Re: Assigning IPv6 /48's to CPE's?

On Fri, 04 Jan 2008 23:04:24 CST, James Hess said:

Seems like an understatement. Ipv6 addressing doesn't merely make them more difficult, they make traditional propagation methods and attack techniques that rely on 'scanning' a network from outside impossible to execute.

I believe Steve Bellovin has already written extensively on this, and some of the more plausible alternate non-scanning strategies for worm propagation. I'm sure Steve has a pointer to the paper in question, which I've managed to misplace in my senility... ;)