[deleted]
My security camera shipped a GitHub admin token in its login page
231–240 of 265 posts
Re: My security camera shipped a GitHub admin token in its login page
#232Earlier quoted context omitted.
But lots of people want to do things like open up a few ports for a gaming console. You can obviously do it, but the inside network/outside network/poke a hole/simple ip addresses mental model makes it harder for people to just get frustrated and disable it. Of course absolutely nothing is impossible or more difficult from a technical networking perspective using IPv6. People want to learn as little as humanly possib…
how is it a different mental model? instead of opening the port in NAT via forward feature, you open the port in the firewall. it is in fact significantly simpler while overall being the same actions you take when you want to "forward"
You’re right. That’s why everybody uses it and nobody is confused by it.
Re: My security camera shipped a GitHub admin token in its login page
#233Earlier quoted context omitted.
And it's worth considering that obfuscation only ever worked against casuals for whom tedious was a bridge too far. Nation state actors and criminal hacker groups, on the other hand, consider the tedious entirely worth it.
Pirates checked Denuvo, once considered the king of DRM.
cracked*
Re: My security camera shipped a GitHub admin token in its login page
#234Earlier quoted context omitted.
you fling around words like "network maintainers" quite casually, dont you? :) its really extremely simple, just dont NAT, is that really so hard? just because you dont NAT, doesnt mean you have to let the traffic pass through, that is also an extremely simple concept, no?
Fling it around? There are a shitload of people who maintain networks, like home or small business networks, that aren’t network administrators. Most of those people are not prepared to have their Chinese WiFi cameras, myriad smart appliances, and heck, even home computers easily individually accessible from the internet. It’s an extremely simple concept, no?
Actually I think most people really do want that stuff accessible from the internet. Currently that requires a central server and a subscription, but imagine if it didn't. Imagine if you could log into your washing machine from anywhere instead of only when you're at home, and it would keep working even if LG went bankrupt.
Re: My security camera shipped a GitHub admin token in its login page
#235Earlier quoted context omitted.
how is it a different mental model? instead of opening the port in NAT via forward feature, you open the port in the firewall. it is in fact significantly simpler while overall being the same actions you take when you want to "forward"
You’re right. That’s why everybody uses it and nobody is confused by it.
Everyone whose ISP offers it uses it, yes.
Re: My security camera shipped a GitHub admin token in its login page
#236Earlier quoted context omitted.
It's mental that my fairly techy-orientated but otherwise pretty standard UK ISP provides me with a /48 as default. So I have 1.2 million million million million IPv6 addresses available. That ought to be enough, eh?
Of course, we could hand all 8 billion people on the planet a thousand /48’s each and still have trillions and trillions to spare.
Realistically, allocation is more complicated than that, and there are arguments that the current allocation scheme isn't futureproof enough. But if that happens, there's enough room to change it and still keep all existing allocations working.
Re: My security camera shipped a GitHub admin token in its login page
#237Earlier quoted context omitted.
> Not to mention, that I really don't understand how IPs are supposed to be provisioned to devices on IPv6. SLAAC is the only way that works across all IPV6 devices. In that mode, the router advertises the prefix and the device assigns its own address (prefix + its mac address). DHCPv6 exists but is poorly supported. It sucks for people who like assigning IPs individually from an authoritative place (through static d…
Which doubly sucks in terms of assigning a DNS name to an IP/PC... and/or opening the assignment to less restricted access... feels just problematic to me. Again, I don't know any of IPv6 enough to use it really right or wrong.
If your ISP offers it, you should just try it. If not, do you have a website on a VPS or something? Try making that work with v6. It's really not a scary monster, it's mostly the same thing again but with long addresses, and a few convention changes that come with long addresses.
Examples of convention changes: end devices can each get several addresses for privacy and for being on multiple networks concurrently. SLAAC is stateless because addresses in a /64 are so endless there's no need to keep a central registry of which ones are already used. NAT is rare because it's no longer necessary, even though there is no internet police to stop you from using it (please try to avoid it). P2P is so much easier - applications can be written under the assumption connectivity is end-to-end with firewall hole punching.
Re: My security camera shipped a GitHub admin token in its login page
#238Earlier quoted context omitted.
192.168.0.0/24 -> fd00:0::/64 192.168.1.0/24 -> fd00:1::/64 192.168.2.0/24 -> fd00:2::/64 192.168.240.0/24 -> fd00:240::/64 It's not a great idea, but its no harder. No need to mess around with setting up DHCP, remembering if your router is top or bottom of the subnet, and if you want 500 devices on a single subnet that's no problem. Now if you still need ipv4 then yes, ipv6 is stupid as you have double the pain for…
I doubt any endpoints are entirely ipv6. So it seems like it helps ISPs and large networks router… but they never had problems with address space running out at the high levels and almost all likely need to support v4 anyhow. I think it’s been long enough to be honest that ipv6 was a spectacular failure by complicating an already complicated system into something no one actually asked for. No human said “hey, network…
Public websites almost always still have ipv4 to serve ipv4-only users who make up half of the American business internet. But note that v6 connectivity is better than v4 in basically every other country and basically every mobile network (which is where most of the users are).
Re: My security camera shipped a GitHub admin token in its login page
#239Earlier quoted context omitted.
As an — I am guessing — American, you should feel more comfortable with handing over your domestic surveillance to Russia or China than to a US-based company. They absolutely have no interest in your domestic matters, nor do they have a clear path to monetize your attention. There are non-IP cameras and coax interfaces, which would expose a USB video device on any Linux system, RPi included. Plenty of software to han…
Why should I want to hand mu domestic surveillance over to any company? Why wouldn’t I prefer a private solution that lets me host my own data?
Being more comfortable with a foreign company compared to a domestic one does not suggest you should be comfortable with either ;)
Re: My security camera shipped a GitHub admin token in its login page
#240Earlier quoted context omitted.
As an — I am guessing — American, you should feel more comfortable with handing over your domestic surveillance to Russia or China than to a US-based company. They absolutely have no interest in your domestic matters, nor do they have a clear path to monetize your attention. There are non-IP cameras and coax interfaces, which would expose a USB video device on any Linux system, RPi included. Plenty of software to han…
> As an — I am guessing — American, you should feel more comfortable with handing over your domestic surveillance to Russia or China than to a US-based company. They absolutely have no interest in your domestic matters, nor do they have a clear path to monetize your attention. Unfortunately, that isn't exactly true. Sure, they don't have any usage for your porch camera and its data, but the fact that it is hooked up…
That is certainly a different matter: "handing over domestic surveillance" vs enabling a foreign company to run a node on your network.
However, that is mostly about trusting or not trusting someone's business. Eg. DJI drones and action cams and gimbals are omnipresent, and they have the potential to do the same when it comes to China.
But they also have plenty to gain from building a great product and selling it and not reselling your IP addresses.