Sounds like making IPv6 more commonly used is part of the solution.

Reduce the importance of IPv4 and the stranglehold of big conglomerates is forcibly relaxed (in this context at least).

I don't like that I've ignored IPv6 for so long that now it feels overwhelming to have to try to grasp. That may be true for a lot of networking folks for whom IPv4 is written in their DNA, given the incredibly slow uptake of IPv6.

100% agree with your point regarding long term ownership allowing for meaningful reputation.

I don't necessarily think that's 'no way to run the internet' or even 'no way to run anything', in that people can choose to whom they listen in regards to blocking, protesting, boycotting.

As long as none of the different groups of opinions are forced on anyone else, then pick and choose those you apply and those you ignore.

With my lists of blocking, I classify them, personally, into different tiers such as Basic, Recommended, Aggressive, and Paranoid when I apply the rules to other people's (family) setups - I'm the only one that uses Paranoid.

I have my own system of IP reputation whereby if an IP address hits one of my systems with some probe or scan that I didn't ask for, then it's blocked for 12 months.

https://github.com/UninvitedActivity/UninvitedActivity

P.S. just to add a note here that I have been blocked out of my own systems occasionally from mobile / remote IPs due to my paranoia-level setup. But I treat that as learning / refinement, but also can accept that as the cost of security sometimes.

My first thought is that with CGNAT ever more present, this kind of approach seems like it'll have a lot of collateral damage.

Yeah, my setup is purely for my own security reasons and interests, so there's very little downside to my scorched earth approach.

I do, however, think that if there was a more widespread scorched earth approach then the issues like those mentioned in the article would be much less common.

In such a world you can say goodbye to any kind of free Wi-Fi, anonymous proxy etc., since all it would take to burn an IP for a year is to run a port scan from it, so nobody would risk letting you use theirs.

Fortunately, real network admins are smarter than that.

For people that implement it there's less than three people who use it, or agencies supporting it

Nice, thanks for the link. Good to be ruthless about those things when you can.

Sounds like a great idea until you ever try to connect to your own servers from a network with spammy neighbors.

I haven't manually reviewed my lists for a while, but I did similar checks for X IP addresses detected from within a /24 block to determine whether I should just block the whole /24.

Manual reviewing like this also helped me find a bunch of organisations that just probe the entire IPv4 range on a regular basis, trying to map it for 'security' purposes. Fuck them, blocked!

P.S. I wholeheartedly support your choice of blocking for your reasons.

> bunch of organisations that just probe the entire IPv4 range on a regular basis

Yep, #1 source of junk traffic, in my experience. I set those prefixes go right into nullroute on every server I set up:

https://raw.githubusercontent.com/UninvitedActivity/Uninvite...

#2 are IP ranges of Azure, DO, OVH, vultr, etc... A bit harder to block those outright.

How often do you ask for probes or scans?

In the immortal words of Zapp Brannigan:

https://youtu.be/DH_gPGl5FF4

There are plenty of people who find it convenient to listen to the current administration, and these people vote. I just hope they remain in a minority in my country. It's always a close run race though...

And a 'more conservative than conservative' party is getting increased media attention here at the moment, which could do serious damage.

So we won't be able to fight air wars over the last remaining pieces of arable land.

I'm convinced.

Recycling someone else's quote:

"The economy is a wholly owner subsidiary of the environment"

Many people use the 'but the economy' argument (including my mother in law, maddeningly) without seeming to have any remote clue as to the truth of the quote above.

Can we hope that the Strait of Hormuz remains essentially blocked to oil exports for an extended amount of time...?

Add The Thirteenth Floor and eXistenZ to the initial list of movies.

> Nobody has to take ethics during undergrad anymore I guess...

Especially not when certain people in positions of great power say things like "stupid rules of engagement" when referring to acts of war.