3 ms·

So anyone can bring down Mongo with a compromised ntp server? That's an inconvenient property to have.

• _jal 4y ago
  Oh, if you own someone's clock, you can do all sorts of damage. Want to expire everyone's passwords? Blow up their credit card processing? Those are just the obvious attacks.
  • samatman 4y ago
    Yes but bringing down a database should not be among those things. Surely we can agree on that.
    • macintux 4y ago
      I’m curious whether there is any database that handles this scenario correctly…or even whether there is a correct behavior for a situation where the system clock is rewound.
      • pfarrell 4y ago
        Good question. I used to test an auction app I maintained on SqlServer but I never pushed it more than a few hours into the future. To be clear: my experience with MongoDb was a one off local issue. No idea if there are server protections etc.