Windows feature that resets system clocks based on random data is wreaking havoc

Re:Windows feature that resets system clocks based on random... by toast0 on Wednesday August 16, 2023 @03:59PM (#37152852)

NTP is trivially MITM. Secure NTP is basically not deployed anywhere. Someone with a google.com cert that's valid other than expiration is probably google and probably has a working clock.

[ Parent | on HN ]

Re:Windows feature that resets system clocks based on random... by anthk on Wednesday August 16, 2023 @04:03PM (#37152908)

You can always use a gpsd(4) compatible USB dongle as the time source.

[ Parent | on HN ]

Re:Windows feature that resets system clocks based on random... by toast0 on Wednesday August 16, 2023 @04:13PM (#37153060)

Sure, if you have such a dongle, and it has sufficient view of the sky. Adding a 'free' https based sanity check on top of NTP seems like a good balance of cost vs reward.

gps (and friends) is a nice way to get access to a very accurate timesource, but it's not always worth the cost.

[ Parent | on HN ]

Re:Windows feature that resets system clocks based on random... by JohnFen on Wednesday August 16, 2023 @04:09PM (#37152994)

Or run their own NTP server. That's what I do in my home network.

[ Parent | on HN ]

Re:Windows feature that resets system clocks based on random... by labawi on Sunday August 20, 2023 @02:01PM (#37201495)

GPS doesn't send full time. It wraps every 1024 weeks, or about 20 years, hence you need a (very) rough basis in case the system is over 20 years old.

[ Parent | on HN ]