Conversation

Notices

1. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Saturday, 18-Jan-2025 19:29:09 JST Ryan Castellucci :nonbinary_flag:

   Small brain: NAT is a firewall
   Big brain: 128 bit addressing is a firewall

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 18-Jan-2025 19:56:57 JST Rich Felker

     in reply to

     @ryanc But it's not a firewall against an attacker who has the capability to intercept traffic.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 18-Jan-2025 19:58:16 JST Rich Felker

     in reply to

     @ryanc Galaxy brain: firewalls are stupid and software that's not secure when connected to a globally accessible public network is utter garbage that should never be installed anywhere and whose vendor should be drawn and quartered.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Saturday, 18-Jan-2025 20:03:04 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Rich Felker

     @dalias Look, we live in a society...

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Saturday, 18-Jan-2025 21:02:26 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Genders: ♾️, 🟪⬛🟩; Soni L.

     @SoniEx2 lol used to run transport mode ipsec on my lan

   • Embed this notice
     Genders: ♾️, 🟪⬛🟩; Soni L. (soniex2@chaos.social)'s status on Saturday, 18-Jan-2025 21:02:27 JST Genders: ♾️, 🟪⬛🟩; Soni L.

     in reply to

     @ryanc ipsec and/or tcp-md5 are firewalls

   • Embed this notice
     vandorb12 (vandorb12@infosec.exchange)'s status on Saturday, 18-Jan-2025 23:44:36 JST vandorb12

     in reply to

     @ryanc now only if I could tell my ISP to shove off with using CGNAT.

   • Embed this notice
     Billy O'Neal (malwareminigun@infosec.exchange)'s status on Sunday, 19-Jan-2025 02:01:36 JST Billy O'Neal

     in reply to

     @ryanc except it’s a firewall broken if one ever sees a packet from the target….