[ntp:hackers] GPS.FreeBSD.org moves to new IP#

Brad Knowles brad.knowles at skynet.be
Sat Aug 23 06:06:56 PDT 2003


At 5:41 PM +0200 2003/08/22, Poul-Henning Kamp wrote:

>  Unfortunately it seems that GPS.FreeBSD.dk's old IP# is one of the
>  ones hardcoded in the SoBig.F Virus and I have therefore effectively
>  immediately closed the old IP#.

	It strikes me that the next variant of SoBig.F may use 
pool.ntp.org to sync it's time, plus Dave's lists of known public NTP 
time servers, at which point we can't just close a small list of 
known time servers -- We'd basically have to take down all known NTP 
time servers world-wide.

	Moreover, this horse is most likely already out of the barn.  If 
someone is going to do this sort of stuff, they've probably already 
got copies of all the files and other data they need.


	Ouch.

-- 
Brad Knowles, <brad.knowles at skynet.be>

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
     -Benjamin Franklin, Historical Review of Pennsylvania.

GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--) N+
!w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)



More information about the hackers mailing list