• 0 Posts
  • 70 Comments
Joined 1 year ago
cake
Cake day: June 4th, 2023

help-circle










  • My dad has an old Makita cordless drill from 1995 which he used for everything from assembling Ikea furniture to drilling holes in cement walls. Complete metal innards, full metal case, battery that’s big and heavy enough to bludgeon somebody to death with.

    Until one day I bought a fancy new Bosch cordless screwdriver with Li-ion battery, brushless motor and 1/4 the size and weight of the Makita.

    At first he laughed at me for buying a toy, then he tried it. He ordered one as well the week after and uses it pretty much exclusively since then.

    Still keeps the Makita box and drill around purely for the retro look but even with fresh batteries the amount of torque they put out is not even in the same league.

    Obviously that is the exception rather than the rule and most technological advances went into making companies more profits instead of building better products, but there are some advancements that made power tools better. Li-ion batteries and brushless motors being two of the big ones.










  • There is this notion that IPv6 exposes any host directly to the internet, which is not correct. When the client IP is attacked “directly” the attacker still talks to the router responsible for your network first and foremost.

    While a misconfiguration on the router is possible, the same is possible on IPv4. In fact, it’s even a “feature” in many consumer routers called “DMZ host”, which exposes all ports to a single host. Which is obviously a security nightmare in both IPv4 and IPv6.

    Just as CGNAT is a thing on IPv4, you can have as many firewalls behind one another as you want. Just because the target IP always is the same does not mean it suddenly is less secure than if the IP gets “NATted” 4 times between routers. It actually makes errors more likely because diagnosing and configuring is much harder in that environment.

    Unless you’re aggressively rotating through your v6 address space, you’ve now given advertisers and data brokers a pretty accurate unique identifier of you. A much more prevalent “attack” vector.

    That is what the privacy extension was created for, with it enabled it rotates IP addresses pretty regularily, there are much better ways to keep track of users than their IP addresses. Many implementations of the privacy extension still have lots of issues with times that are too long or with it not even enabled by default.

    Hopefully that will get better when IPv6 becomes the default after the heat death of the universe.