Live data from Hacker News

United States IPv6 adoption over 50%

google.com

91–100 of 164 posts

Re: United States IPv6 adoption over 50%

#91
post #89
post #86

Earlier quoted context omitted.

Because a firewall exploit means your thermostat is now controllable over the internet and you can conveniently preheat your oven over the internet too and now your house is burning down

how is that worse than ipv4 firewall exploit?

It's actually better because you actually get obscurity with ipv6.

Re: United States IPv6 adoption over 50%

#92

Am I the only one that hates IPv6 ergonomics? I have to transcribe IPv4 addresses all the time, I'd hate to try and do it with a 128 bit address. Could they not have gone with 64 bit addresses, was 18,446,744,073,709,551,615 addresses really not enough?

> Could they not have gone with 64 bit addresses, was 18,446,744,073,709,551,615 addresses really not enough? Consider the counter-factual: what if 64 bits ended up being not enough? Given all the effort that needed and still needs to be done to move from IPv4 to IPv6, if we eventually needed to move to IPv7/8 it would even more difficult given how much IP in general has/is pervading civilization. It's better to have…

When was the last time you tried to memorize (or even type out) a ZFS block pointer address though? The ergonomics don't matter for ZFS, and so what's left to consider is address space exhaustion.

For IPv6, people memorize/type IP address all the time. So the IPv6 designers needed to balance the address space size with ergonomics - and they did this poorly, imo.

Re: United States IPv6 adoption over 50%

#93

Am I the only one that hates IPv6 ergonomics? I have to transcribe IPv4 addresses all the time, I'd hate to try and do it with a 128 bit address. Could they not have gone with 64 bit addresses, was 18,446,744,073,709,551,615 addresses really not enough?

In reality it does end up being 64 bits, as the other 64 is for a specific network.

Re: United States IPv6 adoption over 50%

#94
post #59

Earlier quoted context omitted.

Heh, well of course, if you have enough IPv4, there's not much IPv6 does for you. However if your a normal consumer with a single network visible IP (if that), it's REALLY useful. I've got a /60 (16 /64s'), and I have one per port on my router and it's quite nice to be able to get to anything inside my home network from anywhere on the internet. Filesharing, monitoring home automation, opening/closing my garage door,…

>to anything inside my home network from anywhere on the internet When you put it like that, it sounds kind of scary.

Only when you're dependent on NAT for security. NAT isn't intended to be a security tool, and is pretty bad at mitigating against attacks that aren't just "log into this device directly." As others have said, a robust firewall and some good access controls and you'll be fine.

Re: United States IPv6 adoption over 50%

#95
post #33
post #24

What's with the cyclical "Ebb and Flow" of IPv6 if you select "IPv6 Adoption" and zoom in?

People have IPv6 at home but not at work (or though the work VPN these days).

Really evident if you zoom in a bit and look at March/April 2020, v6 usage stops dipping as hard during weekdays.

Re: United States IPv6 adoption over 50%

#96
post #86
post #84

Earlier quoted context omitted.

Why? This is what firewalls are for.

Because a firewall exploit means your thermostat is now controllable over the internet and you can conveniently preheat your oven over the internet too and now your house is burning down

No different than NAT and forwarding a port which people have been doing for decades.

Hell if you have a firewall exploit then exposing stuff to the internet doesn't matter.

Re: United States IPv6 adoption over 50%

#98
post #69
post #26

Earlier quoted context omitted.

There is a lot of cultural inertia that instantly biases against anything old and stable in developer circles. It's super annoying, tbh. A subset of developers only seem comfortable with technology invented in the past 18-24 months, regardless of how untested and unstable it is. “What's this? It was written 2 years ago? It must be old and useless. I’m going to require my app to use the latest version and I don’t care…

One developer's "old and stable" is another developer's "filled with vulnerabilities that nobody will ever find let alone bother to fix because everyone assumes it's old and stable." IPv6 has been a draft standard since 1998. Get a better argument.

A brand new project being written from scratch is way more likely to have bugs and likely to be abandoned as quickly as it started.

Re: United States IPv6 adoption over 50%

#99
post #44
post #26

Earlier quoted context omitted.

There is a lot of cultural inertia that instantly biases against anything old and stable in developer circles. It's super annoying, tbh. A subset of developers only seem comfortable with technology invented in the past 18-24 months, regardless of how untested and unstable it is. “What's this? It was written 2 years ago? It must be old and useless. I’m going to require my app to use the latest version and I don’t care…

Sure, that's annoying too, but I don't see how it's relevant to the topic at hand. IPv6 isn't some shiny new tech, the original RFC just turned 26. It's also not just a superficial re-write of some existing tool, it fixes a real problem which clearly needs to be addressed (no pun intended).

I wish v6 just tried to fix things. The problem with v6 was that it also tried to do thing in a right way and broke too much compatibility. And then it turned out what was right in 1995 was no longer so for the last 10 years.

Re: United States IPv6 adoption over 50%

#100
post #58
post #42

Earlier quoted context omitted.

That article was really very optimistic about NAT traversal, while being very pessimistic about solutions to avoiding memorising IP addresses, which I think says something about their perspective going in. NAT is a nightmare that has directly lead to the crappy world of every "IoT" device relying on some remote service that can shut down any time, instead of just... connecting to your device. Also every game having c…

NAT not being designed for security does not negate the effect of security it does have. This goes to the 80/20 rule, IPv6 is a security nightmare if not deployed correctly, and I am surprised more home users have not gotten hit with this security time bomb

> Security nightmare

How so? Allow established, then drop. You know. The same rules in ever consumer level router on the market now.

Post reply on HN