Câu chuyện về IBD và phương pháp CANSLIM

Nat is not a firewallYah but that is good because firewalls suckSure, I know all the professionals are going to get their undergarmets in a knot over that statement And they have a point In a large organization with al sorts of people connecting things or installing software it would be pretty hard to manage security without oneBut for a single person living alone, or even someone managing the lan of their typical household they are so often overkillI mean sure, you can get a consumer grade “simple” firewall But those break all the time, often completing blocking connectivity in the process And honestly most of them come with more malware than any hacker that wants to get in!You can use a professional grade firewall at home Most of that stuff is open source and free anyway Wonderful Now you have to get a f’ng degree in network security just to watch Netflix! My friends that do this… they are the ones that half the time have no internet at home because they have accidentally broken their network with something they tried to tweak in their firewallBut what about going naked? No firewall, no NAT?About a decade and a half ago I was all for thisOMG but you aren’t protecting you ports! Your ports! Hackers are getting in your open ports!No they’re not! If you don’t have something running, listening for packets incoming on that port the OS is just going to throw whatever comes in away! An open port is not a telnet session into some movie-OS-esque environment where the hacker can simply type “override password” and now they 0wnz you Give me a break! It’s either going to sit and do nothing or it’s going to spit back a rejection message Just don’t install shit on your computer that you don’t understand and aren’t willing to configure and secure And if you are going to install it… you must have wanted it to work so you would be doing that configuration anyway AND writing a rule to let connections through the firewall too!Well Like I said I would have said that a decade and a half ago These days with so many random internet enabled devices… auditing every one of them is beyond the home Lan non-pro admin that I am talking aboutSo install the consumer grade firewall that slows everything down, brings in malware and craps out blocking the internet all the time? Or install the pro grade one and take up a second career learning and managing it? Hell no!That’s where NAT is beautiful Nothing is getting through unwanted because there is no route But setting up a port forward… definitely not rocket science!This is why I am not switching to IPV6 on the LAN any time soonOn the WAN… my provider doesn’t even offer it yet OK I see how that could invalidate my LAN argument but hey they aren’t going to call me and inform me when that day comes that they do support it Surprise everything is exposed as of last night!! I don’t want that realization I have thought about setting up a tunnel so I would have IPV6 access… but… Netflix All the free tunnels have been used to get around their region bullcrap And they know this So they block them all