nanog mailing list archives

RE: Open Letter to D-Link about their NTP vandalism


From: up () 3 am
Date: Sat, 8 Apr 2006 11:26:59 -0400 (EDT)


On Fri, 7 Apr 2006, Todd Vierling wrote:


On Fri, 7 Apr 2006, David Hubbard wrote:

How about serve back bogus NTP data to non-BIX customer
prefixes?  Maybe if people's computers start setting
themselves to the year 2004 D-Link will do something. :-)

Perhaps return back a time value that is ~10 seconds from wrapping around?
Where "wrapping" depends on the size of a time value in the device's OS.

(Note that if the devices crash because of bad input, I can hardly see that
as legally actionable, since the devices never had the permission to use the
data source in the first place.  ;)

Don't count on that.  If you set a bear trap inside your front door, and a
burglar injures himself because of it, you can be held liable, at least in
most US states.  Dunno about .dk.

James Smallacombe                     PlantageNet, Inc. CEO and Janitor
up () 3 am                                                          http://3.am
=========================================================================


Current thread: