4 ms·

NAT is no longer a thing, all devices just have a globally unique IP. So your IP allow is a pretty strong indicator, it seems like that alone would make trackin

NAT is no longer a thing, all devices just have a globally unique IP. So your IP allow is a pretty strong indicator, it seems like that alone would make tracking easier. There’s nothing in IPv6 to prevent tracking or offer more anonymity.

rk06 5y ago
NAT can be used in conjunction with IPv6 for security purposes. It is still a thing
- Dagger2 5y ago
  It was never a thing. NAT isn't security.
- tsimionescu 5y ago
  How do you think NAT gives you security?
  - tgsovlerkhgsel 5y ago
    Without active measures to allow it, you can't reach ports on a machine behind NAT. If I accidentally run an SSH server where user 'root' and an empty password gives you root access, you still won't be able to get in. Accidentally configuring port forwarding is a lot harder than accidentally disabling an on-host firewall.
    - tsimionescu 5y ago
      You can just as easily run a firewall as a NAT, in fact most home routers support both. And, just like NAT, by default they don't allow any connections from the outside.
    - Dagger2 5y ago
      This is not actually true. NAT rewrites the apparent source address of outbound connections, which has no impact on inbound connections -- any inbound connection that worked before you started NATing your outbound connections will continue to work after you start doing so. You need a firewall for security, and NAT doesn't do anything in that regard other than make it harder to understand what's going on.
techsupporter 5y ago
As I recall, this was seen as a concern in the early days so "privacy extensions" were added to the implementation standard for IPv6. Macintosh, Windows, iOS, and Android all rotate their auto-configured IPv6 addresses at a regular interval. It used to be a day but I think I've seen it as short as an hour: https://www.internetsociety.org/blog/2014/12/ipv6-privacy-addresses-provide-protection-against-surveillance-and-tracking/ https://www.internetsociety.org/blog/2014/12/ipv6-privacy-ad...
mistaken 5y ago
That's not quite true. IPv6 has privacy extensions which generate randomized suffixes. A website would still be able to track you with the common prefix. Tracking the prefix is more or less the same as tracking an IPv4 address. If you're worried about tracking than you're better off using a VPN than a NAT gateway (both of which is also possible with IPv6).

rk06 5y ago

NAT can be used in conjunction with IPv6 for security purposes. It is still a thing

Dagger2 5y ago
It was never a thing. NAT isn't security.
tsimionescu 5y ago
How do you think NAT gives you security?
- tgsovlerkhgsel 5y ago
  Without active measures to allow it, you can't reach ports on a machine behind NAT. If I accidentally run an SSH server where user 'root' and an empty password gives you root access, you still won't be able to get in. Accidentally configuring port forwarding is a lot harder than accidentally disabling an on-host firewall.
  - tsimionescu 5y ago
    You can just as easily run a firewall as a NAT, in fact most home routers support both. And, just like NAT, by default they don't allow any connections from the outside.
  - Dagger2 5y ago
    This is not actually true. NAT rewrites the apparent source address of outbound connections, which has no impact on inbound connections -- any inbound connection that worked before you started NATing your outbound connections will continue to work after you start doing so. You need a firewall for security, and NAT doesn't do anything in that regard other than make it harder to understand what's going on.

techsupporter 5y ago

As I recall, this was seen as a concern in the early days so "privacy extensions" were added to the implementation standard for IPv6. Macintosh, Windows, iOS, and Android all rotate their auto-configured IPv6 addresses at a regular interval. It used to be a day but I think I've seen it as short as an hour: https://www.internetsociety.org/blog/2014/12/ipv6-privacy-addresses-provide-protection-against-surveillance-and-tracking/ https://www.internetsociety.org/blog/2014/12/ipv6-privacy-ad...

mistaken 5y ago

That's not quite true. IPv6 has privacy extensions which generate randomized suffixes. A website would still be able to track you with the common prefix. Tracking the prefix is more or less the same as tracking an IPv4 address. If you're worried about tracking than you're better off using a VPN than a NAT gateway (both of which is also possible with IPv6).