The good folks at SANS have been screaming from their soap box about the pending Daylight Savings Time (DST) upgrades. But, are you listening? As a result of US legislation there is a change in the DST that will bring it into line with the Energy Policy Act of 2005 which had the changes embedded within it. For more information here is a link from NIST:
Starting in 2007, Daylight Saving Time (DST) begins each year at 2:00 a.m. (local time) on the second Sunday in March in most of the United States and its territories. Clocks must be moved ahead one hour when DST goes into effect. DST is not observed in Hawaii, American Samoa, Guam, Puerto Rico, the Virgin Islands and the state of Arizona (with the exception of the Navajo Indian Reservation, which does observe DST).
There are some examples where companies have put out their updates. Microsoft for example issued their patches and have a dedicated page for the change. Apple has released their patches and posted information.
Apple is providing software updates for Mac OS X 10.3, 10.4 and later based on worldwide time zone information available as of January 8, 2007. To make sure that your clock maintains the proper time, simply install the updates that are shown for your computer in Software Update.
Now, there are certain instances where vendors are distinctly behind the eight ball. As pointed out by SANS:
One of the impacts was raised in a field notice from Cisco (FN – 62663 – U.S. Daylight Savings Time Policy Changes Effective March 2007 – for ACS Windows). Cisco’s Secure Access Control Server (ACS) is used to provide authentication services through Radius and TACACS and is used in Kerberos implementations. Kerberos allows for a time slide of about 10 minutes between the server and the client when authenticating. So if the time is out by one hour, then the authentication will fail.
Um, yeah that’s bad.
Be sure to triple check your software and operating systems before March 11th.
[tags]Daylight Savings Time, DST, DST Updates, Energy Policy Act 2005[/tags]