[GLLUG] Am I over-reacting to this?

[Adrian McMenamin]

On 15 January 2014 22:26, John Edwards <john at cornerstonelinux.co.uk> wrote:

> On Wed, Jan 15, 2014 at 09:12:29PM +0000, James Courtier-Dutton wrote:
> <snip>
> > Also, Canonical have root access to all Ubuntu Linux installs. After
> > all, who compiles all the binaries, when you install Ubuntu Linux.
>
> Why pick on Canonical? The same holds true for any binary distributed
> operating system.
>
> Even compiling from source does not give you 100% safety, because you
> then need to trust the C compiler (see Ken Thompson).
>
>
It might not even be the compiler - it might simply be impossible to know:

http://arstechnica.com/security/2014/01/how-the-nsa-may-have-put-a-backdoor-in-rsas-cryptography-a-technical-primer/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20140116/d980621a/attachment.html>