Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Aug 2006 19:26:50 +0000
From:      "Poul-Henning Kamp" <phk@phk.freebsd.dk>
To:        Barkley Vowk <bvowk@math.ualberta.ca>
Cc:        freebsd-security@freebsd.org, =?ISO-8859-1?Q?=22Jos=E9_M=2E_Fandi=F1o=22?= <freebsd4@fadesa.es>
Subject:   Re: atheros chips dangerous? 
Message-ID:  <19518.1155238010@critter.freebsd.dk>
In-Reply-To: Your message of "Thu, 10 Aug 2006 13:10:43 CST." <20060810130331.X94142@3jane.math.ualberta.ca> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <20060810130331.X94142@3jane.math.ualberta.ca>, Barkley Vowk writes:
>On Thu, 10 Aug 2006, Poul-Henning Kamp wrote:
>
>> The Atheros driver in FreeBSD is maintained and compiled by Sam Leffler,
>> who has been around since BSD 4.2 in the early eighties sometimes.
>>
>> I trust Sam.
>
>I don't think that quite answers his question however. Its not so much a 
>matter of trusting Sam, but a matter of trusting that Sam had enough 
>access to the binary objects in question to have eliminated the errors in 
>them.

Sam compiled those binaries, he has the source code.

And it is a matter of trust.

Unless you are willing to stand up can swear that you have never
run a single line of code which you have not inspected and throught
about yourself, then you implicitly have to trust the programmer.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19518.1155238010>