News for hackers. Stuff that matters.
Re:Ask HN: What is China doing with 1.1.1.1? by Spivak on Thursday July 27, 2017 @10:25PM (#14871445)
It seems as though the conventional wisdom has changed, because in my large org every device is assigned a public IP and access is controlled by our border firewall.

It's weird how much NAT has changed the thinking about network organization -- if you have the addresses you should get into the IPv6 state of mind -- publicly address all the things!

Now if your org picked 97/98 arbitrarily without actually owning the addresses relying on the fact that you wouldn't actually get routed any public traffic then that's a different story.

Re:Ask HN: What is China doing with 1.1.1.1? by corymacd on Friday July 28, 2017 @02:02PM (#14876203)
I too have worked at organizations that have been configured like this. I speculate that pressure on the limited IPv4 allocations has caused many places that had previously been configured with large public IP blocks, to sell sub-allocations, for profit. NAT certainly does enable this practice but isn't the root cause. Sell those IPv4 blocks for $$$ -- who needs their laptop getting a public IPv4 address anyway?