3 ms·

> The idea of IPv6 is that every few hours or so my iPhone gets a new set of IPv6 addresses (usually 4 at a time I don't exactly know my currently config but th

by k_roy 2y ago

> The idea of IPv6 is that every few hours or so my iPhone gets a new set of IPv6 addresses (usually 4 at a time I don't exactly know my currently config but they keep changing always). So the obscurity is from the fact that you have ipv6 ips shuffling all the time. Since the /64 address space is so vast for a home network you will ideally not notice someone targeting your IP because it may not be worth the effort for those targeting it. This is fundamentally not a part of IPv6. It was an extension added later for privacy, but doesn't really accomplish too much in that regard except for the simplest of detection. My home address space is a /48. And when do some really simple subnet math on my IPs, you can easily identify my addresses. And again, the point is, just because you live out in the country, doesn't mean you shouldn't lock your doors. Even though right now it's impossible to feasibly to even really scan a /64, that may not be true in a week.

cyberax 2y ago
> It was an extension added later for privacy, but doesn't really accomplish too much in that regard except for the simplest of detection. Not quite true. The original braindead design embedded your MAC address into your public IPv6. So that all those nice companies can uniquely identify you _everywhere_.
- k_roy 2y ago
  What part isn't quite true? What you are talking about is RFC 4862. The SLAAC part of ipv6, which is auto-configuration. What I am talking about is RFC 4941: Privacy Extensions for Stateless Address Autoconfiguration in IPv6 Which is pretty close to: "extension added later for privacy" 4862 < 4941
  - cyberax 2y ago
    I'm just saying that the IPv6 privacy extension is far from useless. Without it, advertisers can track your device everywhere.
    - k_roy 2y ago
      It’s a nice thought but… Nobody is tracking 48 bits out of 128 bits and tying that to a specific user. Pretty simple browser fingerprinting will get you much closer. Not to mention that you know MAC addresses aren’t unique right. They only have to be unique on the same L2. And with some shipping logistics, you can make sure this is usually true. I say this as a person who received a case of Intel NICs back in the day and every MAC was the same.
      - Dylan16807 2y ago
        > Nobody is tracking 48 bits out of 128 bits and tying that to a specific user. Of course they would, if it was how everyone still did addresses! It's a super easy to access permanent ID. > aren’t unique Rarely. That's hardly enough trouble to make trackers not use it.
      - cyberax 2y ago
        > Nobody is tracking 48 bits out of 128 bits and tying that to a specific user. Erm... Whut? Nobody is tracking it right now because privacy extensions make it useless. You can bet that advertisers would have used it otherwise. Imagine being able to track where people move simply by using the freaking IP address. > Not to mention that you know MAC addresses aren’t unique right. For intents and purposes of advertisers they are unique. Duplicate MACs are probably not even a 0.0001% of all MACs.
        k_roy 2y ago
        > Duplicate MACs are probably not even a 0.0001% of all MACs. I love it when people just make up numbers with zero backing. You know MACs only HAVE to be unique on the same L2 segment right? So with every device that has MAC addresses (including every Bluetooth or WiFi device), ESP32s, home assistant type stuff, all which have usually 2 or more MACs, do you really think it makes sense for a manufacturer to use a MAC once and never again? No. It’s called manufacturing and shipping logistics. It’s far easier than what you suggest. As far as your made up stat here, I should play the lottery because it’s happened at least two times over the course of a 30 year career. In 2006, I was part of a team building up a data center, and each server needed 4 NICs for iscsi speed and redundancy. Two cases out of 10, something like 40 or 50 NICs were identical to each other. The only reason we noticed is because this job required meticulous asset tracking. My guess is because we had ordered so many NICs, the supplier had needed to hunt a little to fill the order. The second time was when I ordered a lot of ProBooks off eBay for hackintoshing back around 2012. Again, at least two of them had the same physical MAC burned into the motherboard. And I’m guessing it’s because about half of them came from Florida and the other half came from Vancouver. I’m just telling you, MAC addresses aren’t as unique as you are trying to suggest because they don’t need to be.

by k_roy 2y ago

cyberax 2y ago

> It was an extension added later for privacy, but doesn't really accomplish too much in that regard except for the simplest of detection. Not quite true. The original braindead design embedded your MAC address into your public IPv6. So that all those nice companies can uniquely identify you _everywhere_.

k_roy 2y ago
What part isn't quite true? What you are talking about is RFC 4862. The SLAAC part of ipv6, which is auto-configuration. What I am talking about is RFC 4941: Privacy Extensions for Stateless Address Autoconfiguration in IPv6 Which is pretty close to: "extension added later for privacy" 4862 < 4941
- cyberax 2y ago
  I'm just saying that the IPv6 privacy extension is far from useless. Without it, advertisers can track your device everywhere.
  - k_roy 2y ago
    It’s a nice thought but… Nobody is tracking 48 bits out of 128 bits and tying that to a specific user. Pretty simple browser fingerprinting will get you much closer. Not to mention that you know MAC addresses aren’t unique right. They only have to be unique on the same L2. And with some shipping logistics, you can make sure this is usually true. I say this as a person who received a case of Intel NICs back in the day and every MAC was the same.
    - Dylan16807 2y ago
      > Nobody is tracking 48 bits out of 128 bits and tying that to a specific user. Of course they would, if it was how everyone still did addresses! It's a super easy to access permanent ID. > aren’t unique Rarely. That's hardly enough trouble to make trackers not use it.
    - cyberax 2y ago
      > Nobody is tracking 48 bits out of 128 bits and tying that to a specific user. Erm... Whut? Nobody is tracking it right now because privacy extensions make it useless. You can bet that advertisers would have used it otherwise. Imagine being able to track where people move simply by using the freaking IP address. > Not to mention that you know MAC addresses aren’t unique right. For intents and purposes of advertisers they are unique. Duplicate MACs are probably not even a 0.0001% of all MACs.
      - k_roy 2y ago
        > Duplicate MACs are probably not even a 0.0001% of all MACs. I love it when people just make up numbers with zero backing. You know MACs only HAVE to be unique on the same L2 segment right? So with every device that has MAC addresses (including every Bluetooth or WiFi device), ESP32s, home assistant type stuff, all which have usually 2 or more MACs, do you really think it makes sense for a manufacturer to use a MAC once and never again? No. It’s called manufacturing and shipping logistics. It’s far easier than what you suggest. As far as your made up stat here, I should play the lottery because it’s happened at least two times over the course of a 30 year career. In 2006, I was part of a team building up a data center, and each server needed 4 NICs for iscsi speed and redundancy. Two cases out of 10, something like 40 or 50 NICs were identical to each other. The only reason we noticed is because this job required meticulous asset tracking. My guess is because we had ordered so many NICs, the supplier had needed to hunt a little to fill the order. The second time was when I ordered a lot of ProBooks off eBay for hackintoshing back around 2012. Again, at least two of them had the same physical MAC burned into the motherboard. And I’m guessing it’s because about half of them came from Florida and the other half came from Vancouver. I’m just telling you, MAC addresses aren’t as unique as you are trying to suggest because they don’t need to be.