Invisible IPv6 traffic poses serious network threat

Post by **FlyingPenguin** » Tue Jul 14, 2009 1:56 pm

http://www.networkworld.com/news/2009/0 ... ml?hpg1=bn

Experts say that most U.S. organizations have hidden IPv6 traffic running across their networks, and that few network managers are equipped to see, manage or block it. Increasingly, this rogue IPv6 traffic includes attacks such as botnet command and controls...{more}

wvjohn · Post by **wvjohn** » Tue Jul 14, 2009 4:36 pm

Oh Joy, another unfixable exploit! (at least by your average Joe)

normalicy · Post by **normalicy** » Wed Jul 15, 2009 12:31 am

I'm downgrading to DOS to avoid the issue.

theophilusmousse · Post by **theophilusmousse** » Wed Jul 15, 2009 4:55 pm

hmm... I wonder if Windows 7 could be stripped down to work on a punch card system... I bet I would be safe from unseen attacks that way.

Post by **FlyingPenguin** » Wed Jul 15, 2009 6:02 pm

This is more of an issue for network admins I would think. This is a nice way for a keylogger to phone home without showing up on network scans and tunneling through non-IPv6 firewalls. A nightmare for corporate network admins worrying about data breaches.

I'd have to read up on it but I would presume you could disable IPv6 in your OS in your home or small business (done deal for me - I'm running XP on everything in my home and never installed the IPv6 add-on). I would assume that in the future, gateway routers and firewalls will eventually become more IPv6 aware as well.

Looking forward to Gibson doing a show on this on Security Now to get the whole skinny.

normalicy · Post by **normalicy** » Thu Jul 16, 2009 2:16 am

hmm... I wonder if Windows 7 could be stripped down to work on a punch card system... I bet I would be safe from unseen attacks that way.

Nah, then you have to worry about bugs

Anyhow, yeah, I don't see this vulnerability as a huge personal computer target.... yet.

Pugsley · Post by **Pugsley** » Thu Jul 16, 2009 12:22 pm

I like how things get so big that nobody is in control any more. Ipv6 seems to be like the DTV switch. its bad now but once everybody is on it IPV5 is where all the virus data will be going.

ZYFER · Post by **ZYFER** » Thu Jul 16, 2009 4:52 pm

normalicy wrote:Nah, then you have to worry about bugs

Anyhow, yeah, I don't see this vulnerability as a huge personal computer target.... yet.

At least those bugs would respond to a can of Raid