Slashdot Mirror
OpenBSD Releases a Portable Version of OpenNTPD
Noryungi (70322) writes Theo De Raadt roundly criticized NTP due to its recent security advisories, and pointed out that OpenBSD OpenNTPD was not vulnerable. However, it also had not been made portable to other OS in a long time. Brent Cook, also known for his work on the portable version of LibreSSL (OpenBSD cleanup and refactoring of OpenSSL) decided to take the matter in his own hands and released a new portable version of OpenNTPD. Everyone rejoice, compile and report issues!
This is moronic.
A very high percentage of people use ntp simply because they want accurate time on their devices.
Why should they use a program that does 90% something else (by your estimation) as a piece of critical infrastructure running on all of their devices?
OpenNTPD allows me to serve accurate time to devices across my network, and it allows those devices to keep their local clock set right as well.
If I was you, I guess I should feel bad I'm missing 90% of the features, like buffer overflows and other security failures in the ntp.org version!!! But, I don't. I'm not a fucking moron.
Funny how I am firewalling ports so that your vulnerable shit running on customer Cisco firewalls, Linux servers and other customer boxes across my network, just so that your shit doesn't cause a 550x amplification factor, or who knows whatever other vulnerabilities compromise these devices. My hat is off to you for your shit garbage. Fuck you, sir.