Hacker News Reader

Hacker News

Comment by rs_rs_rs_rs_rs | Hacker News Reader

Full thread

rs_rs_rs_rs_rs

IPv6 is a prerequisite for the bug to be exploited, it won't affect anyone.

View on HN

Why, is IPv6 activation manual in FreeBSD?

It's enabled by default, I was mostly talking about being in a lan with active ipv6, imo that's not that common.

That's pretty standard where I am. Every Telstra router comes with IPv6 enabled.

As it should be. If your ISP isn't giving you ipv6, they're not giving you internet access and you should sue for your money back.

With such confidence in your comment, I'm sure you can point out many successful precedents for such cases.

There's a federal mandate to implement IPv6 by... the end of this year. So in about 2-3 weeks.

Are you referring to the OMB IPv6 mandate? That only relates to federal networks, and even there its requiring only 80% adoption. It has zero relevance to normal commercial/private networks

I assume they were referencing ISM-0518.

Which mandates all ISPs _in Australia_ to have IPv6 before January 1st, 2026.

For private ISPs? No, there isn't... please provide evidence for this.

IMHO you do not need "active" IPv6. Most LANs (unless you have some switch-level filtering that blocks router advertisements from "unauthorized" nodes) can transport such IPv6 packets. Then it just takes being connected to the LAN and being able to send an arbitrary ICMP6 packet (which probably means being root on the attacker machine, not a very high barrier I'd say).

You need working switch level filtering, many implementations can be bypassed / will never be fixed: https://blog.champtar.fr/VLAN0_LLC_SNAP/

No, you can choose if you want IPv4 or IPv6 or both, at installation time also if you want it in "autoconf-mode"

Major home and mobile internet providers in the US, at least, have IPv6 on by default now.

Google tracks IPv6 adoption at almost 50% globally and over 50% in the USA (https://www.google.com/intl/en/ipv6/statistics.html)

IPv6 is mainstream.

Reply on news.ycombinator.com