Re:Yggdrasil Network
by beeflet on Saturday November 16, 2024 @07:30PM
(#42160874)
https://xkcd.com/2044/
[ Parent
| on HN ]
Re:Yggdrasil Network
by paulddraper on Sunday November 17, 2024 @03:03AM
(#42162714)
Actuate
I presume you meant to say "Accurate", but it made me think of a off-brand Picard that says "Actuate" instead of "Engage".
If the new technology referenced in the comic provides a way to securely connect, including auditing, I don't see how it applies to the hole punching hack.
People (like ISPs offering routers) set up NAT, often justifying it on the basis of security. Application developers use hole-punching techniques to get past NAT (including stuff like UPnP that requires cooperation from the NAT).
The end product is:
#1 A sandboxing system that cannot reliably sandbox.
#2 A connection system that cannot reliably connect.
So now you have two problems.
Re:Yggdrasil Network
by dev_hugepages on Tuesday November 19, 2024 @02:07AM
(#42180739)
NAT is not a security measure but a way to save on IP space or avoid remaking a topology on network addresses changes. For actual security you need a firewall