Vulnerability Development mailing list archives
Re: Windows XP RC2
From: herrold <herrold () owlriver com>
Date: Tue, 21 Aug 2001 12:41:17 -0400 (EDT)
On Tue, 21 Aug 2001, Dino wrote:
I added time.windows.com to a 3rd party NTP app and it could not get the time from time.windows.com. I tried it on Unix also and it did not work either ;) Maybe there timeserver is not RF868 compliant or just typical MS-centric?
There is the old saw about "Never attribute to malice that which may be explained by ignorance" ... If one were writing an information gathering tool, why not use a 'two for one' approach -- Serve up known non-forged timestamps for time limited software such as leased applications; AND gather information as to the serial numbers, etc. on a remote host, using a variant of a protocol which supports encrypted exchanges (NTP) [Think MS Kerberos and its 'extension' use of a open field]. The result might be that one's customers cannot sniff the meaning of a stream without having the (concealed) private key and full spec [Think GUID's]. I do not believe that the people paid by Microsoft to sit around and devise a method to implement .NET are ignorant. The old saw is inapposite here. ... not being paranoid, but not making assumptions. either ... -- Russ Herrold
Current thread:
- Windows XP RC2 Dino (Aug 20)
- RE: Windows XP RC2 Thomas Reagan (Aug 20)
- Re: Windows XP RC2 Derek Kwan (Aug 20)
- Re: Windows XP RC2 John Galt (Aug 20)
- Re: Windows XP RC2 bugtraq (Aug 20)
- Re: Windows XP RC2 Gregory McCann (Aug 20)
- Re: Windows XP RC2 Dino (Aug 21)
- Re: Windows XP RC2 Blue Boar (Aug 21)
- Re: Windows XP RC2 Gregory McCann (Aug 21)
- Re: Windows XP RC2 herrold (Aug 21)
- Re: Windows XP RC2 Michel Arboi (Aug 21)
- Re: Windows XP RC2 Dennis McHenry (Aug 20)
- RE: Windows XP RC2 Dom De Vitto (Aug 21)
- Re: Windows XP RC2 Jason Legate (Aug 21)
- RE: Windows XP RC2 Dom De Vitto (Aug 21)
- Re: Windows XP RC2 Christopher McCrory (Aug 21)
- Re: Windows XP RC2 Dimitry Andric (Aug 22)
- <Possible follow-ups>
- RE: Windows XP RC2 Petruzel, Oliver (Aug 20)
- Re: Windows XP RC2 fintler (Aug 23)