[GTALUG] Linux hardening question

[Russell]

On June 29, 2017 7:37:54 PM EDT, James Knott via talk <talk at gtalug.org> wrote:
>On 06/29/2017 06:46 PM, Ansar Mohammed wrote:
>> Actually James, incompetence would be opening up a high security
>> system to additional attack vectors without a good business or
>> technical reason (which you really haven't provided).
>>
>>
>
>The business reason is the world is moving to IPv6.  Failing to accept
>that fact means crippling the future.  Why have companies such as
>Google, Microsoft, Apple, Cisco, Globe & Mail, SuSE, Mozilla and many,
>many more, along with Canadian and U.S. federal governments made the
>move to IPv6?  Don't they have systems that have to be hardened?
>
>The Internet has been hobbled by IPv4 for far too long.  It's time to
>move on.  Refusing to use IPv6 means you're stuck in the past.

These words were attributed to Benjamin Franklin.

"If you fail to plan, you are planning to fail!"

This is the sort of reasoning which provided for IPV6's creation in the first place. The internet is running out of address space. Any networked system, currently hardened or otherwise, has to take the future into account when planning for the present.

Perhaps its the term hardening which is the difficult concept. Things which are hard are often brittle and prone to fractures.

Perhaps tempering might be a better term.

This implies resilience, as in bonding a tempered steel edge to softer iron.

For a chefs knife or a sword the hard part keeps its cutting edge for effective slicing and the softer part absorbes the force which might fracture the knife were it completely hardened.

Certainly the systematic rollout of IPV6 follows a plan of sustainable modularity akin to the historic unix norms and it is the planned way of the future, at least so far.

The only real qustion is how long will it be before you must enable IPV6 or be shut out of maintream knowledge, interests or economies?

Competent or not we will all face up to this, some sooner than others.
>
>
>---
>Talk Mailing List
>talk at gtalug.org
>https://gtalug.org/mailman/listinfo/talk


-- 
Russell
Sent by K-9 Mail