247
New UEFI vulnerabilities send firmware devs industry wide scrambling
(arstechnica.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 19 Jan 2024
247 points (99.2% liked)
Technology
59440 readers
3573 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Ipv6 is the replacement for ipv4. There now exist networks without ipv4
To expand on this, we have functionally ran out of IPv4 addresses. Meaning IPv6 addresses are required.
Not only that, but ipv6 makes networking easier and less complicated. No longer, needing port forwarding or NAT, amongst other improvements
It's that necessarily a good thing?
I remember suddenly needing a firewall on my PC back in the days of the Blaster worm.
Do we really want all those crappy IoT devices open on all ports to the general internet?
NAT is not security. We aren't talking about replacing friewalls.
I'd be fucked if I had to deal with IPv6 at home. Give me NAT, port forwarding and a dynamic public address that changes.
Slaac does everything for you. You get dynamic public addresses that change (you can disable if you please). Nothing to deal with, just open a firewall port if you want to receive traffic
I want static addresses on my LAN, and addresses I can remember and easily recognize in a list. And I don't want my devices to have unique addresses outside my LAN, especially not static ones. NAT is great.
You can statically number a LAN with fd00::/8 and NAT66 to the internet, if you really want to.
Heck you could set up a ULA or just use a range from your assigned prefix
Nothing stops you doing that with ipv6. NAT is complicated and unnecessary.
Only for the internet, not private space
No shit.
But a private Lan will never need it.
There are 4 billion+ possible IP v4 addresses, nearly 600 million in the current private range.
Show me a private network with 600 million devices.
There's no reason a device that doesn't have a direct internet connection needs IP6.
Ideally, using just IP6 would be simpler, as every device gets a global address. Then you don't need to mess with NAT, port forwarding and all that bullshit. Every device having multiple addresses just complicates things.
A device on your private IPv4 network can send packets directly to
104.21.36.127via NAT. How will it send packets to2606:4700:3033::6815:247f? There's not enough space in the IPv4 header.