News for hackers. Stuff that matters.

A comment on Yggdrasil Network. Parent comment

Re:Yggdrasil Network by beeflet on Sunday November 17, 2024 @09:25AM (#42164331)
People (like ISPs offering routers) set up NAT, often justifying it on the basis of security. Application developers use hole-punching techniques to get past NAT (including stuff like UPnP that requires cooperation from the NAT).

The end product is:

#1 A sandboxing system that cannot reliably sandbox.

#2 A connection system that cannot reliably connect.

So now you have two problems.

[ Parent | on HN ]
Re:Yggdrasil Network by dev_hugepages on Tuesday November 19, 2024 @02:07AM (#42180739)
NAT is not a security measure but a way to save on IP space or avoid remaking a topology on network addresses changes. For actual security you need a firewall
[ Parent | on HN ]