Re: chfn, date, chsh INFECTED according to chkrootkit

From: Thordur Ivar B. (thib_at_mi.is)
Date: 08/18/04

  • Next message: Matt Piechota: "Re: chfn, date, chsh INFECTED according to chkrootkit" 
    Date: Wed, 18 Aug 2004 16:23:55 +0000
To: freebsd-security@freebsd.org

    On Wed, 18 Aug 2004 16:49:49 +0200
    Nicolas Rachinsky <list@rachinsky.de> wrote:

    > * "Thordur Ivar B." <thib@mi.is> [2004-08-18 14:25 +0000]:
    > > But still, you can only be sure if you trust you CVS checkout.
    >
    > And your compiler and other tools used to build everything.
    >
    > http://www.acm.org/classics/sep95/
    >
    > Nicolas
    > _______________________________________________
    > freebsd-security@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-security
    > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
    >
    >

    Yes ofcourse you will need to trust your own toolchain and compiler (I keep
    "trusted" binarys on CD to use in cases like this. (And for post-mortem
    inspection.) 

    -- 
Kv, thib[att]mi{dot}is
A man can do as he will, but not will as he will.
		-- Arthur Schopenhauer
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Matt Piechota: "Re: chfn, date, chsh INFECTED according to chkrootkit"

    Relevant Pages

    • Re: chfn, date, chsh INFECTED according to chkrootkit
      ... you can only be sure if you trust you CVS checkout. ... And your compiler and other tools used to build everything. ... Nicolas ...
      (FreeBSD-Security)
    • Re: OT/If I Have XP SP2...Is there any "real" need to install SP3?
      ... Oh...you probably don't trust them. ... of money on advertising, and then think about how much influence they ... Microsoft C++ compiler was outperformed by other compilers on the tests. ... Never mind that its integrated editor-compiler-debugger was great. ...
      (alt.sys.pc-clone.dell)
    • Re: Encrypting/Decrypting Password from a Config File
      ... >> That assumes you trust the compiler. ... even if each of the individual components behave exactly ... And there's still the issue of trusting your own senses. ...
      (comp.lang.java.programmer)
    • Re: Encrypting/Decrypting Password from a Config File
      ... US code breakers broke a one time pad because they found it ... That assumes you trust the compiler. ... So your best bet is to build a read-only USB key from scratch, ...
      (comp.lang.java.programmer)
    • Re: OT/If I Have XP SP2...Is there any "real" need to install SP3?
      ... Oh...you probably don't trust them. ... Microsoft and their PR flaks at Waggoner-Edstrom went nuts, tried to discredit me, tried to discredit the tests used, and so on and so on, when their precious Microsoft C++ compiler was outperformed by other compilers on the tests. ... Never mind that its integrated editor-compiler-debugger was great. ...
      (alt.sys.pc-clone.dell)