5 ms·
You’re going to have to explain that one. I don’t see how CGNAT does anything but allow easier access to attacks (using private ip space outside of the local n
by apearson 2y ago
You’re going to have to explain that one.
I don’t see how CGNAT does anything but allow easier access to attacks (using private ip space outside of the local network)
- coretx 2y agoAll the details can be found in the EUROPOL publications begging for it to be banned.
- apearson 2y agoAh, allows hiding behind a massively shared single address with less traceability.
- zamadatix 2y agoIIRC there was some hullabaloo made with RIPE in ~2017. Half of it was "go to IPv6 and it isn't a problem" and the other half was "or also log the source ports so we can complete the identification through CG-NAT". It's nearly 8 years later, we haven't moved to IPv6, and they stopped making noise so I'm left to assume they either got more source port logging or found some other method?
- sulandor 2y agopolitics still clinging to the idea of identifying ppl by obvious traffic meta-data
- coretx 2y agoThere is people using chef/kitchen knifes for murder too. That doesn't mean we should regulate them for army use and monitor all cooks. Yet this is what many but certainly not all decision makers are doing. Good, fundamental, stuff is happening too, such as RPKI for example. Some "politics" is definitely not happy about that, but its good for the internet.