undefined | Better HN

0 pointssamatman3y ago0 comments

So anyone can bring down Mongo with a compromised ntp server?

That's an inconvenient property to have.

0 comments

_jal3y ago

Oh, if you own someone's clock, you can do all sorts of damage.

Want to expire everyone's passwords? Blow up their credit card processing? Those are just the obvious attacks.

samatmanOP3y ago

Yes but bringing down a database should not be among those things.

Surely we can agree on that.

macintux3y ago

I’m curious whether there is any database that handles this scenario correctly…or even whether there is a correct behavior for a situation where the system clock is rewound.

1 more reply

j / k navigate · click thread line to collapse