[189240] in North American Network Operators' Group
Re: NIST NTP servers
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Wed May 11 22:39:00 2016
X-Original-To: nanog@nanog.org
To: Eric Kuhnke <eric.kuhnke@gmail.com>
From: Valdis.Kletnieks@vt.edu
In-Reply-To: <CAB69EHj5SCTOdXXA-TgV_P7LWJ8yQHgijmJoVNWUL7jrm83kOw@mail.gmail.com>
Date: Wed, 11 May 2016 22:38:56 -0400
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
--==_Exmh_1463020736_2317P
Content-Type: text/plain; charset=us-ascii
On Wed, 11 May 2016 17:23:31 -0700, Eric Kuhnke said:
> average of $150/mo x 500 = $75,000
Id worry more about the fact that somebody is willing to spend $75K/mo to
attack me than the fact that it might be possible to wiggle my time base a bit.
At that point, you *really* have to worry about other, more productive attacks,
such as social engineering (including spear phishing and bribery), or obtaining
a 0-day against something in your network.
Remember that the FBI has basically admitted that the most effective means of
uncloaking a Tor user has been browser 0-days, even though decloaking by pwning
a majority of the servers is possible....
(Seriously - if *you* had $75K/mo to attack somebody, what would *you* spend
it on?)
--==_Exmh_1463020736_2317P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Exmh version 2.5 07/13/2001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=2lrI
-----END PGP SIGNATURE-----
--==_Exmh_1463020736_2317P--
