6 ms·

How does one get the system to actually use the IPv6 Temporary Addresses?

61 points by the8472 9y ago

bjt2n3904 9y ago
"Bug"
- mtgx 9y ago
  Windows 10 "privacy".
  - yuhong 9y ago
    How many people are using IPv6 in the first place though?
    - jgowdy 9y ago
      Almost 36% of US based Google traffic, and 18-20% of worldwide Google traffic. It’s not exactly tiny anymore. Akamai claims over 40% of US traffic, 46% of Belgium, 36% of India, etc. The old meme that nobody is on IPv6 isn’t true anymore. Almost every major ISP from cable to AT&T has an IPv6 deployment in progress with considerable progress.
    - ggm 9y ago
      Between zero and ninety percent depending on which network provider you are on. Comcast? Seventy percent. Reliance Jio in India? Ninety percent. Fptelecom in Vietnam? Sixteen percent. Telstra in Australia? Forty percent. Sky in the UK eighty percent. .. it depends. (I measure this for my day job, btw)
    - cptskippy 9y ago
      Hasn't it been on by default since 8 or 7? Comcast supports it and it works as well or better than ipv4 for me. I would guess everyone using a managed Comcast Gateway and Windows, or anyone on their Network who enabled it manually is running it by default.
    - deleted 9y ago
      [deleted]
    - noinsight 9y ago
      See for yourself: https://www.google.com/intl/en/ipv6/statistics.html https://www.google.com/intl/en/ipv6/statistics.html
  - geofft 9y ago
    It's hard to determine meaning from two words, a number, and some scare quotes, but I'll take a wild guess at what you meant anyway. IPv6 privacy addresses are a mechanism to restore the privacy previously provided by NAT on IPv4, i.e., masking which actual device behind the same ISP customer (home or business) is opening a connection. Windows 10 breaking this functionality does not make sense under any reasonable threat model of Microsoft attacking your privacy: privacy addresses do basically nothing for the average home (just like NAT does basically nothing to privacy of outbound connections for the average home), MS has no access to the traffic that would contain a private address unless something else has already gone wrong, and it's easy enough to find your private IP address anyway: https://diafygi.github.io/webrtc-ips/ https://diafygi.github.io/webrtc-ips/ (which works for me in Debian stable, using the packaged version of Firefox and no non-free software).
trendia 9y ago
"Initially browsers use the temporary IPV6 address. After a while they start consistently using the permanent one." This is the most troubling aspect to me. The process of enabling the random ipv6 address would be: 1.Click the "enable" checkbox 2. Check if it's working. (initially, it does) 3. Forget about it for the next 12 months Somewhere between Step 2 and Step 3, the feature spontaneously turns off and the ipv6 address is leaked, and the user is none the wiser.
- mirimir 9y ago
  As I read the article, "after a while" is more like hours than months :(
nikanj 9y ago
Windows 10 also re-enables ipv6 on major updates. It’s nice to try to explain to grandma how to turn it off again, so the pc would actually have working internet again. Yes, turning on ipv6 should not break the net. Let me introduce you to the concept of ”shitty modems from shitty isps”.
- yuhong 9y ago
  I wonder which modems are most problematic that is commonly used.
- wmf 9y ago
  These ISPs don't care that almost half their customers have broken service? They should be drowning in support calls. Something's not right here.
  - revelation 9y ago
    They are drowning in calls anyway. They are long past the point of trying to find structural issues from service calls.
    - josephg 9y ago
      I'm going to go out on a limb and say maybe this isn't Microsoft's fault. Microsoft's updates have triggered a bug, but the bug is in the firmware of that crappy router. Thats where the issue needs to be fixed.
  - deleted 9y ago
    [deleted]
  - paulie_a 9y ago
    It now costs 5 dollars to talk to a CSR at AT&T I found that one out yesterday when I called to pay for my new service
    - wmf 9y ago
mirimir 9y ago
Can one block IPv6 in Windows Firewall?
- rootw0rm 9y ago
  Yes. These are my options on Win 10 Enterprise: https://imgur.com/wN8sk8A https://imgur.com/wN8sk8A
snvzz 9y ago
Link sends me to some sort of live.com login page. Could someone link a mirror?
- the8472 9y ago
  https://archive.is/P6R9H https://archive.is/P6R9H
spystath 9y ago
I think IPv6 privacy extensions are a bit overrated in their usefulness. What I mean, at least for most residential deployments, is that the first 64 bits (the prefix) is the same no matter what you do with the last 64. Even if the exact IPv6 suffix is randomized your address can still be linked to an account by its suffix. Unless you are a part of a large network suffix randomization won't do much good. And large networks are probably better with DHCPv6 anyway. If only Google implemented DHCPv6 for Android...
- asdfaoeu 9y ago
  The main issue is that it uses that same suffix no matter what connection you are on.
  - spystath 9y ago
    I don't disagree, but privacy extensions do not solve the problem of tracking, only alleviate it since there are still ways to be tracked. In any case believe a stateful solution like DHCPv6 is better for deployment anyway.

61 points by the8472 9y ago

bjt2n3904 9y ago

"Bug"

mtgx 9y ago
Windows 10 "privacy".
- yuhong 9y ago
  How many people are using IPv6 in the first place though?
  - jgowdy 9y ago
    Almost 36% of US based Google traffic, and 18-20% of worldwide Google traffic. It’s not exactly tiny anymore. Akamai claims over 40% of US traffic, 46% of Belgium, 36% of India, etc. The old meme that nobody is on IPv6 isn’t true anymore. Almost every major ISP from cable to AT&T has an IPv6 deployment in progress with considerable progress.
  - ggm 9y ago
    Between zero and ninety percent depending on which network provider you are on. Comcast? Seventy percent. Reliance Jio in India? Ninety percent. Fptelecom in Vietnam? Sixteen percent. Telstra in Australia? Forty percent. Sky in the UK eighty percent. .. it depends. (I measure this for my day job, btw)
  - cptskippy 9y ago
    Hasn't it been on by default since 8 or 7? Comcast supports it and it works as well or better than ipv4 for me. I would guess everyone using a managed Comcast Gateway and Windows, or anyone on their Network who enabled it manually is running it by default.
  - deleted 9y ago
    [deleted]
  - noinsight 9y ago
    See for yourself: https://www.google.com/intl/en/ipv6/statistics.html https://www.google.com/intl/en/ipv6/statistics.html
- geofft 9y ago
  It's hard to determine meaning from two words, a number, and some scare quotes, but I'll take a wild guess at what you meant anyway. IPv6 privacy addresses are a mechanism to restore the privacy previously provided by NAT on IPv4, i.e., masking which actual device behind the same ISP customer (home or business) is opening a connection. Windows 10 breaking this functionality does not make sense under any reasonable threat model of Microsoft attacking your privacy: privacy addresses do basically nothing for the average home (just like NAT does basically nothing to privacy of outbound connections for the average home), MS has no access to the traffic that would contain a private address unless something else has already gone wrong, and it's easy enough to find your private IP address anyway: https://diafygi.github.io/webrtc-ips/ https://diafygi.github.io/webrtc-ips/ (which works for me in Debian stable, using the packaged version of Firefox and no non-free software).

trendia 9y ago

"Initially browsers use the temporary IPV6 address. After a while they start consistently using the permanent one." This is the most troubling aspect to me. The process of enabling the random ipv6 address would be: 1.Click the "enable" checkbox 2. Check if it's working. (initially, it does) 3. Forget about it for the next 12 months Somewhere between Step 2 and Step 3, the feature spontaneously turns off and the ipv6 address is leaked, and the user is none the wiser.

mirimir 9y ago
As I read the article, "after a while" is more like hours than months :(

nikanj 9y ago

Windows 10 also re-enables ipv6 on major updates. It’s nice to try to explain to grandma how to turn it off again, so the pc would actually have working internet again. Yes, turning on ipv6 should not break the net. Let me introduce you to the concept of ”shitty modems from shitty isps”.

yuhong 9y ago
I wonder which modems are most problematic that is commonly used.
wmf 9y ago
These ISPs don't care that almost half their customers have broken service? They should be drowning in support calls. Something's not right here.
- revelation 9y ago
  They are drowning in calls anyway. They are long past the point of trying to find structural issues from service calls.
  - josephg 9y ago
    I'm going to go out on a limb and say maybe this isn't Microsoft's fault. Microsoft's updates have triggered a bug, but the bug is in the firmware of that crappy router. Thats where the issue needs to be fixed.
- deleted 9y ago
  [deleted]
- paulie_a 9y ago
  It now costs 5 dollars to talk to a CSR at AT&T I found that one out yesterday when I called to pay for my new service
  - wmf 9y ago

mirimir 9y ago

Can one block IPv6 in Windows Firewall?

rootw0rm 9y ago
Yes. These are my options on Win 10 Enterprise: https://imgur.com/wN8sk8A https://imgur.com/wN8sk8A

snvzz 9y ago

Link sends me to some sort of live.com login page. Could someone link a mirror?

the8472 9y ago
https://archive.is/P6R9H https://archive.is/P6R9H

spystath 9y ago

I think IPv6 privacy extensions are a bit overrated in their usefulness. What I mean, at least for most residential deployments, is that the first 64 bits (the prefix) is the same no matter what you do with the last 64. Even if the exact IPv6 suffix is randomized your address can still be linked to an account by its suffix. Unless you are a part of a large network suffix randomization won't do much good. And large networks are probably better with DHCPv6 anyway. If only Google implemented DHCPv6 for Android...

asdfaoeu 9y ago
The main issue is that it uses that same suffix no matter what connection you are on.
- spystath 9y ago
  I don't disagree, but privacy extensions do not solve the problem of tracking, only alleviate it since there are still ways to be tracked. In any case believe a stateful solution like DHCPv6 is better for deployment anyway.