That's why I always hand enter, in binary, by toggling switches on the

front of my box[1] when I start a new system.
[1]. What, you never pressed the power button
On 12/6/07, Lars Noodin  wrote:

quoted text
> bofh wrote:

> > At this point, it's probably a good idea to point out there's a paper

> > called Trusting Trust about your everyday C compiler...

>

> Yeah.  It recently disappeared from the ACM's web site after 11+ years

> of availability:

> 	http://www.acm.org/classics/oct95/

> There is, fortunately, the author's copy:

> 	http://cm.bell-labs.com/who/ken/trust.html

>

> There is an interesting follow up:

> 	http://www.dwheeler.com/trusting-trust/

> summary of the followup:

>  http://www.schneier.com/blog/archives/2006/01/countering_trus.html

>

> The bottom line, however, is that having and using the source is not

> optional.

>

> Thus, patches are provided in OpenBSD as source...

>

> But, starting from an initial set of some binaries is adequate for many

> uses, just as long as we can make reasonably sure that those binaries

> come from who they are supposed to / we expect them to.

>

> The install process ought to be fairly clear about the origin,

> authenticity and integrity of those initial binaries.  No need to build

> on more of a sand foundation than necessary.

>

> -Lars

>

--

http://www.glumbert.com/media/shift

http://www.youtube.com/watch?v=tGvHNNOLnCk

"This officer's men seem to follow him merely out of idle curiosity."

-- Sandhurst officer cadet evaluation.

"Securing an environment of Windows platforms from abuse - external or

internal - is akin to trying to install sprinklers in a fireworks

factory where smoking on the job is permitted."  -- Gene Spafford