r00ty

joined 2 years ago
[–] r00ty@kbin.life 11 points 2 months ago

And just to show I'm serious, you have zero seconds to comply.

[–] r00ty@kbin.life 2 points 2 months ago

Actually how is your ISP giving out IPs to you? Mine uses IPv6 PD to give me a /48. And I then use SLAAC locally on the first /64 prefix on my LAN. Plus another /64 for VPN connections.

If you mean receiving RA/ND packets from your ISP (which are used to announce IPv6 prefixes) then you need to allow icmpv6 packets (if you don't want to be able to be pinged, just block echo requests, ICMP in v4 and v6 carry important messages otherwise).

If your ISP uses DHCPv6 Prefix delegation you will need to allow packets to UDP port 546 and run a DHCPv6 client capable of handling PD messages.

If you have a fixed prefix, then you probably don't need to use your ISPs SLAAC at all. You could just put your router on a fixed IP as ::1 and then have your router create RA/ND packets (radvd package in linux, not sure what it would be on pfsense) and assign IPs within your network that way.

If you have a dynamic prefix.. It's a problem I guess. But probably someone has done it and a google search will turn up how they handled it.

EDIT: Just clarified that the RA/ND packets advertise prefixes, not assign addresses.

[–] r00ty@kbin.life 5 points 2 months ago

I believe the privacy concerns are made moot if all consumer level routers by default blocked incoming untracked connections and you need to poke holes in the firewall for the ports you need.

Having said that, even knowing the prefix it's a huge address space to port scan through. So it's pretty secure too with privacy extensions enabled.

But for sure the onus is on the router makers for now.

[–] r00ty@kbin.life 2 points 2 months ago

I used HE for ages until my isp gave native ipv6. I also used sixxs back then too. Both provided good connectivity for the few sites that were around using it at the time.

[–] r00ty@kbin.life 2 points 2 months ago

This is my biggest bugbear about a lot of UK isps. They are dynamically allocating ipv6 prefixes for absolutely no good reason.

I've only ever done ipv6 using Linux directly as a firewall or a mikrotik router. So cannot help with pfsense I'm afraid.

[–] r00ty@kbin.life 5 points 2 months ago

You start by adding ipv6 and serving both. One side needs to move first. Content providers or isps.

The big tech companies are using ipv6. In the UK the isps are mostly offering it too.

Host both and help us move towards dropping Ipv4 some day. It's not going to happen in a day.

[–] r00ty@kbin.life 3 points 2 months ago
[–] r00ty@kbin.life 32 points 2 months ago (5 children)

Don't be so sure. Piers Morgan will do whatever he thinks makes "good television" and especially good sound-bites that can have his ugly mug displayed ad-nauseam.

He saw a weakness and exploited it. I doubt he's "chosen a side" at all.

[–] r00ty@kbin.life 8 points 2 months ago (1 children)

The OneUI update? You can undo most of the annoyingness. But the overall look change is downright annoying I'd agree.

[–] r00ty@kbin.life 24 points 2 months ago (1 children)

Whenever anyone asks if I use AI. My answer is that, so far it hasn't ever delivered working code. However the majority of times I used it, the code it did provide sent me in the right direction.

So it's not useless. And I know tools have gotten better. But when I see companies seriously talking "AI first" and wanting vibe coding to be a main development strategy. I do really worry.

[–] r00ty@kbin.life 9 points 2 months ago

When I was at school we had rulers that had both inches and centimetres on. 1-12" and 1-30cm. Now they didn't perfectly line up. But as a good rule of thumb, 6" = 15cm and 12" = 30cm.

[–] r00ty@kbin.life 2 points 2 months ago

It worked best with alarm clocks because the outline of the clock was likely 100% only picked up by rods, but the display is visible clearly by the cones. So if you picked it up and moved it, the display would seem to move independently of the case it was part of.

I think the second link does suggest the difference between response times varies between people. So, maybe it's just more noticeable by some?

view more: ‹ prev next ›