[outages] Possible NTP attacks?

[Al Berg]

Some information on the NTP weirdness from SANS:
http://isc.sans.edu/diary.html?storyid=14548&rss

-----Original Message-----
From: outages-bounces at outages.org [mailto:outages-bounces at outages.org] On Behalf Of George Herbert
Sent: Tuesday, November 20, 2012 2:20 PM
To: Jay Ashworth
Cc: outages at outages.org
Subject: Re: [outages] Possible NTP attacks?



On Nov 20, 2012, at 11:05 AM, Jay Ashworth <jra at baylink.com> wrote:

> There are what appears to be a statistically significant number of 
> reports this week of possible anomalies with NTP timekeeping in 
> various parts of the net.


Just to slightly correct and focus this - other than an unconfirmed GPS report, everything I have seen reported so far either publicly or privately confirmed to be syncing with the USNO servers tick or tock when problems manifested.  This appears - so far - to have been of limited scope.  Widespread, because of tick and tock's popularity and (as Leo Bicknell noted elsewhere) widespread use of too few upstream servers in local configurations.  But not widespread among the stratum 1 servers set.


George William Herbert
Sent from my iPhone
_______________________________________________
Outages mailing list
Outages at outages.org
https://puck.nether.net/mailman/listinfo/outages