Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

40% of Google users now connect via IPv6

google.com

Post reply on HN
Print view View original

121–130 of 353 posts

Re: 40% of Google users now connect via IPv6

#121

Post by oldjavacoder »

jeroenhd wrote: post #68
HWR_14 wrote: post #40

Earlier quoted context omitted.

I do. I don't know why, but when debugging some network issues I discovered just shutting IPv6 down fixed the issue. Could it have been a buggy implementation on a single device on the network messing everything up? Maybe. But since I have no real benefit for IPv6, it was trivial to turn off. It also lets me wait until other people (hopefully) build better privacy systems.

IPv6 has had privacy built in for years now, on every OS available. Your inbound address will remain static and possible MAC address derived, but unless you're hosting anything on it (or disabled your firewall) your network traffic will be perfectly private. I've noticed several websites where IPv6 has lower latency than IPv4. The ease of accessing different VMs on cloud providers that will hand out a single IPv4 add…

"IPv6 has had privacy built in for years now, on every OS available. Your inbound address will remain static and possible MAC address derived, but unless you're hosting anything on it (or disabled your firewall) your network traffic will be perfectly private."

I've tested with IPv6 on and off on several machines over the course of months. Google's search results become wild and unpredictable on the same machines soon after switching to IPv4.

My theory is that they rely on that IPv6 address to know exactly who they are providing results to and thus selling to.

If that theory didn't hold water, there would be exactly zero difference in search results after switching to all IPv4.

Re: 40% of Google users now connect via IPv6

#122

Post by collsni »

The whole removal of nat and directly connecting to the destination with the source address seems like a privacy and security nightmare.. imo..

The security extension thing seems a bit wack. I'd still like all my traffic to originate from a single source and be tagged with that address only. This possible?

Re: 40% of Google users now connect via IPv6

#123

Post by oldjavacoder »

jlouis wrote: post #46
cute_boi wrote: post #15

Earlier quoted context omitted.

I just hope ipv6 doesn't have privacy nightmare that 1 device will always get 1 IP. Currently, the isp I use provides dynamic ip, so on every router restart my ip gets changed. If they starts to provide ipv6, I hope they give options to rotate it frequently, so toxic companies like meta, facebook, microsoft can't connect my device & ip.

It rotates about once a day in most operating systems. Called ipv6 privacy extensions. This is of course defeatable, but it provides a nice black hole for a device. It moves on and you can't connect to it anymore.

"This is of course defeatable"

Yes, which is why I don't use IPv6.

https://blog.apnic.net/2022/01/31/defeating-ipv6-prefix-rota...

Re: 40% of Google users now connect via IPv6

#124

Post by wyager »

oldjavacoder wrote: post #107

None of the computers I own personally use IPv6. IPv6 is a bad idea. IPv6 is a straight connection from the Internet through everything in the network, right to the individual machine. Give my IPv4 and NAT or turn the Internet off.

Disable inbound connections on your firewall and it's the same security as having NAT.

Re: 40% of Google users now connect via IPv6

#125

Post by oldjavacoder »

legrande wrote: post #21
cute_boi wrote: post #15

Earlier quoted context omitted.

I just hope ipv6 doesn't have privacy nightmare that 1 device will always get 1 IP. Currently, the isp I use provides dynamic ip, so on every router restart my ip gets changed. If they starts to provide ipv6, I hope they give options to rotate it frequently, so toxic companies like meta, facebook, microsoft can't connect my device & ip.

IPV6 is sort of like the new MAC address hardware identifier. An IP for every atom in the universe!

That's the issue I have with it, it's not a feature.

Re: 40% of Google users now connect via IPv6

#126

Post by collsni »

jlouis wrote: post #46
cute_boi wrote: post #15

Earlier quoted context omitted.

I just hope ipv6 doesn't have privacy nightmare that 1 device will always get 1 IP. Currently, the isp I use provides dynamic ip, so on every router restart my ip gets changed. If they starts to provide ipv6, I hope they give options to rotate it frequently, so toxic companies like meta, facebook, microsoft can't connect my device & ip.

It rotates about once a day in most operating systems. Called ipv6 privacy extensions. This is of course defeatable, but it provides a nice black hole for a device. It moves on and you can't connect to it anymore.

yeah im not sold by this. i want all of my source traffic to show my gateway as the origin, not my unique end devices.

privacy nightmare

Re: 40% of Google users now connect via IPv6

#127

Post by bejelentkezni »

collsni wrote: post #122

The whole removal of nat and directly connecting to the destination with the source address seems like a privacy and security nightmare.. imo.. The security extension thing seems a bit wack. I'd still like all my traffic to originate from a single source and be tagged with that address only. This possible?

You can use NAT6 if you insist but there's no reason to. The aforementioned privacy extensions keep you from being tracked long-term based on address alone and your firewall is still blocking incoming traffic.

Re: 40% of Google users now connect via IPv6

#128

Post by jhugo »

collsni wrote: post #122

The whole removal of nat and directly connecting to the destination with the source address seems like a privacy and security nightmare.. imo.. The security extension thing seems a bit wack. I'd still like all my traffic to originate from a single source and be tagged with that address only. This possible?

Nothing stops you using site- or link-local addresses and NATing to a single (or several) public IPv6 addresses, just as you do with IPv4. There was no "removal of NAT", it's just not necessary any more.

A proper firewall without NAT is generally fine, especially in combination with privacy extensions (which likely overall give better privacy than IPv4+NAT), but if you want to completely conceal the network layout behind your router, go nuts with NAT, no problem.

Re: 40% of Google users now connect via IPv6

#130

Post by collsni »

trashburger wrote: post #19
cute_boi wrote: post #15

Earlier quoted context omitted.

I just hope ipv6 doesn't have privacy nightmare that 1 device will always get 1 IP. Currently, the isp I use provides dynamic ip, so on every router restart my ip gets changed. If they starts to provide ipv6, I hope they give options to rotate it frequently, so toxic companies like meta, facebook, microsoft can't connect my device & ip.

With IPv6 each device getting a unique IP is not a bug but a feature -- what will probably happen is that your ISP will lend out a /64 range to you, which your devices will use to assign a unique IP to themselves. This completely removes the need for NAT (also, keep in mind that a NAT is not a firewall or a security feature). BTW, dynamic IP rotation was never a guarantee and is only used because the pool of IPs were…

oh perfect for device tracking!!

hope you dont have any tweets that offend your goverment lol

Post reply on HN