Vulnerability Development mailing list archives

Re: Windows XP RC2


From: John Galt <galt () inconnu isu edu>
Date: Mon, 20 Aug 2001 10:16:18 -0600 (MDT)


You mean, since before the NTP hole got patched?!  BTW, time.microsoft.com
doesn't exist for the rest of the world, you may want to find another
server on principle--you can't figure out what stratum it's in, so can't
verify the quality of the data.  Assuming that it truly IS a
bastardized NTP, a UDP spoof may be a good thing, especially since MS
seems to be banking on the security through obscurity thing, so probably
didn't take any extra precautions or even make provision for them.

On Mon, 20 Aug 2001, Derek Kwan wrote:


I recall seeing time.microsoft.com since pre-RC1 maybe back in Beta 1
builds (or even earlier).

Derek
WinXP Beta Tester
\|/ _____ \|/    ***************************************************
"@'/ , . \`@"    This e-mail is send with 100% recyclable electrons.
/_| \___/ |__\   ***************************************************
   \___U_/       Derek () KWAN ca


On Mon, 20 Aug 2001, Dino wrote:

Well I am not sure if you would consider this a bug, incident, monitoring or
a feature, but in Windows XP RC2 that we loaded this weekend
I noticed that M$ has Network Time Client built to keep correct time.
[snip]

time.windows.com  !!!


-- 
I can be immature if I want to, because I'm mature enough to make my own
decisions.

Who is John Galt?  galt () inconnu isu edu



Current thread: