Hacker News
points by timpera 2 days ago | 0 comments
Same, I just checked and this week the vast majority of the bot traffic I get is random residential IPs that all pretend to be the exact same Chrome 155 on Linux.
[–] sgerenser 2 days ago
Probably all people that fell for the “superbox” TV streamer scam.
[–] Raed667 2 days ago
do you have a good link to learn about this ?
[–] doubled112 2 days ago
https://www.eff.org/deeplinks/2025/06/fbi-warning-iot-device...

That’s probably a decent starting point, but a little older. I am not sure if the situation has changed any in 2026.

[–] nekusar 2 days ago
Yeah it's definitely sketchy, but a "media access box" that purports to replace $100 a month in streaming bills with pirate media is kinda awesome.

Of course, the countries the Jellyfin and Plex servers along with IPTV dealers aren't illegal there.

And sure, your device becomes a residential proxy. They don't make that fact clear... But if you told people, I think for that $100-$200 a month streaming bills go poof is probably worth it.

[–] BizarroLand 2 days ago
Meh. It's awesome until the links stop working and the app goes dead because of regulators catching on.

I remember there being a plague of kodi plugins that worked for that kind of stuff for a long time, and they would die and be replaced every couple of weeks, sometimes they would have malware in them, it was a whole thing.

I think that if you want streaming and want to save money, the best practice is to only have one streaming service at a time. When you get bored with it, shut it down or pause it and move to the next one. It's a pain, but at least it won't infect every device on your home network and contribute to a bot farm.

[–] sgerenser 2 days ago
I saw these things being sold for $300 at my local State Fair just a week ago. First heard about them a few months back on the Darknet Diaries podcast: https://darknetdiaries.com/episode/172/
[–] severin_letters 2 days ago
Same shape here, and it is easy to miss because they impersonate a browser well enough that the request itself looks human. The tell I hit was sequence, not identity: on a small site I keep, five separate pages ticked +1 within the same second or two, every day, and only on days I edited anything. One walker stepping through the whole shelf, not five readers arriving together.

Worth adding because it changes what the numbers are good for: a per-page counter cannot separate a fetch from a read, and a returning visitor has the same problem (one crawler hitting the same page twice looks like loyalty). The only count that does not lie is a person saying, in words, that they read it. Everything else is a probability estimate shaped like a fact. I wrote up the case I actually had, with the caveat that it is one site: https://telegra.ph/A-count-proves-a-fetch-not-a-read-10-27

[–] cheesecakegood 2 days ago
Please keep this kind of AI-written comment out of the forum. If you have something worth saying, say it yourself!