CVE-2024-38063 - Or, IPv6 fucks everyone again, and still nobody actually uses it

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.
I use ipv6 extensively for running sites & backend networking etc and yeah, it's not perfect but it beats paying for ipv4 addresses.
On the topic, how would I even get an IPv6 address? Do you have to request it from your ISP?
if your isp doesn't offer it, you can't get it. most VPNs do though so that's another way around it. mullvad does for example.
 
That's not normal. Mine is on the sign in screen within 15 seconds.
I got it down to being on the front page within a minute's time but I still don't like how it takes around 15 seconds for programs on my toolbar to start appearing. I am sure that with further debloating I can get that time even further down.

2. Disabling IPv6 in Windows fucks around with a bunch of components and impacts performance. Yes, it doesn’t make any sense, but that’s Microsoft for you. If you’re gonna run Windows, you should leave IPv6 on.
Like what? Everything is working fine for me after after disabling or deleting a few worthless features. I see no evidence of lowered performance or worse connection to the internet. What was found to be severely reducing my bootup time ended up being some worthless bit of bloat I had to use a command prompt to properly disable, not disabling IPv6 like someone here said earlier.
 
You know, I got a lot of negative reddit karma negative stickers for this comment but I genuinely want to know what exactly made everyone give me those stickers. Nobody has replied to me explaining why its lunacy or they disagree and as a guy who is a self taught programmer just starting his career who admittedly has alot of holes in his knowledge, I genuinely wish someone replied to me to call me a retard and give a solid explanation why my post was stupid because I need to know this kinda shit. I never went to college, I never will, and I avoid using mainstream shit for input unless I really need to, because half the time "just googling it" is unreliable and playing ball with the establishment is gayer than sucking dick for cock.
They’re literally just retards.
 
  • Like
  • Dumb
Reactions: SCV and ${Sandy}
>Thread: IPv6 sucks!

It's both disappointing and maddening.
The amount of shit I'm willing to put up with is proportional to the amount of utility that comes out of it for me.
As it stands, IPv6 on a desktop is the best option in very specific cases, and even then the alternatives don't suck.

I get the issue of trying to host a service, but being stuck with a faggy ISP with CGNAT, with IPv6 as a respite.
- If you want the service to be accessible from any network (including IPv4 only), and any device (including ones you can't install anything on), you can get a VPN with port forwarding, you have to pay, but it will work no questions asked.
- If you do own the accessing device, then you can use something like ZeroTier, and that solution works for IPv4 networks too.
- If you know the accessing network has IPv6, and the device is owned by someone else, you probably can only access a webapp, and something like Cloudflare Tunnels can do that.

So the incentive for me to set up IPv6 on my desktop would be:
- I'm hosting a service from my desktop
- And my ISP has both CGNAT and IPv6
- And I'm accessing it from a network that I know has IPv6
- And it's from a machine I don't own / can't install stuff on
- And it's something that isn't a webapp, but is pre-installed there
That's a little to contrived for me to go out of my way to preemptively implement.

Nothing wrong with setting up something for the sake of learning, but in terms of effort to benefit ratio, I don't see the value in IPv6, unless there is some use case you can bring up that I haven't considered.
 
Bootup time increased from about 10 seconds to whopping 3+minutes
I have the fast boot feature turned off and my 22H2 computer takes only 10 seconds to boot. The hell are you putting on your computer?
since MS QA is either non-existent or poojeet-tier
They got rid of the QA department in 2015. There is pretty much no QA when it comes to patches. Have had no issue with the patch for this problem, by the way.
 
I finally bit the bullet and updated from 1511 to 22H2. Boy, I already feel like it was a mistake: Bootup time increased from about 10 seconds to whopping 3+minutes, plenty of bloat and telemetry I had to spend over an hour cleansing(And there is still likely more), a forced Internet Explorer Edge download I had to get rid of, and for some reason the default Photos app doesn't exist or doesn't show up and I had to download a third party program just to view my images. Ditto for keeping the Explorer settings for every folder just like I want them to be(show details, miniatures or large icons, things like that). Everything just worked on my own build and I have a feeling I am only getting started with the shit I will have to put up with as a price for finally getting everything updated to this decade. This is why you never update short of a catastrophic security problem or unless you have major bug fixing that needs to happen.
The one thing that better work is this newest fix for the exploit or I am going to go ballistic. Disabled IPv6 in settings just in case regardless.
This, ladies and gentlemen, is a great example of hubris. If this retard had just updated his computer every once in a while, he would not have so many problems, and he would have been able to deal with the changes gradually. And then he doubles down about never updating. Please, for the love of God, don’t be like this guy.

Go ahead and defer feature updates. I defer mine for a year. Turn off the automatic updater, too, if you want (I do). But don’t be a retard and never update. You’re not an air gapped mission critical remote system with a multi-million dollar budget to update every five years. If you are on the internet, you need to have a reasonably up-to-date system. And you need to stay up-to-date with security patches.
 
further debloating
What you actually should do is wipe and reinstall. In-place upgrading to a build that's a full seven years newer with an unknown amount of unknown quality "debloating" registry hacks from the very early days of Win10 is asking for shitty weird issues down the line.
 
  • Like
Reactions: UERISIMILITUDO
You know, I got a lot of negative reddit karma negative stickers for this comment but I genuinely want to know what exactly made everyone give me those stickers. Nobody has replied to me explaining why its lunacy or they disagree and as a guy who is a self taught programmer just starting his career who admittedly has alot of holes in his knowledge, I genuinely wish someone replied to me to call me a retard and give a solid explanation why my post was stupid because I need to know this kinda shit. I never went to college, I never will, and I avoid using mainstream shit for input unless I really need to, because half the time "just googling it" is unreliable and playing ball with the establishment is gayer than sucking dick for cock.
Hate to break it to you but I just automatically rate anything with the first word that is an actual rating in the post.

So enjoy your Lunacy rating, you lunatic.
 
Nothing wrong with setting up something for the sake of learning, but in terms of effort to benefit ratio, I don't see the value in IPv6, unless there is some use case you can bring up that I haven't considered.
What's the "effort", in your case?

If your ISP doesn't offer IPV6 then sure, that's an easy excuse but if you're hosting services then I assume you work or aspire to work in IT so you should probably be wanting to learn it even if there isn't a golden carrot to tempt you. I find it so bizarre that you're willing to pay for a VPN or succumb to cloudflare rather than doing something as adding a new stanza in ifupdown(2) and changing inet to inet6, adding address and gateway and restarting networking. It is, literally, that simple.
 
On the topic, how would I even get an IPv6 address? Do you have to request it from your ISP?
As @skunt points out, any good 'privacy VPN' will likely at least have options for being able to access IPv6 as a client. Getting your whole home network up with IPv6 is another matter.

IPv6 is better for enthusiasts than anyone else. It can be fun to set up your home network to have globally routed IPv6 (with appropriate firewalls preventing access from outside to internal anything but legitimate server ports like the BitTorrent ones of course).

But the options aren't necessarily great.

If your ISP even offers IPv6 at all, it may be through 6to4 or 6RD or some other technology which means it's tied to your IPv4 address and varies as that varies, or otherwise gets reset when your connection goes down. So you don't get the benefit of a static IP/static /48 or /64 network which would be literally free (assuming that they're doing IPv6 anyway) for the ISP to offer. But if they did offer a static IPv6, that would cut into their marked up monthly charges for people who want static IPv4 addresses. So they keep their IPv6 offerings shit to preserve their existing revenues from static IPv4.

Even if your ISP doesn't offer IPv6, there are other options. 6to4 will kind of work when used in the wild, although it will work by using connections from your router to completely random gateways that are probably quite far away on the IPv4 network and will probably not perform well and may go down at random and may be monitoring any unencrypted traffic you send (on top of whatever the 5 jew eyes are doing anyway). This can work as long as you don't mind dynamic IPv4 meaning your IPv6 addresses are dynamic.

There is an alternative, which is to use an explicit 'tunnel broker' that provides you an explicitly defined IPv6 network space, which will not change based on your IPv4 address, and have traffic bridged between that network and your router/device/s via 6in4. Hurricane Electric has some really, really, really convenient services for this, with fairly good performance. Unfortunately, Hurricane Electric are also well-documented niggerfaggots:

Will they cut you off from service for connecting to KiwiFarms IP(v6)'s? Probably not, it would be too much work. Would they report you to authorities for accessing KF from Germany or the UK or other shithole countries? Probably not, it would be too much work. Do they block KF IP's? Maybe, I use a VPN all the time to access it, I wouldn't know. But generally, while they might be a good way to get a routed IPv6 network with stable IPs online, they can't be trusted for anything 'edgy'.

I'm have no doubt that if you were running a website that got DMCA'd or abuse complaint'ed to CloudFlare from your home router that you'd hooked up to IPv6 via the HE IPv6 tunnelbroker, they'd just drop you from their service straight away after getting the complaint without even emailing you.
 
  • Like
Reactions: skunt
i'd typed this out previously in my post up above but i removed i felt it was veering off topic but whatever, will type it out again because techboomers annoy me.

if you're in any way interested in networking, BGP etc, IPV6 should have you pretty excited. it's not perfect sure, but who cares. IPV6 will allow you, yes you the sysadmin/wannabe sysadmin/computer science student/homelabber to run your own ASN (https://www.arin.net/resources/guide/asn/) for pennies on the dollar.

previously with IPV4, this was basically impossible for the atypical joe soap because buying even small ranges ran into the tens of thousands of dollars (https://auctions.ipv4.global/) not including account-registration and yearly fees. now all you need is a referral and you'll be cut your own /48 or whatever you need. need several ranges? sure. here's an archive of a good article written by someone who's done just that.

and if you are a student reading this and interested in networking, this shit is amazing on your CV. there is no better time to get started because no matter how you feel about IPV6, it's not going anywhere.
 
I'm not a networking expert but why is ipv6 seemingly so troublesome? Did they try to do needlessly fancy things other than increase the address space, or are most orgs simply too negrified to implement standards these days?

### Mitigation:
Don't use microsoft products you fucking nigger
 
I'm not a networking expert but why is ipv6 seemingly so troublesome? Did they try to do needlessly fancy things other than increase the address space, or are most orgs simply too negrified to implement standards these days?
They didn’t just make the address space bigger, they took the chance to do a whole redesign. This is good as it means ipv6 is pretty cool and has some nice features.

This is bad because it means you can’t just “drop in replace” and since the old shit works it just keeps going along.
 
Literally. We need it so bad but nobody wants to support it correctly
Having an IPv4 address is a reputation signal for your web service still. It's pretty crazy, but IPv4 prices are also down from their peak, so maybe the IPv4 bubble is going to pop and we are going to go back to normal. Realistically, the future will likely have servers and/or anything publicly routed mostly on IPv4 with mobile phones and other client devices mostly on IPv6 or behind n layers of NAT. IPv4's scarcity turned out to be a feature.

Also, it's a pain in the ass to get IPv6 addresses from ARIN/RIPE. They have enough to hand out like candy but they are very stingy.
I'm not a networking expert but why is ipv6 seemingly so troublesome? Did they try to do needlessly fancy things other than increase the address space, or are most orgs simply too negrified to implement standards these days?
IPv6 is pretty much a complete redesign of the protocol. IMO it's not that much better than IPv4 other than the longer addresses, but "the whole world can be globally routable" is a pretty nice feature. In practice, however, we often use routers/NAT for firewalling, and the world will not be able to handle "everything is routable" without a huge re-architecture of everything.

As we have found out, it's not well-tested on common OSes, since IPv4 is the main thing used by servers/desktops anyway.
 
  • Agree
Reactions: SCV
Well I listened to you fucks and allowed windows to update for the first time in five years, and I've spent the last two hours in gpedit/regedit/services.msc undoing all the bloatware and telemetry again.

Question: will getting rid of Microsoft defender / security center affect this vulnerability?
 
  • Feels
Reactions: Foreverial
I finally bit the bullet and updated from 1511 to 22H2. Boy, I already feel like it was a mistake: Bootup time increased from about 10 seconds to whopping 3+minutes, plenty of bloat and telemetry I had to spend over an hour cleansing(And there is still likely more), a forced Internet Explorer Edge download I had to get rid of, and for some reason the default Photos app doesn't exist or doesn't show up and I had to download a third party program just to view my images. Ditto for keeping the Explorer settings for every folder just like I want them to be(show details, miniatures or large icons, things like that). Everything just worked on my own build and I have a feeling I am only getting started with the shit I will have to put up with as a price for finally getting everything updated to this decade. This is why you never update short of a catastrophic security problem or unless you have major bug fixing that needs to happen.
The one thing that better work is this newest fix for the exploit or I am going to go ballistic. Disabled IPv6 in settings just in case regardless.
Download a fresh 22H2 iso and do a proper reinstall. Your current install is borked.
 
Back