Slashdot Mirror
Network Time Syncronization via GPS?
TrAvELAr asks: "I run a rather large network for a research company and I have been tasked with a project to ensure that the time is accurate on all of our studies. Right now, I am using the time service built into Windows 2000 to sync all of our workstations with one of our servers. My problem lies in the fact that I can't prove that the time on my server is accurate. Because of the nature of our research, our network is not allowed to access the internet, thus ruling out synchronization to NIST and other time servers. I've been toying around with the idea of syncing it via GPS. I've done some research on the net and found a couple of places that offer packages for this at a fairly high price. I believe that this is something that I could do myself if I could find the right interface software. Has anyone out there had any experience with this type of project? I would appreciate any feedback/suggestions from anyone out there who has implemented/maintained a similar system."
Not necessarily doable - depending on where the poster works, he/she may be legally restricted from connecting to the internet. For instance, there are several different networks that process classified information within the USG. Each is separate, and CANNOT (except for a few air-gapped, human-connected-for-short-time-period links) be bridged.
If something is connected to the Internet, it is a major vulnerability. Period. What would happen if a 'sploit for NTP was out and someone used it against the bridge machine? Your entire network of vulnerable information is now potentially compromised...
Paranoid approach? Sure. Vital to provide every possible safeguard against loss/compromise of sensitive information? Absolutely...