4 ms·
This sounds to be an issue specific to IPv4 - wouldn't going IPv6-only make IP scanning impractical for bad actors ?
by BlueTemplar 2y ago
This sounds to be an issue specific to IPv4 - wouldn't going IPv6-only make IP scanning impractical for bad actors ?
- sulandor 2y agoyes, but not impossible and it comes with other problems
- kachapopopow 2y agoYou still have to announce your used ranges, so unless you announce /64's it's pretty much the same thing.
- bauruine 2y agoMost ISPs don't allow BGP announcements smaller than /48 so you don't get any usefull information from that.
- ThePhysicist 2y agoBut the smallest range you can announce is /48, that's still way too vast to scan completely.
- bauruine 2y agoYes it's only IPv4 where it's practical to scan the whole address space in minutes but there are methods to find IPv6 addresses [0] certificate transpareny logs are also scanned for hostnames to get AAAA records. But from my experience it's multiple orders of magnitude less than v4. [0]: http://netpatterns.blogspot.com/2016/01/the-rising-sophistication-of-network.html http://netpatterns.blogspot.com/2016/01/the-rising-sophistic...
- Dylan16807 2y agoDepends on how many people are using random-ish addresses and how many are using ::2 and friends.
- ThePhysicist 2y agoI'd love to switch everything to IPv6, but reachability is not yet there, I estimate it will be another 10 years with the current rate of adoption.