Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!ecngs!feeder2.ecngs.de!newsfeed.freenet.ag!news2.euro.net!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.098 X-Spam-Evidence: '*H*': 0.80; '*S*': 0.00; 'subject:Python': 0.06; 'advocate': 0.07; 'admins': 0.09; 'security.': 0.09; 'arbitrarily': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'hackers': 0.16; 'nodes': 0.16; 'people)': 0.16; 'roy': 0.16; 'wrote:': 0.18; 'admin': 0.22; 'lets': 0.24; "i've": 0.25; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; '(like': 0.30; 'technology.': 0.30; 'message-id:@mail.gmail.com': 0.30; '25,': 0.31; 'coded': 0.31; 'globally': 0.31; 'universal': 0.31; 'file': 0.32; 'whom': 0.33; 'implemented': 0.33; "can't": 0.35; 'received:209.85': 0.35; 'anywhere': 0.35; 'received:209.85.220': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'controls': 0.36; 'behind': 0.37; 'two': 0.37; 'received:209': 0.37; 'being': 0.38; 'server': 0.38; 'to:addr:python-list': 0.38; 'rather': 0.38; 'to:addr:python.org': 0.39; 'even': 0.60; 'new': 0.61; 'world.': 0.61; 'john': 0.61; 'course': 0.61; "you've": 0.63; 'more': 0.64; 'phone': 0.66; 'it!': 0.67; '26,': 0.68; 'smith': 0.68; 'article': 0.77; 'confusing': 0.84; 'firewalls': 0.84; 'hands': 0.96; '2013': 0.98 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=mzf3BUYRrmLD8FaQB1pdKDP2Ot3LboMDftoM8sCXCww=; b=qHegVv+uCcPfALkkg95gSiNmZYh+XulqFZC1d+8PWfGI97wY04/WSQam0UpHODS6fE PHFMRW6CX5mwqB4TqqDOMv91MX2z4SPcxBSonUGpXUyR7rk2hSbVj/4ojUG+DOXmN6rR wZVxnvYVQgvv1U4UkZ1+1E5leH0xiLqPdRdJxm1hgb5P5LsMaIeXtKvLFSshruRWe+t+ Kg+x7ZQMbWhrEDTDG2OsC0WR2K4APycYTClXSrQd2etCivj0a7aN821kJ5YqTVMzl/AN V693iXQhKUnxcOxj9NtjjntdAsdM81fWcgMm0XfEciFV/waYeOat24iM68vf47mdsPE0 1xjA== MIME-Version: 1.0 X-Received: by 10.52.155.67 with SMTP id vu3mr3920105vdb.94.1369533489142; Sat, 25 May 2013 18:58:09 -0700 (PDT) In-Reply-To: References: <27969350-4dd8-4afa-881a-b4a2364b3cf1@googlegroups.com> <51a0caac$0$30002$c3e8da3$5496439d@news.astraweb.com> <7cd17be8-d455-4db8-b8d0-ccc757db5cff@googlegroups.com> Date: Sun, 26 May 2013 11:58:09 +1000 Subject: Re: Python Magazine From: Chris Angelico To: python-list@python.org Content-Type: text/plain; charset=ISO-8859-1 X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 28 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1369533497 news.xs4all.nl 15941 [2001:888:2000:d::a6]:56040 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:46028 On Sun, May 26, 2013 at 11:54 AM, Roy Smith wrote: > In article <7cd17be8-d455-4db8-b8d0-ccc757db5cff@googlegroups.com>, > John Ladasky wrote: > >> On Saturday, May 25, 2013 8:30:19 AM UTC-7, Roy Smith wrote: >> > From my phone, I >> > can call any other phone anywhere in the world. But I can't talk >> > directly to the file server in my neighbor's house across the street? >> >> Hmmm... I've been an advocate of IPv6, but... now you've got me thinking of >> what Iran's new cadre of hackers might do with it! :^) > > You (like many people) are confusing universal addressability with > universal connectivity. The converse of that is people confusing NAT > with security. > > Of course not every IPv6 endpoint will be able to talk to every other > IPv6 endpoint, even if the both have globally unique addresses. But, > the access controls will be implemented in firewalls with appropriately > coded security policies. Not as an accident of being behind a NAT box. To be more specific: The control of who can talk to whom is in the hands of the admins of the two endpoints and the nodes in between, rather than being arbitrarily in the hands of the technology. So I would be able to talk to the file server across the street, but only IF its admin lets me. ChrisA