News for hackers. Stuff that matters.

A comment on Zero-click Windows TCP/IP RCE impacts all systems with IPv6 enabled, patch now.

Re:Zero-click Windows TCP/IP RCE impacts all systems with IP... by freddierest on Friday August 16, 2024 @06:04AM (#41264912)
This will justifiably be used to disable IPv6 in many places, which will sadly set back IPv6 adoption just that little bit more.

I'm IPv6-only on my personal infra, and it's pretty nice. End to end reachability between machines and containers, and reduced need for middle boxes like reverse proxies.

[ Parent | on HN ]
Re:Zero-click Windows TCP/IP RCE impacts all systems with IP... by ronsor on Friday August 16, 2024 @02:27PM (#41268989)
Supposedly disabling IPv6 still doesn't prevent exploitation, so lazy IT will get hacked anyway.
[ Parent | on HN ]
Re:Zero-click Windows TCP/IP RCE impacts all systems with IP... by jmholla on Friday August 16, 2024 @08:21PM (#41271477)
The article says the opposite:

> As a mitigation measure for those who can't immediately install this week's Windows security updates, Microsoft recommends disabling IPv6 to remove the attack surface.

and

> "That means it's wormable. You can disable IPv6 to prevent this exploit, but IPv6 is enabled by default on just about everything."

[ Parent | on HN ]