News for hackers. Stuff that matters.

A comment on I spent a week without IPv4 to understand IPv6 transition mechanisms. Parent comment

Re:I spent a week without IPv4 to understand IPv6 transition... by throitallaway on Monday March 06, 2023 @05:52PM (#35048940)
Look at what Android does with MAC address randomization on wireless networks. We will probably see something similar with IPv6.
[ Parent | on HN ]
Re:I spent a week without IPv4 to understand IPv6 transition... by CaliforniaKarl on Monday March 06, 2023 @06:07PM (#35049121)
> We will probably see something similar with IPv6.

It's been available for some time: https://www.internetsociety.org/resources/deploy360/2014/pri...

On my macOS system, I currently have four IPv6 IPs (excluding the link-local IP), all of which are random.

[ Parent | on HN ]
Re:I spent a week without IPv4 to understand IPv6 transition... by gerdesj on Monday March 06, 2023 @06:47PM (#35049545)
Not just Android. My laptop does it too (NetworkManager). That's just IPv4 on devices designed to travel so it seems a fair thing to do. Bloody pain to diagnose why a static DHCP lease isn't working the first time, after that you find the mechanisms to turn it off. Nearly everything does it for IPv6, for a given value of everything!

For decades we have generally allowed all outbound and worried and fretted about and filtered inbound. I think it is time for us all to get a grip and do the job properly. However, with the delights of DNS over http and the like, the horse has not only bolted but has a new paint job, far better shoes than you can afford, eats grass that was prepared by a Michelin starred chef and belongs to someone else now.

We all need to be far more sophisticated about how traffic (knowledge/ideas/data) flows in and out of our networks/lives. Packet filtering is just one tool in the box and worrying about an addressing scheme being global (IPv6) instead of a weird hybrid (IPv4) is completely missing the real issue stabbing you in the nadgers.

[ Parent | on HN ]