diff --git a/docs/blog/2025-07-22-release-1.21.1/index.mdx b/docs/blog/2025-07-22-release-1.21.1/index.mdx index 305ebcd..6f8ef16 100644 --- a/docs/blog/2025-07-22-release-1.21.1/index.mdx +++ b/docs/blog/2025-07-22-release-1.21.1/index.mdx @@ -266,7 +266,7 @@ Various attempts were made to fix this. All of these ended up failing. Many diff - [IPv6 privacy extensions](https://www.internetsociety.org/resources/deploy360/2014/privacy-extensions-for-ipv6-slaac/) mean that each request could be coming from a different IP address (at least one legitimate user in the wild has been observed to have a different IP address per TCP session across an entire `/48`). - Some [US mobile phone carriers make it too easy for your IP address to drastically change](https://news.ycombinator.com/item?id=32038215) without user input. - [Happy eyeballs](https://en.wikipedia.org/wiki/Happy_Eyeballs) means that some requests can come in over IPv4 and some requests can come in over IPv6. -- To make things worse, you can't even assert that users are from the same [BGP autonomous system]() because some users could have ISPs that are IPv4 only, forcing them to use a different IP address space to get IPv6 internet access. This sounds like it's rare enough, but I personally have to do this even though I pay for 8 gigabit fiber from my ISP. +- To make things worse, you can't even assert that users are from the same [BGP autonomous system]() because some users could have ISPs that are IPv4 only, forcing them to use a different IP address space to get IPv6 internet access. This sounds like it's rare enough, but I personally have to do this even though I pay for 8 gigabit fiber from my ISP and only get IPv4 service from them. Amusingly enough, the only part of this that has survived is the assertion that a user hasn't changed their `User-Agent` string. Maybe [that one guy that sets his Chrome version to `150`](https://github.com/TecharoHQ/anubis/issues/239) would have issues, but so far I've not seen any evidence that a client randomly changing their user agent between challenge issuance and solving can possibly be legitimate.