like a central cert that uses a crazy large public key system to communicate a symmetric key and they require proof of residence and you use this system to say "I refuse to connect to anyone that doesn't use one of these signed certs".
Add a 3 strikes clause to having your cert revoked and a 5 year renewal. Your ISP catches you as part of a bot-net 3 times, you cert gets deactivated. In order to reactivate your cert, you must pay a certified company like "Best Buy" or any one willing to get certified, to clean your computer and sign off saying it's bot-net-free.
While a host like facebook/your bank/etc may not care about you having a valid cert, I may care that you got your cert deactivated and I don't want you connecting to my computer directly or some email system saying, "Hey, your cert is deactivated for bot-netting, I'm going to refuse all your emails for possible spam reasons; get your computer cleaned"
I have a question about IP6: Is it better for things like privacy and anonymity or much much worse?
The fact that china is leaping on IP6 has me a little worried about it.
Does IP6 make it especially easy to intercept my traffic?
Does IP6 make it easier to keep tabs on users?
Slashdot seems like the place for this kind of question.
All IP data, be it IPv4 or IPv6 is routed. There is no real difference in the logic behind how it's routed, just difference in the amount of addresses.
So long as data is routed and doesn't magically spawn out of thin air, you will be able to intercept it or trace it. There is no difference in privacy or "keeping tabs" on people.
The only "real" way to protect your data from snooping is encryption and IPv6 does help a bit in this department, but mostly just to standardize it and make it more transparent.
My brother is good at math and got moved up two grades for his math class. Now he's in a 12th grade math class even though he's in 10th. I don't see why students can't be moved up. This did take some pushing from my mom. At first the school didn't want to, but she can can get very pushy. He'll probably just go into an AP math class next year.
Why can't kids just get put into another class for certain subjects?
Speaking about resistant strands of bacteria. Some research place stumbled across the fact that LOTS of bacteria are resistant to our strongest antibacterial meds. Turns out harmless bacteria in soil not only is resistant to antibiotics, but can survive solely on antibiotics. They were able to metabolize them for energy but obviously no where near ideal for them.
Once working at a warehouse, I didn't see a broken jar on the other side of a box, picked it up with my bare-hands and got old, black-dust covered jelly packed inside a nice semi-deep cut. I just went and got some alcohol and scrubbed right into it until I could see fresh blood at the bottom of the cut. Neosporin and bandaids kept on the cut until it healed. Never turned pink, didn't itch, didn't hurt, didn't burn. How many people would've went for stitches?
On the side of antibiotics, I tend to gear ear infections unless I'm VERY diligent to wear a hate during winter(not so b ad the last few years since I got it more figured out). As a kid, I got them at least once per year for a lot of years now. I've had many people tell me to go to the doctor's for antibiotics. I just tell them, as long as I don't have un-normally high pain, I'll just wait it out over taking antibiotics. What I consider "normal" is what I've been use to for the 15+ years of ear infections I've had. Can get quire painful.
They tell me re-occurring ear infections will kill my hearing, with my high pitch first to go, but I'm almost 30 years old and I can still hear when someone leaves a CRT monitor on in another room even with a door closed and no one else claims to hear it. At work we have a monitor that no one else can hear, but not only can I hear when it's on but if its on for more than a few minutes, my ears will actually start to ring because it's so loud to me and it can take up 5-10 minutes for my ears to stop ringing.
I guess I would use World of Warcraft as as example. They have their own custom DB engine that keeps track of just about everything. Blizz use to have a link that let you look up some interesting info like
What mob was the most killed what items dropped from which mobs average gold per mob average damage done per mob fastest time a mob died zone with the most average players how long the average player was in the zone..
I could go select to filter by level 50 players, then find out their most played class, what level players ganked them the most, what mobs the most likely died to, what zone they played in the most, what time they were on, average time played, time it took to level, average DPS.. crazy stuff.
Just about ANYTHING you could ever want to know and it was broken up per day/week/month. I don't think it was a real time search, but was updated every few minutes as data did change.
Now, all this data is processed real time on the realms and stored. This database keeps track of about every user event in the system with lots of extra metadata for all 10,000 players on a realm. If they're already diving this far in, what's the harm of adding their own VM style snapshots/restore/etc.
VMs also run the overhead of loading multiple copies of the OS in memory.
I love my i7 to death, but wouldn't AMD's new 6-core CPU be better since it uses overall less power to do the same amount of work, even if it takes a bit longer to complete the work.
Could you DoS your ISP's DNS by allocating all 18.4 quintillion IPs in your/64?
You could, but if the ISP charges you for each DNS entry then the ISP can afford a Google-sized farm to host your DNS:-) Most likely the ISP will simply give a few entries for free, and you pay if you exceed that quota.
What? Your ISP only assigns your subnet. What you do with your/64 is up to you. You can use all the IPs or not, but i highly dought your ISP is going to go through the trouble to have a DNS entry for every possible IP their customers may use or that fact to see what IPs their customers use, they would either have to port scan your network your passively watch traffic coming from your network and figure out which ones to map.
What you talked about was your *buy* IPs/subnets from your ISP and they know you have a few IPs and can easily map EVERY IP in your subnet(probably automated), but with IPv6, they can't tell which IPs you're using and automating the process could cause a DoS.
but you can also manually assign the IP if you so choose.
That would require new management at Comcast and its sister monopolies. Most likely you indeed can assign any IP address to your box, but packets with that IP address will get nowhere.
Uhhh.. What? They don't need to do shit on their side? Lets say you get 1234:5678:9ABC:DEF1/64 assigned to you. Someone sends a packets to 1234:5678:9ABC:DEF1::1. Your ISP only see "1234:5678:9ABC:DEF1" and routes that packet to you. Your DSL/Cable modem drops said packet on your switch and broadcasts it. All the computers see that packet, but one actually replies and now your modem knows which MAC address currently has that IP. EVERY TCP/IP device works this way.
Your ISP has NOTHING to do with your IP, just your subnet. The difference is you buy a/4 subnet and your ISP goes "hey, we can map that to DNS". Now you get a/64 and your ISP goes "Holy SHIT batman!"
I guess I could see your modem's ARP table going crazy, but usually ARP is like 30sec TTL, so just put a decent router between your cable modem and your network and now you can handle a lot more devices and ma'b setup your router with a longer TTL to reduce broadcasting.
They'll probably mimic NATs with a default block for incoming traffic and require exceptions to come in.
Indeed; I only think they will configure this firewall to block both directions of traffic, and most ports, and most protocols too if they can get away with it. Then you will be paying for removal of those artificial restrictions. That's why I use a business ISP - they don't nickel-and-dime you, and you always get what you paid for.
Paying Cisco/Linksys/Netgear/DLink/Belkin/etc to remove "artificial restrictions" they place on the firewall your bought from Newegg/BestBuy/etc? WTF you smoking?
Since NATs will be virtually useless once IPv6 becomes mainstream, I'm sure network companies will start selling actual firewalls instead.
Yes, NAT would be of not much value on IPv6; I guess you still could use it if you really want, but when you have a huge subnet, one of major reasons to have a NAT just disappears.
However it will be a painful process to upgrade to IPv6. There are many devices that simply can't do IPv6 - all the "small boxes", for example, industrial controllers, test equipment, automation, and everything else that is not a PC. But even not all PCs (Win98/2k/XP) can be easily switched to IPv6. And it will require new, IPv6-enabled applications... lots of trouble. Many people will just choose to use a bridge (doing simple IP address rewrite using a static map,) this will allow them to keep their LAN on IPv4, using whatever subnet they got. In many cases conversion to IPv6 is just impossible - consider a lab full of test equipment, each unit costs $50K and above, and
A lot of people in here are comparing living to 35 with natural bacteria or living to 100+. In reality it's more of living with natural bacteria or getting severally sick anytime something goes around because you have a weaker immune system. They have already shown that overly clean people tend to raise kids with weaker immune systems, greater chance of auto-immune disorders, allergies, and get sick more often and with worse symptoms.
I guess my answer is I would rather live to 100 with bacteria than be sick all the time with allergies and auto immune disorders and die at 35 because I was overly clean.
""NAT's only protect from unexpected incoming connections."
And I accept this small help with gratitude."
if you're using a firewall, then this is useless.
The ONLY thing NAT is good for is a "default" block for incoming connections, which is standard on any decent software/hardware firewall. The average user will already have the default block on incoming anyway via Vista/Win7 and any competent computer user could easily have a hardware firewall followed by a linux firewall(packet shaping also) followed by the ACL on your switch followed by the software firewall on your OS which can also filter on application level. In the end it makes no difference to the average user and is just a headache for a competent user.
Using a NAT for security is like you being thirsty and a stranger spits in your mouth and you say "Well, that's better than nothing"
"Plenty, since you can always use DNS to find an address of your target host. Why even would anyone want to scan *all* devices that may be out there, be it IPv4 or IPv6? Attackers typically have some purpose in mind, not [just] the childish desire to hack *some* host. So if anyone wants to attack *.example.com he just issues 'host -l -t any example.com' and proceeds from there."
Do they still do that with IPv6? Could you DoS your ISP's DNS by allocating all 18.4 quintillion IPs in your/64? Wouldn't even have to actually use them, just pretend to use it. Your ISP won't be assigning your IPs anymore with IPv6, just your subnet. Just storing all those IPs in hex format would take 562,949,953,421,312GB of storage for ONE customer. I'm not sure how your ISP plans to have a DNS entry for all of those.
Anyway, since your ISP won't be assigning your IP in your/64, how do they plan to put in a DNS entry for it? Right now they assign the IP directly to the cable/dsl modem which is then mapped to DNS, but when they start assigning subnets to dsl/cable modem, how do they plan to track which IPs you use? Yes, you get a *default* IP that is generated by the client, but you can also manually assign the IP if you so choose.
If you're talking about companies, well it doesn't matter since they should all have proper firewalls via their network admins.
Since NATs will be virtually useless once IPv6 becomes mainstream, I'm sure network companies will start selling actual firewalls instead. They'll probably mimic NATs with a default block for incoming traffic and require exceptions to come in.
Then a service goes down and I'm on my Vacation and I need to access my computer to fix the code. Well, I could just remotes Desto... oops, no internet facing IP, everything behind a NAT. VPN!! ohh,wait... The company doesn't want to put out more $$ just so every programmer can have a licence for the VPN client software for their home computers, which would then need to be available for audits.
Well, kind of stuck there.
Or more fun when at home. Try to P2P with a local computer. Local IP subnet 192.168.1.x, outward IP 123.456.789.1. Hmmm..lets speed up that game patch download. Whoops, P2P software only sees the internet facing IP, so instead of doing a local copy, it forwards the data stream to the ISP then back to the cable modem. YAY. wasted bandwidth.
I have multiple computers hosting services on the same port.. ohh, sorry, can't do that with NAT. Please pick a different port.
NAT is good for one thing. Being a crutch for IPv4. Anyone who likes NAT is just lazy and doesn't properly secure their networks anyway.
NAT's only protect from unexpected incoming connections. If you computer is already infected, it can still connect out. NAT does not give almost any extra security. At this point, it's not about people breaking into your computer, but you willing giving the keys over and not making sure they can't walk out with your data.
Yes, NATs do keep people from port scanning you to probe you for back-door trojans or security vulnerabilities, but how many people are going to be port scanning 128bit IP addresses? It is feasible for a bot net to port scan through the IPv4 range, but 1,000,000 computers each scanning 10,000 IP/sec on JUST the/64 block assigned to you would take on average almost 300 years to find your local IP. Obviously this would be reduced per computer on your local network, but even then, if you had 300 computers on your local network it would still take about 1 year for those millions computers to land on a live IP.
How many bot-net operators are going dedicate 1 million bots for 300 years trying to port scan your IP range to see if they can hack YOUR computer?.....
You go on the average person's computer and run a spyware scanner to find 10 different trojans install, the NAT isn't going to do shit.
The problem is programming requires creativity, understanding, and logic. Not only is less code better, but the value of each line of code varies with quality. Making working code is not the same as working, fast, maintainable, flexible code.
I work in the USA and HR's definition of a full day for salaried is 8am-2pm, but obviously your work comes first. This all kind of works out to something where on a slow day, you can leave early if you work is done. Since we do have respectable hours to our customers, this also means that not everyone can leave early. Too many early days means time for a project. I usually enjoy my job enough to look for work or areas to be improved.
We also sometimes show up to work late, but we don't make a habit of it. No biggie, just call and let someone know.
Being salaried also means during busy times you may have to come in early and leave late to stay on top of your work. But this does get compensated by extra paid time off based on your overage hours once things slow down. Also, we are reminded periodically to keep track of what's giving us grief and making us work more hours. We actually get questioned if we work too much more than 45hours in a given week, even as salaried. If we can't actually speed up the problem areas any more than they are, they are periodically reviewed for stream lining and the next year we will actually get "temp" workers from other parts of the company to help us to try to keep our hours down.
I love my company as I respect them as much as they respect us. Very much a feeling of a "team".
As you would suspect, my company has a VERY low turn over rate and we actually have a queue of people waiting to get in. Top HR person told me that they've had a list of people for 5+ years who waiting to get in. Kind of a problem when people rarely leave..:p
I work on SQL more than actual programming. But set based programming can even be more influenced by the programmer than regular programming languages. I've taken 12 minute queries and re-wrote them to run in under 1 second. Re-did some of the indexes to use different fields, changed up some of the joins to take advantage of those fields, profiled the runs to see how the execution engine used those indexes, even used correlated queries which are normally taboo but are great if you know when/how to use them.
Suddenly a 1 hour nightly run became an 8 minute run and you could actually run it during the day because it didn't hose the server. Much easier to debug data issues when you don't have to wait around for an hour for a query to finish.
"Globally addressable IPv6 unicast addresses are in the IPv6 Global Unicast Address Format which has a three level hierarchy that includes a Public Topology (the 48 bit external routing prefix), a Site Topology (typically a 16 bit subnet number), and an Interface Identifier (typically an automatically generated 64 bit number unique at least on the local LAN segment)."
From what I'm reading, the first 48bits is routing info, so like to the local ISP segment; if i remember correctly, this part is based on geographical locations. The next 16bits is for the ISP to subnet for that location. The last 64bits is for the local "LAN" aka end user??
Last I read, which was a few years back, that only the first 64bit of the 128bit address space is actually assigned. The other 64bit of the space is for the end user to use. This may have changed, not sure.
Slashdot Mirror
"Nearly everyone has eyes, and binoculars are cheap and easily available but that doesn't mean I have no expectation of privacy at my bedroom window"
If you're at your bedroom window, the curtains are drawn, and you have no cloths on, I'll report you for indecent exposure.
Don't expect privacy if you're broadcasting yourself.
Cell phones at least use encryption. Ma'b people need to use more insulation and save on that heating/cooling bill.
If I opened all my windows and started yelling, could I tell the policeman on the curb to stop listening?
like a central cert that uses a crazy large public key system to communicate a symmetric key and they require proof of residence and you use this system to say "I refuse to connect to anyone that doesn't use one of these signed certs".
Add a 3 strikes clause to having your cert revoked and a 5 year renewal. Your ISP catches you as part of a bot-net 3 times, you cert gets deactivated. In order to reactivate your cert, you must pay a certified company like "Best Buy" or any one willing to get certified, to clean your computer and sign off saying it's bot-net-free.
While a host like facebook/your bank/etc may not care about you having a valid cert, I may care that you got your cert deactivated and I don't want you connecting to my computer directly or some email system saying, "Hey, your cert is deactivated for bot-netting, I'm going to refuse all your emails for possible spam reasons; get your computer cleaned"
I have a question about IP6:
Is it better for things like privacy and anonymity or much much worse?
The fact that china is leaping on IP6 has me a little worried about it.
Does IP6 make it especially easy to intercept my traffic?
Does IP6 make it easier to keep tabs on users?
Slashdot seems like the place for this kind of question.
All IP data, be it IPv4 or IPv6 is routed. There is no real difference in the logic behind how it's routed, just difference in the amount of addresses.
So long as data is routed and doesn't magically spawn out of thin air, you will be able to intercept it or trace it. There is no difference in privacy or "keeping tabs" on people.
The only "real" way to protect your data from snooping is encryption and IPv6 does help a bit in this department, but mostly just to standardize it and make it more transparent.
My brother is good at math and got moved up two grades for his math class. Now he's in a 12th grade math class even though he's in 10th. I don't see why students can't be moved up. This did take some pushing from my mom. At first the school didn't want to, but she can can get very pushy. He'll probably just go into an AP math class next year.
Why can't kids just get put into another class for certain subjects?
Speaking about resistant strands of bacteria. Some research place stumbled across the fact that LOTS of bacteria are resistant to our strongest antibacterial meds. Turns out harmless bacteria in soil not only is resistant to antibiotics, but can survive solely on antibiotics. They were able to metabolize them for energy but obviously no where near ideal for them.
Once working at a warehouse, I didn't see a broken jar on the other side of a box, picked it up with my bare-hands and got old, black-dust covered jelly packed inside a nice semi-deep cut. I just went and got some alcohol and scrubbed right into it until I could see fresh blood at the bottom of the cut. Neosporin and bandaids kept on the cut until it healed. Never turned pink, didn't itch, didn't hurt, didn't burn. How many people would've went for stitches?
On the side of antibiotics, I tend to gear ear infections unless I'm VERY diligent to wear a hate during winter(not so b ad the last few years since I got it more figured out). As a kid, I got them at least once per year for a lot of years now. I've had many people tell me to go to the doctor's for antibiotics. I just tell them, as long as I don't have un-normally high pain, I'll just wait it out over taking antibiotics. What I consider "normal" is what I've been use to for the 15+ years of ear infections I've had. Can get quire painful.
They tell me re-occurring ear infections will kill my hearing, with my high pitch first to go, but I'm almost 30 years old and I can still hear when someone leaves a CRT monitor on in another room even with a door closed and no one else claims to hear it. At work we have a monitor that no one else can hear, but not only can I hear when it's on but if its on for more than a few minutes, my ears will actually start to ring because it's so loud to me and it can take up 5-10 minutes for my ears to stop ringing.
Blizz released some nifty info back in Sep 09
WoW:
20,000 computer systems
13,250 server blades
75,000 CPU cores
1.3 petabytes of storage
4,600 staffers
I guess I would use World of Warcraft as as example. They have their own custom DB engine that keeps track of just about everything. Blizz use to have a link that let you look up some interesting info like
What mob was the most killed
what items dropped from which mobs
average gold per mob
average damage done per mob
fastest time a mob died
zone with the most average players
how long the average player was in the zone..
I could go select to filter by level 50 players, then find out their most played class, what level players ganked them the most, what mobs the most likely died to, what zone they played in the most, what time they were on, average time played, time it took to level, average DPS.. crazy stuff.
Just about ANYTHING you could ever want to know and it was broken up per day/week/month. I don't think it was a real time search, but was updated every few minutes as data did change.
Now, all this data is processed real time on the realms and stored. This database keeps track of about every user event in the system with lots of extra metadata for all 10,000 players on a realm. If they're already diving this far in, what's the harm of adding their own VM style snapshots/restore/etc.
VMs also run the overhead of loading multiple copies of the OS in memory.
I love my i7 to death, but wouldn't AMD's new 6-core CPU be better since it uses overall less power to do the same amount of work, even if it takes a bit longer to complete the work.
Too many people "blindly" follow the green light. If it's green and there's another car in the middle, I guess you just plow into them.
Could you DoS your ISP's DNS by allocating all 18.4 quintillion IPs in your /64?
You could, but if the ISP charges you for each DNS entry then the ISP can afford a Google-sized farm to host your DNS :-) Most likely the ISP will simply give a few entries for free, and you pay if you exceed that quota.
What? Your ISP only assigns your subnet. What you do with your /64 is up to you. You can use all the IPs or not, but i highly dought your ISP is going to go through the trouble to have a DNS entry for every possible IP their customers may use or that fact to see what IPs their customers use, they would either have to port scan your network your passively watch traffic coming from your network and figure out which ones to map.
What you talked about was your *buy* IPs/subnets from your ISP and they know you have a few IPs and can easily map EVERY IP in your subnet(probably automated), but with IPv6, they can't tell which IPs you're using and automating the process could cause a DoS.
but you can also manually assign the IP if you so choose.
That would require new management at Comcast and its sister monopolies. Most likely you indeed can assign any IP address to your box, but packets with that IP address will get nowhere.
Uhhh.. What? They don't need to do shit on their side? Lets say you get 1234:5678:9ABC:DEF1/64 assigned to you. Someone sends a packets to 1234:5678:9ABC:DEF1::1. Your ISP only see "1234:5678:9ABC:DEF1" and routes that packet to you. Your DSL/Cable modem drops said packet on your switch and broadcasts it. All the computers see that packet, but one actually replies and now your modem knows which MAC address currently has that IP. EVERY TCP/IP device works this way.
Your ISP has NOTHING to do with your IP, just your subnet. The difference is you buy a /4 subnet and your ISP goes "hey, we can map that to DNS". Now you get a /64 and your ISP goes "Holy SHIT batman!"
I guess I could see your modem's ARP table going crazy, but usually ARP is like 30sec TTL, so just put a decent router between your cable modem and your network and now you can handle a lot more devices and ma'b setup your router with a longer TTL to reduce broadcasting.
They'll probably mimic NATs with a default block for incoming traffic and require exceptions to come in.
Indeed; I only think they will configure this firewall to block both directions of traffic, and most ports, and most protocols too if they can get away with it. Then you will be paying for removal of those artificial restrictions. That's why I use a business ISP - they don't nickel-and-dime you, and you always get what you paid for.
Paying Cisco/Linksys/Netgear/DLink/Belkin/etc to remove "artificial restrictions" they place on the firewall your bought from Newegg/BestBuy/etc? WTF you smoking?
Since NATs will be virtually useless once IPv6 becomes mainstream, I'm sure network companies will start selling actual firewalls instead.
Yes, NAT would be of not much value on IPv6; I guess you still could use it if you really want, but when you have a huge subnet, one of major reasons to have a NAT just disappears.
However it will be a painful process to upgrade to IPv6. There are many devices that simply can't do IPv6 - all the "small boxes", for example, industrial controllers, test equipment, automation, and everything else that is not a PC. But even not all PCs (Win98/2k/XP) can be easily switched to IPv6. And it will require new, IPv6-enabled applications... lots of trouble. Many people will just choose to use a bridge (doing simple IP address rewrite using a static map,) this will allow them to keep their LAN on IPv4, using whatever subnet they got. In many cases conversion to IPv6 is just impossible - consider a lab full of test equipment, each unit costs $50K and above, and
A lot of people in here are comparing living to 35 with natural bacteria or living to 100+. In reality it's more of living with natural bacteria or getting severally sick anytime something goes around because you have a weaker immune system. They have already shown that overly clean people tend to raise kids with weaker immune systems, greater chance of auto-immune disorders, allergies, and get sick more often and with worse symptoms.
I guess my answer is I would rather live to 100 with bacteria than be sick all the time with allergies and auto immune disorders and die at 35 because I was overly clean.
""NAT's only protect from unexpected incoming connections."
And I accept this small help with gratitude."
if you're using a firewall, then this is useless.
The ONLY thing NAT is good for is a "default" block for incoming connections, which is standard on any decent software/hardware firewall. The average user will already have the default block on incoming anyway via Vista/Win7 and any competent computer user could easily have a hardware firewall followed by a linux firewall(packet shaping also) followed by the ACL on your switch followed by the software firewall on your OS which can also filter on application level. In the end it makes no difference to the average user and is just a headache for a competent user.
Using a NAT for security is like you being thirsty and a stranger spits in your mouth and you say "Well, that's better than nothing"
"Plenty, since you can always use DNS to find an address of your target host. Why even would anyone want to scan *all* devices that may be out there, be it IPv4 or IPv6? Attackers typically have some purpose in mind, not [just] the childish desire to hack *some* host. So if anyone wants to attack *.example.com he just issues 'host -l -t any example.com' and proceeds from there."
Do they still do that with IPv6? Could you DoS your ISP's DNS by allocating all 18.4 quintillion IPs in your /64? Wouldn't even have to actually use them, just pretend to use it. Your ISP won't be assigning your IPs anymore with IPv6, just your subnet. Just storing all those IPs in hex format would take 562,949,953,421,312GB of storage for ONE customer. I'm not sure how your ISP plans to have a DNS entry for all of those.
Anyway, since your ISP won't be assigning your IP in your /64, how do they plan to put in a DNS entry for it? Right now they assign the IP directly to the cable/dsl modem which is then mapped to DNS, but when they start assigning subnets to dsl/cable modem, how do they plan to track which IPs you use? Yes, you get a *default* IP that is generated by the client, but you can also manually assign the IP if you so choose.
If you're talking about companies, well it doesn't matter since they should all have proper firewalls via their network admins.
Since NATs will be virtually useless once IPv6 becomes mainstream, I'm sure network companies will start selling actual firewalls instead. They'll probably mimic NATs with a default block for incoming traffic and require exceptions to come in.
Then a service goes down and I'm on my Vacation and I need to access my computer to fix the code. Well, I could just remotes Desto... oops, no internet facing IP, everything behind a NAT. VPN!! ohh,wait... The company doesn't want to put out more $$ just so every programmer can have a licence for the VPN client software for their home computers, which would then need to be available for audits.
Well, kind of stuck there.
Or more fun when at home. Try to P2P with a local computer. Local IP subnet 192.168.1.x, outward IP 123.456.789.1. Hmmm..lets speed up that game patch download. Whoops, P2P software only sees the internet facing IP, so instead of doing a local copy, it forwards the data stream to the ISP then back to the cable modem. YAY. wasted bandwidth.
I have multiple computers hosting services on the same port.. ohh, sorry, can't do that with NAT. Please pick a different port.
NAT is good for one thing. Being a crutch for IPv4. Anyone who likes NAT is just lazy and doesn't properly secure their networks anyway.
NAT's only protect from unexpected incoming connections. If you computer is already infected, it can still connect out. NAT does not give almost any extra security. At this point, it's not about people breaking into your computer, but you willing giving the keys over and not making sure they can't walk out with your data.
Yes, NATs do keep people from port scanning you to probe you for back-door trojans or security vulnerabilities, but how many people are going to be port scanning 128bit IP addresses? It is feasible for a bot net to port scan through the IPv4 range, but 1,000,000 computers each scanning 10,000 IP/sec on JUST the /64 block assigned to you would take on average almost 300 years to find your local IP. Obviously this would be reduced per computer on your local network, but even then, if you had 300 computers on your local network it would still take about 1 year for those millions computers to land on a live IP.
How many bot-net operators are going dedicate 1 million bots for 300 years trying to port scan your IP range to see if they can hack YOUR computer?.....
You go on the average person's computer and run a spyware scanner to find 10 different trojans install, the NAT isn't going to do shit.
sounds like either a troll or someone is afraid of change, even when it's much better.
The problem is programming requires creativity, understanding, and logic. Not only is less code better, but the value of each line of code varies with quality. Making working code is not the same as working, fast, maintainable, flexible code.
I work in the USA and HR's definition of a full day for salaried is 8am-2pm, but obviously your work comes first. This all kind of works out to something where on a slow day, you can leave early if you work is done. Since we do have respectable hours to our customers, this also means that not everyone can leave early. Too many early days means time for a project. I usually enjoy my job enough to look for work or areas to be improved.
We also sometimes show up to work late, but we don't make a habit of it. No biggie, just call and let someone know.
Being salaried also means during busy times you may have to come in early and leave late to stay on top of your work. But this does get compensated by extra paid time off based on your overage hours once things slow down. Also, we are reminded periodically to keep track of what's giving us grief and making us work more hours. We actually get questioned if we work too much more than 45hours in a given week, even as salaried. If we can't actually speed up the problem areas any more than they are, they are periodically reviewed for stream lining and the next year we will actually get "temp" workers from other parts of the company to help us to try to keep our hours down.
I love my company as I respect them as much as they respect us. Very much a feeling of a "team".
As you would suspect, my company has a VERY low turn over rate and we actually have a queue of people waiting to get in. Top HR person told me that they've had a list of people for 5+ years who waiting to get in. Kind of a problem when people rarely leave.. :p
I work on SQL more than actual programming. But set based programming can even be more influenced by the programmer than regular programming languages. I've taken 12 minute queries and re-wrote them to run in under 1 second. Re-did some of the indexes to use different fields, changed up some of the joins to take advantage of those fields, profiled the runs to see how the execution engine used those indexes, even used correlated queries which are normally taboo but are great if you know when/how to use them.
Suddenly a 1 hour nightly run became an 8 minute run and you could actually run it during the day because it didn't hose the server. Much easier to debug data issues when you don't have to wait around for an hour for a query to finish.
I found this while looking around
"Globally addressable IPv6 unicast addresses are in the IPv6 Global Unicast Address Format which has a three level hierarchy that includes a Public Topology (the 48 bit external routing prefix), a Site Topology (typically a 16 bit subnet number), and an Interface Identifier (typically an automatically generated 64 bit number unique at least on the local LAN segment)."
From what I'm reading, the first 48bits is routing info, so like to the local ISP segment; if i remember correctly, this part is based on geographical locations. The next 16bits is for the ISP to subnet for that location. The last 64bits is for the local "LAN" aka end user??
yes? no?
Last I read, which was a few years back, that only the first 64bit of the 128bit address space is actually assigned. The other 64bit of the space is for the end user to use. This may have changed, not sure.
business accounts also removes the ISP's reason to bitch at you for "leeching" bandwidth
it won't be this bad live. first 64bits are your country/state/city/isp, the last 64 bits is you. It will be more like ABCD:DEAD:BEEF:1234::1
Since I'll have 18,446,744,073,709,551,616 IPs for my personal use, I would subnet my home network quite nicely. Yay for no more NAT
It's more like the /. affect than someone loading 10,000 bots and opening connections.
As long as everyone is using an authorized app like video streaming/etc, then there should be no problem.