On Wed, 18 Aug 2004, Thordur Ivar B. wrote:
> Yes ofcourse you will need to trust your own toolchain and compiler (I keep
> "trusted" binarys on CD to use in cases like this. (And for post-mortem
> inspection.)
I'm curious, where do the "trusted" binaries come from? In theory,
the FreeBSD build machine could have been hacked a long time ago and the
hack keeps propagating.
--
Matt Piechota
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"