154 comments

  • juliusceasar 2 hours ago ago

    I refuse to donate. Trillion dollar companies depend leech on it and yet refuse to spend money on it.

    Let it fail and see what happens.

    • Aurornis an hour ago ago

      Those trillion dollar companies are running a lot of public NTP server infrastructure. Here is a list of public NTP addresses from different big tech companies: https://gist.github.com/mutin-sa/eea1c396b1e610a2da1e5550d94...

      > Trillion dollar companies depend leech on it

      Are you confusing the NTP Foundation (the group asking for donations) with NTP the protocol or the NTP software itself?

      This donation request isn’t even for the public NTP pool. Read the donation page carefully.

      The big companies you’re angry at are neither dependent upon nor leeching from this group. They run their own NTP infrastructure, which in some cases has their own developments and adjustments.

      Google’s, for example, uses time-smearing to handle leaps. This is different than the standard and therefore you shouldn’t mix Google’s leap-smearing NTP system with NTP servers that don’t leap smear.

      > Let it fail and see what happens.

      This is a real “cut off your nose to spite your face” moment, but worse: Those public companies don’t depend on any of this. They provide their own server pools and in some cases develop their own software with their own advancements. Cheering for the NTP Foundation to fail because you think it will hurt big companies is very uninformed.

      • righthand 5 minutes ago ago

        It would hurt the big companies though because the employees of those big companies rely on Ntp. It may not directly impact them but it’s better than letting them continue to rake in billions and then never support the core foundational tech.

        Maybe letting Ntp fail will wake up some of the employees of other companies to the absolute sad state of the software world.

    • sph 2 hours ago ago

      Harsh but true. Any of the FAANGs could cough up a million dollars and let the thing run for 1000 months.

      I’m too poor to have too much revenue that I need to donate some away to pay fewer taxes. That’s a problem corporations have.

      • graemep 3 minutes ago ago

        It also gives them power over how things are run. He who pays the piper calls the tune.

      • jahnu an hour ago ago

        Even a single highly paid employee of a FAANG, many of whom frequent this very forum, could pay for a year without breaking the bank.

        • codingdave an hour ago ago

          100% true, but they shouldn't have to. If FAANG is using it, they should fund it. I don't want to work in a culture where the employees pay for the corporations' tools.

          • sph an hour ago ago

            > I don't want to work in a culture where the employees pay for the corporations' tools.

            Agreed. They call that 'open source' work (derogative)

          • reactordev an hour ago ago

            Say this louder for the managers in the back!

            I’m sick of having to pay for my own tools to do my job at your company. Either find a way to build using free tools or fork up the license for that Visual Studio Ultimate or IntelliJ Idea Ultimate license. Pay for your database vendor. Your corporate IdP. Why not $300/yr for a high value output employee?

            • ebiester 18 minutes ago ago

              We have a price for the total infrastructure spend per dev, and that includes things like AWS prices and all of the tooling like jira and github.

              But you absolutely shouldn't have to pay for your own tools. (That said, blue collar people often have to, unlike us, and that's also awful.) But also, it's their productivity. If you are all laboring under the same constraints, it's their choice to make if they care about your productivity.

            • waltbosz 31 minutes ago ago

              You know, I always thought it odd when plumbers (etc. tradesmen) working full time for a company have to supply their own tools.

              • reactordev 24 minutes ago ago

                My brother is a plumber and his company reimbursed him for every tool he has bought for the job. After 5 years, he started his own plumbing business and he supplies all the tools, trucks, benefits, contracts, and customer support for his employees in the field. For what it’s worth.

                You can choose your tool, you’ll get it.

              • hrimfaxi 26 minutes ago ago

                I always found it odd that so many shops let people use whichever tools they want!

        • throwaway838112 an hour ago ago

          They would rather downvote you than giving away $100

    • hosteur 2 hours ago ago

      > Let it fail and see what happens.

      It will get replaced by a proprietary protocol/paid service from each Azure, Cloudflare, Google, AWS, ...

      The rest of us will be S.O.L.

      • Aurornis an hour ago ago

        FYI the big companies provide their own NTP servers and pools. You can use them if you’d like.

        They also don’t use the reference implementation (which is maintained by the group this donation is for). Your distros and software probably doesn’t use it either.

        The commenter above who thinks shutting down the NTP Foundation will hurt FAANG because they “leech” off of NTP Foundation is completely uninformed.

      • qwertytyyuu an hour ago ago

        It would be so much cheaper for the companies to support this than out their own solution

        • foofoo12 an hour ago ago

          You're missing the bigger picture. Vendor lock in.

          • throwaway838112 an hour ago ago

            Not only that, but the owners of big companies are actively lobbying to pay even less taxes. They are ideologically opposed to supporting public benefit projects.

        • gjvc an hour ago ago

          but then they wouldn't own it.

    • kristopolous 20 minutes ago ago

      Is there any endowment for such projects?

      Something like money to the endowment from the big corp, then would be recipients petition the endowment for ongoing funding, some board decides based on a set of open protocols...

      Because honestly I've seen this a bit recently - major infrastructure projects looking for effectively pocket change; a couple thousand.

      They shouldn't ever have to beg for money, this is stupid.

      • trollbridge 6 minutes ago ago

        Wikimedia Foundation sort of does now. The result of that is that their spending has ballooned to hundreds of millions of dollars.

    • jillesvangurp an hour ago ago

      This raises a lot of questions. Did they actually ask for money to these big companies? Did they get rejected?

      Another approach could be to move this under the umbrella of any of the other OSS foundations. I can imagine the Linux Foundation would be a good place. Well funded, already has most of the stakeholders involved, and this clearly falls in their scope of interest at least. It would not surprise me if that wasn't discussed at some point.

      This smells a bit like something that might be more complicated than it looks.

      • emsign an hour ago ago

        I'd happily donate to NTP if and only if AI companies are barred from using free software like this in the future via the sw license. I don't WANT to be part of this internet that's hostile and exploitative towards users anymore.

    • baq 11 minutes ago ago

      they'll buy leftovers and take the thing private.

    • jvanderbot 2 hours ago ago

      Ideologically pure, but for all practical purposes miserly. Trillion dollar companies are very hard to move that way and very unlikely to take the first step. We need a "Foundational Software and Services" fund that says very nice things about each donor and spends 100$ on publicity for every 1$ to software to even get them to start looking, I bet.

      Donate some time: Ask your boss if their company could chip?

    • Barbing an hour ago ago

      Anyone know whether NTP already asks the biggest names for donations?

    • foofoo12 an hour ago ago

      They'd each fork it. AWS NTP for $0.01/request.

    • neuroelectron an hour ago ago

      Trillion dollar companies run their own NTP servers

    • alex_duf an hour ago ago

      but do you want it to be dependent on trillion dollar companies?

      • vel0city 7 minutes ago ago

        You don't need to be dependent on trillion dollar time companies to get an extremely accurate time source. Just get your own GPS receiver that supports timing output. You can get an GPS-based NTP server for pretty cheap.

    • throwaway838112 2 hours ago ago

      Doing that punishes people who donated.

      • sph 2 hours ago ago

        How is not donating punishing those who do? Does not compute.

        • throwaway838112 an hour ago ago

          It's written clearly:

          > Let it fail and see what happens.

    • jmclnx an hour ago ago

      I agree with you in this, I donate to a few Open Source Projects, I really cannot afford to donate to one that multi-billon $ companies use for free.

      For example, OpenSSH. Used everywhere yet IBM gives a big fat 0 to that project even though OpenSSH is even used in AIX. Even though I love to complain about Microsoft, M/S does donate a decent amount to OpenSSH via OpenBSD, so M/S gets my respect for doing that.

      Time companies like IBM steps up and give, if not, we are back to playing with CMOS date/time. Which is how things were when I started programing at a large company decades ago.

      • amelius an hour ago ago

        There's probably some stupid legal reason behind why they don't donate.

  • Bender 2 hours ago ago

    Rather than money one can donate NTP servers to the pool. [1] It can be a fun learning exercise in setting up a stable stratum-2 time server. One can create graphs from the optional logs.

    Why bother? Many of the rabbit holes one could venture down in learning to set up a stable time server can also benefit application servers in terms of latency, responsiveness, learning how to get clients to share resources and so much more. Rather than trying to find cooperative stratum-1 servers, one can start by using each of the Google, Facebook and Apple public stratum-1 servers [2] to get started. They get beat up a lot but most of them are stable most of the time.

    Ask your favorite LLM how to set up a public NTP server using NTPD or Chrony. For extra credit play with each of them.

    [1] - https://www.ntppool.org/en/join.html

    [2] - # grep -E "facebo|goog|appl" /etc/hosts

        17.253.16.253   time.apple.com
        129.134.28.123  time1.facebook.com
        129.134.29.123  time2.facebook.com
        129.134.25.123  time3.facebook.com
        129.134.26.123  time4.facebook.com
        129.134.27.123  time5.facebook.com
        216.239.35.0    time1.google.com
        216.239.35.4    time2.google.com
        216.239.35.8    time3.google.com
        216.239.35.12   time4.google.com
    • tonyarkles a few seconds ago ago

      One of the really nifty things about having a stratum-1 time server on-site (because... reasons) is those graphs. You can very readily see the subtle temperature-dependence of timing crystals. At the facility I was at there was a large cycle every day during the week and then smaller cycle on each weekend day. Our HVAC system didn't heat/cool the building as much on the weekend when no one was there so the temperature swing -> frequency swing was smaller.

  • Aurornis 22 minutes ago ago

    This was submitted with a title that doesn’t match the page and is not even accurste (Please donate to keep Network Time Protocol up) is not correct. This donation page is not for the public NTP pool. It’s for the NTP Project organization and their web page.

    All of the angry comments from people who think NTP will stop working if the donation bar doesn’t get to $1000 are misinformed. Also note that the bar isn’t updating. It’s been stuck at $365 for myself and others despite donations coming in.

    • phailhaus 6 minutes ago ago

      I see it at $2,130 fifteen minutes after your comment.

    • jrmg 10 minutes ago ago

      You’re right, people are plainly commenting based on the title.

      The goal has now mysteriously changed to a goal of $4000.

    • mmmpetrichor 15 minutes ago ago

      I think maybe the title of this topic post is the main source of misinformation.

      • Aurornis 14 minutes ago ago

        It’s definitely the title. The title is a plain and simple lie.

  • calibas 6 minutes ago ago

    Some of the comments here seem overly negative and critical.

    They support billions of devices and are only asking for $4,000 in donations per year.

  • mhovd 4 hours ago ago

    I am surprised that NTP project is not funded, fully or partially, by larger organizations or governments, given the criticality of the project.

    • nickelpro 3 hours ago ago

      The reference implementation, while historically important, has largely been displaced by more secure/performant implementations (ntpsec, chrony), or by in-house implementations (Amazon, Google).

      Notably NTPd doesn't support leap-smear, which means those who absolutely must have monotonic time can't use it at all.

      • throw0101d an hour ago ago

        > Notably NTPd doesn't support leap-smear, which means those who absolutely must have monotonic time can't use it at all.

        It should be noted that there currently exists no standard, technical or statutory, for how to do leap smearing. If an event happens and you need to tie your timestamped event logs to the 'greater reality' in some legally binding way there's (AIUI) no way to do that.

        A few years ago there was a draft on the idea:

        * https://datatracker.ietf.org/doc/draft-stenn-ntp-leap-smear-...

        And the currently-draft NTPv5 has something about:

        * https://datatracker.ietf.org/doc/draft-ietf-ntp-ntpv5/

        Though the flag simply says that the timescale is smeared and not (AFAICT) how it is being done.

        See also perhaps RFC 8633 § 2.7.1:

            […]
        
            Operators who have legal obligations or other strong requirements to
            be synchronized with UTC or civil time SHOULD NOT use leap smearing
            because the distributed time cannot be guaranteed to be traceable to
            UTC during the smear interval.
        
            […]
        
            Any use of leap-smearing servers should be limited to within a
            single, well-controlled environment.  Leap smearing MUST NOT be used
            for public-facing NTP servers, as they will disagree with non-
            smearing servers (as well as UTC) during the leap smear interval, and
            there is no standardized way for a client to detect that a server is
            using leap smearing.  However, be aware that some public-facing
            servers may be configured this way in spite of this guidance.
        
        * https://datatracker.ietf.org/doc/rfc8633/
      • mananaysiempre 3 hours ago ago

        > Those who absolutely must have monotonic time

        ... shouldn’t be using a Unix timestamp, or anything else that’s not a count of SI seconds elapsed since a fixed reference point, to begin with.

      • tptacek an hour ago ago

        Who's running ntpsec?

        • mlichvar an hour ago ago

          The major Linux distributions replaced ntp with ntpsec. A better question would be who is still running ntp. I know about FreeBSD and NetBSD.

          ntpsec as a project seems to be doing ok. They are releasing new versions, fix reported issues, accept patches, and develop the code publicly. While ntp still has a huge list of acknowledged but unfixed CVEs.

          • Palomides 32 minutes ago ago

            is that true? ubuntu and red hat for example use chrony or systemd-timesyncd

        • exasperaited an hour ago ago

          At least in part, someone you really don't want to be running a fork of an important project: ESR.

          • chocalot an hour ago ago

            I'm out of the loop. What's the issue with using a project that ESR contributes to?

            I am vaguely aware he has some unpopular political beliefs (though exactly what I don't know). Is that it?

          • tptacek an hour ago ago

            Oh, no, I mean, I know who's actually behind the project, I'm just wondering if there are any major deployments of it.

    • nubinetwork 2 hours ago ago

      I figured they would be funded by NIST, but the way the US government has been pulling back funding for everything, it didn't surprise me that they need money. Much like Jimmy Wales, I bet if everyone donated 5 bucks they'd be in a much better spot.

    • simoncion 4 hours ago ago

      The Network Time Foundation (which counts the NTP project among those it provides resources to) lists several corporate Members.

      But yeah, critical infrastructure usually goes criminally underfunded.

    • xigoi 3 hours ago ago
      • alex1138 2 hours ago ago

        Shoutouts to Nebraska

        • jahnu an hour ago ago

          Hey, somebody out there

          Listen to my last prayer

          Hi-ho-silver-o

          Deliver me from nowhere

    • philipwhiuk 4 hours ago ago

      Why is research into the protocol useful. Isn't it done?

      • iamkonstantin 3 hours ago ago

        We keep coming up with new ways to use it: https://ntrs.nasa.gov/citations/20240011919

        • freeopinion an hour ago ago

          It's telling that we can appropriate millions of dollars to transport a decommissioned shuttle from a museum in Virginia to Texas, but NASA can't pitch in the cost of one tank of diesel to the people maintaining what this article claims to be a mission-critical tool?

      • junon 4 hours ago ago

        Time is hard, time synchronization is arguably harder.

      • jrmg 21 minutes ago ago

        Don’t think you deserve these downvotes. That was my reaction too. Perhaps they’re coming from people who believe that the money is to support running of time servers (which, to be fair, “Please donate to keep the Network Time Protocol up” certainly implies…)

        I too would be interested in knowing what the Network Time Foundation is researching, and I think conversation about that is appropriate here. NTP certainly _seems_ like it’s been ‘good enough’ for decades to an uninformed observer, and discussing if and why it’s not would be interesting (and perhaps motivate donations!)

      • saikia81 4 hours ago ago

        The project isn't about research it's about creating a reference implementation

        • philipwhiuk 3 hours ago ago

          > The NTP Project conducts Research and Development in NTP, a protocol designed to synchronize the clocks of computers over a network to a common timebase.

          Research is put front and centre in their pitch for funding.

          • ptero 2 hours ago ago

            This is probably research into protocol for time sync. Which works well for some scenarios, but not yet for others and can improve the reference implementation (I guess; I have no hard knowledge there).

            And given that ntp.org runs servers that so many organizations use they should be near the top of the funding queue for any NTP research. My 2c.

        • willis936 3 hours ago ago

          What's the distinction from NIST's internet time service?

    • littlestymaar 3 hours ago ago

      Large tech companies and free-riding critical internet commons, name a better duo.

      • shaky-carrousel 2 hours ago ago

        That would be easily solved by blocking from NTP any ip address belonging to a big tech corp that doesn't pony up.

        • Aurornis an hour ago ago

          The big companies have their own NTP pools and even implementations.

          You can use the public Google or AWS pools if you want. Note that they have their own software, too, so be sure you understand the differences like leap smearing.

          Blocking FAANG IPs from the NTP Foundation’s pools wouldn’t hurt FAANG at all. It would only hurt people who weren’t aware and used the NTP Foundation’s pool for things.

        • ralferoo an hour ago ago

          Not really. The biggest drain on resources historically has come from things like routers that have fixed NTP servers hardcoded in the firmware and every customer ends up using just that one without even knowing they're contributing to the problem. They also can't be blocked as the requests could come from anywhere.

      • aembleton 2 hours ago ago

        Itchy and Scratchy

    • arccy 4 hours ago ago

      It's not really clear why they need this money either?

      • simoncion 4 hours ago ago

        > It's not really clear why they need this money either?

        Really? The sentence at the top of the Donate page seems pretty clear to me:

        > Your donation helps Network Time Foundation maintain the NTP website and provide resources and support to NTP developers.

        Is it unclear to you?

        • tdeck 4 hours ago ago

          It is kind of vague IMO. Especially since most of the actual NTP infrastructure is run by governments, universities, and companies.

          https://gist.github.com/mutin-sa/eea1c396b1e610a2da1e5550d94...

          But..it's $1k. This is basically pocket change on an institutional level. I've been part of some very scrappy and poorly funded community organizations and even they took in more than $1k every year. Even if you don't believe NTP maintainers should be paid anything for their work (an opinion I don't hold), it's trivial to spend this amount on modest everyday expenses like renting a venue a couple of times, buying insurance, and paying for hosting and technical resources.

          EDIT: Here is their 2024 tax return

          https://www.nwtime.org/about/documents/2024_NTF_IRS_990.pdf

          It looks like they took in more than $200k and spent $100k on "contract services" (I can't tell what that means) and somewhat modest amounts on other things. Unfortunately I need to exit the rabbit hole now.

          • bawolff 3 hours ago ago

            We're talking about $1000. In context i would assume its their hosting bill.

            I can't imagine its much more than that if we are talking about such a small sum.

          • simoncion 3 hours ago ago

            > It is kind of vague IMO.

            How much more clear can they reasonably be?

            It seems a big waste of effort to maintain -say- a damnable Trello board with upcoming priorities and roadmaps <strike>and Kickstarter stretch goals</strike> when their bug tracker and mailing list are visible to the public. (Though, it seems that they've recently put the list behind some broken moderation software, so you have to go to -say- the IETF's archive of the thing to read it. "AI" crawlers ruin everything.)

            EDIT: Do note that that tax return you found is for the Network Time Foundation, not the NTP Project. I don't know if the two are separate entities for tax purposes, but do note that the NTF supports several projects, of which the NTP Project is one. The NTP Project is just for NTP.

        • GuB-42 2 hours ago ago

          It doesn't explain why they need the money "we need the money to continue doing what we are doing" means nothing unless they also explain what they are doing and why it matters.

          Thankfully, that's also on the front page:

          What they are doing:

          > The NTP Project produces an open source Reference Implementation of the NTP standard, maintains the implementation Documentation, and develops the protocol and algorithmic standard that is used to communicate time between systems

          And why it matters:

          > NTP is what ensures the reliability of billions of devices around the world, under the sea, and even in space

          Now, it doesn't explain why a reference implementation is a good thing, but I think that at this point, you have a good enough idea to decide if you want to donate or not.

          Edit: However, $1000 seems too low to matter. It may not even pay for the expense of the fundraising itself. I think it is more of an awareness campaign: "look at the protocol we all use, you would think we are talking many millions of dollars, but the truth is, you are off by orders of magnitude"

        • arccy 3 hours ago ago

          a website doesn't need $1000

          and $1000 seems at the same time to be quite a bit of money, but also too little to be for funding people long term.

  • imglorp 3 hours ago ago

    The project has been hungry for years.

    There was a fork to clean up and secure the implementation: https://ntpsec.org and ideally they would combine forces.

    Summarized here: https://lwn.net/Articles/713901

    • tptacek an hour ago ago

      Yeah the ntpsec story, not great. I don't believe they're taken especially seriously. There are people close to Harlan Stenn who believe the project is essentially fraudulent.

      • chocalot an hour ago ago

        An ntpd-rs contributor elsewhere in the thread suggests ntpsec is used by many distributions, and suggests donating to ntpsec (amongst some other organisations).

        https://news.ycombinator.com/item?id=45900184

      • BigTTYGothGF an hour ago ago

        > the project is essentially fraudulent

        Even if it's not, ESR is involved so it's not serious.

  • jchw 4 hours ago ago

    I tried to donate, but apparently I am not human:

    > 1 error prohibited this submission from being saved:

    > Looks like you are not a human

    Good to know.

    • autoexec 4 hours ago ago

      I'm not sure why they'd try so hard to keep bots from paying them anyway. If someone wants to write a bot that constantly pays me good money I'm fine with that. I might rate limit it if the stream of payments coming in can't cover the cost of keeping the server from being DoS'd, but that's not going to inconvenience a human trying to submit a payment one time.

      • slv77 3 hours ago ago

        Bots use sites like this to validate lists of stolen cards with low dollar donations to validate the cards before using them on the target site. Without some one of protection sites like these are quickly flooded with fraudulent transactions and then fined and shut down by Visa and Mastercard.

        • lapsis_beeftech 3 hours ago ago

          This sounds like a problem where cryptocurrency could actually be the solution. Next time I want to make a charitable donation I will ask for an XMR address to preserve my privacy and work around commercial payment processor issues.

          • lez an hour ago ago

            I was thinking the same. Seems HN is now pro-bank and anti-cryptocurrency.

            • FabHK 34 minutes ago ago

              HN is anti-nonsense, anti-hype, anti-crime, so, yeah, pretty anti-cryptocurrency.

              • dlahoda 4 minutes ago ago

                until one's society started to collapse, one does not think crypto is good

      • JimDabell 3 hours ago ago

        If you have small payments that can be made by bots easily, then your service can be used by thieves as an oracle to determine which of their stolen credit card numbers still work. Then you get lots of chargebacks to deal with.

      • op7 3 hours ago ago

        Then when too many of the fradulent payments get charged back then your payment processor drops you

        • michaelt 3 hours ago ago

          Sure, chargebacks cost money.

          You know what else costs money? When someone wants to give you money, and you misidentify them as a bot and refuse their money.

          • Akronymus 3 hours ago ago

            With donations being blocked you keep sitting at 0, with chargebacks you can actually go negative, in a potentially unbounded way.

            • zinekeller 3 hours ago ago

              I really hope that the sole reason that michaelt concluded this is simply due on not having any experience how to manage credit card payments (on merchant's side).

              For those who does not handle these things: I am not sure on what processor Network Time Foundation is using, but Stripe's $15 fee is actually on the low side of chargebacks (some processors even use the fixed fee + percentage model). Worse, this is unconditional: if you somehow won this, you won't get the chargeback fee.

          • bawolff 3 hours ago ago

            Yeah, but one probably costs more money then the other, and it seems plausible its the chargebacks.

      • jacquesm 2 hours ago ago

        That's because the bots will use such services to 'taste' cards to see if they work. Then if they do the criminals can resell them for a higher value than for which they bought them for.

      • bmacho 3 hours ago ago

        [deleted]

        • dietr1ch 3 hours ago ago

          Well fraudsters need to have their time in sync for their business right? Who are you to deny their donations?

        • mjhay 3 hours ago ago

          Is there a problem with fraudsters donating to OSS projects?

        • johnisgood 3 hours ago ago

          Money is money.

          How do you know the cash you are using is not "blood money"? Come on.

    • fghorow 3 hours ago ago

      Yeah, I'm not a human either.

      (Edited to add: that was from Safari. Chrome worked. YMMV.)

    • landgenoot 3 hours ago ago

      You are thinking to much in emoji's and emdashes.

    • zelphirkalt 2 hours ago ago

      I had similar trouble, back when I tried to donate to the Internet archive. Donation box would simply not let me donate. I even wrote them an e-mail and nothing changed half a year later, so I gave up.

      Too bad that good projects mess their donations up by doing web BS.

  • stego-tech 2 hours ago ago

    Absolutely shameful that this project - and many, many others that underpin trillion-dollar tech company valuations - aren’t fully funded already by the major consumers.

    I’d like to see more projects do a breakdown of total yearly costs (including contributor compensation!), how much existing sponsorships from companies actually cover, and what number they’d need to operate properly (with full-time, paid contributors).

    • g-mork an hour ago ago

      I'm not so sure, becoming dependent on corporate funding means importing corporate policy. Is it really necessary for a DEI policy being required to appear on ntp.org, or perhaps the sudden advocacy of some proprietary protocol crapware pushed into public use from out of nowhere? That's pretty much what tends to happen

      Of course the same thing happens in reverse (see recent python.org refusal to accept federal funding)

      • stego-tech 5 minutes ago ago

        Not gonna lie, you had me going in the first sentence and then betrayed your position with:

        > Is it really necessary for a DEI policy being required to appear…?

        So ignoring the, well, ignorance of the remainder of your statement, it’s worth pointing out that these entities already publish mission statements, community/contributor guidelines, and a raft of other documentation that governs how they intend to operate as a way of greasing the wheels of operations. Policies are the norm, not the exception, because they dictate the rules of engagement.

        So yeah, I’m all for groups making clear what they do and do not find acceptable. Transparency is a good thing, be it in code (open source), accounting, policy, or governance. And if more groups opened up their books and laid bare their operations, it’d be easier to tie their outcomes to industrial and governmental bad actors (like AWS, Google, Microsoft, Apple, etc) that fail to substantially support these technologies, or demand favors or policy changes in exchange for basic funding.

        Ideally? Orgs that use open source tech in their products ought to chip in a fixed percentage to ongoing support of that project. If an entity like AWS chipped in, say, 0.01% of revenue from every service that used NTP, then the NTP organization almost certainly wouldn’t require additional funding.

  • tomashubelbauer 4 hours ago ago

    I wish when accepting donations, websites would stop caching the total collected amount or give it a super short TTL. I like to see the little progress bar get closer to the goal thanks to my couple of bucks.

    • dspillett 3 hours ago ago

      If they are only counting fully cleared funds, your payment might not be relevant yet. Some fraud checks are not synchronous, for instance.

      Though they could fake it: take the current cleared total and add your amount for your display.

    • pigbearpig 3 hours ago ago

      Perhaps they don't have the funds to implement that feature.

  • sathackr 3 hours ago ago

    That seems very low for such a high profile site/project

    I donated an amount but the bar didn't move and is at the same level($395) as before my donation

    • sathackr 3 hours ago ago

      If you follow the "Foundations work" link at the bottom, you're taken to another page that shows $4,675 of $11,000 November goal.

      • sathackr 3 hours ago ago

        Looks like the first $1000 goal is specifically for maintaining to he NTP website and maybe developers? While the other is a broader goal for the foundation

    • Velocifyer 2 hours ago ago

      The bar is still at $395. I am suspicious.

      • khernandezrt 2 hours ago ago

        I think someone is manually updating the site to whatever the current donation amount is.

  • clbrmbr 4 hours ago ago

    The folks who run the public NTP pool really ought not to make it easier to pay them money to use it commercially.

    I submitted a request for commercial use via their online form but never received a response.

    • homebrewer an hour ago ago

      It's mostly run by one guy with very limited time. On their forum, I've seen one vendor repeatedly asking for the vendor prefix for three years, only getting the response once, and never actually receiving the prefix.

  • 1970-01-01 a minute ago ago

    I hate to say it, but a number that low means ads are the answer.

  • marginalx 2 hours ago ago

    The domain ntp.org is a very visible one, why not add a "Donors" page and say everyone who donates 250+ gets to show their company name as a sponsor on that page? This usually gets the attention of corporates and makes it easy to make the case internally as well, they all love to sponsor!

  • rnijveld an hour ago ago

    As someone working on an NTP implementation (specifically ntpd-rs) I have to add some context to this: I do believe that donating to the Network Time Foundation is fine, but it is not required to keep the Network Time Protocol up in any way.

    Firstly, the most important reason the ntp.org domain name is so well known is because of the NTP pool, which is an entirely separate project (the Network Time Foundation calls it an associated project), which was allowed to use the `pool.ntp.org` domain name, but does not directly receive significant funding from the Network Time Foundation as far as I understand (I do not know the details of the domain name arrangement). That pool project was developed independently of the Network Time Foundation and is run by a different group of volunteers, mostly being developed and maintained by Ask Bjørn Hansen and hosting servers entirely consisting of (sometimes professional) volunteer operators. This is what many NTP implementations, specifically many Linux distributions, use as their standard source of time. But it does not appear to depend much on the Network Time Foundation for continued existence.

    Secondly, despite all the claims made on the Network Time Foundation site, the IETF took over development and maintenance of the NTP protocol for something like two decades now already under the NTP working group. This was all done with the Network Time Foundation fully agreeing this was the way forward. But for some reason they still consider themselves exempted from any process that the IETF uses and consider themselves as the true developers of the protocol. They constantly frustrate the processes that the IETF uses, claiming that they should receive special treatment as being the 'reference implementation'. Meanwhile, the IETF NTP WG does not have a concept of the reference implementation at all, instead considering all NTP implementations equal.

    Aside from this frustrating stance, the Network Time Foundation also didn't do much work on trying to forward the standard at all, instead relying on the status quo from the late 90s and early 2000s. Meanwhile the IETF NTP WG worked on standardizing a way to secure NTP traffic (with regular NTP traffic being relatively easy to man in the middle, with older implementations even being so predictable that faking responses didn't even need reading the requests). That much more secure standard, NTS, was fully standardized in September of 2020, but the Network Time Foundation continues to not implement this standard. All of this has resulted in almost every Linux distribution that I know of replacing their ntpd implementation with NTPsec (with ntpd not even being available as an alternative anymore for installation).

    Meanwhile people also started working on NTPv5, in order to remove some of the unsafe and badly defined parts of the standard, and in general bring the spec back up to date. As part of this process, it was decided some time ago that in contrast to the previous NTP standards, the algorithms specifying what a client should do in order to synchronize the time should be removed from the standard (the algorithms specified in the previous standards were not being used by any implementation, not even the ntpd implementation by the Network Time Foundation itself). NTPv5 instead focuses on the wire format of NTP packets and the simple interactions between parties. Yet despite there having been a consensus call on this, and despite no current implementation following the exact algorithm as specified in NTPv4, the Network Time Foundation continues to frustrate the process by claiming that these algorithms are an essential part of the standard.

    All of this frustration was also a large part of why the PTP protocol was eventually developed at the IEEE. That is to say: even though the operating mode of PTP is often quite different to that of NTP these days, the information that needs to be transferred is essentially the same, and the packets could have trivially been defined to be the same as long as NTP had built in a little bit of additional flexibility a little bit earlier. This would have also helped NTP in the end (with for example hardware timestamping only being implemented for PTP right now, even though it could have been just as useful in NTP), and with PTP now also aiming to introduce a simpler client-server model via CSPTP that looks a whole lot like what NTP was trying to achieve all this time with its most used operating mode.

    It is my belief that the Network Time Foundation continues to push themselves in a corner of more and more irrelevance even though that did not need to be. The historical significance of David Mills' ntpd implementation is definitely there, and we should applaud the initial efforts and their focus on keeping the protocol open and widely available. And I do believe that the current people at the Network Time Foundation could still provide more than enough valuable input in the standardization process, but they cannot claim anymore to be the sole developers of the NTP protocol. Times have changed, there are now multiple implementations with an equally valid claim. Especially with GNSS (specifically GPS) being under attack more and more these days, we need alternative ways of synchronizing computer clocks to a standard time in a secure way. NTP and NTS are perfectly positioned to take on that task and we need to make sure that we keep the standard up to date for our evolving world.

    Edit: if you want something else to donate to, I would consider donating to the IETF, NTPsec, or maybe donating some time to the NTP pool. I would also link to donations for Chrony (one of the other major NTP server implementations) but they do not appear to offer anything. Linking to my own project's donation page does not seem fair considering the contents of this post.

    • jrmg 12 minutes ago ago

      This deserves to be somewhere other than at the bottom of the comments (where it is as I’m reading).

  • 47282847 4 hours ago ago

    Confusing. On https://www.nwtime.org/ they use $11,000 as “November 2025 goal“, with $4,675 as current level?

    Are these goals monthly goals, with the counter being reset? The sites don’t make that clear.

  • bheadmaster 4 hours ago ago

    It's sad that a project that literally every company in the world depends on is requiring donations to keep working.

    • mapt 2 hours ago ago

      I feel like a ~$10M/yr foundation to fund hundreds of the "Some Guy In Nebraska" people (https://xkcd.com/2347/) on a modest stipend would be easily worthwhile for any one of the tech giants, even understanding the free rider effect. Some of their thousands of engineers are being paid high six or seven figures, and every single minute of their time spent figuring out how some dependency has changed and broken compatibility adds up very quickly. Just paying them to sit on their hands and not let anything break by some kind of hostile takeover, like an intelligence agency quietly paying people to keep quiet.

    • jeffbee an hour ago ago

      It is apparently "Grossly Overestimate The Reliance of Companies on Open Software and Systems Week" and nobody told me.

      • bheadmaster an hour ago ago

        Name one company that doesn't depend on NTP.

        • Aurornis 42 minutes ago ago

          This donation is for the NTP Foundation for something specific like their website.

          The big companies who use NTP have their own pools and either use versions of different ntp implantations or their own internal ones.

          All of these comments assuming cloud providers are using the reference NTP implementation and the public pools have no idea what they’re talking about.

        • jeffbee an hour ago ago

          Perhaps it is just my career experience, but I have never worked at a company that 1) cared about the time and 2) did not have its own clocks and 3) would touch ntpd with a 10-foot pole.

  • cpburns2009 an hour ago ago

    The GitHub sponsors page provides slightly more information than ntp.org and nwtime.org.

    https://github.com/sponsors/nwtime

  • seb1204 4 hours ago ago

    Why not just turn it off and say we need money to turn it in again?

    • onion2k 3 hours ago ago

      That might work, but the second order effect would probably be companies trying to do the work of time synchronisation themselves in case it happened again. That would lead to fragmentation and incompatibility.

      • Aurornis 41 minutes ago ago

        The cloud providers already use their own NTP infrastructure. Much of it is public and you can use it for free, too.

    • ramon156 4 hours ago ago

      Turn what off?

      • bilekas 4 hours ago ago

        Time itself maybe, I know I could use with a little bit of a pause.

        • baq 3 hours ago ago

          Return to the basement now. No escape.

      • theblazehen 4 hours ago ago

        pool.ntp.org dns resolution and any servers that they control, presumably

        • rnijveld 3 hours ago ago

          The ntp pool is actually independently run and funded and has nothing to do with the NTPd implementation nor the NTP Foundation, other than them allowing the pool to use that DNS name.

  • Velocifyer 2 hours ago ago

    Most NTP users use better implementations that NTPd (like chrony)

  • gnarlouse 2 hours ago ago

    I’m confused—why such a small donation amount?

  • Theodores 3 hours ago ago

    So we have NTP begging to raise a grand yet we have hundreds of billions being spent on AI data centers.

    NTP might not be able to generate AI cat videos full of hallucinations but it is a vital part of web infrastructure. The same can't be said about today's mega projects.

  • emsign an hour ago ago

    $1 Trillion for AI but we the people have to keep this foundation of the internet running. This is all one big shit show.

  • righthand 33 minutes ago ago

    Honestly the XSLT mocking and bad faith arguments have convinced me as an individual I shouldn’t care about technologies so much. If NTP is so important, one of the billion dollar corpos can foot the bill since they know best about what is valuable.

  • dependency_2x 4 hours ago ago
    • lifestyleguru 3 hours ago ago

      There are always money and resources in ad tech.

  • jacquesm 2 hours ago ago

    They should just switch it off for a day or two, I don't think they'll have trouble getting funding after that.

  • iberator 3 hours ago ago

    PTP is way better than NTP, but it might be possible that reference time is somehow taken from NTP anyway.

    What I Mean:

    Reference .gov atomic clock (not radium one) -> NTP -> ? -> ? -> satellite control station -> gps -> PTP

    Hahaha

    • jhellan 3 hours ago ago

      This is true when all network delays between the synchronized device and the time reference are deterministic and accounted for in the configuration. The design of PTP assumes that this is the case. NTP, on the other hand, estimates the network delays to its time references.

      Is there any reason to believe that PTP would be better in normal networks?

    • great_wubwub 3 hours ago ago

      PTP is more precise so it's much harder to synchronize over long distances. Even in data centers it benefits from hop-by-hop participation from the routers involved.