[buug] Gentoo, Bluecurve and Linux too!

Rick Moen rick at linuxmafia.com
Fri Oct 18 18:45:00 PDT 2002


Quoting Patrick Soltani (psoltani at ultradns.com):

> Also SUN has a database of all the files/tools/everything they ship
> with the systems in a MD5 database.  You can compare your system's MD5
> signatures, generated independently, against the published ones.

If the system on which you do that comparison is compromised, then so
might be the tools you use to perform it, or the environment in which 
they run.  So, the assurance (of no system security compromise, albeit
possibly not of other problems) is somewhat illusory.




More information about the buug mailing list