[89839] in North American Network Operators' Group
RE: Open Letter to D-Link about their NTP vandalism
daemon@ATHENA.MIT.EDU (up@3.am)
Sat Apr 8 11:27:29 2006
Date: Sat, 8 Apr 2006 11:26:59 -0400 (EDT)
From: up@3.am
To: nanog@nanog.org
In-Reply-To: <Pine.WNT.4.63.0604071825220.8020@jvc>
Errors-To: owner-nanog@merit.edu
On Fri, 7 Apr 2006, Todd Vierling wrote:
>
> On Fri, 7 Apr 2006, David Hubbard wrote:
>
> > How about serve back bogus NTP data to non-BIX customer
> > prefixes? Maybe if people's computers start setting
> > themselves to the year 2004 D-Link will do something. :-)
>
> Perhaps return back a time value that is ~10 seconds from wrapping around?
> Where "wrapping" depends on the size of a time value in the device's OS.
>
> (Note that if the devices crash because of bad input, I can hardly see that
> as legally actionable, since the devices never had the permission to use the
> data source in the first place. ;)
Don't count on that. If you set a bear trap inside your front door, and a
burglar injures himself because of it, you can be held liable, at least in
most US states. Dunno about .dk.
James Smallacombe PlantageNet, Inc. CEO and Janitor
up@3.am http://3.am
=========================================================================
