LIKELY SPAM to NTF RE: the NTP Pool - DO NOT CLICK LINKS

1

-----Original Message-----
From: webmaster webmaster-bounces+stevos=nwtime.org@lists.ntp.org On Behalf Of Albert Clawson
Sent: Tuesday, May 21, 2019 9:30 AM
To: webmaster@ntp.org
Subject: [ntp:webmaster] Website hijacked

The website 0.north-america.pool.ntp.org has been hijacked and is displaying information for a political group calling themselves “Occupy Legal”

Important Update from Occupy Legal

Occupy Legal is honored to have served an essential role for Occupy/Decolonize movements in the Bay Area since October, 2011. On a completely volunteer basis, Occupy Legal staffed a legal hotline and tracked more than one thousand arrestees in jail and through the legal system on both sides of the Bay. We provided twenty-four hour emergency support, and took primary responsibility for organizing and dispatching legal observers and lawyers, in conjunction with the National Lawyers Guild. To address the shifting needs and circumstances of the Occupy / Decolonize movement, Occupy Legal is transforming its mission to a mutual aid model emphasizing decentralization and popular education over direct service and professional models.

Occupy Legal will no longer staff a legal hotline on an ongoing basis. We will no longer be recruiting and organizing attorneys for jail visits and criminal defense. Occupy Legal strongly encourages organizers to be trained and staff their own legal hotlines for ongoing and smaller actions with arrest potential. We will educate you and work with you to set up a hotline and a data system for record-keeping and tracking arrests so that you can be sure that everyone arrested at your event is released and/or receives all available support.

By request, Occupy Legal may volunteer staff the NLG demonstrations hotline (415-285-1011) for demonstrations with the potential for mass arrests. Requests for a legal hotline, legal observers and on call lawyers, or other demonstrations related legal needs, should be made by filling out the NLG Demonstrations Committee form at http://www.nlgsf.org/form/legal-support-request. If you are unable to complete the online form, please call the NLG at 415-285-5067. OL, and the NLG Demonstrations Committee, are volunteer activists, and cannot guarantee being able to respond to all requests or meet all legal needs.

Occupy Legal will provide mutual aid and ongoing popular education for activists, including Know Your Rights, legal support and hotline trainings. The NLG Demonstrations Committee will continue to respond to requests for lawyers, as well as legal hotline and legal observers, within its capacity, as it has always done. The NLG can often recruit volunteer lawyers from its membership, but cannot guarantee finding everyone an NLG lawyer who can work for free, in every case, particularly on an emergency basis.

Donate!

It costs money to accept collect calls from jail, print out know your rights materials, send out bright green hats to legal observers, and brew coffee for our overnight hotline shifts! Consider sending a few bucks our way via this paypal linkhttps://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=XN7G7Z9LCTSJC or you can also send checks to the National Lawyers Guild SF, 558 Capp Street, San Francisco, CA 94110 with the memo “Occupy Legal”.

About Occupy Legal

Occupy Legal is a collective of activists, lawyers, and legal workers dedicated to supporting economic justice occupation movements in the San Francisco Bay Area. Occupy Legal works to transform the demoralizing experience of arrest and incarceration into an empowering one. We are working in collaboration with the Bay Area chapterhttp://nlgsf.org/ of the National Lawyers Guildhttp://nlg.org/.

Al Clawson, IT Manager

Behavioral Center of Michigan

Samaritan Behavioral Center

4050 E 12 Mile Rd

Warren, MI 48092

586-261-2266

aclawson@behavioralcenter.com
Just making sure this is not real. Got this over at NTF @ask _______________________________________________

webmaster mailing list

webmaster@lists.ntp.org

http://lists.ntp.org/listinfo/webmaster

2

Likely SPAM, but sending to you all just in case.

Steve

3

Not sure why people try HTTP with NTP Pool DNS names intended for serving NTP…

That’s not an NTP Pool website. Nothing has been hijacked. It belongs to some random pool server operator. This confusion is why server operators are supposed to follow the instructions on redirecting web requests: https://www.ntppool.org/en/join.html

1 Like
4

Yeah, basically what @Kenyon said. The service is an NTP service, to be accessed via the NTP protocol.

5

Is it viable to include some checking mechanism to prevent this confusion? I mean, if the server also serves http then it should include the redirect.

6

Maybe I’m a little confused or you are, but what do you mean if the server also serves http then it should include the redirect check? The Pool DNS resolves to random NTP server address’s, each of us who click that link will probably get taken to a different possible HTTP server if one is running on that port. You may get a https response or you may get nothing back, that is why it is asked that if you are running if possible you redirect http, assuming you are not running a website on the NTP server, to the pool http address. It’s not always possible to do so, but if it is that is why we ask that you do.

Thanks

7

Clarify my suggestion:
A server with ip address a.b.c.d wants to join the pool. The system first checks its ntp port reachability. If reachable then the system further checks its http port reachability by sending a http request (with Host: pool.ntp.org header) to a.b.c.d:80.

  • If a.b.c.d:80 does not reply: that’s fine, http service is not required
  • If a.b.c.d:80 replies with redirect response to www.pool.ntp.org: that’s good, in compliance with pool suggestions
  • If a.b.c.d:80 replies with any other content: that’s bad, causing confusion

We may block a.b.c.d from joining the pool if the last situation occurred.

2 Likes
8

nah, I dont see any use in making rules on http/https content. The Pages normally shouldnt be called directly via http/https, only ppl experimenting may reach this address, so why regulate something so insignificant. It does not degrade the functionality of the pool in any way.

2 Likes
9

Something along those lines are on the (very long) todo list. I probably wouldn’t want us to block people from joining if they don’t do this, but a check could show on the manage page or in an annual email with a pointer to the suggested configuration.

1 Like