{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T04:34:43Z","timestamp":1773117283579,"version":"3.50.1"},"reference-count":50,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2022,4,30]],"date-time":"2022-04-30T00:00:00Z","timestamp":1651276800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGCOMM Comput. Commun. Rev."],"published-print":{"date-parts":[[2022,4,30]]},"abstract":"<jats:p>IPv6 is being more and more adopted, in part to facilitate the millions of smart devices that have already been installed at home. Unfortunately, we find that the privacy of a substantial fraction of end-users is still at risk, despite the efforts by ISPs and electronic vendors to improve end-user security, e.g., by adopting prefix rotation and IPv6 privacy extensions. By analyzing passive data from a large ISP, we find that around 19% of end-users' privacy can be at risk. When we investigate the root causes, we notice that a single device at home that encodes its MAC address into the IPv6 address can be utilized as a tracking identifier for the entire end-user prefix---even if other devices use IPv6 privacy extensions. Our results show that IoT devices contribute the most to this privacy leakage and, to a lesser extent, personal computers and mobile devices. To our surprise, some of the most popular IoT manufacturers have not yet adopted privacy extensions that could otherwise mitigate this privacy risk. Finally, we show that third-party providers, e.g., hypergiants, can track up to 17% of subscriber lines in our study.<\/jats:p>","DOI":"10.1145\/3544912.3544915","type":"journal-article","created":{"date-parts":[[2022,6,20]],"date-time":"2022-06-20T20:35:27Z","timestamp":1655757327000},"page":"10-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":23,"title":["One bad apple can spoil your IPv6 privacy"],"prefix":"10.1145","volume":"52","author":[{"given":"Said Jawad","family":"Saidi","sequence":"first","affiliation":[{"name":"Saarland University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Oliver","family":"Gasser","sequence":"additional","affiliation":[{"name":"MPI-INF"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Georgios","family":"Smaragdakis","sequence":"additional","affiliation":[{"name":"TU Delft"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,6,20]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"IEEE INFOCOM","author":"Almeida R.","year":"2020","unstructured":"R. Almeida , R. Teixeira , D. Veitch , and C. Diot . Classification of Load Balancing in the Internet . In IEEE INFOCOM , 2020 . R. Almeida, R. Teixeira, D. Veitch, and C. Diot. Classification of Load Balancing in the Internet. In IEEE INFOCOM, 2020."},{"key":"e_1_2_1_2_1","volume-title":"Organizationally Unique Identifier (OUI), and Company ID (CID). https:\/\/standards.ieee.org\/content\/dam\/ieee-standards\/standards\/web\/documents\/tutorials\/eui.pdf","author":"IEEE Standards Association","year":"2018","unstructured":"IEEE Standards Association . Guidelines for Use of Extended Unique Identifier (EUI) , Organizationally Unique Identifier (OUI), and Company ID (CID). https:\/\/standards.ieee.org\/content\/dam\/ieee-standards\/standards\/web\/documents\/tutorials\/eui.pdf , 2018 . IEEE Standards Association. Guidelines for Use of Extended Unique Identifier (EUI), Organizationally Unique Identifier (OUI), and Company ID (CID). https:\/\/standards.ieee.org\/content\/dam\/ieee-standards\/standards\/web\/documents\/tutorials\/eui.pdf, 2018."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2019.2895165"},{"key":"e_1_2_1_4_1","unstructured":"A. Banks and R. Gupta. MQTT Version 3.1.1. MQTT Version 3.1.1 https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v3.1.1\/os\/mqtt-v3.1.1-os.html.  A. Banks and R. Gupta. MQTT Version 3.1.1. MQTT Version 3.1.1 https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v3.1.1\/os\/mqtt-v3.1.1-os.html."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278559"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00027"},{"key":"e_1_2_1_7_1","volume-title":"A Hyper-giant's View of the Internet. ACM SIGCOMM CCR, 47(1)","author":"B\u00f6ttger T.","year":"2017","unstructured":"T. B\u00f6ttger , F. Cuadrado , G. Tyson , I. Castro , and S. Uhlig . A Hyper-giant's View of the Internet. ACM SIGCOMM CCR, 47(1) , 2017 . T. B\u00f6ttger, F. Cuadrado, G. Tyson, I. Castro, and S. Uhlig. A Hyper-giant's View of the Internet. ACM SIGCOMM CCR, 47(1), 2017."},{"key":"e_1_2_1_8_1","volume-title":"Network Reconnaissance in IPv6-based Residential Broadband Networks. arXiv preprint arXiv:2012.10652","author":"Bruns T.","year":"2020","unstructured":"T. Bruns . Network Reconnaissance in IPv6-based Residential Broadband Networks. arXiv preprint arXiv:2012.10652 , 2020 . T. Bruns. Network Reconnaissance in IPv6-based Residential Broadband Networks. arXiv preprint arXiv:2012.10652, 2020."},{"key":"e_1_2_1_9_1","volume-title":"Introduction to Cisco IOS NetFlow - A Technical Overview. https:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/ios-nx-os-software\/ios-netflow\/prod_white_paper0900aecd80406232.html","year":"2012","unstructured":"Cisco. Introduction to Cisco IOS NetFlow - A Technical Overview. https:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/ios-nx-os-software\/ios-netflow\/prod_white_paper0900aecd80406232.html , 2012 . Cisco. Introduction to Cisco IOS NetFlow - A Technical Overview. https:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/ios-nx-os-software\/ios-netflow\/prod_white_paper0900aecd80406232.html, 2012."},{"key":"e_1_2_1_10_1","volume-title":"Entrepreneurship and SMEs - CE Marking. https:\/\/ec.europa.eu\/growth\/single-market\/ce-marking_en","author":"European Commission","year":"2021","unstructured":"European Commission . Internal Market , Industry , Entrepreneurship and SMEs - CE Marking. https:\/\/ec.europa.eu\/growth\/single-market\/ce-marking_en , 2021 . European Commission. Internal Market, Industry, Entrepreneurship and SMEs - CE Marking. https:\/\/ec.europa.eu\/growth\/single-market\/ce-marking_en, 2021."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488912"},{"key":"e_1_2_1_12_1","volume-title":"May","author":"de Velde G. Van","year":"2007","unstructured":"G. Van de Velde , T. Hain , R. Droms , B. Carpenter , and E. Klein . Local Network Protection for IPv6. RFC 4864 (Informational) , May 2007 . G. Van de Velde, T. Hain, R. Droms, B. Carpenter, and E. Klein. Local Network Protection for IPv6. RFC 4864 (Informational), May 2007."},{"key":"e_1_2_1_13_1","volume-title":"Version 6 (IPv6) Specification. RFC 2460 (Draft Standard)","author":"Deering S.","year":"1998","unstructured":"S. Deering and R. Hinden . Internet Protocol , Version 6 (IPv6) Specification. RFC 2460 (Draft Standard) , Dec 1998 . Obsoleted by RFC 8200, updated by RFCs 5095, 5722, 5871, 6437, 6564, 6935, 6946, 7045, 7112. S. Deering and R. Hinden. Internet Protocol, Version 6 (IPv6) Specification. RFC 2460 (Draft Standard), Dec 1998. Obsoleted by RFC 8200, updated by RFCs 5095, 5722, 5871, 6437, 6564, 6935, 6946, 7045, 7112."},{"key":"e_1_2_1_14_1","volume-title":"Version 6 (IPv6) Specification. RFC 8200 (Internet Standard)","author":"Deering S.","year":"2017","unstructured":"S. Deering and R. Hinden . Internet Protocol , Version 6 (IPv6) Specification. RFC 8200 (Internet Standard) , Jul 2017 . S. Deering and R. Hinden. Internet Protocol, Version 6 (IPv6) Specification. RFC 8200 (Internet Standard), Jul 2017."},{"key":"e_1_2_1_15_1","volume-title":"Mar","author":"Droms R.","year":"1997","unstructured":"R. Droms . Dynamic Host Configuration Protocol. RFC 2131 (Draft Standard) , Mar 1997 . Updated by RFCs 3396, 4361, 5494, 6842. R. Droms. Dynamic Host Configuration Protocol. RFC 2131 (Draft Standard), Mar 1997. Updated by RFCs 3396, 4361, 5494, 6842."},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-54328-4_3"},{"key":"e_1_2_1_17_1","volume-title":"PAM","author":"Fiebig T.","year":"2018","unstructured":"T. Fiebig , K. Borgolte , S. Hao , C. Kruegel , G. Vigna , and A. Feldmann . In rDNS We Trust: Revisiting a Common Data-Source's Reliability . In PAM , 2018 . T. Fiebig, K. Borgolte, S. Hao, C. Kruegel, G. Vigna, and A. Feldmann. In rDNS We Trust: Revisiting a Common Data-Source's Reliability. In PAM, 2018."},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987445"},{"key":"e_1_2_1_19_1","volume-title":"ACM IMC","author":"Fukuda K.","year":"2018","unstructured":"K. Fukuda and J. Heidemann . Who Knocks at the IPv6 Door? Detecting IPv6 Scanning . In ACM IMC , 2018 . K. Fukuda and J. Heidemann. Who Knocks at the IPv6 Door? Detecting IPv6 Scanning. In ACM IMC, 2018."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278564"},{"key":"e_1_2_1_21_1","volume-title":"TMA","author":"Gasser O.","year":"2016","unstructured":"O. Gasser , Q. Scheitle , S. Gebhard , and G. Carle . Scanning the IPv6 Internet: Towards a Comprehensive Hitlist . In TMA , 2016 . O. Gasser, Q. Scheitle, S. Gebhard, and G. Carle. Scanning the IPv6 Internet: Towards a Comprehensive Hitlist. In TMA, 2016."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472928"},{"key":"e_1_2_1_23_1","volume-title":"Mar","author":"Gont F.","year":"2016","unstructured":"F. Gont and T. Chown . Network Reconnaissance in IPv6 Networks. RFC 7707 (Informational) , Mar 2016 . F. Gont and T. Chown. Network Reconnaissance in IPv6 Networks. RFC 7707 (Informational), Mar 2016."},{"key":"e_1_2_1_24_1","volume-title":"Feb","author":"Gont F.","year":"2021","unstructured":"F. Gont , S. Krishnan , T. Narten , and R. Draves . Temporary Address Extensions for Stateless Address Autoconfiguration in IPv6. RFC 8981 (Proposed Standard) , Feb 2021 . F. Gont, S. Krishnan, T. Narten, and R. Draves. Temporary Address Extensions for Stateless Address Autoconfiguration in IPv6. RFC 8981 (Proposed Standard), Feb 2021."},{"key":"e_1_2_1_25_1","unstructured":"Google. IPv6 Adoption. https:\/\/www.google.com\/intl\/en\/ipv6\/statistics.html.  Google. IPv6 Adoption. https:\/\/www.google.com\/intl\/en\/ipv6\/statistics.html."},{"key":"e_1_2_1_26_1","volume-title":"Android Enterprise Network Requirements. https:\/\/support.google.com\/work\/android\/answer\/10513641?hl=en","year":"2021","unstructured":"Google. Android Enterprise Network Requirements. https:\/\/support.google.com\/work\/android\/answer\/10513641?hl=en , 2021 . Google. Android Enterprise Network Requirements. https:\/\/support.google.com\/work\/android\/answer\/10513641?hl=en, 2021."},{"key":"e_1_2_1_27_1","volume-title":"Google Cloud IoT Core. https:\/\/cloud.google.com\/iot-core","year":"2021","unstructured":"Google. Google Cloud IoT Core. https:\/\/cloud.google.com\/iot-core , 2021 . Google. Google Cloud IoT Core. https:\/\/cloud.google.com\/iot-core, 2021."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488794"},{"key":"e_1_2_1_29_1","volume-title":"https:\/\/blog.apnic.net\/2016\/04\/13\/ipv6-internet-things\/","author":"Huston G.","year":"2016","unstructured":"G. Huston . IPv6 and the Internet of Things . https:\/\/blog.apnic.net\/2016\/04\/13\/ipv6-internet-things\/ , 2016 . G. Huston. IPv6 and the Internet of Things. https:\/\/blog.apnic.net\/2016\/04\/13\/ipv6-internet-things\/, 2016."},{"key":"e_1_2_1_30_1","unstructured":"Amazon Web Services Inc. AWS IoT Core. Amazon Web Services https:\/\/aws.amazon.com\/iot-core\/.  Amazon Web Services Inc. AWS IoT Core. Amazon Web Services https:\/\/aws.amazon.com\/iot-core\/."},{"key":"e_1_2_1_31_1","unstructured":"Apple Inc. IPv6 security. Apple Platform Security https:\/\/support.apple.com\/guide\/security\/ipv6-security-seccb625dcd9\/web.  Apple Inc. IPv6 security. Apple Platform Security https:\/\/support.apple.com\/guide\/security\/ipv6-security-seccb625dcd9\/web."},{"key":"e_1_2_1_32_1","unstructured":"Institute of Electrical and Electronics Engineers (IEEE). Organizationally Unique Identifier (OUI) MAC Address Registry. http:\/\/standards-oui.ieee.org\/oui\/oui.txt.  Institute of Electrical and Electronics Engineers (IEEE). Organizationally Unique Identifier (OUI) MAC Address Registry. http:\/\/standards-oui.ieee.org\/oui\/oui.txt."},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00975-4_2"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423618"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00025"},{"key":"e_1_2_1_36_1","first-page":"155","author":"Liu Z.","year":"2019","unstructured":"Z. Liu , Y. Xiong , X. Liu , W. Xie , and P. Zhu . 6Tree: Efficient dynamic discovery of active addresses in the IPv6 address space. Computer Networks , 155 , 2019 . Z. Liu, Y. Xiong, X. Liu, W. Xie, and P. Zhu. 6Tree: Efficient dynamic discovery of active addresses in the IPv6 address space. Computer Networks, 155, 2019.","journal-title":"Computer Networks"},{"key":"e_1_2_1_37_1","volume-title":"Nov","author":"Mrugalski T.","year":"2018","unstructured":"T. Mrugalski , M. Siodelski , B. Volz , A. Yourtchenko , M. Richardson , S. Jiang , T. Lemon , and T. Winters . Dynamic Host Configuration Protocol for IPv6 (DHCPv6). RFC 8415 (Proposed Standard) , Nov 2018 . T. Mrugalski, M. Siodelski, B. Volz, A. Yourtchenko, M. Richardson, S. Jiang, T. Lemon, and T. Winters. Dynamic Host Configuration Protocol for IPv6 (DHCPv6). RFC 8415 (Proposed Standard), Nov 2018."},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3131365.3131405"},{"key":"e_1_2_1_39_1","volume-title":"Sep","author":"Narten T.","year":"2007","unstructured":"T. Narten , R. Draves , and S. Krishnan . Privacy Extensions for Stateless Address Autoconfiguration in IPv6. RFC 4941 (Draft Standard) , Sep 2007 . T. Narten, R. Draves, and S. Krishnan. Privacy Extensions for Stateless Address Autoconfiguration in IPv6. RFC 4941 (Draft Standard), Sep 2007."},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3386367.3431314"},{"key":"e_1_2_1_41_1","volume-title":"Empirical study of router IPv6 interface address distributions","author":"Rohrer J. P.","unstructured":"J. P. Rohrer , B. LaFever , and R. Beverly . Empirical study of router IPv6 interface address distributions . IEEE Internet Computing , 20(4). J. P. Rohrer, B. LaFever, and R. Beverly. Empirical study of router IPv6 interface address distributions. IEEE Internet Computing, 20(4)."},{"key":"e_1_2_1_42_1","volume-title":"Discovering the IPv6 network periphery. arXiv preprint arXiv:2001.08684","author":"Rye E. C.","year":"2020","unstructured":"E. C. Rye and R. Beverly . Discovering the IPv6 network periphery. arXiv preprint arXiv:2001.08684 , 2020 . E. C. Rye and R. Beverly. Discovering the IPv6 network periphery. arXiv preprint arXiv:2001.08684, 2020."},{"key":"e_1_2_1_43_1","volume-title":"ACM IMC","author":"Rye E. C.","year":"2021","unstructured":"E. C. Rye , R. Beverly, and kc claffy. Follow the Scent: Defeating IPv6 Prefix Rotation Privacy . In ACM IMC , 2021 . E. C. Rye, R. Beverly, and kc claffy. Follow the Scent: Defeating IPv6 Prefix Rotation Privacy. In ACM IMC, 2021."},{"key":"e_1_2_1_44_1","first-page":"08968","author":"Rye E. C.","year":"1902","unstructured":"E. C. Rye , J. Martin , and R. Beverly . EUI-64 Considered Harmful. arXiv preprint arXiv : 1902 . 08968 , 2019. E. C. Rye, J. Martin, and R. Beverly. EUI-64 Considered Harmful. arXiv preprint arXiv:1902.08968, 2019.","journal-title":"EUI-64 Considered Harmful. arXiv preprint arXiv"},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423650"},{"key":"e_1_2_1_46_1","volume-title":"https:\/\/labs.ripe.net\/author\/stephen_strowes\/ipv6-adoption-in-2021\/","author":"Strowes S.","year":"2021","unstructured":"S. Strowes . IPv6 Adoption in 2021. https:\/\/labs.ripe.net\/author\/stephen_strowes\/ipv6-adoption-in-2021\/ , 2021 . S. Strowes. IPv6 Adoption in 2021. https:\/\/labs.ripe.net\/author\/stephen_strowes\/ipv6-adoption-in-2021\/, 2021."},{"key":"e_1_2_1_47_1","volume-title":"arXiv preprint arXiv:1710.08536","author":"Strowes S. D.","year":"2017","unstructured":"S. D. Strowes . Bootstrapping Active IPv6 Measurement with IPv4 and Public DNS . arXiv preprint arXiv:1710.08536 , 2017 . S. D. Strowes. Bootstrapping Active IPv6 Measurement with IPv4 and Public DNS. arXiv preprint arXiv:1710.08536, 2017."},{"key":"e_1_2_1_48_1","volume-title":"Sep","author":"Thomson S.","year":"2007","unstructured":"S. Thomson , T. Narten , and T. Jinmei . IPv6 Stateless Address Auto-configuration. RFC 4862 (Draft Standard) , Sep 2007 . Updated by RFC 7527. S. Thomson, T. Narten, and T. Jinmei. IPv6 Stateless Address Auto-configuration. RFC 4862 (Draft Standard), Sep 2007. Updated by RFC 7527."},{"key":"e_1_2_1_49_1","volume-title":"ARES","author":"Ullrich J.","year":"2015","unstructured":"J. Ullrich , P. Kieseberg , K. Krombholz , and E. Weippl . On reconnaissance with IPv6: a pattern-based scanning approach . In ARES , 2015 . J. Ullrich, P. Kieseberg, K. Krombholz, and E. Weippl. On reconnaissance with IPv6: a pattern-based scanning approach. In ARES, 2015."},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCC51575.2020.9345025"}],"container-title":["ACM SIGCOMM Computer Communication Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3544912.3544915","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3544912.3544915","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:00:01Z","timestamp":1750186801000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3544912.3544915"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,4,30]]},"references-count":50,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2022,4,30]]}},"alternative-id":["10.1145\/3544912.3544915"],"URL":"https:\/\/doi.org\/10.1145\/3544912.3544915","relation":{},"ISSN":["0146-4833"],"issn-type":[{"value":"0146-4833","type":"print"}],"subject":[],"published":{"date-parts":[[2022,4,30]]},"assertion":[{"value":"2022-06-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}