this post was submitted on 10 Jul 2023
3290 points (99.3% liked)
Lemmy.World Announcements
29028 readers
9 users here now
This Community is intended for posts about the Lemmy.world server by the admins.
Follow us for server news ๐
Outages ๐ฅ
https://status.lemmy.world
For support with issues at Lemmy.world, go to the Lemmy.world Support community.
Support e-mail
Any support requests are best sent to [email protected] e-mail.
Report contact
- DM https://lemmy.world/u/lwreport
- Email [email protected] (PGP Supported)
Donations ๐
If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.
If you can, please use / switch to Ko-Fi, it has the lowest fees for us
Join the team
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I never noticed this. Yes, switch between mobile and WiFi, but this is only two addresses. In case of IPv4 this seems not problem. In case of IPv6, use /64 or /48 (or whatever is now recommended for residential end users) prefix instead of the entire 128bits. I'm not proposing to log-out the suer after IP change, I'm proposing multiple sessions to be accessible at the same time.
Mobile will often switch ip's on tower handoffs. If you're driving down the road or on a train, it's nothing to change mobile ip addresses every 2 minutes.
Not in my experience. But OK, if this is the case, don't use exact IPv4 address, lookup the routing database and use the sub-net. Or whatever. This is belt & suspenders style of defense in depth, just another layer of security if all others fail. Not core functionality.
I work for a mobile game company. Millions of clients. We deal with this a lot. You can't even predict that they'll stay in the same class A. I wouldn't be surprised if they worked out a way to hand off ipv4 to 6 and vice-versa.
Then you have ISP's and large work networks who send everyone out under the same NAT/PAT, 10's of thousands of users all coming from one address.
IMO Providing a public service then trying to identify individuals by network without screwing someone over is a fools errand.
If you're dipping logs and see one jackass doing something on x IP, you always have to go back and see how many ip's that jackass is coming from and also how much viable traffic is coming from that ip.