Cigar Asylum Cigar Forum

Cigar Asylum Cigar Forum (http://www.cigarasylum.com/vb/index.php)
-   General Discussion (http://www.cigarasylum.com/vb/forumdisplay.php?f=48)
-   -   Potentially serious security flaw in fundamental Internet SW (http://www.cigarasylum.com/vb/showthread.php?t=68609)

markem 12-20-2014 09:27 AM

Potentially serious security flaw in fundamental Internet SW
 
If you have a computer ;) the odds are really good that you have a clock that uses the NTP (network time protocol). While the problem is about the part of the server that is on the time server, the security flaw can be used to create all sorts of security havoc.

Here is a pointer to the article.

http://support.ntp.org/bin/view/Main/SecurityNotice

For those is Internet facing servers, make sure that you either upgrade as soon as possible or ensure that NTP is disabled. This may create some issues for those who only get their network time from a single source.

Use this Google string if you want to find out more: ntp security issues

8zeros 12-20-2014 06:36 PM

Re: Potentially serious security flaw in fundamental Internet SW
 
It may take a while for firmware devices like routers to get an update. Do you think NTP should be disabled on these boxes until then?

markem 12-20-2014 07:19 PM

Re: Potentially serious security flaw in fundamental Internet SW
 
Quote:

Originally Posted by 8zeros (Post 2007007)
It may take a while for firmware devices like routers to get an update. Do you think NTP should be disabled on these boxes until then?

The flaw is mostly a serious issues for servers running 'ntpd'. I would encourage people to contact their router vendor. I have no opinion on whether or not NTP should be silenced. Lots of bad things can happen if you lose clock synchronization. Very bad things.

The Poet 12-20-2014 07:42 PM

Re: Potentially serious security flaw in fundamental Internet SW
 
I'm pretty sure I have a computer, but I have no idea what any of this means.

icehog3 12-20-2014 09:52 PM

Re: Potentially serious security flaw in fundamental Internet SW
 
Quote:

Originally Posted by The Poet (Post 2007014)
I'm pretty sure I have a computer, but I have no idea what any of this means.

Unplug your clock radio and you should be fine. :tu

The Poet 12-21-2014 05:39 AM

Re: Potentially serious security flaw in fundamental Internet SW
 
Quote:

Originally Posted by icehog3 (Post 2007035)
Unplug your clock radio and you should be fine. :tu

Thanks, man. That I can do.

Porch Dweller 12-21-2014 06:21 AM

Re: Potentially serious security flaw in fundamental Internet SW
 
Quote:

Originally Posted by icehog3 (Post 2007035)
Unplug your clock radio and you should be fine. :tu

I stopped the pendulum on my Grandfather clock just to be on the safe side.

markem 12-21-2014 08:49 AM

Re: Potentially serious security flaw in fundamental Internet SW
 
Quote:

Originally Posted by Porch Dweller (Post 2007067)
I stopped the pendulum on my Grandfather clock just to be on the safe side.

wrong, wrong, wrong! You need to readjust it so that it only swings to the right.

icehog3 12-21-2014 09:49 AM

Re: Potentially serious security flaw in fundamental Internet SW
 
It don't mean a thing, if it don't have that swing, do da da do da

The Poet 12-21-2014 09:53 AM

Re: Potentially serious security flaw in fundamental Internet SW
 
Quote:

Originally Posted by markem (Post 2007106)
wrong, wrong, wrong! You need to readjust it so that it only swings to the right.

Or just switch to tighty-whities, so it doesn't swing at all. :noon

badbriar 12-21-2014 10:24 AM

Re: Potentially serious security flaw in fundamental Internet SW
 
Quote:

Originally Posted by Porch Dweller (Post 2007067)
I stopped the pendulum on my Grandfather clock just to be on the safe side.

Yeah, but Grandmother clock will be pissed at you for disabling his pendulum!
:hy

Subvet642 12-21-2014 12:55 PM

Re: Potentially serious security flaw in fundamental Internet SW
 
http://www.cigarasylum.com/vb/pictur...pictureid=8497

Ogre 12-21-2014 01:11 PM

Re: Potentially serious security flaw in fundamental Internet SW
 
:bh:bh:bh:bh


All times are GMT -6. The time now is 01:18 AM.

Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.