From owner-freebsd-security Fri Jul 5 21:23: 3 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C029A37B400 for ; Fri, 5 Jul 2002 21:23:01 -0700 (PDT) Received: from giroc.albury.net.au (giroc.albury.NET.AU [203.15.244.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 30FCD43E31 for ; Fri, 5 Jul 2002 21:23:00 -0700 (PDT) (envelope-from rossw@albury.net.au) Received: from giroc.albury.net.au (giroc.albury.net.au [203.15.244.13]) by giroc.albury.net.au (8.11.1/8.11.1) with ESMTP id g663qEE16526; Sat, 6 Jul 2002 13:52:14 +1000 (EST) X-Delivered-To: freebsd-security@FreeBSD.ORG Date: Sat, 6 Jul 2002 13:52:13 +1000 (EST) From: Ross Wheeler To: twig les Cc: Brian Reichert , Kim Okasawa , <_@r4k.net>, Subject: Re: NTP security - (was Any security issues with root's cron job?) In-Reply-To: <20020706032916.35363.qmail@web10105.mail.yahoo.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > The way we skirt the issue of having our own secure > source is to get our border routers to poll a couple > of servers on the internet and then the servers can > poll them. There are a number of possible attacks on > this, but we're not getting 20 grand for our own > source anytime soon > I'm open to ideas. Whip over to ebay, buy a cheap second-hand GPS and cable, stick it into one of your servers and presto - instant "stratum 1" time reference for under a hundred bucks. Under your control (I can't see anyone taking over or DoSing the whole of the GPS network any time soon, do you?) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message