In message <20060810130331.X94142@3jane.math.ualberta.ca>, Barkley Vowk writes:
>On Thu, 10 Aug 2006, Poul-Henning Kamp wrote:
>
>> The Atheros driver in FreeBSD is maintained and compiled by Sam Leffler,
>> who has been around since BSD 4.2 in the early eighties sometimes.
>>
>> I trust Sam.
>
>I don't think that quite answers his question however. Its not so much a
>matter of trusting Sam, but a matter of trusting that Sam had enough
>access to the binary objects in question to have eliminated the errors in
>them.
Sam compiled those binaries, he has the source code.
And it is a matter of trust.
Unless you are willing to stand up can swear that you have never
run a single line of code which you have not inspected and throught
about yourself, then you implicitly have to trust the programmer.
--
Poul-Henning Kamp | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG | TCP/IP since RFC 956
FreeBSD committer | BSD since 4.3-tahoe
Never attribute to malice what can adequately be explained by incompetence.
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"