6 ms·

IPv6 temporary addresses solve this problem and are part of the IP standard. An IPv6 temporary address is a public facing address composed from your actual IPv6

IPv6 temporary addresses solve this problem and are part of the IP standard. An IPv6 temporary address is a public facing address composed from your actual IPv6 address using a standard algorithm like a routable hash. If your locally connected switch (WiFi router) doesn’t support IPv6 there are various standard tunneling techniques for pushing IPv6 traffic over IPv4 end points. This won’t work though if the destination provides no IPv6 interface, but otherwise these are the best bets as they are closest to the network standards.

ekr____ 4y ago
Assuming you're talking about RFC 8981, then I don't think this actually helps as much as you would like, because typically you would have an assigned /64 and then just randomize the low order bits, but the /64 would be static and usable as a tracking identifier, as noted in the Security Considerations. And if you're in an environment where you can have randomized prefixes, you can probably also have randomized v4 addresses.
gerdesj 4y ago
Not really. I have a /56 at home and /48 at work. Despite having zillions or rather more IP addresses available to me, my prefixes will lock me down, or a few people down. At home me and the wife and at work me and my colleagues. My wife is a massive FB user (int al). She and I (I have one too but I don't use it much) have been sold on many, many times. Our data will have sifted down into all sorts of places, Nothing personal - it's just data. We have Android phones - Samsung, UK: O2. Oh, so now Microsoft (preloaded and enforced), O2, Google and who knows else are in scope and wanking over our data. Now, I'm an IT bod and I know that I've allowed things to work instead of breaking the cycle completely. I'm not quite sure what is a healthy data grab yet. Do we go all in or not? I do know that you don't fiddle with third party VPNs if you are worried about privacy - that's just daft. If you VPN - then you should do your own VPN.
- midoridensha 4y ago
  What exactly is "daft" about using a 3rd-party VPN service? Yes, you're trusting that service to protect your privacy, but why would you distrust them over, for instance, your ISP or your government? If you live in Iran or something, trusting your own government over an ISP service in the US would be utterly stupid. The whole reason these services exist is to protect privacy; if they didn't do that, they wouldn't stay in business long. Of course, there's limits to how much they really can protect your privacy, but still there's been no evidence that any of the major services have not done so.
  - judge2020 4y ago
    > If you live in Iran or something, trusting your own government over an ISP service in the US would be utterly stupid. https://news.ycombinator.com/item?id=21071632 https://news.ycombinator.com/item?id=21071632
  - bombcar 4y ago
    It depends on your threat actors. If you’re trying to make sure dang can’t find where you’re posting from, a VPN is probably good enough - especially if you go through one outside the country. If you’re worried about committing crimes than a VPN is relatively pointless - it slows down the law a bit and some may be difficult to penetrate but if you keep using it they can be. And if you have a nation state you will want to layer things and almost certainly use tor.
    - midoridensha 4y ago
      >It depends on your threat actors. This is my whole point. Most VPN customers aren't trying to commit high crimes, they're doing things like getting around region blocks (e.g. Netflix doesn't allow viewers in the USA to watch show X, but it is available for viewers in Canada for some stupid reason), torrenting (much safer legally if your traffic is going through a different country), or trying to obscure their IP address and/or location for some reason. Offhand, I'd say the region block thing is probably the #1 reason these days.
  - UncleEntity 4y ago

ekr____ 4y ago

Assuming you're talking about RFC 8981, then I don't think this actually helps as much as you would like, because typically you would have an assigned /64 and then just randomize the low order bits, but the /64 would be static and usable as a tracking identifier, as noted in the Security Considerations. And if you're in an environment where you can have randomized prefixes, you can probably also have randomized v4 addresses.

gerdesj 4y ago

Not really. I have a /56 at home and /48 at work. Despite having zillions or rather more IP addresses available to me, my prefixes will lock me down, or a few people down. At home me and the wife and at work me and my colleagues. My wife is a massive FB user (int al). She and I (I have one too but I don't use it much) have been sold on many, many times. Our data will have sifted down into all sorts of places, Nothing personal - it's just data. We have Android phones - Samsung, UK: O2. Oh, so now Microsoft (preloaded and enforced), O2, Google and who knows else are in scope and wanking over our data. Now, I'm an IT bod and I know that I've allowed things to work instead of breaking the cycle completely. I'm not quite sure what is a healthy data grab yet. Do we go all in or not? I do know that you don't fiddle with third party VPNs if you are worried about privacy - that's just daft. If you VPN - then you should do your own VPN.

midoridensha 4y ago
What exactly is "daft" about using a 3rd-party VPN service? Yes, you're trusting that service to protect your privacy, but why would you distrust them over, for instance, your ISP or your government? If you live in Iran or something, trusting your own government over an ISP service in the US would be utterly stupid. The whole reason these services exist is to protect privacy; if they didn't do that, they wouldn't stay in business long. Of course, there's limits to how much they really can protect your privacy, but still there's been no evidence that any of the major services have not done so.
- judge2020 4y ago
  > If you live in Iran or something, trusting your own government over an ISP service in the US would be utterly stupid. https://news.ycombinator.com/item?id=21071632 https://news.ycombinator.com/item?id=21071632
- bombcar 4y ago
  It depends on your threat actors. If you’re trying to make sure dang can’t find where you’re posting from, a VPN is probably good enough - especially if you go through one outside the country. If you’re worried about committing crimes than a VPN is relatively pointless - it slows down the law a bit and some may be difficult to penetrate but if you keep using it they can be. And if you have a nation state you will want to layer things and almost certainly use tor.
  - midoridensha 4y ago
    >It depends on your threat actors. This is my whole point. Most VPN customers aren't trying to commit high crimes, they're doing things like getting around region blocks (e.g. Netflix doesn't allow viewers in the USA to watch show X, but it is available for viewers in Canada for some stupid reason), torrenting (much safer legally if your traffic is going through a different country), or trying to obscure their IP address and/or location for some reason. Offhand, I'd say the region block thing is probably the #1 reason these days.
- UncleEntity 4y ago