Hacker News new | ask | show | jobs
by necrophcodr 1041 days ago
The article doesn't make sense. It can technically work with a bunch of dynamic DNS systems. An IPv6 address isn't fixed to your device like a MAC address is.

Even assuming it would be doable, it would be a security nightmare, and we'd end up relying on some centralised systems anyway lest we burden the internet with absolutely insane amounts of continual p2p discoveries.

If you want a personal website, why not use a service like neocities? It's free, and just lets you go ham with static content. Don't feel like writing HTML pages manually? Make a TiddlyWiki and upload that.
3 comments
necrophcodr 1041 days ago
To be clear, I am all for self hosting stuff, but it needs to be in a proper, affordable, standardized package that can be kept secure and useful. A phone is NOT that.
link
jeroenhd 1041 days ago
Why not? I download updates to apps on my phone every day. I fact, my old phone that has long stopped receiving updates still runs the latest browsers just fine. The problem isn't keeping the applications up to date.

There's a risk of kernel exploits, but I can't remember the last time the Android kernel had a bug that could be triggered by simply sending packets to it. Privilege escalation works, maybe, but getting root on Android is a lot harder than most Linux servers because of the very strict and isolated SELinux contexts.

I've installed termux on my phone and I can install nginx with a single command. Downloading a Debian chroot and launching a full, maintained Linux distro is two commands away.

Until remotely triggered Android kernel exploits become a thing, I don't think the updates are the problem here.

link
mappu 1040 days ago
> I can't remember the last time the Android kernel had a bug that could be triggered by simply sending packets to it.

RCE from Bluetooth packets has happened uncomfortably often - CVE-2017-0781+2 (BlueBorne), CVE-2020-0022, CVE-2022-20411, ...

link
jeroenhd 1040 days ago
True, but Bluetooth doesn't work over internet. Plus, you can just turn it off if you worry about it.
link
h0p3 1041 days ago
That seems exceptionally reasonable, nomad. That would be pretty easy to anonymize as well. It's a pleasure to meet you.

I'll add that Resilio Sync + singlefile Tiddlywiki (I think most people would be surprised what TW can accomplish) from a phone is quite workable (a filewatcher with ratox or may toxic, or IPFS, would do as well, but they aren't as performant or turnkey). You can automatically push with custom conditions (or manually do so) to those listening (the burden has to be shifted away from the phone to some degree). If you have persistent seeders in the mutable torrent swarm, it's even better. That would serve a very large number of people on the planet pretty well, imho. This is harder to anonymize on a phone, but also doable.

It's reasonable to do both, too.

Add a proper USB to boot with, and it would sometimes be easy enough to walk up to a random machine when you need more than a phone to work on your Tiddlywiki or other infrastructure. I admire trying to find ways to make sure almost anyone can participate in The Great Conversation with minimal material; it's an important problem.

link
dataflow 1040 days ago
Yeah I can't make sense of this article either. How is IPv6 supposed to solve this? IP is for routing which is tied to geography, not identity. And wouldn't dynamic DNS make your website unresolvable for at least a minute or two every time your IP changes?
link
WarOnPrivacy 1040 days ago
> Yeah I can't make sense of this article easier. How is IPv6 supposed to solve this?

I took it to mean he was discussing phones that are on IPv6 only networks.

link
dataflow 1040 days ago
Yeah but I'm asking how does that help? As the phone hops around, the IP address will change, whether it's v6 or v4. Are they expecting IPv6 will be stable no matter where in the world you travel?
link
WarOnPrivacy 1040 days ago
A DDNS service seems like a trivial add-on to make this work.

I think the bigger issue is the number of mobile devices behind CGNAT.

link
dataflow 1040 days ago
> A DDNS service seems like a trivial add-on to make this work.

I responded to this earlier: wouldn't dynamic DNS make your website unresolvable for at least a minute or two (or much longer if your TTL is longer) every time your IP changes?

> I think the bigger issue is the number of mobile devices behind CGNAT.

Yeah I agree on that, they already mentioned that part.

link