4 ms·
> it returns a list of up to the last 600 IP addresses that last accessed the NTP server It just gives up that data to anyone that asks? Seems like a huge priv
by powertower 13y ago
> it returns a list of up to the last 600 IP addresses that last accessed the NTP server
It just gives up that data to anyone that asks? Seems like a huge privacy issue.
Imaging Apache or Nginx giving up the last 600 IPs it served and maybe the URLs they went to.
edit: there is always the occasionally open Apache /server-status handler that leaks this type of data.
- buzzkills 13y agoWhat like this one? https://www.apache.org/server-status https://www.apache.org/server-status
- Karunamon 13y ago>It just gives up that data to anyone that asks? Seems like a huge privacy issue. I could do a nmap on the public internet and probably get a similar amount of addresses. An IP is about as "private information" as a phone number nowadays (You know, those things that get sent out en masse in yellow and white books for public consumption with real-life names next to them).
- devicenull 13y agoHuh? Those are completely different issues. So you synced your time with a server. Why would anyone else care about that? Why does it matter if someone else knows you're syncing time? This is a very different service then a web browser.