4 ms·
We've gone from anonymous people scanning you, to semi-trusted people scanning you. The mantra of the new Internet is "Trust no one". :(
by adekok 11y ago
We've gone from anonymous people scanning you, to semi-trusted people scanning you.
The mantra of the new Internet is "Trust no one". :(
- dspillett 11y agoI don't see the people running hosts in pool.ntp.org's pool as any less anonymous than the general internet at large.
- adekok 11y agoYou trust them to give you a correct time. That's at least a bit more trust than you give any other random IP address.
- dspillett 11y agoThat doesn't imply I trust them in any other way though. And even if I do (I might trust them more than a more random selection of individuals, taking them doing something for the community as a point in favour of their character) that wouldn't stretch to trusting they were not unknowingly compromised by a third party.
- adekok 11y agoWhen you visit a web site, you trust that it will give you the data you ask, and hopefully not a lot more. You hope that it doesn't give you viruses. Sites that do are not trusted. Sites that don't are... not untrusted. :( You also hope that visiting a web site doesn't lead to the web site running a scan on your IP address. Or doing any number of other nefarious things. This kind of trust is at least most peoples assumptions. If it weren't, there would be no outrage or even surprise at the nefarious behaviors which abuse our trust.
- Johnny555 11y agoTechnically, you're trusting that collectively they are giving you the correct time, so you're not putting full trust in every single server. A rogue server with incorrect time will be ignored.
- adekok 11y agoDoes it violate your trust to scan anyone who does NTP queries? a) I never trusted them, so this is fine and to be expected b) I sort of trusted them, so this is surprising and not polite. I lean towards (b).
- fweespeech 11y agoNTP Pools are effectively anonymous.
- jms703 11y agoNo one objects to IRC servers scanning when you connect. This isn't a trust issue. If you sent packets to a free service, you have no rigts over whatever trace you left behind.
- Tepix 11y agoIRC servers only scan you to see if you run an open proxy. They have a good reason to scan you. There is no reason why a NTP server should scan you.