Most active commenters
  • tptacek(4)

←back to thread

301 points gastonmorixe | 14 comments | | HN request time: 1.31s | source | bottom
Show context
mhovd ◴[] No.45898645[source]
I am surprised that NTP project is not funded, fully or partially, by larger organizations or governments, given the criticality of the project.
replies(8): >>45898658 #>>45898731 #>>45898775 #>>45898921 #>>45899060 #>>45899179 #>>45899269 #>>45899540 #
nickelpro ◴[] No.45899269[source]
The reference implementation, while historically important, has largely been displaced by more secure/performant implementations (ntpsec, chrony), or by in-house implementations (Amazon, Google).

Notably NTPd doesn't support leap-smear, which means those who absolutely must have monotonic time can't use it at all.

replies(3): >>45899310 #>>45899969 #>>45900271 #
1. tptacek ◴[] No.45899969[source]
Who's running ntpsec?
replies(2): >>45900183 #>>45900286 #
2. exasperaited ◴[] No.45900183[source]
At least in part, someone you really don't want to be running a fork of an important project: ESR.
replies(2): >>45900259 #>>45900470 #
3. tptacek ◴[] No.45900259[source]
Oh, no, I mean, I know who's actually behind the project, I'm just wondering if there are any major deployments of it.
4. mlichvar ◴[] No.45900286[source]
The major Linux distributions replaced ntp with ntpsec. A better question would be who is still running ntp. I know about FreeBSD and NetBSD.

ntpsec as a project seems to be doing ok. They are releasing new versions, fix reported issues, accept patches, and develop the code publicly. While ntp still has a huge list of acknowledged but unfixed CVEs.

replies(2): >>45900644 #>>45901155 #
5. chocalot ◴[] No.45900470[source]
I'm out of the loop. What's the issue with using a project that ESR contributes to?

I am vaguely aware he has some unpopular political beliefs (though exactly what I don't know). Is that it?

replies(2): >>45901318 #>>45901417 #
6. Palomides ◴[] No.45900644[source]
is that true? ubuntu and red hat for example use chrony or systemd-timesyncd
7. tptacek ◴[] No.45901155[source]
Which distributions use ntpsec?
replies(1): >>45901527 #
8. akerl_ ◴[] No.45901318{3}[source]
Insofar as racism, homophobia, and sexism are unpopular political beliefs: yes.

Oh, also he doesn't really "contribute" to tech projects so much as "exists near/within them and writes long form ramblings".

replies(1): >>45904552 #
9. exasperaited ◴[] No.45901417{3}[source]
It's not the issue of using the project, to my mind.

It is not even his beliefs, though many of them are — to my ears and hopefully to most — quite repugnant.

It is his attitude, approach, and at various times the kinds of people he attracts.

As it goes, I've seen him speak, back in the 90s, CatB era. He was genial enough but he seemed to have a coterie around him of rather less pleasant people. It could just have been a bad day but it has stuck in my mind ever since: it was the first time I understood that there's not really any sort of inclsive geek community.

replies(1): >>45902377 #
10. mlichvar ◴[] No.45901527{3}[source]
Current Debian, Ubuntu, Fedora, RHEL/CentOS (EPEL) have an ntpsec package, but no ntp package. It's not used by default (that's chrony on most of the distributions), but the users can install it and use it.
replies(1): >>45902384 #
11. WesolyKubeczek ◴[] No.45902377{4}[source]
Less pleasant — in what way?
12. akerl_ ◴[] No.45902384{4}[source]
Thats… not the same thing.
13. chocalot ◴[] No.45904552{4}[source]
Ah, the person I responded to suggests he runs the project.

If he just "exists near", I see even less of a case why someone should avoid it.

But horses for courses, people can choose to avoid for whatever reason.

replies(1): >>45904987 #
14. tptacek ◴[] No.45904987{5}[source]
No, there's a long story behind ntpsec and it's all pretty exhausting and none of it has anything to do with ESR's personal life.