Viewing profile — simon_vetter

They're doing dual stack, not ipv6-only with nat64/dns64.

Requiring all apps to work on ipv6-only DNS64/NAT64 networks will let Apple do without 464xlat entirely, as no ipv4-only app will be left on the app store.

> Even if it existed, it would bring very little value to the users, as operating a radio device with modified firmware on public networks without recertification is prohibited in …

This. At least, if you're not ready to accept incoming v6 connections (which really isn't hard to do), use connection tracking to let outbound v6 through and add the necessary icmp…

I'd strongly recommend against using ftp in 2015. sftp [1] should do everything that ftp did in with a good level of security (encryption, server authentication and key based user …

> * via Raspbmc, which I just found out has apparently ceased to exist... Try OSMC [1], it's a massive improvement over Raspbmc and is being developed actively. Works like a charm.…

This is fairly common, if not ubiquitous. Use key-based authentication, disable password auth in sshd_config and install sshguard.

That's only a management interface tho, the modem will still happily forward ipv4.

what icebraining said: use a nat64+dns64 at the edge of your network and make all your endpoints ipv6 only. If you're an ISP, you could probably put multiple nat64 boxes in the cor…

This. Running dual stack networks is harder and more expensive to manage, secure and troubleshoot. The faster we get to single stack ipv6 only, the better.

iOS8 has been reported to be dual stacked (v6 + v4 addresses) on the cellular side of things on Verizon and a bunch of other (mostly European) networks. What Apple did with iOS9 is…

Add the score of the duplicate (being deleted) to that of the original story, and keep the highest rank of the two?

Implementing other protocol handlers into existing web browsers and operating systems would be a good start IMO. Taking ipfs/ipns [1] as an example, having handlers inside web brow…

hulbee.ch uses an invalid security certificate. The certificate is only valid for the following names: *.hulbee.com, hulbee.com

I would recommend sshguard [1] as a fail2ban replacement. It does much of what fail2ban used to do out of the box and has supported ipv6 for a long, long time. It is packaged in de…

From the placement of the LEDs and the board's relative size compared to your hand, I'm assuming that this is the main board of the device. Coming off that board, I see two large w…

> Anything that is moving, distracting This. It's really hard to stay focused on an article or piece of text longer than a few sentences with flickering images, autoplaying videos …

I've used a Time Capsule just fine in bridge mode when cabled to a CPE sending out router advertisements. If you use it as a bridge, you might want to make sure the TC firewall is …

On the contrary, there are advantages in having your apps/clients support ipv6 even if your backend is not ready to offer v6 connectivity: 1) your app/client will work just fine on…

Same experience here. Servers get ordered, racked, provisioned and left powered on waiting for a sysadmin to make use of them... which quite often doesn't ever happen, because team…

Note that he could be living in a jurisdiction where the law provides better protection for electronic communications (email being one of them), thus preventing his ISP from readin…

icmp in ipv6 does much more than its ipv4 counterpart and most importantly: 1) L2 address resolution (neighbor discovery), which ARP used to do in ipv4, 2) full network autoconfigu…

Any decent size transformer (or AC motor) in or near your house would hum at 60Hz (plus a bunch of harmonics). The big one on that utility pole down the street seems like a perfect…

You can disable their http/https/telnet interfaces and stick to ssh with key auth for administrative tasks. That alone should help. Also, they come with upnp and other unnecessary …