Vulnerability of NTP

[Andre Kesteloot]

On 2/26/2014 20:21 PM, Robert Seastrom wrote:
> On Feb 25, 2014, at 11:50 PM, Andre Kesteloot <andre.kesteloot at verizon.net> wrote:
>
>>> http://www.bbc.co.uk/news/technology-26136774
> The article kind of misses the point, that it's not NTP or open servers that's the problem; it's amplification potential

(Dear, or Formerly Dear  -:) Rob,

That's like saying "/I want to leave my doors open at night, the problem 
is with those thieves out there"/.
Of course, yes, sure, the problem is the bad guys, but it is up to me 
and my friends to accept that, nowadays, I have to close and lock my 
doors and my windows (pun intended) at night.

I 'd hate to disagree with you (in public), but the article did /_not 
_/miss the point: the title was clearly "_the vulnerability of NT_P."
Vulnerability is therefore what we are discussing.

And NTP (certainly a most useful thing) has been overwhelmed by a simple 
DOS (denial of service attack) and therefore, the NTP network itself/ 
--with all its advantages-- must be protected.
NTP, as you well know, is used by most computers connected to the Web 
today, just like Visa Cards are used by most human beings in the US.

You would probably agree that attacks, against poorly-protected Visa 
Card databases, are the problems of the databases managers, not the 
problem of hackers trying to gain access to them.
_http://business.time.com/2014/02/11/targets-hacking-fix-is-second-rate-says-consumer-reports/__
_
If my computer uses NTP,  --and it does--  should it not be protected by 
"those in charge " (whoever they may be).

Considering the usefulness, as well as the vulnerabilities of  NTP, 
wouldn't it be a good idea if "Cyber Command" (or whoever else in 
Go'ment), whatever else they may be doing, were to get involved, 
considering the downside potential of doing nothing ?

73
André





---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://amrad.org/pipermail/tacos/attachments/20140226/c8686410/attachment.html>