SoylentNews is people
SoylentNews is powered by your submissions, so send in your scoop. Only 16 submissions in the queue.
SoylentNews
This discussion has been archived.
No new comments can be posted.
For my devices that support it, I have implemented IPv6 . . .
|
Log In/Create an Account
| Top
| 21 comments
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Your reasoning powers are good, and you are a fairly good planner.
(Score: 1, Informative) by Anonymous Coward on Wednesday July 10 2024, @02:13PM (2 children)
with IPv4 I know that I'm inside the local network, and any outside attacker needs to get through the router to attack me (or they need to have control of the outside places I connect to).
with IPv6 the "whatismyip" result is exactly what "ifconfig" prints out, which makes me think IPv6 is less safe.
or am I just showing my ignorance?
(Score: 3, Interesting) by janrinok on Wednesday July 10 2024, @04:14PM
Anyone trying to connect to a specific device still has to go through your router. How you configure your router is still up to you. My router allows me to block all incoming connections, all connections (in or out), or allow specific ports to access individual devices.
Individual devices each have their own firewall. Even within my private network I can prevent some machines from accessing data from another.
(Score: 1, Informative) by Anonymous Coward on Wednesday July 10 2024, @05:04PM
You are right, but there are workarounds. Unfortunately they are often not enabled by default in operating systems.
Every host in your network having and using a unique, fixed, globally-routable IPv6 address is most definitely very bad from a privacy perspective because it allows your systems to be reliably identified individually. The usual way IPv6 addresses are assigned has the local part derived from a MAC address which (usually) never changes so you can also use these addresses to reliably identify hosts that are moved around between different networks.
With IPv6 you definitely want to be using the so-called privacy extensions [ietf.org]. In a nutshell this has every host generate new random addresses periodically and these should be the only ones used for outgoing connections. If this sounds a lot more complex than before, it is.