3 ms·
Re IPv6, I don’t expect connectivity to suddenly appear. The NATs will be gone, but I bet you that every single home router will get a firewall with a default “
by theamk 7y ago
Re IPv6, I don’t expect connectivity to suddenly appear. The NATs will be gone, but I bet you that every single home router will get a firewall with a default “block incoming” policy. A new network protocol does not make all the security bugs disappear overnight.
And for users, it does not really matter if they have to visit router admin page to set up NAT port forwarding or open up the port in firewall.
- r3trohack3r 7y agoThis. Setup a raspberry pi with an IPTable rule to log and black hole all incoming traffic, then open it up entirely to the internet through your router. I did this and, after about 48 hours, had a nice long log of bots hammering the server scanning for vulnerabilities on open ports. I imagine non-technical users (the ones at a high risk of getting malware just browsing online) and wonder if they are truly better off if we open up their computers to the world without first rethinking the security model.
- p1mrx 7y ago> And for users, it does not really matter if they have to visit router admin page to set up NAT port forwarding or open up the port in firewall. It matters when port forwarding is impossible because the user lacks a unique IPv4 address. Earth has 7 billion people and 4 billion IPv4 addresses, so carrier grade NAT is inevitable.