Melody Fwygon
- 2 Posts
- 27 Comments
I have a /48 that I can basically roll through.
A /64 is more than enough though to prevent most casual attempts at entry; and does force more work / enumeration to be done to break into a network and do damage with. I’m not saying the privacy extensions are the greatest; but they do work to slightly increase the difficulty of tracking and exploitation.
With a /48 or even a /56; I can subdivide things and hand out several /64s to each device too; which would shake up things if tracking expects a /64 explicitly.
I actually use /55s to cordon off blocks inside the /48 that aren’t used too. So dialing a random prefix won’t help. You’d be surprised how often I get intrusive portsweeps trying to enumerate my /64s this way…and it doesn’t work because I’m not subnetting on any standard behavior.
I run both because of this; and because SLAAC enables features in Desktop OSes that offer some level of additional privacy.
For example; Windows can do “Temporary IPv6 Addressing” that it will hand out to various applications and browsers. That IPv6 address rotates on a periodic basis; once every 24 hours by default; and can be configured to behave differently depending on your needs via registry keys.
This could for example, allow you to quickly spin up a small application server for something; like a gaming session; and let you use/bind that IPv6 address for it. Once the application stops using it and the time period has elapsed; Windows drops the IP address and statelessly configures itself a new one.
I get a free /64 and /48 directly from Hurricane Electric using their TunnelBroker and use PFSense to deploy that v6 locally on my LAN. Everything in the house has a v6 and is protected by the necessary firewalling too.
This is why I use PFSense and Hurricane Electric as a v6 tunnelbroker. I have working functional IPv6 with SLAAC and DHCPv6 and full Routing Advertisements on my LAN running side-by-side so that no matter which the device implements how poorly; it gets an IPv6 address and it works and is protected by the firewall.
1·24 days agoYour comment missed the mark entirely. Please don’t reply-guy me; I know what I’m talking about.
So much for using airplane mode to conserve battery.
Your understanding is slightly off.
Airplane mode Does In Fact Turn off your CELLULAR Radio This radio is what powers your (2/3/4/5)G and LTE (This is 4G btw) connection to the cell towers.
Most international radio communications laws can prohibit the use of Cellular Radio in flight; however they often don’t prohibit the use of shorter range radio technologies such as WIFI or Bluetooth.
It’s all about ‘loudness’. Think about it. Your phone must ‘scream louder’ at a farther away cell tower than it would need to communicate with a nearby WiFi router or a Bluetooth headset.
This is factually wrong; as installed plugins aren’t accessible to just any webpage…and plugins actually exist that obscure this anyways.
Not to mention there’s more hardened forks of modern browsers that don’t share plugin information anyways.
11·2 months agoNow snap some pics of this kitty laying in different places all over this couch; you now have a new meme: Address Space Layout Randomization.
You would be surprised how hard it can be sometimes to source batteries due to shipping rules and regulations; as well as the general difficulty surrounding just building your own battery pack…which can end badly if you aren’t an electronic engineer or similar professional who knows exactly what they are doing.
I must warn you of the dangers of pushing batteries in a failure state like this though; Lithium batteries can sometimes fail in explosive ways.
Keep an eye on the thermals and don’t let it expand or pop on you.
Either Linux has no idea what your battery is telling it; or your battery is just…toast.
Let’s just hope for your sake it’s just a funny linux bug. Replacing specific laptop batteries can be a tremendous pain if you can’t find a specific cell that works for your device.
Mandatory https://archive.is/Dt8FX link
With that being said; I do fully support an Instance’s choice to federate, not federate or even limit their federation with them.
In most cases this should not affect instances; but unfortunately there are people who will ignore all warnings and use the Fedi Garden as a whitelist instead of a list of instances that you know will handle policy violations quickly.
On the other hand I absolutely also respect the needs of communities who ABSOLUTELY, POSITIVELY WILL NOT TOLERATE instances who choose to federate with either X, Threads, or any other instance they deem to be too toxic to play nicely. As instance operators you absolutely have the right to block problems BEFORE they happen, and if you happen to KNOW an instance will absolutely be a HEADACHE, you have every right to say NO. If the users do not like your decision; they are free to find a better instance for themselves; or spin up an alt account on a better instance.
I would argue that federating with either of the biggest companies on the fediverse is a monumentally bad idea.
Not just because of “Reports of genocide” or anything specious like that; which can be debated for days and days on end by people in both good and bad faith; but because both Threads and Meta are simply too large to be moderated correctly and be capable of managing basic issues such as harrassment and extended bouts of hate-speech which should never be considered acceptable; even if you do not necessarily agree with all of the goals and policies of the Fedi Garden; as strict as they are.
511·3 months agoNot only did they guess it should be updated; they even left plenty of mechanisms directly in the constitution that allowed for it to be updated radically whenever situations changed so drastically that a supermajority agrees that it should be changed.
Unfortunately that too is the downfall; as those who want to exploit the status quo are also empowered to leverage their money and power to prevent such a majority from taking place. The constitution is far from perfect, and it absolutely should’ve been amended many hundreds of times over, not just the paltry less than 30 times we’ve managed to do so already.
You didn’t convert a hex number into Base64, you Base64 encoded the hex string.
TL;DR, you used the wrong tool.
Yeah you can always take a hex hash output and convert it to Base64…which does conpress it significantly. Apply LZ Compression and boom.
0.00000003% 3 Satoshis of a percent.