Re: [Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility
Re: [Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility
- Subject: Re: [Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility
- From: Dave Schroeder <email@hidden>
- Date: Fri, 27 Apr 2007 13:37:55 -0500
On Apr 27, 2007, at 1:32 PM, Timothy J. Miller wrote:
Dave Schroeder wrote:
The ONLY instance you can be absolutely certain anything doesn't
have a backdoor is if it's completely open source, and you inspect
and understand the code yourself (or as part of a community, etc.)
And not even then:
http://www.acm.org/classics/sep95/
(I.e., Ken Thompson's classic self-reproducing hack of GCC to
insert a backdoor into login.)
A more correct formulation of your statement would be "The ONLY
instance you can be absolutely certain anything doesn't have a
backdoor is if it's completely open source, and you inspect and
understand the code yourself (or as part of a community, etc.) as
well as the code for the entire toolchain used to produce the
object code."
Indeed. The bottom line is that no individual person generally has
the capability to themselves inspect and ensure the integrity of an
encryption product to a level of assurance that would GUARANTEE there
are no backdoors or exploits, intentional or otherwise.
- Dave
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
References: | |
| >[Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility (From: "Michael Pike" <email@hidden>) |
| >Re: [Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility (From: Dave Schroeder <email@hidden>) |
| >Re: [Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility (From: "Michael Pike" <email@hidden>) |
| >Re: [Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility (From: Dave Schroeder <email@hidden>) |
| >Re: [Fed-Talk] Filevault, Disk Encrypted Images, cracked with a utility (From: "Timothy J. Miller" <email@hidden>) |