Re:Yggdrasil Network
by paulddraper on Sunday November 17, 2024 @03:03AM
(#42162714)
Actuate
I presume you meant to say "Accurate", but it made me think of a off-brand Picard that says "Actuate" instead of "Engage".
If the new technology referenced in the comic provides a way to securely connect, including auditing, I don't see how it applies to the hole punching hack.
People (like ISPs offering routers) set up NAT, often justifying it on the basis of security. Application developers use hole-punching techniques to get past NAT (including stuff like UPnP that requires cooperation from the NAT).
The end product is:
#1 A sandboxing system that cannot reliably sandbox.
#2 A connection system that cannot reliably connect.
So now you have two problems.
Re:Yggdrasil Network
by dev_hugepages on Tuesday November 19, 2024 @02:07AM
(#42180739)
NAT is not a security measure but a way to save on IP space or avoid remaking a topology on network addresses changes. For actual security you need a firewall
Naturally this leads to slapping even more arcane fixes on top of that, like NAT port assignment oracles to adversarial interoperate with different port allocation strategies (random, sequential, single, etc.) by analyzing patterns in previous port assignments. Networking sucks.