[ntp:security] Fwd: Re: ntp nonce exploit?

Harlan Stenn stenn at nwtime.org
Fri Dec 2 11:10:54 UTC 2016


Please use the enclosed key for secure email with Todor.

H

-------- Forwarded Message --------
Return-Path: <todor.donev at gmail.com>
X-Original-To: stenn at nwtime.org
Delivered-To: stenn at nwtime.org
Received: from localhost (localhost [127.0.0.1]) by chessie.everett.org
(Postfix) with SMTP id 9CD40B835 for <stenn at nwtime.org>; Thu,  1 Dec
2016 11:04:26 +0000 (UTC)
Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com
[IPv6:2a00:1450:400c:c09::22f]) by chessie.everett.org (Postfix) with
ESMTPS id F33F8B833 for <stenn at nwtime.org>; Thu,  1 Dec 2016 11:04:25
+0000 (UTC)
Received: by mail-wm0-x22f.google.com with SMTP id u144so59318836wmu.1
     for <stenn at nwtime.org>; Thu, 01 Dec 2016 03:04:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=subject:to:references:from:message-id:date:user-agent:mime-version
    :in-reply-to:content-transfer-encoding;
bh=O4pTCrot3abRSfn76NIFNQz46XY/Bdx4d+L/WMh7vf0=;
b=zHMAJWtxtJo8Amn0i1HG3rUF5DL1a+8VH9/rt7jxapEBiF0SL6UGq4wZwDOBt89h51
    yvUMddW+62rGB65CJFKeV39cU/tl0XAFEwyuNpUqP7C7XyIsdNMcl0JI9or95T1YI3OJ

0FaSexz8tZ4/xuu70tFlTp2/IXGmc9uSPYCbhRSrsdz1UUtlcfYK8tpWm9TDXPWw16+J
    kcd1wpmxa/m1Y5gG4/XZ16ehJzD27INbC031nyUoQuTM4yZpKdEBuJ3agfmh3eIj3m6R

kPvIDtEPoLPoP/8fX2PxBLNrnSuBAz98d87nU0ec0n+97h1sqfERj5aY0rnWOGy/b6VY
    SqJg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:subject:to:references:from:message-id:date
:user-agent:mime-version:in-reply-to:content-transfer-encoding;
bh=O4pTCrot3abRSfn76NIFNQz46XY/Bdx4d+L/WMh7vf0=;
b=TUn9LV3qotf+OoKEiz+3xytx4GxSowpm7jFJjaF/2KFEP0PKiskv78evXQ0x7YBcEF
    0R9cvJrGPGly0P0my0A2PlgwxxpGAqBBRayBd3LNqp/iaht2iXKSm+V2PyQavvDCfNii

fFlT3lNN749LpuTXmXzhQsdS8wxNc8DPtrUs7iznTEN3NGAp6kYSty7SUDxuRocV3pEg
    9b7mQTMP8B+pVkc5oTI63hiBEiHBPE+2ugQ1yjoJPdAvirm8iLrg7G18Kt9P2yCvcurJ

vjDYSAlkzlApdhC90bEHVr/gRPSDbZrcB9/xZSnienAZxZH/6te3jEXq6gaiYdTOcTf3
    6Lrw==
X-Gm-Message-State:
AKaTC03Zwu+8CJ+dR6v9XyU4c4McuJR9v8noN/ycZhjGQBvbEXePqjuVrrUNiOA+uCyldg==
X-Received: by 10.28.14.66 with SMTP id
63mr30689822wmo.127.1480590264003;        Thu, 01 Dec 2016 03:04:24
-0800 (PST)
Received: from [192.168.1.146] (176-12-60-210.pon.spectrumnet.bg.
[176.12.60.210])        by smtp.googlemail.com with ESMTPSA id
i2sm77633666wjx.44.2016.12.01.03.04.23        for <stenn at nwtime.org>
   (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
   Thu, 01 Dec 2016 03:04:23 -0800 (PST)
Subject: Re: ntp nonce exploit?
To: Harlan Stenn <stenn at nwtime.org>
References: <7c6381da-c0b4-e7c3-67d7-a3cd22a74cbe at nwtime.org>
From: Тодор Донев <todor.donev at gmail.com>
Message-ID: <fe41b589-98f0-b626-0e75-aaa4e3a68f9b at gmail.com>
Date: Thu, 1 Dec 2016 13:04:18 +0200
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:45.0) Gecko/20100101
Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <7c6381da-c0b4-e7c3-67d7-a3cd22a74cbe at nwtime.org>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Thu Dec  1 11:04:26 2016
X-DSPAM-Confidence: 0.7482
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 3974,584003ba14711963597791

resend mail without encryption or change public key with this:


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.14 (GNU/Linux)
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=pz8H
-----END PGP PUBLIC KEY BLOCK-----





More information about the security mailing list