[outages] Possible NTP attacks? - Probably Not

[Jay Ashworth]

----- Original Message -----
> From: "George Herbert" <george.herbert at gmail.com>

> On Nov 20, 2012, at 11:05 AM, Jay Ashworth <jra at baylink.com> wrote:
> 
> > There are what appears to be a statistically significant number of reports
> > this week of possible anomalies with NTP timekeeping in various parts 
> > of the net.
> 
> Just to slightly correct and focus this - other than an unconfirmed
> GPS report, everything I have seen reported so far either publicly or
> privately confirmed to be syncing with the USNO servers tick or tock
> when problems manifested. This appears - so far - to have been of
> limited scope. Widespread, because of tick and tock's popularity and
> (as Leo Bicknell noted elsewhere) widespread use of too few upstream
> servers in local configurations. But not widespread among the stratum
> 1 servers set.

And indeed, another contributor points out this piece:

https://isc.sans.edu/diary.html?n&storyid=14548

Perhaps I spake too soon.  Sorry, folks.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra at baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
St Petersburg FL USA               #natog                      +1 727 647 1274