CVE-2024-38063 - Or, IPv6 fucks everyone again, and still nobody actually uses it

>Shitty Pajeet code in Windows has an exploit
>Thread: IPv6 sucks!


It's both disappointing and maddening. IPv6 is not perfect but its issues arise from its idealistic implementers forgetting the real world exists and the fact it requires people to learn things and apparently everyone is incapable of that.

Every issue I've had as a dual stack chud has been a result of: 1. Morons blocking ICMPv6 of all types and breaking PMTUD, 2. ISPs doing stupid shit (weird MTUs, tiny prefix delegation, etc.), 3. Not understanding how something works. (e.g. when I swapped to a new gateway and couldn't figure out how to rescind my RAs) and 4. Buggy behavior in Windows

Since I'm a sperg I've started doing New Years resolutions based around dumb computer stuff and my resolution for 2023 was to fully implement IPv6.
So are 7 users completely fucked? I have a machine with 7 on it that I still use for other things.
Pretty much. You'll have to disable IPv6 on the NIC by opening "ncpa.cpl", double clicking on your network adapter, open Properties and untick IPv6.
 
Pretty much. You'll have to disable IPv6 on the NIC by opening "ncpa.cpl", double clicking on your network adapter, open Properties and untick IPv6.
wfix_screenshot.png

I'm not too tech savvy but its this, right? Nothing else I have to touch? Couple of people were mentioning that disabling this could result in some hardware not working, but I'm not sure what else uses it.
 
  • Optimistic
Reactions: Vecr and PhoBingas
I'm more tech illiterate than a grand grandma, so bear with me please. Is it this update?
screenshot.png
Is my laptop safe? (for now)
 
  • Thunk-Provoking
Reactions: Vecr
I'm not too tech savvy but its this, right? Nothing else I have to touch? Couple of people were mentioning that disabling this could result in some hardware not working, but I'm not sure what else uses it.
Looks right.
I'm more tech illiterate than a grand grandma, so bear with me please. Is it this update?
That's not the update. Open up the rest of your update history and see if you've got the 2024-08 updates. If so then you're good.
 
I’m skeptical that simply disabling ipv6 is enough to be safe from the exploit. The publisher of the exploit has not described the whole vulnerability, in an attempt to delay hackers.

Don’t be a moron. Get the update.

By the way, ISPs are so God damn retarded at IPv6. My ISP uses DHCPv6 for some reason, even though DHCPv6 is retarded. The whole point of IPv6 is to have more than enough static space for everyone. Making a dynamic allocation strategy mucks up the whole idea.
 
My desktop has a slot load notebook SATA optical drive mounted sideways.
It fucking sucks. Occasionally I feel like a disc might shatter in the flimsy shit.
Still beats not having any optical drive at all.

Fuck modern design. I shouldn't have to buy an external because WHORESHIBA decided to omit a crucial PC part.
 
Why cant you fags just admit that Microshit, Mac and Linux are all extremely pozzed and gay? Just fucking make out with each other already.
I agree, that "programmer socks" shit is a meme for a reason, no sense in console wars-style arguing about which OS is better/less pozzed. The whole tech business is fags when it comes down to it, if not bona fide then at least spiritually.
 
It's both disappointing and maddening. IPv6 is not perfect but its issues arise from its idealistic implementers forgetting the real world exists and the fact it requires people to learn things and apparently everyone is incapable of that.
Connecting every device to everything else is a terrible idea. If you're old enough you will remember the common wisdom to not connect your XP computer directly to the internet (and that video were it takes like 5 minutes to get compromised if you do).

In the current age this is 100x worse because fully enabling IPv6 is effectively connecting all the totally-secure new internet devices directly to the internet. Connect your philips hue lightbulbs directly to the internet. Connect your houses thermostat directly to the internet. Connect your TV directly to the internet. Connect your refrigerator directly to the internet. And so on.

The effective default-deny for incoming requests that everyone's shitty ISP modem/router combo provides because it does NAT is easily one of the biggest boons for the security of your average persons home network. Asking to throw this away is essentially saying "I want every IoT device compromised and part of a bot net". You are just blinded by new thing good.
 
Back