RE: Energy Policy Act of 2005: mini Y2k needed?

["Hayes, Bill" <Bill.Hayes () owh com>]

I believe that Tripwire has a security update dealing with DST 2007. See
http://www.tripwire.com/support/dst. Also, organizations with security
appliances should be contacting their vendors for patches. Some security
appliances are based on Windows 2000 and that might get interesting.

Bill...

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Eggleston, Mark
Sent: Thursday, February 01, 2007 4:16 PM
To: security-basics () securityfocus com
Subject: Energy Policy Act of 2005: mini Y2k needed?

Hello all,

I got the message below regarding the upcoming change in daylight
savings time.  Are any of you conducting a "mini Y2k" to assess any
unforeseen consequences?

For example:

- Shouldn't a log aggregator or managed security services comparing
device logs have all event time stamp data synced on the same time?
- Do any of you know of any authentication mechanisms (on the
application side) that must sync with the OS system time?

Are there any other issues anyone has looked at or it this much ado
about nothing?

Your insights would be appreciated.  

Thank you,

Mark Eggleston
Manager, Security and Business Continuity Information Services Health
Partners of Philadelphia, Inc.
(215) 991-4388


----Original Message-----
From: Techie Administrator [mailto:TAdministrator () strohlsystems com]
Sent: Thursday, January 25, 2007 9:42 AM
Subject: Strohl Systems


Dear Strohl Product User:

The Energy Policy Act of 2005 changes the start and end dates of
daylight saving time starting in 2007. Clocks will be set ahead one hour
on the second Sunday of March instead of the current first Sunday of
April. Clocks will be set back one hour on the first Sunday in November,
rather than the last Sunday of October. This will make electronic clocks
that had pre-programmed dates for adjusting to daylight saving time
obsolete and will require updates to computer operating systems.

All Strohl products use the Microsoft Windows Operating System generated
time and date to track certain transactions. As long as the Operating
System is updated and the system time and date are correct, all products
will track the transactions accurately and will report them without
error.

The Strohl Systems Product Teams



-----------------------------------------
All the information contained in this electronic communication and
any attachments is intended only for the use of the individual or
entity to which it is addressed. If you are not the intended
recipient, you are hereby notified that you should not disseminate,
distribute or copy any portion of this electronic communication. If
you have received this message in error, please notify the sender
by replying to this email and immediately deleting any and all
copies you may have inadvertently made.