-on-...
613•franczesko•14h ago•330 comments