Gentoo desktop?

Lennart Sorensen lsorense-1wCw9BSqJbv44Nm34jS7GywD8/FfD2ys at public.gmane.org
Mon Jan 21 18:15:33 UTC 2008


On Sun, Jan 20, 2008 at 11:50:42PM -0800, Kristian Erik Hermansen wrote:
> The initial compiler for a Gentoo stage1 install is on the CD,
> distributed via the gentoo site (or torrent), and the hash matches
> what they say it should be.  That's trust.  However, it is not
> unlikely that the compiler has been trojaned.  Every resources can be
> hacked with adequate resources applied to such an effort of course...

So if you trust a binary compiler from gentoo based on a hash, why
would't you trust everything else as binary if it matches the hash from
gentoo (if they actually provided such things)?

--
Len Sorensen
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list