News for hackers. Stuff that matters.
Re:AWS to start charging for IPv4 usage, but critical servic... by icehawk on Friday November 10, 2023 @02:06PM (#38223063)
Its not harder to do wrong, its just less noticeable when done wrong, it's been a security consideration since NAT was created, and a persistent issue since then:

https://datatracker.ietf.org/doc/html/rfc2993#page-22

https://threatpost.com/remote-attackers-internal-network-dev... https://www.anvilsecure.com/blog/dhcp-games-with-smart-route...

Re:AWS to start charging for IPv4 usage, but critical servic... by hot_gril on Friday November 10, 2023 @03:39PM (#38224210)
It's defense in depth. I don't understand if and how this exploit allows an attacker to hit port 80 on my PC for instance, but either way it looks like a pretty sophisticated attack only discovered in 2021, and I still don't see panic over it.