nanog mailing list archives

Re: Open Letter to D-Link about their NTP vandalism


From: John Dupuy <jdupuy-list () socket net>
Date: Tue, 11 Apr 2006 11:00:58 -0500


To keep this operational: Operationally the network operator should contact a lawyer before doing something like this.

Purposely and knowingly sending bad data in order to do harm is a counter-attack. As such it might be vigilantism, which is illegal in most countries. Or it might be self-defense, which is not illegal. Might. Contact a lawyer.

John

At 07:36 PM 4/10/2006, Simon Lyall wrote:

On Mon, 10 Apr 2006 Valdis.Kletnieks () vt edu wrote:
> One particular piece of crapware of the tucows archive variety would retry
> once per second if it hadn't heard a response - but a ICMP Port Unreachable
> would trigger an *immediate* query, so it would basically re-query at whatever
> the RTT for the path was.

I've said in other forums the only solution for this sort of software is
to return the wrong time (by several months). The owner might actually
notice then and fix the problem.

Just not returning anything means the time still works on the querying
device (especially if it uses multiple servers) and the problem will not
be noticed and it will continue.

--
Simon J. Lyall  |  Very Busy  |  Web: http://www.darkmere.gen.nz/
"To stay awake all night adds a day to your life" - Stilgar | eMT.


Current thread: