this post was submitted on 19 Apr 2024
258 points (98.1% liked)

Linux

48317 readers
666 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

Whether you're really passionate about RPC, MQTT, Matrix or wayland, tell us more about the protocols or open standards you have strong opinions on!

you are viewing a single comment's thread
view the rest of the comments
[–] cmnybo@discuss.tchncs.de 19 points 7 months ago (1 children)

NAT is not for security, that's what the firewall is for. Nobody can access your IPv6 network unless you allow access through the firewall.

[–] ReversalHatchery@beehaw.org 2 points 7 months ago (1 children)

I don't think they were talking about access to the network.

[–] technom@programming.dev 2 points 7 months ago (1 children)

"The inside of the network stay anonymous" sounds like they are talking about internet access to the internal network.

[–] ReversalHatchery@beehaw.org 1 points 7 months ago (1 children)

If computers connect to others through the internet, the IPv6 address can reveal how many computers there are on the local network, and if certain traffic to different destinations are coming from the same computer, but also if one of the computers has gone offline but then resumes from sleep/hibernation.
To me their comment means they want to avoid that, and I agree, I want to avoid that too. To fix these, I would need to configure NAT on my router for IPv6.

Yes IPv6 address privacy extensions help somewhat, but

  • computers won't use a different v6 address for every distinct destination, they will just start using a new one from time to time
  • computers won't stop using the old v6 address immediately after wakeup

With v4 addresses these did not really matter, because everything was being sent from the same public IP, and and outside observer could only see what a "network" is doing collectively. But with v6 an address identifies a computer, across websites/services. Even if it's just for a "short' time, even if the address is randomized.

[–] frezik@midwest.social 1 points 7 months ago (1 children)

If you want privacy, you need some kind of VPN or onion routing. Even if everything you list were correct, the difference between IPv4 and 6 for privacy would be marginal.

[–] ReversalHatchery@beehaw.org 1 points 7 months ago

I don't think this is so black and white. I'm a regular tor user, but so often it's not worth it to load webpages through a dial-up connection, and then there are the sites that block access for tor users for some reason.

Even if everything you list were correct

Which parts weren't?

the difference between IPv4 and 6 for privacy would be marginal

I disagree