PDA

View Full Version : Potentially serious security flaw in fundamental Internet SW


markem
12-20-2014, 09:27 AM
If you have a computer ;) the odds are really good that you have a clock that uses the NTP (network time protocol). While the problem is about the part of the server that is on the time server, the security flaw can be used to create all sorts of security havoc.

Here is a pointer to the article.

http://support.ntp.org/bin/view/Main/SecurityNotice

For those is Internet facing servers, make sure that you either upgrade as soon as possible or ensure that NTP is disabled. This may create some issues for those who only get their network time from a single source.

Use this Google string if you want to find out more: ntp security issues

8zeros
12-20-2014, 06:36 PM
It may take a while for firmware devices like routers to get an update. Do you think NTP should be disabled on these boxes until then?

markem
12-20-2014, 07:19 PM
It may take a while for firmware devices like routers to get an update. Do you think NTP should be disabled on these boxes until then?

The flaw is mostly a serious issues for servers running 'ntpd'. I would encourage people to contact their router vendor. I have no opinion on whether or not NTP should be silenced. Lots of bad things can happen if you lose clock synchronization. Very bad things.

The Poet
12-20-2014, 07:42 PM
I'm pretty sure I have a computer, but I have no idea what any of this means.

icehog3
12-20-2014, 09:52 PM
I'm pretty sure I have a computer, but I have no idea what any of this means.

Unplug your clock radio and you should be fine. :tu

The Poet
12-21-2014, 05:39 AM
Unplug your clock radio and you should be fine. :tu

Thanks, man. That I can do.

Porch Dweller
12-21-2014, 06:21 AM
Unplug your clock radio and you should be fine. :tu

I stopped the pendulum on my Grandfather clock just to be on the safe side.

markem
12-21-2014, 08:49 AM
I stopped the pendulum on my Grandfather clock just to be on the safe side.

wrong, wrong, wrong! You need to readjust it so that it only swings to the right.

icehog3
12-21-2014, 09:49 AM
It don't mean a thing, if it don't have that swing, do da da do da

The Poet
12-21-2014, 09:53 AM
wrong, wrong, wrong! You need to readjust it so that it only swings to the right.

Or just switch to tighty-whities, so it doesn't swing at all. :noon

badbriar
12-21-2014, 10:24 AM
I stopped the pendulum on my Grandfather clock just to be on the safe side.

Yeah, but Grandmother clock will be pissed at you for disabling his pendulum!
:hy

Subvet642
12-21-2014, 12:55 PM
http://www.cigarasylum.com/vb/picture.php?albumid=542&pictureid=8497

Ogre
12-21-2014, 01:11 PM
:bh:bh:bh:bh