News for hackers. Stuff that matters.
Re:A Memory Safe NTP Implementation by j16sdiz on Tuesday October 11, 2022 @10:31PM (#33172052)
The blog say the example use is certificate expiry check. I think this only need ~1 minute precision. You can do away with a weekly cron job.
Re:A Memory Safe NTP Implementation by viraptor on Tuesday October 11, 2022 @10:50PM (#33172174)
LE certs are normally cycled days ahead, so you need only +/-1 day precision for that specific purpose. But the question was: if you need to sync from time to time anyway, why is staying in sync using ntp a thing we wouldn't want?
Re:A Memory Safe NTP Implementation by bradknowles on Thursday October 13, 2022 @02:14AM (#33187840)
That assumes your clock is running at a reasonable rate, and that the clock speed doesn't vary, etc....

The more your clock is skewed, the more often you need to check to see how badly it's skewed and apply whatever corrections are necessary.

That said, I'm a big fan of running SNTP as a client, where you don't need the full power of the NTP protocol. There's no sense running a full blown NTP client on most systems.

I like the idea of memory safety, but that's just one category of potential security vulnerabilities. If Rust can solve for that and also give me other benefits like higher speed, then I'm all for it. But you have to give me a lot of good reasons, or a hell of a good single reason, if you want me to toss out everything and replace it with Rust. And IMO, memory safety alone is not a good enough reason for most use cases.