Conversation

Notices

1. Embed this notice
   Dan Connolly (dckc@social.coop)'s status on Monday, 13-Jan-2025 07:51:15 JST Dan Connolly

   • Daniel Farina
   • Christine Lemmer-Webber
   • The Spritely Institute
   • Charlotte

   @fdr @lotte @cwebber @spritely so you're sharing your IPv6 address with the world? Your device is directly exposed to every adversary in the world at all times?

   • Embed this notice
     Christine Lemmer-Webber (cwebber@social.coop)'s status on Monday, 13-Jan-2025 07:51:14 JST Christine Lemmer-Webber

     in reply to

     • Daniel Farina
     • The Spritely Institute
     • Charlotte

     @dckc @fdr @lotte @spritely It's dangerous probably to directly expose machines over ipv6, but is there any reason it should be if our software stacks better designed, if we had a more capability-oriented worldview?

     I think often of Marc Stiegler's "perimeter security is eggshell security" which critiques many things, including a firewall-oriented perspective http://www.skyhunter.com/marcs/ewalnut.html#SEC44

     See the "eggshell defense" subsection

   • Embed this notice
     Dan Connolly (dckc@social.coop)'s status on Monday, 13-Jan-2025 08:06:38 JST Dan Connolly

     in reply to

     • Daniel Farina
     • Christine Lemmer-Webber
     • The Spritely Institute
     • Charlotte

     @cwebber @fdr @lotte @spritely indeed, too much emphasis on perimeter security is unhealthy, but capability patterns include membranes, caretakers and such - indirect connectivity.