using "reserved" IPv6 space

valdis.kletnieks at vt.edu valdis.kletnieks at vt.edu
Sun Jul 15 15:44:50 UTC 2012


On Sat, 14 Jul 2012 17:37:37 -0500, Jimmy Hess said:

> The good news is one  'ifconfig'  just tells them  what   network
> address you're in.
> Unless the attacker can gain access to your host's  NDP table or ARP
> table,  they can't see what IPs are in use.

All it takes is one USB stick left out in the parking lot for an employee..

By the time they get enough access to do an 'ifconfig', rest assured that they
can see the NDP/ARP tables and all the traffic on that network segment as well.
(OK.. maybe for some reason they can't - but if you're betting your security
model on somebody getting a beachhead on one of your machines and *not* having
full access to the network segment, I'll be more than happy to take the other
side of the bet).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 865 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20120715/12ec7970/attachment.sig>


More information about the NANOG mailing list