Hacker News Reader

Luckily my router only supports IPV4 and I'm assigned a vague IPv4 CGNAT IP every time I switch it on. I used this site to do some OSINT on my IP and you guessed it: It looks like I'm sharing my IP with 1000s of other subscribers so doing attribution to 'me' would be hard and also wouldn't hold up in court. Also see:

https://www.eff.org/de/deeplinks/2011/08/why-ip-addresses-al...

https://www.securityweek.com/eff-warns-police-courts-about-u...

View on HN

Be careful with this, your ISP can easily record the NAT translations and going to your ISP with a connection 5-tuple would be enough to track it back to you.

It's harder, perhaps, but not impossible, and would certainly still hold up in court. When tracking a user behind CGNAT you need to capture not just their source IP, but also their source port. If you have timestamp, source IP and source port, that's enough for the ISP to resolve it back to the subscriber.

Reply on news.ycombinator.com