Conversation

Notices

1. Embed this notice
   Max Resing (resingm@infosec.exchange)'s status on Tuesday, 01-Oct-2024 04:11:39 JST Max Resing

   Just leaving this one here:

   ~$ dig AAAA github.com
   
   ; <<>> DiG 9.18.28-0ubuntu0.22.04.1-Ubuntu <<>> AAAA github.com
   ;; global options: +cmd
   ;; Got answer:
   ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33610
   ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
   

   #ipv6 #github #ipv4

   • Embed this notice
     Natanael Copa (ncopa@fosstodon.org)'s status on Tuesday, 01-Oct-2024 04:11:39 JST Natanael Copa

     in reply to

     @resingm what I think is worse is that there is no ipv6 in the GitHub CI infra. GitHub host a big part of the worlds open source project but it is incredibly difficult for those to run test suites to verify that the ipv6 actually works. So it is no surprise that GitHub open source projects seldom test the ipv6 functionality.

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Tuesday, 01-Oct-2024 04:18:49 JST feld

     in reply to

     • Natanael Copa
     @ncopa @resingm someone needs to focus heavily on IPv6 address reputation databases and *good* anti-DDoS tooling for IPv6. That's why a lot of sites do not enable it.
     
     source: I contract for one of the biggest sites on the internet and that's why we can't enable it. CloudFlare, Amazon, other CDNs, etc are all incapable of dealing with IPv6 attacks as effectively as they do for IPv4.
   • Embed this notice
     Natanael Copa (ncopa@fosstodon.org)'s status on Tuesday, 01-Oct-2024 04:18:50 JST Natanael Copa

     in reply to

     @resingm How can ISP adopt IPv6 if the open source software they rely on does not work with IPv6? And how can the open source software verify that things work on IPv6 if they cannot test it in CI?

     The low IPv6 adoption is on GitHub.

   • Embed this notice
     Natanael Copa (ncopa@fosstodon.org)'s status on Tuesday, 01-Oct-2024 04:48:34 JST Natanael Copa

     in reply to

     • feld

     @feld @resingm

     Aha! That explains.

     So the real blame is on the DDoS hackers.

     feld likes this.