186
this post was submitted on 15 Aug 2026
186 points (98.9% liked)
Technology
87184 readers
4189 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
How are people running their Macs exposed directly to the Internet?
In order to make this work, a user would have to:
Seems to me that anyone who could do this would know it was a really bad idea?
Especially since you can already tunnel screen sharing via Apple ID or FaceTime to connect without leaving the port open.
One of the ways it can happen is if a router doesn't have a proper IPv6 firewall.
The majority of internet users in the USA have IPv6 connectivity - something like 55-60% overall, and close to 100% on some networks. T-Mobile's network is 100% IPv6-only, using 464XLAT for connectivity to legacy IPv4-only servers. Most Comcast customers have IPv6 too, as they were the first major ISP to roll out IPv6, close to 15 years ago now.
Without an IPv6 firewall on the router, all devices on your network are directly accessible from the outside world (unless they're running their own firewall, of course). At least Windows ships with a firewall enabled by default, which reduces the impact for Windows users.
I've seen this in places you wouldn't expect it, too. TP-Link's prosumer/SMB 10Gbps router (Omada ER8411) didn't have an IPv6 firewall until about a year after launch. I had to disable IPv6 until then. They did add it, but I've since switched to a Unifi Cloud Gateway Fiber.
Thankfully I haven't seen it recently, so maybe it's not an issue any more on modern hardware.
NAT is a hack, not a security feature, and IPv6 removes the need for it. The firewall is the security feature. (edit: the firewall on the router)
Mmm whole new class of bugs and vulns being introduced in one statement.
Now my 3d printer needs its firewall babysat. So does my smart fan. Excellent idea.
Homes and businesses should be islands.
The firewall is on the router.
You can have IPv6 on your router, and an isolated network. It's just not necessarily what's done by default.
yaaay so the default is my 2030 smart toaster is gonna be on a botnet
NAT is a blessing protecting the consumer from neglegent manufacturers
Having a default firewall is also a blessing, which all good routers should do. NAT is a curse.
Synology support has told me to do equally dumb shit back when I still had synology products.