3 ms·
If the new technology referenced in the comic provides a way to securely connect, including auditing, I don't see how it applies to the hole punching hack.
by gtirloni 2y ago
If the new technology referenced in the comic provides a way to securely connect, including auditing, I don't see how it applies to the hole punching hack.
- beeflet 2y agoPeople (like ISPs offering routers) set up NAT, often justifying it on the basis of security. Application developers use hole-punching techniques to get past NAT (including stuff like UPnP that requires cooperation from the NAT). The end product is: #1 A sandboxing system that cannot reliably sandbox. #2 A connection system that cannot reliably connect. So now you have two problems.
- dev_hugepages 2y agoNAT is not a security measure but a way to save on IP space or avoid remaking a topology on network addresses changes. For actual security you need a firewall