一个坏苹果会破坏您的IPv6隐私
One Bad Apple Can Spoil Your IPv6 Privacy
摘要：
IPv6被越来越多地采用，部分原因是为了方便已经安装在家中的数百万智能设备。不幸的是，我们发现，尽管互联网服务提供商和电子供应商努力提高最终用户的安全性，但仍有相当一部分最终用户的隐私处于危险之中，例如，采用前缀轮换和IPv6隐私扩展。通过分析来自大型ISP的被动数据，我们发现大约19%的最终用户的隐私可能面临风险。当我们调查根本原因时，我们注意到家中将其MAC地址编码为IPv6地址的单个设备可以用作整个最终用户前缀的跟踪标识符-即使其他设备使用IPv6隐私扩展。我们的研究结果表明，物联网设备对这种隐私泄露的贡献最大，个人电脑和移动设备的贡献较小。令人惊讶的是，一些最受欢迎的物联网制造商尚未采用隐私扩展，否则可能会减轻这种隐私风险。最后，我们展示了第三方提供商，例如，在我们的研究中，超级巨人可以跟踪高达17%的用户线路。
英文摘要：
IPv6 is being more and more adopted, in part to facilitate the millions of smart devices that have already been installed at home. Unfortunately, we find that the privacy of a substantial fraction of end-users is still at risk, despite the efforts by ISPs and electronic vendors to improve end-user security, e.g., by adopting prefix rotation and IPv6 privacy extensions. By analyzing passive data from a large ISP, we find that around 19% of end-users' privacy can be at risk. When we investigate the root causes, we notice that a single device at home that encodes its MAC address into the IPv6 address can be utilized as a tracking identifier for the entire end-user prefix -- even if other devices use IPv6 privacy extensions. Our results show that IoT devices contribute the most to this privacy leakage and, to a lesser extent, personal computers and mobile devices. To our surprise, some of the most popular IoT manufacturers have not yet adopted privacy extensions that could otherwise mitigate this privacy risk. Finally, we show that third-party providers, e.g., hypergiants, can track up to 17% of subscriber lines in our study.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
