[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

NIST NTP servers

Subject: NIST NTP servers
From: george.herbert at gmail.com (George Herbert)
Date: Thu, 12 May 2016 21:38:16 -0700
In-reply-to: <[email protected]>
References: <CAKdv5965qRG_Qe=xL+=7dcZzeaU2y8xcYXfr7EAAEFnRJ7nnyw@mail.gmail.com> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>

> On May 11, 2016, at 6:31 AM, Leo Bicknell <bicknell at ufp.org> wrote:
> ...
> You're replacing one single point of failure with another.
> 
> Personally, my network gets NTP from 14 stratum 1 sources right now.
> You, and the hacker, do not know which ones.  You have to guess at least
> 8 to get me to move to your "hacked" time.  Good luck.

...except for people who think that N internet only servers is enough redundancy.

Pretty much anything with unfiltered outbound could put out enough forged UDP to effectively jam ALL the Stratum 1 servers for a given endpoint.

George William Herbert
Sent from my iPhone

References:
- NIST NTP servers
  - From: freetexwatson at gmail.com (b f)
- NIST NTP servers
  - From: mel at beckman.org (Mel Beckman)
- NIST NTP servers
  - From: msa at latt.net (Majdi S. Abbas)
- NIST NTP servers
  - From: chuckchurch at gmail.com (Chuck Church)
- NIST NTP servers
  - From: gem at rellim.com (Gary E. Miller)
- NIST NTP servers
  - From: mel at beckman.org (Mel Beckman)
- NIST NTP servers
  - From: bicknell at ufp.org (Leo Bicknell)

Prev by Date: A briefing on NTPsec
Next by Date: NIST NTP servers
Previous by thread: NIST NTP servers
Next by thread: NIST NTP servers
Index(es):
- Date
- Thread