Re:Hackers can get your IP through Skype by just sending a l...
by mschuster91 on Monday August 28, 2023 @12:29PM
(#37296651)
> An IP address was never supposed to be personally identifiable info.
Fact is, it is legally classified as PII, at least in the GDPR sphere.
> If we treat it as such then no P2P service can ever work, and the internet will forever be under the control of a few large corps running data centers.
We are already at that point. Host anything on the Internet without Cloudflare, Akamai or other CDNs and you will get targeted by skiddies running exploits on everything they find on Shodan, and if you're a noteworthy social media person (i.e. a streamer), there are enough completely braindead trolls that will stop at nothing to get you off the internet: if you are lucky you'll just get DDoS'd, if you attract the more toxic arseholes, you will end up having your door kicked in by a SWAT team.
> The real solution here is to completely disconnect an IP address from a person or physical location. Broad adoption of IPv6 will be a big step towards that.
That doesn't fix anything, it just makes hacking a specific machine a bit harder. Bad actors will just spam your entire /64 (because that's your provider's default allocation) instead. The solution is to kick bad actors off of the Internet - and all sorts of bad actors at that: people running compromised devices that are used by the actual bad actors, people running services that end up being used by bad actors such as SS7 access brokers or VoIP providers lacking auditing, bad actors themselves, and nation states like Russia, China, North Korea, Iran that actively conduct or tolerate hacking campaigns or India and Turkey that don't do shit against scam callcenters.
Fact is, it is legally classified as PII, at least in the GDPR sphere.
> If we treat it as such then no P2P service can ever work, and the internet will forever be under the control of a few large corps running data centers.
We are already at that point. Host anything on the Internet without Cloudflare, Akamai or other CDNs and you will get targeted by skiddies running exploits on everything they find on Shodan, and if you're a noteworthy social media person (i.e. a streamer), there are enough completely braindead trolls that will stop at nothing to get you off the internet: if you are lucky you'll just get DDoS'd, if you attract the more toxic arseholes, you will end up having your door kicked in by a SWAT team.
> The real solution here is to completely disconnect an IP address from a person or physical location. Broad adoption of IPv6 will be a big step towards that.
That doesn't fix anything, it just makes hacking a specific machine a bit harder. Bad actors will just spam your entire /64 (because that's your provider's default allocation) instead. The solution is to kick bad actors off of the Internet - and all sorts of bad actors at that: people running compromised devices that are used by the actual bad actors, people running services that end up being used by bad actors such as SS7 access brokers or VoIP providers lacking auditing, bad actors themselves, and nation states like Russia, China, North Korea, Iran that actively conduct or tolerate hacking campaigns or India and Turkey that don't do shit against scam callcenters.