Technology

59989 readers

2447 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago

MODERATORS

689

All Windows users should immediately update their computers. An exploit rated 9.8/10 (CVE-2024-38063) compromises all devices running Windows with an IPv6 address. (msrc.microsoft.com)

submitted 4 months ago* (last edited 4 months ago) by hal_5700X@sh.itjust.works to c/technology@lemmy.world

206 comments fedilink hide all child comments

archive

If you have the August 13, 2024—KB5041580 update. You're good.

you are viewing a single comment's thread
view the rest of the comments

[–] pivot_root@lemmy.world 4 points 4 months ago (1 children)

I would assume/hope the default setting for a consumer router would still be to drop incoming connections. That should suffice for the average person as long as ISPs don't make it easy to disable that without actually understanding what the consequences are.

[–] Blackmist@feddit.uk 3 points 4 months ago (1 children)

I would also assume that to be the default, but unfortunately the first Google search for "why doesn't my smart fridge work from my phone when I leave the house" will be a set of instructions for turning that feature off.

NATs and port forwarding is annoying, but it's also very manual, and only lets you fuck up one device at a time.

[–] Blaster_M@lemmy.world 3 points 4 months ago (1 children)

Then the instructions are bad. They should be how to open the firewall port for that device, which is almost the same as setting a NAT port forward, with the same limitation of only exposing one device.

[–] Blackmist@feddit.uk 2 points 4 months ago (1 children)

Yeah, but that's going to involve knowing what the device is called on the router, or knowing what the address is.

I'm afraid the great age of computer literacy has come and gone.

If anything it makes me want routers to not even allow a blanket whitelist for all devices...

[–] pivot_root@lemmy.world 2 points 4 months ago

If anything it makes me want routers to not even allow a blanket whitelist for all devices...

I would be fine with this. Make it as annoying as possible so people don't blindly follow a guide to disable the firewall.

Remove firewall disable option, and only allow it to happen by DMZ or bridging to another router that would have it.
Require calling in to an ISP help desk, where they ask why you want to do that, and explain in no uncertain terms that you're probably going to open a portal to hell or summon cthulhu. If you still want to, you have to read them out the device serial number, read out a unique code in the router admin interface, and wait a week for the option to become available.