News for hackers. Stuff that matters.

A comment on Why you need IPv6. Parent comment

Re:Why you need IPv6 by zlynx on Wednesday May 23, 2018 @09:06PM (#17140053)
Implement security properly and stop worrying about it.

If your devices have open services with vulnerabilities. AND You completely forgot or didn't bother to use a firewall. AND Your devices are using permanent instead of temporary IPv6 addresses.

THEN you might have a problem.

But it's more likely that your badly protected IoT devices are downloading their software updates from a HTTP site without SSL or checksum verification while using a DNS vulnerable to cache poisoning.

[ Parent | on HN ]
Re:Why you need IPv6 by AstralStorm on Thursday May 24, 2018 @03:42AM (#17141886)
Temporary v6 addresses are not a security measure, they're a privacy measure. (And a weak one at that.)

An attacker can get route advertisements from your subnet if something is misconfigured on ISP side so they get out and do a tiny bit of inference to figure out which device it is.

[ Parent | on HN ]