[Outages-discussion] GPSd bug may cause auth failures next week (10/24/2021)

[Jay R. Ashworth]

----- Original Message -----
> From: "Frank Bulk" <frnkblk at iname.com>
> To: outages-discussion at outages.org
> Sent: Friday, October 22, 2021 4:12:17 PM
> Subject: Re: [Outages-discussion] GPSd bug may cause auth failures next week (10/24/2021)

> FYI, CISA also published something yesterday:
> https://us-cert.cisa.gov/ncas/current-activity/2021/10/21/gps-daemon-gpsd-ro
> llover-bug
> 
> And it links to the same SANS Diary. =)
> 
> Frank
> 
> -----Original Message-----
> From: Outages <outages-bounces at outages.org> On Behalf Of Jay R. Ashworth via
> Outages
> Sent: Monday, October 18, 2021 12:54 PM
> To: Outages <outages at outages.org>
> Subject: [outages] GPSd bug may cause auth failures next week (10/24/2021)
> 
> A bug in the GPS Week Rollover code of GPSd, which apparently isn't quite
> as tight as ESR thinks it is, may cause GPD steered clocks and infrastructre
> to report incorrect date-data starting on or about 10-24-2021 (presumably)
> UTC,
> and this may bubble up into authentication and security protocols (including
> SSL) since they tend to depend on everyone having the same clock these days.

It would appear ESR is no longer the maintainer for GPSD, so my shade was 
unwarranted.

Jay regrets the error.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra at baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates       http://www.bcp38.info          2000 Land Rover DII
St Petersburg FL USA      BCP38: Ask For It By Name!           +1 727 647 1274