3 ms·

IPv6 is a prerequisite for the bug to be exploited, it won't affect anyone.

by rs_rs_rs_rs_rs 10mo ago

ale42 10mo ago
Why, is IPv6 activation manual in FreeBSD?
- rs_rs_rs_rs_rs 10mo ago
  It's enabled by default, I was mostly talking about being in a lan with active ipv6, imo that's not that common.
  - shakna 10mo ago
    That's pretty standard where I am. Every Telstra router comes with IPv6 enabled.
    - immibis 10mo ago
      As it should be. If your ISP isn't giving you ipv6, they're not giving you internet access and you should sue for your money back.
      - zokier 10mo ago
        With such confidence in your comment, I'm sure you can point out many successful precedents for such cases.
        immibis 10mo ago
        There's a federal mandate to implement IPv6 by... the end of this year. So in about 2-3 weeks.
        zokier 10mo ago
        Are you referring to the OMB IPv6 mandate? That only relates to federal networks, and even there its requiring only 80% adoption. It has zero relevance to normal commercial/private networks
        shakna 10mo ago
        I assume they were referencing ISM-0518. Which mandates all ISPs _in Australia_ to have IPv6 before January 1st, 2026.
        majorchord 10mo ago
        For private ISPs? No, there isn't... please provide evidence for this.
  - ale42 10mo ago
    IMHO you do not need "active" IPv6. Most LANs (unless you have some switch-level filtering that blocks router advertisements from "unauthorized" nodes) can transport such IPv6 packets. Then it just takes being connected to the LAN and being able to send an arbitrary ICMP6 packet (which probably means being root on the attacker machine, not a very high barrier I'd say).
    - champtar 10mo ago
      You need working switch level filtering, many implementations can be bypassed / will never be fixed: https://blog.champtar.fr/VLAN0_LLC_SNAP/ https://blog.champtar.fr/VLAN0_LLC_SNAP/
  - BSDobelix 10mo ago
    No, you can choose if you want IPv4 or IPv6 or both, at installation time also if you want it in "autoconf-mode"
jrmg 10mo ago
Major home and mobile internet providers in the US, at least, have IPv6 on by default now. Google tracks IPv6 adoption at almost 50% globally and over 50% in the USA (https://www.google.com/intl/en/ipv6/statistics.html https://www.google.com/intl/en/ipv6/statistics.html) IPv6 is mainstream.

IPv6 is a prerequisite for the bug to be exploited, it won't affect anyone.

ale42 10mo ago

Why, is IPv6 activation manual in FreeBSD?

rs_rs_rs_rs_rs 10mo ago
It's enabled by default, I was mostly talking about being in a lan with active ipv6, imo that's not that common.
- shakna 10mo ago
  That's pretty standard where I am. Every Telstra router comes with IPv6 enabled.
  - immibis 10mo ago
    As it should be. If your ISP isn't giving you ipv6, they're not giving you internet access and you should sue for your money back.
    - zokier 10mo ago
      With such confidence in your comment, I'm sure you can point out many successful precedents for such cases.
      - immibis 10mo ago
        There's a federal mandate to implement IPv6 by... the end of this year. So in about 2-3 weeks.
        zokier 10mo ago
        Are you referring to the OMB IPv6 mandate? That only relates to federal networks, and even there its requiring only 80% adoption. It has zero relevance to normal commercial/private networks
        shakna 10mo ago
        I assume they were referencing ISM-0518. Which mandates all ISPs _in Australia_ to have IPv6 before January 1st, 2026.
        majorchord 10mo ago
        For private ISPs? No, there isn't... please provide evidence for this.
- ale42 10mo ago
  IMHO you do not need "active" IPv6. Most LANs (unless you have some switch-level filtering that blocks router advertisements from "unauthorized" nodes) can transport such IPv6 packets. Then it just takes being connected to the LAN and being able to send an arbitrary ICMP6 packet (which probably means being root on the attacker machine, not a very high barrier I'd say).
  - champtar 10mo ago
    You need working switch level filtering, many implementations can be bypassed / will never be fixed: https://blog.champtar.fr/VLAN0_LLC_SNAP/ https://blog.champtar.fr/VLAN0_LLC_SNAP/
- BSDobelix 10mo ago
  No, you can choose if you want IPv4 or IPv6 or both, at installation time also if you want it in "autoconf-mode"

jrmg 10mo ago

Major home and mobile internet providers in the US, at least, have IPv6 on by default now. Google tracks IPv6 adoption at almost 50% globally and over 50% in the USA (https://www.google.com/intl/en/ipv6/statistics.html https://www.google.com/intl/en/ipv6/statistics.html) IPv6 is mainstream.