Thanks for reading.

My next piece is going to examine how stable systemd interfaces are over time. I would have written it already, but it's not an easy thing to do :S

Well, that strategy does match your sig.

AFAICT it doesn't put 'the internet' in jeopardy, reports are only a small percentage of websites are even vulnerable to this (link).

Here's the weird thing about this to me (in bullet points):
* A couple years ago, the only people who cared about vulns were people who knew how to use metasploit or ethereal or something.
* Last year, with Heartbleed, the news organization found out it could generate page views if the vulnerability had a pretty logo.
* Now with this story, the non-techy articles are so numerous it's hard to figure out what the actual exploit even is. But if you want to find an 'personal interest' story blaming Bush or Clinton (or whatever president), they're all over the place.

I wonder what will happen if the mainstream media learns to read Apple's or Microsoft's security bulletins and finds out how common security exploits actually are......

ICMP uses IP, and ARP typically does too.

They're annoying only if you can't solve them

What do you suggest doing about that?

If they're using it as framing or as payload, then they're using IP.

Oh but don't worry, they're secured using the NetUSB driver!

None of those (of the ones that are not IP) use an IP address.

UDP is included in */IP. UDP packets travel over IP.

The routing is the hard part.....it's like some kind of weird reverse-NAT. It seems like there should be some simple IP-Tables command to do this based on MAC address, but I don't know what the command would be. Then he could run multiple instance of the same software (depending on the software).

I don't think there's a way to set up that kind of routing in Windows, though.

Is there anything that uses Ethernet without using */IP? Is there anything that uses Ethernet without using */IP that also uses IP addresses??

That might be the best way, because you are limited by the software they gave you. Might consider trying Linux and Wine to save space. If that works, then you can load 16 raspberry pies into a briefcase and run it from there (I've seen similar operations for wireless monitoring).

If you actually do build that setup, please take pics because it sounds kind of cool.

It makes me feel good to know that something in this world is still air-gapped.