Everytime IPv6 comes up there's back and forth on NAT vs firewall etc etc.
That's easy. IPv6 has more flexibility. You do what you want and leave everyone else to do what they want. Networking stuff will break sure, but hasn't it always...
I haven't gone to IPv6 at home because working with an IPv6 string is so much harder.
I can't always copy'n'paste addresses. I often shout/phone an address to someone else to type in. And talking to 3rd parties (ISP , anyone controlling outside WAN) etc IPv4 is a known quantity.
It's that chicken vs egg problem. I don't want to touch IPv6 at home until other admins have figured out how to make this easy.
So uh, this seems to imply that ISP rotating ipv6 prefix is "obvious", but uh. Really? I don't think I've ever seen this implemented willingly (many have dynamic allocation, but it's changing so slowly that it looks more like a bug than a feature). Does some people have other experience?
I was wondering what kind of IoT could be widespread enough to pose a significant problem or if it was rather statistical, but they mention TVs. And uh yeah, TVs during their lifetime discuss with a huge range of providers, so this indeed broadcasts to
The privacy handling of the article writing isn't great imo. Only an ISP should have access to those data, not external researchers. I even fail to see how it can be GPDR compliant. That being said, operators won't spontaneously write those articles, so well, this one is usefl.
Overall this is an interesting article. I think ISPs doing prefix rotations can easily detect devices and warn the user and/or isolate the bad device (through symmetric NAT for instance -- I think this is an okay compromise, it's not a horrible hack), which this article shines light on. Cool.
Ipv6 is a lot like a bios update - best avoided unless absolutely necessary. Potential mess with no upsides for end users.
This is the main reason we did not support IPv6 at Winston.
"Our results show that IoT devices contribute the most to this privacy leakage"
[flagged]
What this says is IOT devices leak their MAC within their IPv6 address.
Quick solution would be DHCPv6 so they don't have a choice in what address they use.
Going further, NAT and hide all these devices behind a single external IP.
Going even further, NAT the whole network by default and only give global addresses to endpoints that need it (local servers and such)