RE: Open Letter to D-Link about their NTP vandalism
From: Rubens Kuhl Jr.
It still would require him to answer the DNS requests. Only way to addres that is everybody outside DIX declare gps.dix.de as www.dlink.com in their resolvers.
How about serve back bogus NTP data to non-BIX customer prefixes? Maybe if people's computers start setting themselves to the year 2004 D-Link will do something. :-) Dave
On Fri, 7 Apr 2006, David Hubbard wrote:
How about serve back bogus NTP data to non-BIX customer prefixes? Maybe if people's computers start setting themselves to the year 2004 D-Link will do something. :-)
Perhaps return back a time value that is ~10 seconds from wrapping around? Where "wrapping" depends on the size of a time value in the device's OS. (Note that if the devices crash because of bad input, I can hardly see that as legally actionable, since the devices never had the permission to use the data source in the first place. ;) -- -- Todd Vierling <tv@duh.org> <tv@pobox.com> <todd@vierling.name>
On Fri, 7 Apr 2006, Todd Vierling wrote:
On Fri, 7 Apr 2006, David Hubbard wrote:
How about serve back bogus NTP data to non-BIX customer prefixes? Maybe if people's computers start setting themselves to the year 2004 D-Link will do something. :-)
Perhaps return back a time value that is ~10 seconds from wrapping around? Where "wrapping" depends on the size of a time value in the device's OS.
(Note that if the devices crash because of bad input, I can hardly see that as legally actionable, since the devices never had the permission to use the data source in the first place. ;)
Don't count on that. If you set a bear trap inside your front door, and a burglar injures himself because of it, you can be held liable, at least in most US states. Dunno about .dk. James Smallacombe PlantageNet, Inc. CEO and Janitor up@3.am http://3.am =========================================================================
On Fri, 7 Apr 2006, David Hubbard wrote:
It still would require him to answer the DNS requests. Only way to addres that is everybody outside DIX declare gps.dix.de as www.dlink.com in their resolvers. How about serve back bogus NTP data to non-BIX customer
From: Rubens Kuhl Jr. prefixes? Maybe if people's computers start setting themselves to the year 2004 D-Link will do something. :-)
yeah, d-link would probably sue DIX. -Dan
participants (4)
-
David Hubbard -
goemon＠anime.net -
Todd Vierling -
up＠3.am