3 ms·

why ipv6?

• IncRnd 6y ago
  Presumably for the larger address space that is more resistant to scans.
  • SilverRed 6y ago
    Its interesting that you can and people have scanned the entire ipv4 space in minutes on a fast VPS but it would take you forever to find your first ipv6 address that is even in use.
    • lytfyre 6y ago
      Shodan - a search tool for such things - had a pretty incredible approach to attacking this - they quietly provided most of the ipv6 hosts to pool.ntp.org, which is widely used as a linux default - and would queue a portscan up for any device that connected at startup for timesync. https://arstechnica.com/information-technology/2016/02/using-ipv6-with-linux-youve-likely-been-visited-by-shodan-and-other-scanners/ https://arstechnica.com/information-technology/2016/02/using...
      • bombcar 6y ago
        Ingenious - and all the more reason to run NTP on the border router/firewall and have that be the only device that communicates with the outside world.
  • totony 6y ago
    but if this is applied >Isolate the network they are on behind a Linux box that cannot route. then it doesn't matter the address space size
• bombcar 6y ago
  Another reason (the address space one is good, layers defense if the camera "escapes" your network restrictions somehow) is that cameras that WORK on IPv6 are usually a level of quality just above "absolute crap". (Note that many ADVERTISE IPv6 but don't actually work on that.)