![](https://lemm.ee/api/v3/image_proxy?url=https%3A%2F%2Flemmy.ml%2Fpictrs%2Fimage%2F4467b9b9-692b-496e-9e73-e283fc49dd79.jpeg)
![](https://lemm.ee/api/v3/image_proxy?url=https%3A%2F%2Fprogramming.dev%2Fpictrs%2Fimage%2F170721ad-9010-470f-a4a4-ead95f51f13b.png)
I wouldn’t rely on the size of the address space to provide security. It’s possible to find hosts through methods other than brute force scanning. I remember seeing a talk from a conference (CCC? DEF CON? I can’t remember) where they were able to find hosts in government IPv6 address space (might have been DOD?) through stuff like certificate transparency logs and other DNS side channels.
Man, I need to go find that talk now…
Edit: I don’t think this is the one I saw previously but is in a similar vein: https://www.youtube.com/watch?v=AayifEqLbhI
Pound a lot of liquid IV or similar electrolyte supplement. You should be able to dilute enough to fly under the detection thresholds but still have enough vitamin/mineral content that it doesn’t get rejected. Had this happen to someone I know who was smoking daily and had a prescription for an amphetamine ADD med, neither showed on their test results.