Hacker News Reader

The real solution is to move beyond the ridiculous limitation of 65535 ports to choose from.

I mean, I'm sure a 16-bit integer for the port number didn't seem ridiculous when TCP was invented in 1974 or whenever.

Or just use ipv6, which would be insane to even guess at the IP.

Attackers can still scan the IPv6 subnets owned by you if you are being specifically targetted.

Depends if you have entropy in your addresses or not.

585 years to scan a single /64 at one billion packets per second.