Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tech CEO sentenced to 5 years in IP address scheme

krebsonsecurity.com

Post reply on HN
Print view View original

91–100 of 311 posts

Re: Tech CEO sentenced to 5 years in IP address scheme

#91

Post by icedchai »

overgard wrote: post #47

Honest question, why are we not all just on IPV6 now? It seems like at this point almost all the underlying hardware and software should support it? It seems like the only argument for sticking with IPv4 is NAT, but I can't think of a technical reason we couldn't do NAT with IPv6?

The only reason we're even still on IPv4 is because of NAT. End-to-end connectivity, public IPs everywhere, is how it should work. In the early days, this is how IPv4 worked. I remember having full, publicly routable IPs both at home, school, and work, no NAT. This doesn't mean you shouldn't use firewalls, though many in the early days didn't!

Re: Tech CEO sentenced to 5 years in IP address scheme

#92

Post by chrisweekly »

i_am_jl wrote: post #54
JumpCrisscross wrote: post #16

Earlier quoted context omitted.

> or beg for arbitration behind closed doors Arbitration records aren’t protected from disclosure to law enforcement.

"Not protected from disclosure to law enforcement" is still better than "entered into the public record by default" as a result of being offered as evidence in a civil trial.

All the more so because law enforcement agents would require cause (warrant? subpoena? IANAL) to obtain the records, right?

Re: Tech CEO sentenced to 5 years in IP address scheme

#93

Post by talent_deprived »

kstrauser wrote: post #81
talent_deprived wrote: post #64

Earlier quoted context omitted.

> it's an absolute pain in the ass for bidirectional communication You're right and that's what I love about NAT, IPv6 in contrast is a hacker/spy tracking digital superhighway right through my front door and straight into my devices.

Not one bit of that is true or accurate.

Actually, it is, try the test for yourself in your home over a 30 day period. Drop IPv6 at the router and in your main PC and devices by disabling it. At the end of that 30 days, it will become clear that Ad companies were using IPv6 to track people in the household when Ads for things completely unrelated to their interests and related to the other members of the household start showing on each others PC's and devices.

Re: Tech CEO sentenced to 5 years in IP address scheme

#94

Post by jonathantf2 »

Olipro wrote: post #41
DonHopkins wrote: post #14

I know somebody who basically stole a class A IP network many years ago, in the very early days of IPV4. (He wouldn't tell me which one, but he had inside knowledge of how the system worked, and I know his background, so I believe him. ;) The huge company that owned it went out of business, so he registered their domain name, and sent in an email to authorize the transfer. Once you've got a hot class A network on you…

Nobody's going to run a /8 on a single LAN segment. If you want maximum efficiency, your hosts all have RFC1918 IPs and you route the public IP addresses to them. zero wastage, everything usable.

I have unfortunately seen that many a time.

Re: Tech CEO sentenced to 5 years in IP address scheme

#95

Post by Scoundreller »

SteveNuts wrote: post #44
JoshGlazebrook wrote: post #37

Earlier quoted context omitted.

Now just to find where those missing ipv4 addresses are going along with those missing socks.

Probably lost in the "smart" dryer.

Tbf, front-loading washing machines can suck in socks.

Have had to pull one out of the pump at the bottom. Best part is your clothes are trapped inside with a half load of water. Or you can chance it and hope it can drain a bit at a time over a dozen drain attempts with burning it out.

I suspect another small article of clothing led to a clog in the line (apartment building). Nothing like a whole washing machine load of water back flowing onto your floor.

Fancier machines have an access hole to open up the pump. Annoying models have 3 screws flush with the ground that are nearly impossible to remove without an “airbag” door entry tool. A couple $9 ones from aliexpress can lift my machine and the dryer on top.

Re: Tech CEO sentenced to 5 years in IP address scheme

#96

Post by Scion9066 »

unshavedyak wrote: post #76
floren wrote: post #55

Earlier quoted context omitted.

NAT is a strong argument against IPv4 -- it's an absolute pain in the ass for bidirectional communication. Yeah, NAT acts as a defacto firewall, but you can just... use a real firewall.

Question from an ignorant network person: is IP rotation still common on ipv6? My primary fear with IPv6 is the touted "feature" of every device having an IP. While it's possible, yea, it sounds like a nightmare for privacy and tracking. Do the proponents of IPv6 also advocate for large ranges of IP rotations to deal with this?

Generally you'd get a network prefix from your ISP of 56 to 60 bits, your router would handle deciding how to make a network out of the remaining 4 to 8 bits of the network part, and then devices would automatically assign themselves unique addresses with the remaining 64 bits for the host part. One thing to note is that devices can and almost always do have multiple IPv6 addresses. Commonly: one for a local only address (like a 10. or 176.16., 192.168. address would be for IPv4), one based on the MAC address of a device, and now one (or a few) that is randomly chosen and periodically cycled to prevent some of the tracking issues you mention. The problem overall though is that the network part of the IPv6 addresses would still be the same and would be similar in tracking capability for a customer/household as how an IPv4 address is with NAT.

Re: Tech CEO sentenced to 5 years in IP address scheme

#97

Post by primitivesuave »

goalonetwo wrote: post #3

5 years in jail seems a bit of an overreaction.

If someone walks into a bank and carries out an unlawful scheme (i.e. fake notarized paperwork) that nets millions of dollars, 5 years would be a lenient sentence.

Also, it is 3 years in jail followed by 2 years of supervised release.

Re: Tech CEO sentenced to 5 years in IP address scheme

#98

Post by JumpCrisscross »

chrisweekly wrote: post #92
i_am_jl wrote: post #54

Earlier quoted context omitted.

"Not protected from disclosure to law enforcement" is still better than "entered into the public record by default" as a result of being offered as evidence in a civil trial.

All the more so because law enforcement agents would require cause (warrant? subpoena? IANAL) to obtain the records, right?

> law enforcement agents would require cause (warrant? subpoena? IANAL) to obtain the records, right?

No. If I took you to arbitration and think you acted illegally, I can send the case documents to law enforcement. Most people don't do this, because it's a hassle. But if you pissed me off or were morally offensive, hell yes I'm doing it. After that, yes, they need to execute searches to follow up on the information.

Re: Tech CEO sentenced to 5 years in IP address scheme

#99

Post by PrivateButts »

lalith_c wrote: post #2

Move to ipv6 already

One complaint that I have about ipv6 and mac addresses is that they use hex separated by colons. Not only is it way longer than an ipv4 address, you can't rattle one off using a number pad. Back when I did full time IT, that sounds like a nightmare if in ipv6 land you have to enter addresses as commonly as you have to enter ipv4 addresses.

Re: Tech CEO sentenced to 5 years in IP address scheme

#100

Post by icedchai »

DonHopkins wrote: post #14

I know somebody who basically stole a class A IP network many years ago, in the very early days of IPV4. (He wouldn't tell me which one, but he had inside knowledge of how the system worked, and I know his background, so I believe him. ;) The huge company that owned it went out of business, so he registered their domain name, and sent in an email to authorize the transfer. Once you've got a hot class A network on you…

I can believe a class B or C block. They gave those out like candy up until the mid 90's. Class A is hard to believe though. There weren't a ton of those.

I do know folks who have "defacto" control of legacy blocks belonging to defunct organizations. In fact, if you look hard enough, you can find entire ASNs full of them. Basically, IP squatters.

Post reply on HN