From owner-freebsd-security Mon Jul 8 10:41:49 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CB29237B400 for ; Mon, 8 Jul 2002 10:41:43 -0700 (PDT) Received: from web10105.mail.yahoo.com (web10105.mail.yahoo.com [216.136.130.55]) by mx1.FreeBSD.org (Postfix) with SMTP id 8721D43E52 for ; Mon, 8 Jul 2002 10:41:43 -0700 (PDT) (envelope-from twigles@yahoo.com) Message-ID: <20020708174143.31518.qmail@web10105.mail.yahoo.com> Received: from [68.5.49.41] by web10105.mail.yahoo.com via HTTP; Mon, 08 Jul 2002 10:41:43 PDT Date: Mon, 8 Jul 2002 10:41:43 -0700 (PDT) From: twig les Subject: Re: NTP security - (was Any security issues with root's cron job?) To: Ben Lyon , "David G . Andersen" Cc: Ross Wheeler , twig les , Brian Reichert , Kim Okasawa , _@r4k.net, freebsd-security@FreeBSD.ORG In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I should probably have mentioned that I work at a telco, which means:1. we're in the process of leasing a line to an internal source, and 2. I have no control over anything (I'm just the one who knows how to do it) and 3. most decisions are not based on sound technical logic. I will look at those solutions suggested though for myself and just for general curiosity. Thanks. --- Ben Lyon wrote: > > Ship over to truetime.com and have a look-see. Nice > self-contained 1U > GPS stratum 1 timeservers. Less than $2000 if I > remember correctly.. > > > -------------------------------------------------------------------- > Ben Lyon blyon@blindfaith.org > > > > On Fri, 5 Jul 2002, David G . Andersen wrote: > > > Ross Wheeler just mooed: > > > > > > Whip over to ebay, buy a cheap second-hand GPS > and cable, stick it into > > > one of your servers and presto - instant > "stratum 1" time reference for > > > > One thing to note with this approach is that you > have to pick > > your GPS carefully. Hand-helds often have really > terrible time output; > > a friend of mine used his PCMCIA GPS and was > getting worse-than-NTP > > time from it. If you can find it, look for a > model that's optimized > > for time synch. Trimble, UT+, etc. There's a > good list of them in > > the NTP faq at http://www.ntp.org/ > > > > > under a hundred bucks. Under your control (I > can't see anyone taking over > > > or DoSing the whole of the GPS network any time > soon, do you?) > > > > Certainly not to attack one internet site, at > least. :) > > > > -Dave > > > > -- > > work: dga@lcs.mit.edu me: > dga@pobox.com > > MIT Laboratory for Computer Science > http://www.angio.net/ > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of > the message > > > ===== ----------------------------------------------------------- All warfare is based on deception. ----------------------------------------------------------- __________________________________________________ Do You Yahoo!? Sign up for SBC Yahoo! Dial - First Month Free http://sbc.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message