Falcon Darkstar on Nostr: npub1fg9z5…rdn8a I'm completely unconvinced that stateful firewalls in the edge ...

npub1fg9z5j645jx6fnld9umwu9y0uksjvklfxzxmnvqrs5h70glaaj6qerdn8a (npub1fg9…dn8a) I'm completely unconvinced that stateful firewalls in the edge device are actually necessary for security. Sure, maybe someone can exploit your TCP/IP stack with 0day, but what's more likely to have it - the device that gets constant updates, or the router that gets them basically never? The thing to do here is probably have a host firewall, at which point the host can just open ports on itself to the internet when needed.