Live data from Hacker News

Excessive load on NTP servers

news.ntppool.org

101–110 of 157 posts

Re: Excessive load on NTP servers

#101
post #26

For whatever reason, ntppool.org is blocked at my work. And of course, you don't get the page that states why when the website is served via https. Not that I need to see the page to know it was either blocked for "hacking" or "entertainment", and I'm guessing it's not entertainment. Edit: This probably explains why our clocks have been off by 45 minutes since Monday. I guess it will be entertaining to see how long i…

> I guess it will be entertaining to see how long it takes for IT to figure this one out. Why not just tell them. What have you got to lose? Hell, blame your charitable spirit on the holiday season if you must.

I take it you've never dealt with jackass IT types.

They are very important people.

Re: Excessive load on NTP servers

#102
post #67

Earlier quoted context omitted.

As a developer, I'd rather they build it and sign it for me. The key signing stuff always seems difficult.

I would hate that. How could ever be sure Apple (or anyone else) hasn’t added/modified my code without consent? I wouldn’t ever stake my reputation on signed code which hasn’t been signed by myself!

Apple owns the hardware, OS and distribution, they can do whatever they want. Your signature is neither here nor there.

The only thing it can do do is show Apple you compiled the code.

There's no way you as the dev or the end user can verify the installed software really originated from you.

Re: Excessive load on NTP servers

#103

Earlier quoted context omitted.

I got told off for diagnosing issues in the past. The IT director is a megalomaniac and interprets it as a challenge to his power. The only time I offer suggestions now is when one of his employees specifically asks me for help. Edit: I realize "got told off" didn't really capture what happened. I came in early one day and noticed we were having a dns issue. I manually refreshed my DNS cache and it started to work. I…

I encountered a similar IT manager in high school. I kept telling him that netsend wasn't locked down and that any user could run a .bat. He told me I was wrong. So, I wrote a .bat with a netsend command and emailed it to all staff. Multiple staff clicked on the attachment. Once they figured out it was me, they made me start a computer club with the IT manager as the supervisor of the club. First order of business wa…

Im endlessly glad that my high school was extremely tolerant of us exploring the system and messing with things as long as we didn't try to cause harm (eg, deleting one file is okay, trashing a whole network drive is not) and reported what we found to the school IT manager. Most of us ended up as techs for the school and district as a student job. Several of those students went on to be whitehats. (Who knows where careers would've gone if they'd been discouraged and come to view the system as the enemy.)

They also were way cooler than they had to be about the several times we took down the network or broke the porn filters, or the time we port-scanned a district tech's machine, or had a whole collection of malware on the network drive, or....

I just worry about how students like me would fare in schools these days.

Re: Excessive load on NTP servers

#104
post #8

According to the forum, the pattern matched this third-party library: https://github.com/jbenet/ios-ntp Specifically, all the servers(!) from here are contacted: https://github.com/jbenet/ios-ntp/blob/master/ios-ntp-lib/Ne... Note that the library author wrote: "ios-ntp is often (mostly?) used to make sure someone hasn't fiddled with the system clock. The complications involved in using multiple servers and averaging…

fwiw: Instacart released a similar NTP library for both iOS and Android sometime back https://github.com/instacart/truetime.swift.

Re: Excessive load on NTP servers

#105
post #97

Earlier quoted context omitted.

As unfortunate as it is, most people, especially us engineering-types, are not good at seeing what drives peoples' decision making. That means we do things like this that only make us look worse under the belief that they will help (including the belief that if it doesn't help now, perhaps it will later; this is slightly more likely, but still extremely unlikely). The important people often see those things, assume i…

I agree with what you've said but IMHO is a dishonest way of living. I'd rather be poor than a suck up.

Yeah, I definitely agree with that to a large extent. That's why I stated that any career success I personally enjoy will be based on luck and/or accident instead of political skill. I've tried to bring myself to find some way to reconcile these paths and still feel that I'm not throwing away my integrity, but I've been having a hard time doing that. Trying to find that reconciliation has actually been a large part of my personal struggle over the last year or so.

I think the thing is that there are degrees here. A lot of the things that we are socialized to consider "bad taste" are not actually immoral and unfair (for example, aggressive SEO), and you have to meet on that playing field if you ever intend to be competitive. But you have to identify the limits of what's just getting into the nitty gritty of business and what's crossing the line into being a cheater/liar/phony.

There also seems to be some people for whom social camouflage comes naturally. These people don't feel like frauds or phonies when they cater their preferences and likes to match those of the group around them. It's hard to compete with these people because they have no compunction about being yes-men and they have no malfeasance behind it, since they don't really even realize they're doing -- they only realize that they're making the people around them happy. They truly just have nothing original or important to contribute and don't realize that they're mimicking everyone around them, which, as we've discussed above, is a great skill to have on the path to career success.

I think that developing an active, interesting conversational style and taking care to frame arguments in the most emotionally influential way possible without altering, distorting, or seriously misrepresenting them is perfectly in bounds. Most people do this intuitively to some extent or another, and I believe that intuition can be improved with practice and training, and that that's a great thing for anyone to develop.

The problem is that that's about where I stop. Even if there is nothing immoral about dragging yourself to a baseball game with the bosses, it still feels painful and phony to do that kind of thing. Your unscrupulous and/or unaware competitors, however, will waste no time immediately making themselves as likable as possible by adopting all of the boss's favorite things and habits, refusing to criticize him or anyone whom he holds in high esteem no matter how grossly dangerous their actions are, etc.

It's a tough game. Sometimes I try to believe that there's some cove of people that aren't this way out there, but it always gets shot down as soon as I start believing it again.

I'm starting to think that the only bonds that allow real honest participation are permanent and non-revocable bonds like parent-child and sibling relationships. People still get offended in these and rarely they may even fully withdraw, but most of the time everyone accepts each other and has to get over the perceived slights. I'm not sure there are many voluntary relationships (certainly not relationships where the continued relation is predicated upon a regular payment) where people do that.

Re: Excessive load on NTP servers

#106
post #79

Earlier quoted context omitted.

Stupid decision by SC for sure, but is there a reason there is no rate-limiting on the NTP servers? I'm not up to date on their structure. Maybe it's just not feasible because they don't synchronize clients?

Even without thinking about storing some context, replying to NTP request is probably similarly expensive as evaluating whether it should be rate limited.

Yeah exactly this. Rate limiting isn't free. It's almost certainly more expensive to rate limit than to statelessly respond with the time.

Re: Excessive load on NTP servers

#107
post #26

Earlier quoted context omitted.

> I guess it will be entertaining to see how long it takes for IT to figure this one out. Why not just tell them. What have you got to lose? Hell, blame your charitable spirit on the holiday season if you must.

I got told off for diagnosing issues in the past. The IT director is a megalomaniac and interprets it as a challenge to his power. The only time I offer suggestions now is when one of his employees specifically asks me for help. Edit: I realize "got told off" didn't really capture what happened. I came in early one day and noticed we were having a dns issue. I manually refreshed my DNS cache and it started to work. I…

You should be looking for another job unless you absolutely love your organization. Just look, you don't need to accept any offers.

Re: Excessive load on NTP servers

#108
post #97

Earlier quoted context omitted.

As unfortunate as it is, most people, especially us engineering-types, are not good at seeing what drives peoples' decision making. That means we do things like this that only make us look worse under the belief that they will help (including the belief that if it doesn't help now, perhaps it will later; this is slightly more likely, but still extremely unlikely). The important people often see those things, assume i…

I agree with what you've said but IMHO is a dishonest way of living. I'd rather be poor than a suck up.

I don't disagree with you about the dishonesty of living a suck up life, but try actually being poor for a little while. Your tune will change to "Where would you like me to suck?" and "How hard?" very quickly.

I have the advantage to be able to leave a job and find another relatively easily, and I would definitely agree that I'd rather leave then suck up, but for those who don't have that kind of mobility, sucking up and playing politics can literally make the difference in making car / house payments, sending your kids to college, etc.

Re: Excessive load on NTP servers

#109

Earlier quoted context omitted.

I sent a complaint to my boss and HR about IT recently that was around 30,000 words. It was basically 500 words describing the level of incompetence of the IT director, the remaining 29,000 words were just supporting evidence. I'd say it was a massive waste of time, but the IT director has basically made his expertise unassailable, and the only higher authority he recognizes is Microsoft. I basically went through all…

Seriously, you guys SHOULD stop sending book-long blames around your companies. All it can do is hurt yourselves.

That's good advice in general.

I know that otherwise well-reasoned emails seem like a rant once they reach a certain length. I kept the body of the email to 500 words, and included a pdf of supporting documentation. I let the email sit for a week before I sent it, and had another manager read it as well to make sure the tone was alright.

My entire argument was contained in the body of the email. I knew that was all it would take to get my boss on my side.

The PDF was aimed at HR. The IT director has a lot of power under the IT policy, and he has used it in a retaliatory manner in the past. My goal was to stop the IT director from retaliating so I could do my job while I look for a new one.

I write my emails as if they could be leaked to the general public at any time, and I'm certain that the email wouldn't reflect poorly on me, even out of context. Maybe there was a better course of action, but I don't think I did much to hurt myself.

Re: Excessive load on NTP servers

#110

Why on earth would you do that? If you want to prevent users from altering their time use your server and do a time compare with your server. NTP can be easily intercepted and altered so it would make a lot more sense to do this via a encrypted certificate pinned communication path increasing my work load drastically to alter the time. I snapchat going to pay for the DDOS they created?

The way they achieved their goal was misguided but what you've described skips over large parts of the problem. Why would the server time and phone time be in sync?

Because that's the point of NTP; internally both operating systems use UTC, and in practice most clients can be in sync to within 1 ms or so of the true time, given reasonable connection speed and quality.
Post reply on HN