Re:How to terminate your worst enemy's Dropbox account for o...
by CamperBob2 on Monday December 24, 2012 @05:33PM
(#4964368)
Seems questionable to use the local time for that. System time isn't exactly a trusted quantity, is it?
[ Parent
| on HN ]
Re:How to terminate your worst enemy's Dropbox account for o...
by jonemo on Monday December 24, 2012 @07:53PM
(#4964665)
iOS does it that way. My iPod touch always forgets date and time when it runs out of battery. After restart you can't do anything in the App Store or on https websites before you've set the correct date (it defaults to 1970 which is when the iPod was first introduced I believe).
Re:How to terminate your worst enemy's Dropbox account for o...
by Tloewald on Monday December 24, 2012 @08:52PM
(#4964775)
1970 ipod would be awesome.
Re:How to terminate your worst enemy's Dropbox account for o...
by Lord_DeathMatch on Monday December 24, 2012 @09:25PM
(#4964848)
1970 is Unix Epoch :)
IE, Unix time started then.
Re:How to terminate your worst enemy's Dropbox account for o...
by arashf on Monday December 24, 2012 @05:49PM
(#4964407)
hmmm, I think it's fairly common practice amongst similar software (i.e. firefox, chrome, etc.) to use system time as a signal that you may be connecting to a server that has an outdated SSL certificate. while it's not perfect, it's a good first order security precaution to take (in addition to verifying the CA) to ensure you are talking to who you think you are.
Re:How to terminate your worst enemy's Dropbox account for o...
by astrange on Monday December 24, 2012 @10:37PM
(#4964987)
Certificate validation for 802.1x networks relies on this, with the effect that you sometimes can't get an internet connection without fixing your clock.
Re:How to terminate your worst enemy's Dropbox account for o...
by happyhappy on Monday December 24, 2012 @06:30PM
(#4964473)
What other time source would you propose using?
Re:How to terminate your worst enemy's Dropbox account for o...
by CamperBob2 on Monday December 24, 2012 @07:30PM
(#4964608)
If you know you're on a network -- and Dropbox does -- then I'd fetch the time from a time server somewhere, perhaps Dropbox itself, or time.nist.gov. Of course, then you're at the mercy of the user's hosts file, I suppose.
If the time is just used to check for certificate expiration, maybe nobody considers it worth worrying about. Which I guess is fine as far as it goes... but the other day I couldn't get Dropbox to do its thing when my clock was only a few hours off. It didn't seem likely that an SSL date check was involved in that case.
Re:How to terminate your worst enemy's Dropbox account for o...
by TeMPOraL on Tuesday December 25, 2012 @02:20PM
(#4966819)
Well. Chrome and Firefox won't let you log in to GMail, for instance. IE at least allows you to continue if you really want.
It's a common thing on school/university computers, where for various reasons, system time is always wrong and it requires Administrator privilenges to change it (I can't understand why).