Slashdot Mirror


D-Link Settles Danish Time Dispute

igb writes "The Register reports that DLink has settled the time server dispute described a little over a month ago here on Slashdot. They're going to stop using an NTP server they're not really authorized to chime with, and they've reached an amicable settlement over the use by existing products. The details of the settlement are, not unsurprisingly, somewhat vague, but let's hope that the good guys aren't out of pocket any more."

192 comments

  1. They should've known better... by Anonymous Coward · · Score: 5, Funny

    than to challenge a Time Lord!

    1. Re:They should've known better... by Instine · · Score: 0, Redundant

      Leaching the TARDIS. Now there's the making of a great mashup.

      --
      Because you can - or because you should?
    2. Re:They should've known better... by Thud457 · · Score: 2, Funny

      mmmmmm....... Danish time!

      --

      the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  2. Netgear did the same thing a few years ago by dananderson · · Score: 5, Insightful
    Netgear did the same thing with the University of Wisconsin Internet NTP's servers.

    It's strange these companies can't afford to set up a few of their own NTP servers instead of overloading servers that don't have the bandwidth. It it's because they are clueless or they are cheap?

    1. Re:Netgear did the same thing a few years ago by ottothecow · · Score: 2, Informative
      Why dont they at least use the government supported ntp servers since then the users probobly still payed for it in taxes.

      I currently use the Argonne national lab NTP server most of the time which is probobly government paid though it could be provided by the University of Chicago (though since my connection is on-campus, it makes the most sense).

      --
      Bottles.
    2. Re:Netgear did the same thing a few years ago by Anonymous Coward · · Score: 0

      Which government?

    3. Re:Netgear did the same thing a few years ago by wowbagger · · Score: 5, Informative
      It it's because they are clueless or they are cheap?


      Yes, and yes. They are clueless, and they are cheap.

      That is why pool.ntp.org was created - to provide a pool of NTP servers that these bozos can use without hammering anybody's server too badly.
    4. Re:Netgear did the same thing a few years ago by MikeBabcock · · Score: 5, Informative

      These situations make no sense to me. The NTP system is very easy to use properly.

      There's a great little website about how to use ntp.org servers properly.

      For the quick-fix people, point your NTP capable system at pool.ntp.org.

      If you live in north america, you can use the north-america.pool.ntp.org dns name instead, for only north american servers. The same applies to other continents and several country codes.

      Basically, there's no excuse for hard-coding a time server in almost any situation, unless your client is completely incapable of DNS and has no access to external DNS servers.

      --
      - Michael T. Babcock (Yes, I blog)
    5. Re:Netgear did the same thing a few years ago by markild · · Score: 1

      [...] unless your client is completely incapable of DNS and has no access to external DNS servers.

      touché, eh DLink?

      --
      Scully: Should we arrest David Copperfield?
      Mulder: Yes we should, but not for this.
    6. Re:Netgear did the same thing a few years ago by autocracy · · Score: 4, Interesting

      It would be really nice to think that it's not that hard. Yet, somehow, as a member of the NTP pool, I just keep on having issues. At this moment, I'm supporting roughly 1500 clients. 35% of my resources to supply all those clients with acurate time are being used by 40 clients. In fact, the top 10 "abusers" are taking nearly 17%... and it's a good moment.

      --
      SIG: HUP
    7. Re:Netgear did the same thing a few years ago by MikeBabcock · · Score: 2, Insightful

      ... and that's the rub; this is a router. Surely in most cases its getting DNS information from an ISP by DHCP on behalf of its clients.

      It could, you know, use that information to resolve pool.ntp.org properly.

      PS, being a good netizen, I run a public NTP server that is listed on north-america.pool.ntp.org as well as ca.pool.ntp.org (being in Canada and all). I also have all my internal LAN clients query from that server, instead of the outside.

      My public ntpd service is using very little memory (let me check; RSS: 4076, TRS: 433) and the bandwidth usage is not very high either.

      --
      - Michael T. Babcock (Yes, I blog)
    8. Re:Netgear did the same thing a few years ago by Matt+Perry · · Score: 0
      These situations make no sense to me. The NTP system is very easy to use properly.
      [...]
      Basically, there's no excuse for hard-coding a time server in almost any situation, unless your client is completely incapable of DNS and has no access to external DNS servers.
      The question that we need to be asking is, "how do we prevent abuse of NTP servers, either by malicious intent or by accident, so that these issues do not happen again?" AFAIK, ntpd has a method to allow name servers to only serve clients that are specifically authorized. Why would a stratum 1 time server allow open access which could, and did, lead to this type of abuse? With proper confiuration such queries would be denied.
      --
      Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
    9. Re:Netgear did the same thing a few years ago by noidentity · · Score: 0, Offtopic

      Now when will Slashdot use MirrorDot or Coral Cache for links from articles, instead of bringing down small sites?

    10. Re:Netgear did the same thing a few years ago by Anonymous Coward · · Score: 0

      Never. MirrorDot is not affiliated with Slashdot nor any of the sites being mirrored. The Coral Cache is a completely inappropriate solution to the problem. Now shut up and never ask again.

    11. Re:Netgear did the same thing a few years ago by KiloByte · · Score: 2, Interesting

      as a member of the NTP pool
      [...]
      At this moment, I'm supporting roughly 1500 clients

      Somehow, I find this value flawed. On my server, also in the pool, I logged requests from 161683 different IPs within just the first 24 hours after joining the pool; thus, only those who just resolved the name accessed it. Most NTP clients do a DNS lookup only once during the startup, thus I expect the usage to increase over time.

      I'm in the pool for just over a month; I'll turn on logging for another day to gather the new data.

      On the other hand, the percentage values about abusers are roughly the same here.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    12. Re:Netgear did the same thing a few years ago by NickFitz · · Score: 1

      But the request and its denial also consume bandwidth, which was the original problem.

      --
      Using HTML in email is like putting sound effects on your phone calls. Just say <strong>no</strong>.
    13. Re:Netgear did the same thing a few years ago by tinkerghost · · Score: 3, Informative

      Proper queries are only denied & not re-made if the client follows the rules.
      If you check the original artical, D-Link routers do not recognize the kill request, and they re-request very quickly. So yes, he configured the NTP server correctly, AND he posted restrictions on the NTP site correctly, AND D-Link said we don't care.
      It's essentially a DDOS attack on the server. There are thousands of hits with correctly formed NTP requests coming in every second - 98% of which should be directed elsewhere.

    14. Re:Netgear did the same thing a few years ago by Matt+Perry · · Score: 1
      If you check the original artical,
      Which provides a link to here which no longer contains any information.
      D-Link routers do not recognize the kill request, and they re-request very quickly. So yes, he configured the NTP server correctly, AND he posted restrictions on the NTP site correctly, AND D-Link said we don't care.
      So D-Link units were making a NTP request, the request was denied by the server, but the D-Link engineers put it in their list of NTP servers anyway?
      --
      Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
    15. Re:Netgear did the same thing a few years ago by damiangerous · · Score: 1

      Denying the queries is irrelevant. The issue was traffic. This guy runs a small server and was given access to the Danish Internet Exchange on the condition that his bandwidth usage would be minimal. By the time the query gets to his server to be denied, the bandwidth is already used.

    16. Re:Netgear did the same thing a few years ago by Gnavpot · · Score: 4, Informative
      At this moment, I'm supporting roughly 1500 clients. 35% of my resources to supply all those clients with acurate time are being used by 40 clients. In fact, the top 10 "abusers" are taking nearly 17%... and it's a good moment.
      I wonder if the abusers are running some kind of Unix/Linux/BSD time daemons.

      In my experience, when starting the 'chronyd' time daemon under Linux, it will poll very often, like 15 seconds intervals. Everytime it gets an answer, it will compare it to the system clock, log the deviation and adjust the system clock speed based on the trend. After some time, the system clock will run really accurate, so the logged deviations will be small. The polling interval will then be increased in steps up to a max. limit of 4 hours. If the computer is restarted, this scenario starts over again.

      Compare this to a typical Windows XP computer which seems to poll a time server once a week or so. No doubt that the ntp server will feel some clients more abusive than others.

      Disclaimers:
      The intervals stated above may be wrong. I haven't tinkered with optimizing my time daemons since the old pay-per-minute ISDN days so my memory is a bit rusty.

      Chronyd is just an example. I have no knowledge of whether it stresses the time servers more or less than other time daemons like 'xntpd'.
    17. Re:Netgear did the same thing a few years ago by tinkerghost · · Score: 3, Informative
      So D-Link units were making a NTP request, the request was denied by the server, but the D-Link engineers put it in their list of NTP servers anyway?
      Yes, but worse and out of order .....
      Check out NTP.org. Specifically check the Rules of Engagement, The Stratum 1 list, and RFC 1305.
      Now looking at everything we have a protocol that involves 2 components, an implimentation component and a social component. The actual implimentation of the protocol is laid first as "Format your request in this fasion and we will return the responce looking like this...". However, it also has things for implimenting request timing fallback and kill requests. The social implimentation of the protocol is layed out in the RoE and the Server Lists - note the regional restrictions and the authorization requests in the server lists.
      From the original article which evidently doesn't have any information on the open letter anymore - D-Link took the Stratum 1 list and shoved it into some of their router NTP lookup tables. That blows off the entire social aspect of the protocol - both the permissions and the structure.
      Next they implimented only the request portion of the protocol, they ignore the backoff & get lost request structures - essentially forgoing the entire error correction portion incorperated into the RFC. So up to the point of manufacture they have 3 strikes against them,
      • Failure to obey the Stratum structure of the NTP system
      • Failure to follow the permisions structure of the NTP system
      • Failure to properly impliment the NTP connection protocol
      Now there was no known issue with this until the Danish exchange turned to the Stratum 1 owner and said "You are eating a hell of a lot of bandwidth here & we can't keep giving it to you for free." At which point the problem was tracked back to a series of D-Link SOHO routers. I don't recall the exact process he used , but he started sending kill requests to anything from a D-Link router. When they ignored it & kept making requests he talked to D-Link
      From memory the conversation then went like this:
      Dane: You're routers are hammering my server & they need to stop, you don't have permission & you're violating the rules.
      D-Link: How cute, have a nickle & go get yourself some candy.
      Dane: WTF? The exchange is going to charge me $8K to cover your protocol violations.
      D-Link: It's not our fault & if it is talk to our Lawyer.
      Lawyer: I won't talk to you unless you come to CA & argue your case.
      At which point it devolved to an open letter & public shaming - which by the way seems to have worked.

      [note] IIRC someone calculated the estimated bandwidth from the D-Link routers using Stratum 1 NTP servers to be enough to continously flood a T1. So this isn't just an occasional knock on the door, it's pretty heavy usage for what amounts to a request packet and a responce packet from each router.
    18. Re:Netgear did the same thing a few years ago by Matt+Perry · · Score: 2, Insightful
      From the original article which evidently doesn't have any information on the open letter anymore - D-Link took the Stratum 1 list and shoved it into some of their router NTP lookup tables.
      Good god. What a bunch of knuckleheads.
      --
      Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
    19. Re:Netgear did the same thing a few years ago by mpe · · Score: 1

      It's strange these companies can't afford to set up a few of their own NTP servers instead of overloading servers that don't have the bandwidth. It it's because they are clueless or they are cheap?

      They could use "pool.ntp.org", which is probably cheaper than the effort they currently put into finding NTP servers. Even better, set up some of their own and add them to the pool...

    20. Re:Netgear did the same thing a few years ago by Just+Some+Guy · · Score: 1
      Here, here. I withdrew from pool.ntp.org because the same 100 clients or so were polling me once per second. ntpd really needs a working monkey-off-my-back option, like sending horribly wrong time or even values known to crash bad clients.

      Additionally, its blacklist functionality is severely broken. Try as I might, I never could get my server to simply quit replying to these idiot machines. The canonical answer on the mailing list was to set up a script to watch the logfile for abusive clients and then add them to my firewall, but that just seems defective on so many levels.

      --
      Dewey, what part of this looks like authorities should be involved?
    21. Re:Netgear did the same thing a few years ago by autocracy · · Score: 1

      NTPD does have a "kiss of death" packet available that sends horribly wrong time to misbehaving clients. It also has rate limiting built in. Of course, there are some clients that are coded so stupidly there's nothing that affects them. My personal response is to go in and add "icmp-admin-prohibited" rejection rules to my firewall every now and then, but that's more laziness resulting in more work over the long term than anything else.

      --
      SIG: HUP
    22. Re:Netgear did the same thing a few years ago by CKW · · Score: 1
      Ooh really? Yeah that sounds like a good idea instead of all canadians hammering some poor nrc.ca server. Let's give that a try.
      /usr/sbin/netdate -v tcp north-america.pool.ntp.org
      Trying 138.23.180.126...
      Connection with tcp to north-america.pool.ntp.org failed.
       
      /usr/sbin/netdate -v tcp pool.ntp.org
      Trying 202.191.97.130...
      netdate: connect: Connection refused
      Connection with tcp to pool.ntp.org failed.
      ...ummm, how about I NOT use those, since they're so - unavailable.
    23. Re:Netgear did the same thing a few years ago by MikeBabcock · · Score: 1

      Why on earth would you be using tcp?

      Besides, those DNS names resolve to random IP addresses each time. Sometimes those servers may not be available; adjust your time checking frequency appropriately and use a working DNS implementation.


      $ dnsqr a north-america.pool.ntp.org

      1 north-america.pool.ntp.org:

      236 bytes, 1+12+0+0 records, response, noerror

      query: 1 north-america.pool.ntp.org

      answer: north-america.pool.ntp.org 2089 A 216.234.161.11

      answer: north-america.pool.ntp.org 2089 A 63.200.199.77
      ...

      answer: north-america.pool.ntp.org 2089 A 200.23.51.205

      answer: north-america.pool.ntp.org 2089 A 208.245.212.19



      As for reachability, I did a random test and got 90% reachability with the following:

      dnsqr a north-america.pool.ntp.org | grep answer | awk '{print $5}' | xargs -n1 /usr/sbin/ntptrace

      --
      - Michael T. Babcock (Yes, I blog)
  3. They already lost at least $120 in sales by Omnifarious · · Score: 5, Interesting

    And likely more. I've been telling my friends not to buy them, and I know of at least one buying decision that was made specifically for that reason that cost them $120 worth of sales of USB wireless adapters.

    1. Re:They already lost at least $120 in sales by HFShadow · · Score: 1, Insightful

      Somehow I doubt you and your friends boycott is going to cost them as much money as running their own NTP server would ;)

    2. Re:They already lost at least $120 in sales by lotsotech · · Score: 2, Informative

      I've told my friends (and my company) to avoid buying their stuff because it's junk (IME) We used to spec D-Link because one of our distributors already carried it and I'm fairly certain I've since swapped most all of it to Linksys or Netgear which are both more or less equal to me.

    3. Re:They already lost at least $120 in sales by Anonymous Coward · · Score: 0

      $90 for me, so far.

      I bought Dlink for my 10/100 setups years ago, from the DFE-530tx and their quad nics (DFE-570/580tx). Linksys, Netgear, and SMC cards purchased from about the same time have long since died.

      Recently started to migrate to gigabit. I didn't really need to, but I do transfer 4gb+ files regularly. Given the price drops and rebates out there, and onboard networking on most motherboards have been supporting them for some time now. Looked at Dlink, remembered this NTP issue, went with Trendnet and SMC stuff.

      Even the security stuff, like wireless and IP cameras, which I'll probably grab late summer, I'm looking away from Dlink for the time being because of this. Might be small change and minor to them, but then why support bad behavior esp. from a company that should damn well know better?

    4. Re:They already lost at least $120 in sales by yeknum · · Score: 1

      As long as they're rectifying it, who cares.. Dlink products, for my clients and I, have always been good.. much more reliable than the other popular, more expensive brands

    5. Re:They already lost at least $120 in sales by vux984 · · Score: 1

      Linksys has a terrible track record with Macs. I'm not sure how a basic 8-port router can fuck up tcp/ip traffic but it managed it.

      Their wireless products frequently choke on Mac clients too; and heaven help you if you turn appletalk on.

      Usually upgrading or *downgrading* the f/w will resolve the issues, but I prefer dlink or netgear where I don't ever have these problems in the first place.

    6. Re:They already lost at least $120 in sales by HaloZero · · Score: 1

      News to me. I've always run Linksys network hardware, and the Macs on my network have always played nice with them. We've got a PowerBook that goes wired and wireless on a WRT54G, and straight wired on a BEFSX41 just fine. We've also got an iBook that goes wireless on the WRT54G just peachy. Never had a problem.

      --
      Informatus Technologicus
    7. Re:They already lost at least $120 in sales by Omnifarious · · Score: 1

      Maybe not, but if my effort is widely replicated, it will cost them way more in the long run. Yes, they've rectified the situation, but they had to be dragged into it. They didn't act like good citizens right up front. I will stop complaining about them in about a year or so, but for now...

    8. Re:They already lost at least $120 in sales by vux984 · · Score: 1

      Not all their product is bad. I've had plenty of success with macs and linksys too; but the negative experiences I had were difficult and time consuming to diagnose and ultimately impossible to get proper support for.

      Linksys support simply flatly stated they didn't support macs; as if the operating system I'm using should matter with a router.

      For example their WAP11 froze up everytime I tried to transfer a file more than 100 megabytes from a Mac; it was ok for small files, and it could handle large files if the speed was low (e.g. a download over ADSL at 150k per second was passed through it, but as soon as I did anything big on the WLAN where you'd expect sustained 700+ kbps and it would just lock up and I'd have to powercycle the WAP11 to get it going again.

      In fact most of my negative mac/linksys experiences have been with performance or load considerations. The linksys devices always worked, but then were either unreliable, or became unreliable under load.

      For example I recently swapped out an 8 port router that was causing problems with the macs -- the only symptom was that people were complaining about intermittent problems from both macs AND pcs -- they felt the network was too slow. (A complaint that many IT admins wouldn't even take seriously; it could be variance at the ISP, or just unrealistic users...)

      It took a fair bit of effort to troubleshoot, because the PCs were affected too. And every isolation test we ran on a given component came back fine... so we were testing the wiring in the wall, the switch stack, hassling the ISP for support. Just a royal pain.

      It turned out that when anyone was doing a sustained transfer from a Mac the router would crap out and start "stalling", and then everyone had problems until the transfer was done. But only on sustained transfers; on a short burst like downloading a web page or an email the macs got peak throughput, and got in and out without a hitch. But if someone started downloading a big file on a mac, or listened to itunes radio from a mac then the router would fail... instead of sustained transfer we'd get it in little bursts; full speed, 3 second stall, full speed, 3 second stall... and all the units on the network were stalled during the stalls.

      So we thought it might be the ISP, but swapped in replacement router from linksys (same model) just in case we had a dud router, no improvmenet. Pushed back to the ISP...finally swapped in a netgear router, problem solved.

      Linksys was thoroughly unhelpful throughout. And while, to your point, most of the time it works fine, and in a home envirnonment with a single pc or light usage patterns the issue might not even have ever been noticed, to me its just not worth the hassle, especially when they wash their hands of support it.

      Dlink and the many others proudly proclaim mac and linux support; so they'll get my business.

    9. Re:They already lost at least $120 in sales by anticypher · · Score: 4, Interesting

      That's nothing. I'm engineering a large scale DSL rollout, around 80,000 installations in the first 2 phases during 2006, and a potential 4 million subscribers over the next 3 years. My technical analysis of the CPEs determines who makes the shortlist. I had a lot of fun at CeBit this March, watching the sales weasels fight over who would get first shot at my account.

      I had even more fun letting the D-Link fuckheads know why they were on my blacklist. For two main reasons, the NTP theft of services from all the stratum 1's, and the mac ethernet framing problems. They were told quite clearly the non-response from their engineering team on these two show-stopper problems had left them permanently blacklisted. Its called schadenfreud, and it feels good.

      the AC

      --
      Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
    10. Re:They already lost at least $120 in sales by Anonymous Coward · · Score: 1, Insightful

      As long as they're rectifying it, who cares..

      D-Link CANNOT rectify the treatment they and their lawyers dished out to the innocent parties involved.

      I am also boycotting D-Link, but not for their stupidity in their use of ntp, but rather their bone headed aggressive response against the people they did wrong against.

      When Netgear fucked up, they did the right thing to resolve what they could see was their mistake. D-Link's response on the other hand, was to sic their legal dogs onto the people who tried to rectify D-Link's fuck-up.

      Geeks at the very least should be boycotting D-Link for some time to come, over this. They are happy to take take take and then trample on anyone who gets in the way of that.

    11. Re:They already lost at least $120 in sales by Anonymous Coward · · Score: 0

      I had even more fun letting the D-Link fuckheads know why they were on my blacklist. For two main reasons, the NTP theft of services from all the stratum 1's, and the mac ethernet framing problems. They were told quite clearly the non-response from their engineering team on these two show-stopper problems had left them permanently blacklisted. Its called schadenfreud, and it feels good.

      Dude, that's awesome. Thanks for making a difference.

      I never had that much clout in regards to making the fuckers jump. But one corporate I did work for stopped buying Compaq because of me. Compaq were selling desktops which would only take Compaq blessed hard drives (blessed in HDD firmware) and were also selling CDROM drives which were a little bit smaller than the standard 5.25" drives. We were locked into their upgrades and after being fucked around too many times by these sorts of things by Compaq, I had enough, complained and that was it. Compaq got no more sales from us. This was back in the days when Compaq shipped their own modified version of DOS because their machines were somehow different. It was only a 500 desktop or so stock market related company, but I hoped I'd made some difference.

    12. Re:They already lost at least $120 in sales by stienman · · Score: 2, Insightful


      Did you also stop buying Belkin when they added sw to their routers that, about one week into operation, would randomly redirect a web page request to an advertisement for their filtering service?

      How about Linksys? They've done some mean things too.

      And every other company out there.

      Your tactics will not impact d-link. Not only that, they are unsustainable, if you want to buy any technological equipment, that is. Eventually everyone will be on your lit shist. Then you'll start trying to figure out which one is "least evil" or perhaps which one hasn't been substantially evil for the longest period of time.

      At the end of the day, someone on some project made a set of assumptions, and based a poor decision on those assumptions. It's impacted someone else quite significantly, and they have remedied that.

      Personally I'm glad that they eventually remedied their situation. They will make more mistakes in the future, but it's not because they are malicious, or stupid - it's just a mistake. Even with all the history we see about time servers and routers, they may have not seen that at the right time in the project that produced that code.

      Given that, the only thing that we can really blame them for is the poor response to the initial problem report, and the time it took to realize the enormity of the problem and make amends.

      -Adam

    13. Re:They already lost at least $120 in sales by Anonymous Coward · · Score: 0

      Its called schadenfreud

      Actually it's called "schadenfreude".

    14. Re:They already lost at least $120 in sales by evilviper · · Score: 1
      Not only that, they are unsustainable, if you want to buy any technological equipment, that is.

      You'll always be able to find basic devices (like wireless APs) from thousands of companies. You may have to stay away from the major brands, but you can still probably buy your equipment from the same nameless Chinese company D-Link, Linksys, etc. buy their parts from!

      Besides that, there's no reason you have to buy wired/wireless routers from anybody. A litte software on a low-cost embedded board, and you're set. You can probably get off as cheap as the junk you get from Linksys, and have a far, far better and more functional device, too.

      Given that, the only thing that we can really blame them for is the poor response to the initial problem report, and the time it took to realize the enormity of the problem and make amends.

      Gee, so the ONLY THING we can blame them for is unleashing their attack lawyers on Kamp, when they were clearly in the wrong... That's more or less the ONLY THING people hate about the RIAA/MPAA, as well.

      Now that D-Link has RESOLVED the problem, I can't see any problem with buying from them in the future. However, until now, it was a very good reason to spend your money elsewhere. That (little bit of) pressure may have been partly responsible for convincing them to settle things with Kamp.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    15. Re:They already lost at least $120 in sales by Anonymous Coward · · Score: 0

      I guess the original poster was Bavarian :)

  4. They should of bought him a server by Anonymous Coward · · Score: 0


    hopefully they bought him a server and bandwidth, that would cost them less than 1 executives monthly wage, some companies/individuals are so greedy that they become blinded by their very existance

    money really is everything to some people, at least criminals have ethics unlike the "your fired" generations

  5. Their reputation preceeds them by Anonymous Coward · · Score: 1, Funny

    Their hardware is crap. I've had their routers overheat and die, I've never seen a D-Link wireless setup that could be considered stable. I've owned network cards from D-Link that prevented another computer connected, by way of a crossover cable, from booting DOS. Let me repeat that: A D-Link card was sending out enough junk that it prevented a different computer from booting.

    The bottom of the article says "D-Link remains committed to being a good corporate and network citizen." Screw that. They have never been either of these things they are "committed" to.

    I, Anonymous Coward (the most prolific poster Slashdot has ever seen) hereby "commit myself to never purchase, recommend, or in any way interact with D-Link and their products, as much as possible, until such time as hell freezes over."

    1. Re:Their reputation preceeds them by John+Miles · · Score: 4, Informative

      Agreed. D-Link appears to occupy a point on the cost-quality curve that ultimately costs more in hair-pulling time than it saves in cash. Their products may be OK for lightweight use at home, but they can really give you fits in a more demanding environment.

      Case in point: we recently put a bunch of DGS-1008D 8-port gigabit switches into service, and immediately started having problems with dropped Ethernet connections. Our laser printer was sucking down enough power at the onset of its fuser-warmup phase to trigger a nearby UPS momentarily. The resulting switchover transient lasted only a few milliseconds, but it was enough to reset the DGS-1008D. After a LOT of tail-chasing, it transpired that the (cheap-ass linear) wall-wart supplies that D-Link ships with the DGS-1008D lack sufficient filter capacitance to absorb even the slightest power glitch under high-load conditions (e.g., when there are several cables plugged into the switch.)

      We took a few of their power supplies apart and found that the oldest ones -- which didn't have the problem -- used a 2000-uF filter capacitor at the rectifier output. At some point, they saved 10 cents by moving to a supply with only 1000 uF, rendering their product useless in many real-world office environments.

      This isn't supposed to be a general "let's all bag on D-Link" thread, but hey, if the shoe fits...

      --
      Dahlmann tightly grips the knife, which he may have no idea how to use, and steps out into the plain.
    2. Re:Their reputation preceeds them by mmell · · Score: 1
      Let me repeat that: A D-Link card was sending out enough junk that it prevented a different computer from booting.

      Hmmm . . . so that different computer had network connectivity before it was booted? Or were you attempting to boot across a network?

      Was it a Windows-based computer you were attempting to boot? If so, the problem may well have been Windows, rather than the router. Upon startup, Windows sends a 1-byte ping to a server within the microsoft.com domain, ostensibly to confirm network connectivity (no comments on the deeper ramifications of the "phone home" activity here). Could be that Windows saw a network link but got upset when its ping neither returned nor got closed, but was rather dropped quietly on the floor (you did say you had a crossover cable connected, yes? What were you crossover'ed to, and why? That doesn't sound like a very standard configuration.)

    3. Re:Their reputation preceeds them by Anonymous Coward · · Score: 0

      Upon startup, Windows sends a 1-byte ping to a server within the microsoft.com domain,

      BS. Documentation?

    4. Re:Their reputation preceeds them by spyrochaete · · Score: 1

      Maybe it was a network bootable computer with a PXE card.

    5. Re:Their reputation preceeds them by Intron · · Score: 1

      Did you check what time server it is using? Firmware updates to fix this problem are on the DLink website.

      --
      Intron: the portion of DNA which expresses nothing useful.
    6. Re:Their reputation preceeds them by Tony+Hoyle · · Score: 2, Funny

      Windows sends a 1-byte ping to a server within the microsoft.com domain, ostensibly to confirm network connectivity

      Years ago, Bill Gates said 'If only I had $1 for every time a windows server rebooted..'

      And the rest is history.

    7. Re:Their reputation preceeds them by freeweed · · Score: 1

      Upon startup, Windows sends a 1-byte ping to a server within the microsoft.com domain

      And what does Windows do when this ping packet gets dropped?

      I ask this because I've ran Windows machines behind some very restrictive firewalls in the past which drop all ICMP type 0 and 8 packets (inbound and outbound), and these machines worked just fine. No booting issues, no network issues. In fact, many ISPs now do this as well.

      Can anyone confirm this? I've never noticed a "1-byte ping" to anything within microsoft.com while sniffing my LANs.

      --
      Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
    8. Re:Their reputation preceeds them by Anonymous Coward · · Score: 0
      Case in point: we recently put a bunch of DGS-1008D 8-port gigabit switches into service, and immediately started having problems with dropped Ethernet connections. Our laser printer was sucking down enough power at the onset of its fuser-warmup phase to trigger a nearby UPS momentarily.


      At which point I stop you, and ask why you don't have sufficient capacity on your circuit, such that it's triggering a UPS...

      At some point, they saved 10 cents by moving to a supply with only 1000 uF, rendering their product useless in many real-world office environments.


      Real world sounds poorly planned, to me.
    9. Re:Their reputation preceeds them by John+Miles · · Score: 1

      At which point I stop you, and ask why you don't have sufficient capacity on your circuit, such that it's triggering a UPS...

      It's a pretty wimpy circuit, all right. You could also argue that the UPS is a bit too sensitive to transients. But there's no excuse for the switch to be that intolerant of minor power glitches, especially when it's so cheap to do the job right. They had a robust design, but that extra 1000 microfarads must have looked bad on a quarterly balance sheet or something.

      Real world sounds poorly planned, to me.

      Yep. That's why they call it "reality" -- every chain has a weak link. In this case, and in plenty of other cases I'm aware of, the weak link was made by D-Link.

      --
      Dahlmann tightly grips the knife, which he may have no idea how to use, and steps out into the plain.
    10. Re:Their reputation preceeds them by harrystarr · · Score: 1

      Their switches are not the only duds.

      I tore my hair out for a while until I realised that the power supply
      on their DSL-300 modem suffers the same fate -- it could not
      hold up the modem as the UPS kicked in (around 2 ms).

    11. Re:Their reputation preceeds them by ObsessiveMathsFreak · · Score: 1

      Their products may be OK for lightweight use at home,

      Neg.

      Case in point, D-link ASDL modem/router with wireless connection. We just could not get the danm WLAN to work. Tried everything. Security, no security, reboots, firmware upgrades, downgrades, config settings. Nothing worked.

      Eventually, just as we were about to throw it out, we figured we'd open it up. Just to look and see if anything was immediately obviously out of order. So we opened her up.

      Wait for it.

      The antenna cord has popped out of its connection to the motherboard. The smidgeon of what looked like glue, not solder, was simply not thick enough to hold the cord in place and it had falled out. Disgusting. This is worse than Belkin, and that's saying a lot.

      My own opinion is that there are no reliable "home" routers, wireless or otherwise. If you want something that will actually work rather than a $100 hodge podge of cheap microprocessor, buggy code, solder, plastic and hope, get a proper business model, because the home versions are not worth your time.

      --
      May the Maths Be with you!
    12. Re:Their reputation preceeds them by e5z8652 · · Score: 1

      I just tried it with tethereal sniffing on the firewall and didn't see any traffic going Microsoft's way.

      Booted Windows XP Pro, XP Home, and Server 2003.

      Caveat - the XP Pro and Server 2003 are eval versions running on VMWare. Either the Eval status or VMWare might interfere. Doubt it though.

      --

      null sig

    13. Re:Their reputation preceeds them by Anonymous Coward · · Score: 0

      Laser printer on UPS? Doesn't every manufacturer of UPS equipment put warning labels that say "NO LASER PRINTERS PLEASE!!!!"?

    14. Re:Their reputation preceeds them by Jesus_666 · · Score: 1

      My own opinion is that there are no reliable "home" routers, wireless or otherwise. If you want something that will actually work rather than a $100 hodge podge of cheap microprocessor, buggy code, solder, plastic and hope, get a proper business model, because the home versions are not worth your time.

      But what if the business model is "we're living here"? At my home we have a router sitting next to the DSL modem, into which some CAT5e cables plug, which then provide network access to the various rooms in the house.
      However, every single router we've ever used goes insane after a while. We had a Netgear, a noname device (IIRC) and now a Siemens. Every one of them worked for two or three months and then started to randomly fail. The first two devices just went silent, necessitating a power-cycle, while the Siemens just starts dropping packets and can bve reset over the admin interface most of the time. In the case of the Siemens the failure rate seems to be coupled to the ration of UDP to TCP traffic - the more UDP the more failures (however the packet loss does not disappear when the UDP traffic goes away).

      I'm seriously starting to wonder whether there's something with our telecommunictions equipment that kills routers or it's just that there aren't any affordable routers that can withstand even moderate BitTorrent activity.

      So, are there any routers that can withstand some traffic and aren't prohibitively expensive for a regular household? Maybe it would be cheaper to build a low-cost, low-consumption computer with four NICs and a BSD and use that as a router...

      --
      USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
    15. Re:Their reputation preceeds them by tengwar · · Score: 1
      My own opinion is that there are no reliable "home" routers, wireless or otherwise. If you want something that will actually work rather than a $100 hodge podge of cheap microprocessor, buggy code, solder, plastic and hope, get a proper business model, because the home versions are not worth your time.

      I've had the reverse experience. I've tried using Cisco 700 and 800 series ADSL routers, and had very poor service (dropped packets, and dropped connections). I've used Belkin and Netgear routers on the same line, which performed without any visible problems. My ISP () provides very good instrumentation for the connection, so it's possible to get a graph of dropouts over time.

    16. Re:Their reputation preceeds them by Scoth · · Score: 1

      I've been using an old Linksys WRT54G with OpenWRT on it for years without a problem. Slapped a few extras on it like Shorewall and an ssh server and it's been working essentially untouched for two or three years. My only complaint is Shorewall takes a couple or three minutes to fully load, but otherwise it's been excellent.

      A mini-ITX or even old laptop with built-in ethernet and a couple card slots might be an option too, but I've never been arsed to set all that up myself with the WRT54G doing as well as it has. One of these days I'll probably get an older WRT54GS or WRT54GL but can't really justify it right now.

    17. Re:Their reputation preceeds them by mmell · · Score: 1

      It was Win98 (see above in thread).

    18. Re:Their reputation preceeds them by Anonymous Coward · · Score: 0

      The laser printer wasn't plugged into the UPS, but it was plugged into the same circuit. It caused the UPS to cut over to battery power and back momentarily.

  6. Not Vague At All by TubeSteak · · Score: 4, Insightful
    ... D-Link's existing products will have authorized access to Mr. Kamp's server, but all new D-Link products will not use the GPS.Dix.dk NTP time server. D-Link is dedicated to remaining a good corporate and network citizen.
    Allow me to translate: He got paid.

    Part of the settlement involves him putting on his website "D-Link is dedicated to remaining a good corporate and network citizen."

    Otherwise, considering his previous level of frustration, there's no chance he would shill for them like that.
    --
    [Fuck Beta]
    o0t!
    1. Re:Not Vague At All by Zephyros · · Score: 1
      Sounds to me like a c/p of a press release - it's got the same Corpspeak feel.

      As for getting paid...wasn't that the point? I just hope they'll continue to take care of the bandwidth bill they're causing for as long as their routers are "authorized" to hit the server. I'd guess that was one of the terms of authorization.

    2. Re:Not Vague At All by raitchison · · Score: 1

      And he should have been paid, he needed to be reimbursed for his costs as well as future costs for the hoardes of D-Link gear already out there with his servers configured in their firmware.

      Granted D-Link could and likely will correct the issue with firmware upgrades most people don't upgrade the firmware unless they are having a problem or maybe if they are redeploying a device. It's likely that in 10 years time there will still be D-Link devices out there trying to query his NTP server.

    3. Re:Not Vague At All by Zephyros · · Score: 1

      Ah ha, found it.

    4. Re:Not Vague At All by Feyr · · Score: 1

      unlikely, these devices are meant to fail after a year or two. it is safe to assume that in 5 years all but a very (lucky) few number of them will have been replaced.

      and don't forget that people will probably want to upgrade to get the shiny new lastest wireless 802.11bgnxyz

    5. Re:Not Vague At All by Uncle+Rummy · · Score: 3, Interesting

      He also took down the entire description of the problem D-Link caused, which used to reside at that URL. Considering how pissed he was, they must have paid him well, indeed.

    6. Re:Not Vague At All by raitchison · · Score: 2, Informative

      Well don't tell any of my devices, cause all of them are over 2 years old, many of them over 5 years old. Heck my "public segment", where the DSL modem (6 years old), broadband router (4 years old) and VPN device (4 years old) connect is a 15 year old 10Base-T ethernet hub. Your experience must be with Linksys, I always keep a spare D-Link broadband router on a shelf ready for when a friend or relative calls after their "Internet doesn't work" because their Linksys router fried itself. I'm continually amazed how many people think that because Linksys costs more (and now sports the Cisco logo) that it must be better.

    7. Re:Not Vague At All by TheJediGeek · · Score: 1
      I wish I had mod points.

      I've seen many problems with Linksys routers yet so many people continue to swear by them. I've mostly used D-Link for about the last 5 or 6 years. The only problem I had was a REALLY old router would need to be reset about every month or so. I think that problem went away when I upgraded the firmware, but I upgraded to a new spiffy 802.11b wireless router shortly after.
      I'm using a DI-614 router now and haven't had any problems.

    8. Re:Not Vague At All by Tony+Hoyle · · Score: 1

      Linksys went down the toilet when cisco took them over, basically. Their old stuff was flawed but it generally worked OK... after the cisco takeover they just removed the 'worked ok' bit.

      cisco hardware aint that good, but their support (provided you pay for it) is the best out there... which is why people swear by it. linksys is cisco without the support.

    9. Re:Not Vague At All by Kadin2048 · · Score: 1

      I mentioned this elsewhere as well, but I just thought about it and realized that a Netgear router I installed for my parents almost 5 years ago is still running fine, and has been doing so with no downtime except for power outages.

      That's about the best track record of any piece of under-$50 networking equipment I can think of, except for maybe hubs and cables.

      I've had my share of Linksys gear, and I doubt it'll last anywhere near as long as that: I've had two 54-series routers flake out on me in the last year, the only reason I'm hanging onto one of them is because it's the Linux model and I figure maybe it'll suck less with somebody else's firmware.

      Talk about a company that got gutted...I think their purpose in life is to keep the prices on consumer-grade equipment from climbing to the point where its features might start to compete with actual Cisco gear. If Linksys can keep Netgear's and D-Link's margins thin enough through competition, and busy trying to make the cheapest router and selling it on the end-aisle display at Wal-Mart, they'll never have the opportunity to compete with Cisco's "real" products.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    10. Re:Not Vague At All by equilith · · Score: 1
      ...there's no chance he would shill for them like that.
      Notice that he put it in quotes. He's as much as telling us that they're not his words. Considering that he wanted them to make good on what most people agree was D-Link's substantial, protracted blunder, putting up a statement like this seems perfectly reasonable to me.
  7. Re:Not much sympathy by Vyvyan+Basterd · · Score: 0, Flamebait

    Fook, you're a dumbass. Strata One servers are not supposed to be used by Joe Bloggs dinky firewall.

  8. not unsurprisingly by boldtbanan · · Score: 5, Funny
    The details of the settlement are, not unsurprisingly, somewhat vague...
    I do not think that means what you think it means
    1. Re:not unsurprisingly by Anonymous Coward · · Score: 1, Funny

      Not unsurprisingly, only one grammar nazi caught this unsurprising error in a /. summary.

    2. Re:not unsurprisingly by Anonymous Coward · · Score: 0

      wtf are you talking about? its a double negative, it means the exact opposite of what you claim it means.

      Not is not negating,
      well i guess its not negating there either, which means it is negating in the orignal story... which might mean is it negating there, which would change the original story again... see? this is why we think you're stupid; just like the submitter

    3. Re:not unsurprisingly by Anonymous Coward · · Score: 0

      What are you talking about? In the phrase "not unsurprisingly" the "not" negates the "un" and you end up with the literal surprisingly. Granted, modern spoken English would allow this phrase still to mean the intended "not surprisingly" or simply "unsurprisingly," but if you must nitpick, at least nitpick with accuracy.

  9. Public? Server by simpleGeekMan · · Score: 0

    Seems to me that if you run a (public) NTP server with a publicly available IP address and/or DNS resolution, that means anyone (public) can use the (public) service - no?

    1. Re:Public? Server by Binestar · · Score: 3, Informative

      Seems to me that if you run a (public) NTP server with a publicly available IP address and/or DNS resolution, that means anyone (public) can use the (public) service - no?

      No.

      --
      Do you Gentoo!?
    2. Re:Public? Server by Anonymous Coward · · Score: 1, Informative

      More like you can configure your own router to talk to it, but what Dlink did wasn't a public thing. As a private corporation, they turned tens to hundreds of thousands of devices at it.

      If each user had done that by themselves it would be a different game, since Joe Q. Public was doing it, but D-Link hardcoded it in.

    3. Re:Public? Server by simpleGeekMan · · Score: 0, Troll

      OK? I still don't see what's wrong with that. It is an open service this guy has available to anyone (singular or plural). DLink is merely using the free service that is available to the public - without bypassing security of any kind...seems like it is fair game to me..

    4. Re:Public? Server by Aladrin · · Score: 4, Informative

      Public or not, you have to follow the rules. It is pretty well known that only 'Stratum 2' NTP servers are to use 'Stratum 1' NTP servers. This is not just a 'because we want it that way' policy. There are many good reasons for this.

      http://en.wikipedia.org/wiki/NTP_vandalism

      --
      "If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
    5. Re:Public? Server by NoName+Studios · · Score: 0

      http://yro.slashdot.org/article.pl?sid=06/04/07/13 0209 http://yro.slashdot.org/comments.pl?sid=182481&cid =15084265 http://en.wikipedia.org/wiki/NTP_vandalism#D-Link_ incident D-Link was connecting to stratum-1 time server, basically the best of the best time servers. Not even my time is synchronized with a stratum-1, it starts at least 2 or lower.(I imagine it is probably 3, but I can't tell.) Basically D-Link firmware was connecting up to this high end time server that was stated in their policy as only being allowed to be used within the DIX network and D-Link was using a lot of traffic.

    6. Re:Public? Server by simpleGeekMan · · Score: 1

      Thanks for the wiki link - very informative...I stand corrected.

    7. Re:Public? Server by freshman_a · · Score: 5, Insightful

      His NTP server access policy explicitly limited use of said server to the Danish Internet Exchange (DIX). In return, DIX provided him with a free internet connection for his NTP server. Because D-Link was sucking so much bandwidth, DIX told Kamp he would have to pay yearly for the connection. D-Link disregarded his server policy and abused his server. That's why it's a problem.

      Also, his server is a Stratum 1, and, while not explicitly written, the D-Link devices should getting the time via a Stratum 2 server. At least, that's how it's commonly done.

      Does that help explain things better?

    8. Re:Public? Server by FrostyWheaton · · Score: 1
      Seems to me that if you run a (public) web server with a publicly available IP address and/or DNS resolution, that means anyone (public) can hotlink your images and steal all the bandwidth they want

      What's the difference? Of are you the sort of person that doesn't see a problem?

      --
      Comments should be like skirts. Short enough to keep your attention, but long enough to cover the subject
    9. Re:Public? Server by Secrity · · Score: 1

      Even if the owner of an NTP server that had it's address hard coded into any mass marketed device was cool with it, hard coding NTP server addresses into a device is a very bad practice. In some cases the effect could be the same as a DDOS that won't stop.

      D-Link's use of that poor guy's "free" service that was intended to service about 2,000 organizations in Denmark was costing the guy about $1,000 US a month. I guess that it will be OK with you if next halloween that I bring busloads of kids to your house to get all of the free candy that you will be handing out. Make sure that you buy enough candy as you won't want to run out.

      When people put something out that is "free", they also also have the right to stop providing that something for free. If he had shut off his NTP server or changed the address; not only would his users be inconvenienced, but the users of the D-Link product could have been inconvenienced as well. I wonder what the downside is when these D-Links can't find the NTP server. I would hope that the thing would just sit there, refusing to operate until it can find the hardcoded NTP server and set it's internal clock.

    10. Re:Public? Server by penguin-collective · · Score: 1

      Public or not, you have to follow the rules.

      "Have to" in what sense? In the sense that people bitch at you if you don't, then yes. "Have to" in the sense that there is some special rule for NTP servers that allows them to define acceptable use policies without getting a legal agreement, well, that hasn't been resolved.

    11. Re:Public? Server by Anonymous Coward · · Score: 0

      Why? people are using http as intended. If you don't intend resource linking, then use some sort of anti-hotlinking script.

    12. Re:Public? Server by routerguy666 · · Score: 1

      Since he was dealing with a known user base, he could have actually put some teeth in his acces spolicy with a one line firewall rule only allowing DIX subnets to access the box.

      Taping a note to your front door that reads 'only enter if you live here' doesn't accomplish a lot if you leave the door open all the time.

    13. Re:Public? Server by Anonymous Coward · · Score: 0

      Isn't any server that uses a stratum 1 server by definition a stratum 2 server?

    14. Re:Public? Server by Carl+T · · Score: 1

      Are you saying that unless you and I have an agreement explicitly forbidding me to do so, I am free to hack into your computer, ping flood you off the net and torch your mother's house?

      --

      This signature is not in the public domain.
    15. Re:Public? Server by SkipRosebaugh · · Score: 1

      That would hardly have done any good. Dropping the packets once they reach his network is of no use, since the damage is already done. The problem is the bandwidth consumed to reach his network.

    16. Re:Public? Server by tinkerghost · · Score: 4, Informative
      Check the NTP page, there are public (open) servers and there are public (restricted) servers. There are also 3 layers of service,
      • Stratum 1 are principle time servers for a region & directly query atomic clocks.
      • Stratum 2 are general use for large regions or institutions - generally they should only be contacted by Stratum 3 servers - clients only as a last resort.
      • Stratum 3 are the generic NTP servers of the internet - if you're an end client you should be talking to a Stratum 3 unless none are available/unrestricted for your use.
      D-Link SOHO routers do 3 things wrong.
      • They don't follow the NTP protocol for requests to stop using the service.
      • They ignore the restrictions place on the server usage - in Denmark, for use by ISP or Stratum (2/3) requests.
      • They hit a Stratum 1 NTP server as an end client.
      So no, if you run a public NTP server that you have dutifully entered restrictions on, you are expecting everyone who comes to you to obey the NTP protocol. That includes following the restrictions, listening to the go away requests, and following the basic rules of who to talk to.
      [Analogy type=bad]
      In the US there are a number of parking spaces set asside for handicapped parking in almost every parking lot. Physically you can park there if you are not handicapped, but you're not supposed to (covers both ignoring restrictions and a client talking to a Stratum 1 server). If the manager of the parking lot tells you to get your car out of the spot - you should do that(refers to the kill request in the NTP protocol). In the real world if it get's this far, the cops come & give you a ticket. On the net you get open letters calling you an arogant prick who can't be bothered to figure out the basics of the protocols you are boasting about
      [/Analogy]
      For the record the Danish server was not the only Stratum 1 server they hit, they appear to have taken the Stratum 1 list (almost all of which restrict usage to Stratum 2 servers) and shoved it into the routers for general use - hardly the "Good internet citizen" they claim to be.
    17. Re:Public? Server by Ohreally_factor · · Score: 1

      Don't forget to rape and pillage his mother's house after you're done burning it down (unless it's explicitly forbidden in the agreement).

      --
      It's not offtopic, dumbass. It's orthogonal.
    18. Re:Public? Server by plague3106 · · Score: 4, Insightful

      Taping a note to your front door that reads 'only enter if you live here' doesn't accomplish a lot if you leave the door open all the time.

      Please, stop with stupid analogies. They are never helpful. You can leave your door open all the time, that doesn't give anyone the right to go in! In Vermont, thats criminal trespass, and the fine is much larger than the other forms of trespass defined in the act.

    19. Re:Public? Server by John+Hasler · · Score: 1

      > If he had shut off his NTP server or changed the address; not only
      > would his users be inconvenienced, but the users of the D-Link
      > product could have been inconvenienced as well. I wonder what the
      > downside is when these D-Links can't find the NTP server.

      None. The machines would just jump to the next server on the list and hammer that one.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    20. Re:Public? Server by Secrity · · Score: 1

      Damn, I had hoped that they would have been stupid enough to include only one address.

    21. Re:Public? Server by igb · · Score: 1
      Actually, the strata go all the way up to 15 (or is it 16?) Stratum zero are the reference clocks themselves, so a GPS receiver or similar will appear as Stratum zero to the stratum one machine it's attached to:

      remote refid st t when poll reach delay offset jitter
      *GPS_NMEA(0) .GPS. 0 l 14 16 377 0.000 0.026 0.015

      Stratum two talks to the Stratum 1 (so the best you can get without a dedicated clock attached). Stratum three talks to two (fine for diffusion to clients in general). But then you can talk to the three and be stratum four (fine for desktops on fast networks with loose timing requirements) and so on. And then you can set the hardware clock of a lightly used machine in a temperature controlled environment (we use an old Cisco which does little else) to be stratum 7 (or something) to provide an emergency clock reference if all else fails (ie we lose the GPS box, the MSF box and the Internet).

      ian

    22. Re:Public? Server by Anonymous Coward · · Score: 0

      It is pretty well known that only 'Stratum 2' NTP servers are to use 'Stratum 1' NTP servers.

      Any NTP server using a stratum 1 server is a stratum 2 server by definition.

    23. Re:Public? Server by penguin-collective · · Score: 1

      Are you saying that unless you and I have an agreement explicitly forbidding me to do so, I am free to hack into your computer, ping flood you off the net and torch your mother's house?

      Why are you asking? Are you stupid enough to think that that's what I said?

      Are you somebody who hates open source software and who wants Microsoft and others to be able to shut down open source projects on a whim?

      Because that's what it comes down to if you say that Kamp should have been able to sue and win: Debian, Ubuntu, Firefox, and many other free software projects have hardcoded network services in their distributions, and if Kamp could prevail in demanding damages, so could the companies these distributions point to. See, their usage agreements even say that you promise them your firstborn if you do. Didn't notice that before? Too bad.

      Or maybe you want to shut down del.icio.us, because people sharing their bookmarks publicly might also be construed as starting an attack on the bookmarked sites. See, the usage agreements for the target sites even say (somehwere) that you can't do what you just did.

      So, what's your secret angle? Which open source projects do you want to destroy? Which abusive sites and usage agreements are you trying to support?

      Sad as it is, we can't punish what D-Link did to Kamp without opening the doors for a lot of other people to do harm to things we want to be able to do.

    24. Re:Public? Server by Anonymous Coward · · Score: 0

      Yes, it does.

    25. Re:Public? Server by Ash-Fox · · Score: 1

      They would be a bad bot on the HTTP protocol technical, not adhering to robots.txt.

      The NTP clients in d-link routers don't follow the NTP protocol for requests to stop using the service.

      --
      Change is certain; progress is not obligatory.
    26. Re:Public? Server by Just+Some+Guy · · Score: 1
      Isn't any server that uses a stratum 1 server by definition a stratum 2 server?

      Yes - when speaking of servers. However, plenty of clients are misconfigured to connect directly to stratum 1 servers. Those aren't stratum 2 servers; they're leeches.

      --
      Dewey, what part of this looks like authorities should be involved?
  10. Public yes, but with permission by dananderson · · Score: 2, Informative
    Most public NTP servers require permission prior to use. The list of public NTP servers have an email address or webpage form to use prior to using their NTP server.

    The reason for this is to avoid problems like this, where the NTP server is overloaded or the NTP client is mis-configured and overloads the server or network.

    1. Re:Public yes, but with permission by Anonymous Coward · · Score: 0

      Why don't they force permission, using a firewall?

    2. Re:Public yes, but with permission by cafucu · · Score: 1

      Perhaps one should consider the lack of access to be a lack of permission. Last I checked both ntpd and a decent packet filter are available in nearly all *nix operating systems and distributions. What's up with a "permission slip" from the server admin? If you don't want some moron using your ntp/dns/ftp/whatever server, then deny them at the network layer!

      Disclaimer: I still think D-Link is stupid for doing what they did. But I've thought they were stupid for a long time before this.

      --
      :%s:work:/.:g
  11. What I would have done by ch-chuck · · Score: 4, Funny

    Is silently migrate my legit users to another ntp server and then set the D-Link'ed ones to something like Klingon time or something bizarre, streach 8 hour days to 10 hours, etc. Of course that wouldn't solve the excess traffic, but you can get creative with revenge, especially when you're in the right.

    --
    try { do() || do_not(); } catch (JediException err) { yoda(err); }
    1. Re:What I would have done by PayPaI · · Score: 4, Funny

      Yes, because everyone is going to be so confused that their router is set to the wrong time that they will go out and buy a competitors product.

    2. Re:What I would have done by spyrochaete · · Score: 2, Informative

      In the last story the server admin stated that he couldn't change the address because it would involve far too much work. Many people rely on his services and it was costing him enough out of pocket as is.

    3. Re:What I would have done by Anita+Coney · · Score: 1

      Oh fucking god that was funny!

      --
      If someone says he and his monkey have nothing to hide, they almost certainly do.
    4. Re:What I would have done by Geminii · · Score: 1

      What work? Set up a new DNS name for the same service (one that's easy to change the name of in future), post a notice of changeover, perhaps send some courtesy emails to the biggest (legit) users, then stop responding to the previous name. Couple of hours, tops (plus six to eight weeks in the middle waiting for users to change to the new service, if feeling generous). If feeling REALLY generous, dig up logs of pre-DLink connections and serve requests from those IPs or names transparently on the old domain name. It's not as if any properly-configured systems would only use one NTP source, right? Right?

  12. They DDOS'ed a stratum-1 timeserver . . . by mmell · · Score: 1
    by indiscriminately selling hardware devices which were preconfigured to use it inappropriately (at best, these guys should look to stratum-2 timeservers).

    But if you have no problems with the DDOS aspect of this, let me know and I'll send you an e-mail attachment showing you how to be part of something bigger than your single server. ;^D

  13. Ignorance is no excuse. by Anonymous Coward · · Score: 0

    Perhaps then, if it still seems ok, you should do a little reading instead of trying to apply uninformed logic to the question.

    http://en.wikipedia.org/wiki/NTP_vandalism
    http://www.oreillynet.com/onlamp/blog/2006/02/help _save_the_endangered_time.html
    http://www.pool.ntp.org/

    Stratum 1 is to be only used by stratum 2. Joe Blow worldwide is not stratum 2. Clear violation of access policies here.

  14. What about Microsoft? by Bob+Cat+-+NYMPHS · · Score: 0, Troll

    The "Internet Time" tab on the date/time systray control lets you sync with time.nist.gov which is not supposed to be used by clients.

    1. Re:What about Microsoft? by ch-chuck · · Score: 2, Informative

      What do they say that? - Sound like they go out of their way (advice about firewalls, etc) to let taxpayers "Set Your Computer Clock Via the Internet".

      --
      try { do() || do_not(); } catch (JediException err) { yoda(err); }
    2. Re:What about Microsoft? by resonantblue · · Score: 1

      besides, the default time server is time.windows.com. nist is the alternate choice.

    3. Re:What about Microsoft? by Secrity · · Score: 1

      NIST places no restrictions or expectations on who can access their Internet Time Service (ITS) servers (which includes time.nist.gov). NIST ITS supports NTP, Daytime Protocol and Time Protocol.

      I wonder why D-Link doesn't use NIST's servers.

    4. Re:What about Microsoft? by John+Hasler · · Score: 1

      > I wonder why D-Link doesn't use NIST's servers.

      Why the hell didn't they provide their own server?

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    5. Re:What about Microsoft? by afidel · · Score: 1

      Uh, then why does NIST have this page with step by step instructions on how to setup clients to use nist time servers including time.nist.gov and detailed troubleshooting instuctions for same?

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    6. Re:What about Microsoft? by Jayjay75 · · Score: 1

      Then why does NIST offer its own public domain client?

    7. Re:What about Microsoft? by Bob+Cat+-+NYMPHS · · Score: 1

      time.nist.gov is a Stratum 1 server, it is poor internettiquette to use it for trivial (end-user) reasons.

      http://ntp.isc.org/bin/view/Servers/StratumOneTime Servers

      "As the load on the hosts supporting NTP primary (stratum 1) time service is heavy and always increasing, clients should avoid using the primary servers whenever possible."

      Just because NIST is being nice about it doesn't mean MS has to include it as a choice.

    8. Re:What about Microsoft? by Achromatic1978 · · Score: 1
      Sorry, Internetiquette is trumped by the decisions of the server's owner.

      If I am quite happy to run a stratum 1 server, accessible by any client in the world, and do so... quite simply, any net etiquette is utterly irrelevant.

      The load on stratum 1 servers may very well be heavy and increasing, but if you say 'here, use my stratum 1 server', then people can and will, and you can't claim that it is poor form on their part to do so.

  15. NTP Pool for Vendors by Anonymous Coward · · Score: 3, Informative

    There is now a way for vendors to use the NTP pool. See http://www.pool.ntp.org/vendors.html for details.

  16. This should have been solved with a check. by CFD339 · · Score: 3, Insightful

    Someone at D-Link should simply have realized the mistake and paid for a few very fast servers to sit at a hosting facillity and respond to the requests -- and all the requests already using that service -- for as long as the Danes were willing to point the DNS entry for that server to them.

    In the scheme of things, and from a marketing perspective, anything else is stupid and a waste of good will.

    --
    The problem with quotes on the internet, is that nobody bothers to check their veracity. -- Abraham Lincoln
    1. Re:This should have been solved with a check. by Himring · · Score: 1

      I'm sure they're willing. They're great danes....

      --
      "All great things are simple & expressed in a single word: freedom, justice, honor, duty, mercy, hope." --Churchill
    2. Re:This should have been solved with a check. by systems_joe · · Score: 2, Informative
      for as long as the Danes were willing to point the DNS entry for that server to them.

      If you RTFA, you'll see that the devices in question are not using DNS. They are using a hardcoded IP address, so DNS would not solve this problem.

  17. Amen - wireless crap by coinreturn · · Score: 1

    We used a Belkin wireless router for quite some time with a cable modem - no problems. In comes Verizon with FIOS and they give us a free D-Link wireless router. My wife was constantly complaining about dropped connection. I tried relocating the D-Link all over the place to no avail. We switched back to the Belkin and BAM no problems at all. I give D-Link a grade of..."D"

    1. Re:Amen - wireless crap by IEEEmember · · Score: 1

      The Verizon installer specifically mentioned that FIOS TV will require the use of the D-Link router. A statement supported here by an aware user.

      If you plan to get FIOS TV in the future, don't throw that D-Link away.

      Having used preview it appears the link above http://www.aubreyturner.org/index.php?/orglog/eyeg lazing_geek_stuff/ does not accept referrals from Slashdot.

    2. Re:Amen - wireless crap by coinreturn · · Score: 1

      Thanks for the heads up. Being a true nerd, I never throw hardware away (much to my wife's chagrin). I figure I can always run the Belkin to one of the ethernet ports on the D-Link, so I'll have two wireless networks. With different channels set, I shouldn't have any problems. We already see several other wireless networks in our neighborhood, which makes me consider subletting my FIOS service out.

  18. ObPA by Rob+T+Firefly · · Score: 1

    Do you like his hat? It's made of money!

  19. Hmmm, "Not unsurprisingly..." by dr_canak · · Score: 1

    If something is "not unsurprising" doesn't that mean it was surprising? Like it was suprising that the details of the settlement were so vague?

    I don't know. I'm just asking. Irregardless, I could care less...

    1. Re:Hmmm, "Not unsurprisingly..." by igb · · Score: 1
      Hey, I was on my way out of the office! I meant ``not surprisingly'', but probably had a hash-clash with that oft-used phrase ``not unattractive''...

      ian

    2. Re:Hmmm, "Not unsurprisingly..." by dr_canak · · Score: 1

      LOL,

      I forgot about "not unattractive" :-)

      take care,
      jeff

  20. wow by Anonymous Coward · · Score: 0

    I haven't heard "out of pocket" since the early 90's.

  21. Observed behavior. by mmell · · Score: 1

    I first saw it under Win98 back in 2000; no reason to believe anything's changed.

  22. I've often wondered about this by Illbay · · Score: 1
    Just how "out of pocket" are you if someone "chimes" with your NTP server?

    I realize a few years back, when bandwidth came at appreciable cost, this might have been the case, but now?

    --
    Any technology distinguishable from magic is insufficiently advanced.
    1. Re:I've often wondered about this by Vyvyan+Basterd · · Score: 2, Interesting

      $8000 a year isn't exactly chump change for most people.

    2. Re:I've often wondered about this by Anonymous Coward · · Score: 1, Informative

      If I remember correctly from the open letter written to D-Link from the original /. posting the cost was substantial because by violating the terms of use for the NTP server D-Link caused Poul-Henning Kamp's NTP server to no longer be eligible for a special agreement he had regarding the cost of his bandwidth usage. That letter, of course, is no longer posted most likely because of the settlement agreement.

    3. Re:I've often wondered about this by zardo · · Score: 0, Insightful
      I think the whole thing sets up an unfair precedent. You use public services as they're meant to be used and you are liable for any costs incurred by the service provider. Tread carefully through the internet, beware the ToS of any site you interact with, because they may turn around and sue you later on.

      Has slashdot.org ever been sued for it's costly effects on small, pay-per-traffic websites? I sure hope not. That's the site operators job to protect itself from traffic overload. It's essentially the same though, you're directing people to someone elses server.

      I heard about a similar case in the news recently. Whether telecom companies (ISPs) have the right to collect fees from sites like google for consuming their bandwidth, lost when a visitor hits their website.

      Someone else tries to sue google because images.google.com is linking to the images on their site.

      When's the last time I heard of someone intentionally giving out website addresses or email addresses on the radio, asking listeners to hit them with as much traffic as possible, and did it ever reach litigation? Probably not...

      It's like leaving the bathroom door open while you take a shit, and when someone comes walking in, you sue them for invading your bubble.

      I don't see anything besides sympathy for Poul coming from other people, but really, if I had set up the NTP server with links to it on public lists, I know it's publicly available to anyone who uses it, I would EXPECT the traffic to come eventually. Maybe he should sue google for providing the clueless d-link programmer with his ntp server's address.

    4. Re:I've often wondered about this by Illbay · · Score: 1
      The NTP "stratum" system is a sort of reminder of the Internet of the past, which was relegated to sys-admins and more knowledgeable folks who had "gentlemen's agreements" as to fair use.

      For example, I didn't realize until a year or so after I pointed my small home server's NTP to time.nist.gov, that a run-of-the-mill client "wasn't allowed" to point to a Stratum 1 server.

      Sure, "ignorance is no excuse," but it was ignorance on my part. I changed it later on, to a Stratum 2 (or maybe 3?) server at a local university, after I found out about my faux pas, but the point is what was "just understood" at one time by those using these systems was certainly NOT understood by li'l ol' me.

      This isn't to excuse D-Link for this. Surely someone there could have taken the time to figure out what was correct. And I do think they were sports about righting their wrong.

      But it IS to say that perhaps the NTP server system ought to update itself to allow only authorized clients to connect to upper-stratum servers.

      --
      Any technology distinguishable from magic is insufficiently advanced.
    5. Re:I've often wondered about this by Anonymous Coward · · Score: 0

      The NTP protocol is a reminder of the Internet of the past, where sysadmins would first study the matter before they installed something.
      It was actually not that uncommon to read an RFC or a HOWTO to find out what you need to do and what policies you need to adhere to.

      Today, things are supposed to work "automagically" or at least they should stand up to admins that simply unpack things, move the mouse around a little, toggle the state of all options from the default value to their picture of "correct", and then forget about it.

      With NTP, this can lead to a system that polls a server that it is not authorized for, and that server may become overloaded without the operator being able to do anything beyond locking out those clients. And that will not make the clients stop polling.
      With the typical sysadmin of today, they will never notice that their clock is no longer synced and so they don't even notice they are locked out.

      There is no need to suggest an update to NTP to allow authorization. That feature is already present. However, it is often unpractical to enable it because it requires you to coordinate keys with all legitimate users, which could be hundreds or thousands.

  23. For fun by Anonymous Coward · · Score: 0

    For the fun of it, let's go through with what we had:

    A friend of mine was having some trouble with a couple of machines at his house. I grabbed my testbed and a laptop from the shop and popped on over. I find he has no hub when I get there, oh no, so we just go with the crossover cable he was using to tie his two machines together.

    The ill-fated pair was like this:
    Machine A: His computer, with D-Link DFE-530tx (something like that)
    Machine B: My testbed, with a 3Com some-such and a load of DOS based diagnostics (Win98 also available, but not used in this situation).

    We hook his machine up to mine, he's up and running in Windows, I try to boot mine into DOS. Oh no, it just hangs and does nothing. Try the laptop. Same thing. Unplug my machine from the crossover cable, boots up fine. Plug in crossover cable, reboot, just hangs. See a pattern forming. Try the crossover cable between my testbed and the laptop. No problem. Remove the D-Link card, substitute with the card (Intel) from his upstairs machine. Test bed and the now Intel-ed computer talk just fine, both boot no problems.

    There's bad hardware, then there is BAD hardware. Don't get me wrong, I make decent chunk of change for service calls to my customers, some of the calls for D-Link related problems (but I won't insult you by claiming it is the majority of the calls). But I will NOT screw up my and my busines' reputation by ever, EVER suggesting or recommending D-Link.

  24. Same here - DI 784 by Anonymous Coward · · Score: 0

    It worked pretty well at first, but the number of dropped connections and strange pauses started to increase. At first I thought it was just a lot of traffic on the network. But I realized that if I reset it, things were ok for about five minutes. Then, after months of that, it started going crazy: LEDs blinking in order and it wouldn't respond even on the wired Ethernet. So I reset the firmware. Didn't help.

    I presume there is some part of the hardware slowly failing or it is overheating (because it is ok for a few minutes). But no matter how I orient it it still fails.

    A real piece of junk.

  25. I still don't see why ANYTHING on the network... by mmell · · Score: 1
    interface should interfere with the normal boot process, especially a boot to DOS.

    The BIOS shouldn't even be aware of the network - it's just a bunch of random signals on a PCI bus at this point.

    The bootloader shouldn't care about the network - unless you're doing a network boot, it probably doesn't even know about networks.

    The OS could get confussed . . . attepmting to use ARP/RARP/BOOTP/DHCP (or perhaps any of a half-dozen other services which it might expect).

    I don't suppose you captured any of the bogus traffic which caused this problem (using snoop/tcpdump/whatever)? I'm not sure I understand why a network card would create traffic on its own, let alone how that bogus traffic could prevent the routine booting of a separate system.

  26. resolved without legal action by penguin-collective · · Score: 1

    What D-Link did was unprofessional and irresponsible, they should be condemned for it, and Kamp had every right to complain to them. Nevertheless, it's good that this has been resolved without legal action. If Kamp had actually prevailed in court, it might have set a dangerous precedent: Linux distributions are distributed with hundreds of preconfigured links to all sorts of sites. Generally, those sites have agreed to that, but if their ownership or their policies changed, this could cause serious trouble for the distributor.

    1. Re:resolved without legal action by John+Hasler · · Score: 2, Insightful

      > What D-Link did was unprofessional and irresponsible...

      It was also stupid. Why would anyone buy a router from people who can't even get something this simple right?

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    2. Re:resolved without legal action by bogjobber · · Score: 1

      Because the majority of their users (especially since they are at the cheaper end of the market) don't know what an NTP server is, not to mention the difference between Stratum 1, 2, and 3.

  27. Continue the boycott by Anonymous Coward · · Score: 0

    I'm sorry, but given his statement about "good corporate citizens", I'm assuming that the jackass lawyers at DLink tried to force a settlment rather than risk more bad PR they said "here's the cash if you STFU forever"

    Reading between the lines, D-Link only acted like "good corporate citizens" to benefit their sales and shareholders after bad press, not because it was ethical to do so.

    Sorry, I will maintain my stance of no more D-Link products on my personal systems, and I certainly will never recommend one where I work--Until D-Link discloses full details of the settlement, issues a public apology, and contributes back to the community they tried to screw over.

    When you respond to a request to stop being so evil with greater evil...the original apology requested is no longer sufficient.

  28. That's weird by Andy+Dodd · · Score: 1

    I've used wireless hardware from the following manufacturers:

    D-Link - DWL-650, DWL-G650, DI-624
    The original 650 wasn't a stellar performer but it wasn't horrible. The G650+624 combo was pretty decent. I only returned it in favor of waiting to see where things went as far as MIMO gear.

    Belkin - Can't remember, it was a b-only router
    Utter crap. Couldn't last more than 2-3 days without crashing. Died permanently in just over a year.

    Microsoft - MN500
    In true Microsoft tradition, their software may be crap but their hardware products are actually decent. The MN500 was the most solid and consistent performing 11b kit I have used so far.

    Netgear - WPN824 router + WPN511 NIC
    Stellar. Utterly stellar. I love the 824. WPN511 is only retired due to the fact that my new laptop has a built-in Intel PRO/Wireless 8945 a/b/g NIC.

    --
    retrorocket.o not found, launch anyway?
    1. Re:That's weird by coinreturn · · Score: 1

      The free POS D-Link was a DI-624. The fabulous Belkin is their F5D7230-4. Both are wireless G.

  29. Nope... by Anonymous Coward · · Score: 0

    Nope. It was a few years ago and I left it as just a bizarre hardware failure. Remove the D-Link network card, replace with an Intel one, the whole system works fine afterwards. For all I know, it somehow shorted out internally into a cyclotron and was pumping out X-Ray radiation that left me sterile. I don't have kids yet.

    I think the brand name just has a curse on it. Or it was sending nasty voltage. Don't know, don't care.

  30. Poul-Henning Kamp got payed! by __aaqwna9206 · · Score: 4, Informative

    Poul-Henning Kamp got 200.000 DDK (Danish kroner) which is about 33.000 US$.

    The settlement states that Poul-Henning Kamp must not talk about the history of problems which the D-Link routers caused. But He tells danish press that any future problemes causes by D-link equiptment will be posted around the net ;-). This information is from the danish version of computerworld online at http://www.computerworld.dk/

    His homepage is http://people.freebsd.org/~phk/

    For those in america: Denmark is not the capital of sweden ;-)

    1. Re:Poul-Henning Kamp got payed! by Anonymous Coward · · Score: 0

      "For those in america: Denmark is not the capital of sweden ;-)"

      Correct. Denmark is just our third largest city :-)

    2. Re:Poul-Henning Kamp got payed! by Anonymous Coward · · Score: 0

      And for those of us who understands Danish... I give you the direct link to the article:
      http://www.computerworld.dk/art/33590

    3. Re:Poul-Henning Kamp got payed! by afidel · · Score: 2, Interesting

      Since he is facing a bandwidth bill of $8,000 per year to run the server that doesn't seem like a very good settlement. I mean does D-Link think that virtually all of those devices will be off the net in less than 5 years, because if not it was a shitty offer on their part. If they do then I know who's products not to buy on technical grounds, and if they don't I know who not to buy on moral grounds =)

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    4. Re:Poul-Henning Kamp got payed! by legojenn · · Score: 1
      For those in america: Denmark is not the capital of sweden ;-)



      How could people be so clueless? Everyone knows Copenhagen is the captial of Sweden.

      --
      I make a reasonable middle-class wage by going to work and not spamming blogs with scams.
    5. Re:Poul-Henning Kamp got payed! by Anonymous Coward · · Score: 0

      For those of you in Denmark, we reverse the comma and period in numbers from what you are used to, so I think that you mean $33,000.00 USD. Right?

      Also... my Nordic history is a little fuzzy (it's been too many years), but I seem to remember that Copenhagen (Denmark, for the uninformed) could have been the capital of Sweden. It strikes me that it was some relatively small quirk of fate (marriages, pacts, battles, don't remember). I'm sure someone will set me straight on that.

    6. Re:Poul-Henning Kamp got payed! by thorgil · · Score: 1

      Sweden and Denmark have been to war several times...
      Keeping track of it is as watching a tennis match.... /T

      --
      Warning: This sig contains a small bug. ==> *
    7. Re:Poul-Henning Kamp got payed! by iphayd · · Score: 1

      I knew that, It's Norway's! :P

    8. Re:Poul-Henning Kamp got payed! by Anonymous Coward · · Score: 0

      Only $33.00?? What a gyp!

    9. Re:Poul-Henning Kamp got payed! by stienman · · Score: 1

      For those in america: Denmark is not the capital of sweden ;-)

      Also, the language is not "denmarkish", it's danish.

      Also, the nation is not "daneland" nor is it "danishia"

      Thank you.

      -Adam

    10. Re:Poul-Henning Kamp got payed! by Xochil · · Score: 1

      And for those in Denmark: America is not a country. ; )

    11. Re:Poul-Henning Kamp got payed! by Eil · · Score: 1

      The settlement states that Poul-Henning Kamp must not talk about the history of problems which the D-Link routers caused.

      You know what, that just pisses me off. Any rational person should have laughed at a condition like that. No matter how much money was offered. Getting the truth out about the problem is far more important and will go a lot further to helping solve it than taking a bribe and pretending it never happenend. (Hint: D-Link is far from the the only company who does this with NTP and other services.)

      My respect for this prominent open source hacker has dropped a few notches today.

  31. There's use, and over-use by Anonymous Coward · · Score: 1, Insightful

    I assure you, if someone shipped 1,000,000 web appliances that used your little home web server as a home page, you'd be pissed too. Or your DNS server as their address resolver. He doesn't mind occasional use, but these guys embedded his server address into ROM and and shipped boatloads of them.

    1. Re:There's use, and over-use by MichaelSmith · · Score: 1
      I assure you, if someone shipped 1,000,000 web appliances that used your little home web server as a home page, you'd be pissed too.

      No way! I'd go straight to google for an adwords account.

      Then I would plan my retirement.

  32. Insightful. by mypalmike · · Score: 1

    This post is definitely insightful. Sorry to see your kharma is so low your posting level is 0. It looks like it's because lots of people disagreed with you last time this same subject came up. On slashdot, the squeaky wheel gets the axe.

    --
    There are 0x40000000 types of people: those who understand 32-bit IEEE 754 floating point, and those who don't.
    1. Re:Insightful. by zardo · · Score: 0
      Yeah, I think there was some sort of collusion going on last time. All of my posts and any that looked like they might be mine were indiscriminately modded troll.

      On the bright side, productivity was good for a couple weeks after that.

    2. Re:Insightful. by Anonymous Coward · · Score: 0

      There was no collusion. You just said some really, really stupid stuff.

  33. They could take advantage of dispute by Ilgaz · · Score: 1

    IMHO they should donate their best products to him, a "powered by D-Link" small png along with the bill they paid.

    So, that would be a "better ending" to a legit fight helping their amazingly bad image. I mean, DOSing a public,amateur server with your products and getting mentioned at Slashdot. Can be worse?

    It is good ending btw.

    1. Re:They could take advantage of dispute by Slashcrap · · Score: 2, Funny

      IMHO they should donate their best products to him,

      Dude! They've already fucked him once. What have you got against the poor guy?

  34. Wow, just in time.... by otis+wildflower · · Score: 1

    ... for me to abandon dlink because they're too cheap to put WDS in their wireless routers.

    1. Re:Wow, just in time.... by Anonymous Coward · · Score: 0

      Alternatively: you're too cheap to put your hand in your pocket for a router that supports WDS. After all, WDS isn't something your home user needs, so explain to me why they should be spending time developing a feature that's only to be used by a fraction of 1% of users.

    2. Re:Wow, just in time.... by Ash-Fox · · Score: 1

      Source of statistics please.

      --
      Change is certain; progress is not obligatory.
    3. Re:Wow, just in time.... by otis+wildflower · · Score: 1

      Err, Buffalo did, and they cost just about the same as D-Link..?

      And the CompUSA brand wireless routers also support WDS, and they are $50 (with 1 $30 rebate per household last time I checked)?

      Sorry, D-Link is just lazy suck.

  35. Linksys Mac problems by Kadin2048 · · Score: 1

    You're not the only one.

    It seems that quite a few people have experienced odd behaviors as a result of interactions between Linksys routers and some Macs.

    http://discussions.apple.com/thread.jspa?threadID= 381090&tstart=0

    This thread in particular is about the Mac Book Pro, but I've heard it happens with some other computers also; no clue why or what, but the solution that most people seem to be using is "buy a new router" of a brand other than Linksys. Contributing to this is the general brain-deadedness of their tech support staff (and to be fair, Apple's as well), who just point fingers.

    FWIW, I have a Netgear MR314 running at my parents house that I set up for them when they first got broadband and the thing is a champ; I think it's been running constantly for 4-1/2 years now (if I did my math right) and the only times it hasn't worked is when the power is out. Damn thing is built like a tank, too: sheet metal chassis, none of this blue plastic crap. I've yet to get a Linksys product that's anywhere near as stable, and based on this article I'm not going to run out and get a D-Link.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    1. Re:Linksys Mac problems by Blakey+Rat · · Score: 1

      My 314's antenna broke suddenly one day. I went to bed and I had wireless, I woke up and suddenly only the wired ports worked... was very odd. Oh well, the thing was built well and served me well enough.

      I replaced it with a Microsoft 700-something, and damned if Microsoft didn't make some killer networking hardware-- pity they stopped making it, but this one is at least as robust as the Netgear one, and runs like a champ without me even thinking about it.

  36. Website now changed --prior URLs, please? by KWTm · · Score: 1

    Can someone point me to where Slashdot previously covered this? Also, I recall some years back that there was a router that decided to randomly re-route 12.5% of all requests to non-existent web pages to the router manufacturer's web page that said, "You're obviously lost on the Internet --don't you want to pay us money so we can surf the web for real?" Which company was that --was that Belkin?

    --
    404555974007725459910684486621289147856453481154 in hex is "You sank my Battleship?"
    [GPG key in journal]
  37. Google-cached copy of Kamp's letter to D-Link by Anonymous Coward · · Score: 1, Informative

    Okay, sorry to reply to myself, but I found a cache of Poul-Henning Kamp's posting about D-Link. This was at http://72.14.207.104/search?q=cache:LAdoqMDzqM0J:n et127.com/2006/04/07/open-letter-to-d-link-about-t heir-ntp-vandalism/+%22have+been+accused+of+extort ion.+I+have+been+told+that+I%22&hl=en&gl=us&ct=cln k&cd=1
    (I'm not sure of any of those gibberish-looking parameters change over time.)

    I think the convention is to post Anonymously to prevent karma-whoring, but the last time I tried to post anonymously, it didn't work. It seems to work when I preview this post. Okay, here's the web page:

    Poul-Henning Kamp, Slagelse, Denmark, writes:

    When I contacted D-Link back in November 2005 about the way D-Link products abused my NTP-server, I expected to get in touch with somebody who understood what they were talking about, I expected them to admit that D-Link had made a bad decision and I expected that D-Link would make good on the damage they were responsible for.

    For the last five months I have wasted a lot of time trying to reach some kind of agreement with the Californian lawyer which D-Link put on the case. I can't quite make up my mind if D-Link's lawyer negotiates in bad faith or is merely uninformed, I tend to suspect the latter, but either way, as of this morning I decided to cut my losses.

    Since no one else at D-Link has reacted to my numerous emails, I have no other means of getting in touch with D-Link other than an open letter. I realize that it will be inconvenient and embarrasing for D-Link to have this matter exposed in public this way, but I seem to have no other choice.

    I will now lay out the case below in such detail that any moderately knowledgeable person should be able to understand it, and hopefully somebody, somewhere in D-Link will contact me so we can get this matter resolved.

    What is NTP?

    NTP is Network Time Protocol, a protocol that allows computers to transfer timestamps across the internet so that they can set their clocks to the correct time.

    A number of NTP servers on the internet are connected to radio timecode receivers, GPS receivers or in some cases directly to national time laboratories primary atomic frequency standards.
    How not to implement NTP in a product

    A number of D-Link products, so far I have at least identified DI-604, DI-614+, DI-624, DI-754, DI-764, DI-774, DI-784, VDI604 and VDI624, contain a list of NTP servers in their firmware and using some sort of algorithm, they pick one and send packets to it.

    This is about as wrong a way to do things as one can imagine. There is no way D-Link can change the list once the product is shipped, unless D-Link can persuade the customer to upgrade the firmware.
    How to implement NTP in a product

    The correct way, as I have pointed out to D-Link repeatedly, is to query a D-Link controlled DNS entry like "ntp.dlink.com" and populate this DNS entry with the list of NTP servers to be queried. That would allow D-Link to add or remove servers from the list by changing the DNS server files and all deployed devices would automatically see the update next time.

    If D-Link had implemented the NTP feature this way, my complaint could have been handled to my full satisfaction with an emailed apology and a few minutes of D-Link's DNS administrators time.
    The problem

    As you can see in the table on the right side, D-Link included the NTP server "GPS.dix.dk" in the list of NTP servers to query, and they did so without asking for permission.

    I have no idea how many devices D-Link has sold, but between 75% and 90% of the packets which arrive at my server come from D-Link products via this mechanism.
    Why D-Link ne

  38. Proof? by Just+Some+Guy · · Score: 1
    many other free software projects have hardcoded network services in their distributions

    Can you give an example of a project that hardcodes a network address that they don't explicit permission to use?

    --
    Dewey, what part of this looks like authorities should be involved?
    1. Re:Proof? by penguin-collective · · Score: 1

      Can you give an example of a project that hardcodes a network address that they don't explicit permission to use?

      Ubuntu and Debian ship with time servers preconfigured; I doubt they have written permission for all of them. I also don't believe it would be good if we ended up in a world where the use of open services requires written permission if you don't want to get sued.

      As another example, many Linux distributions point to a download site for Microsoft msttcorefonts. Do you think they have permission? I don't think so. Do you want Microsoft to be able to sue over this?

    2. Re:Proof? by Just+Some+Guy · · Score: 1
      Ubuntu and Debian ship with time servers preconfigured; I doubt they have written permission for all of them.

      They point to pool.ntp.org, which is designed expressly for this purpose.

      As another example, many Linux distributions point to a download site for Microsoft msttcorefonts. Do you think they have permission?

      They universally point to SourceForge, which was specifically designed for this exact purpose.

      Any other examples?

      --
      Dewey, what part of this looks like authorities should be involved?
    3. Re:Proof? by penguin-collective · · Score: 1

      They point to pool.ntp.org, which is designed expressly for this purpose.

      On Ubuntu, go to Time and Date Settings > Select Servers, and you'll get a long list of host names all over the world; pool.ntp.org isn't even listed.

      They universally point to SourceForge, which was specifically designed for this exact purpose.

      They didn't use to. Furthermore, any one of those sites could turn around and say "we didn't give permission to X" after the fact.

      Evaluating who can do what based on a vague understanding what things are "meant for", "announced as", or "designed for" is just a bad idea. Either you run an open site and regulate your user behavior technologically, or you should have people explicitly agree to a usage agreement.