News for hackers. Stuff that matters.
Re:IPv6 Is Hard by XorNot on Sunday February 16, 2025 @07:01PM (#43073188)
This seems like it's conflating problems?

"All devices are routeable" is a good idea, because it means when we want devices to be routeable there's a simple and obvious way that should be done.

Where we've ended up with NAT though is worse though: we still need a lot of devices to routeable, and so we enable all sorts of workarounds and non-obvious ways to make it happen, giving both an unreasonable illusion of security and making network configuration sufficiently unintuitive we're increasing the risk of failures.

Something like UPnP for example - shouldn't exist (and in fact I have it turned off these days because UDP hole-punching works just fine, but all of this is insane).

Re:IPv6 Is Hard by aboardRat4 on Sunday February 16, 2025 @07:48PM (#43073559)
NAT is not an illusion of security, it's very practical security.

Just look at the distribution of successful attacks in 2000 and in 2025.

Re:IPv6 Is Hard by vel0city on Sunday February 16, 2025 @09:53PM (#43074514)
Yes, because NAT was the only notable change in home computing between 2000 and 2025. Totally not all the other changes that happened, 100% NAT. Yep.