From ... Path: archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!isdnet!newshunter!cosy.sbg.ac.at!newsfeed.Austria.EU.net!newsfeed.kpnqwest.at!nslave.kpnqwest.net!nloc.kpnqwest.net!nmaster.kpnqwest.net!nreader2.kpnqwest.net.POSTED!not-for-mail Newsgroups: comp.lang.lisp Subject: Re: self-hosting gc References: <87elj5i2rf.fsf@becket.becket.net> <87elj5glx5.fsf@becket.becket.net> <87g03kd1m5.fsf@baguette.webspeed.dk> <5lzo1nhvnh.fsf@rum.cs.yale.edu> <3C8821C9.3080608@cam.ac.uk> <2hwuwnjgri.fsf@vserver.cs.uit.no> <3224587620423566@naggum.net> <2hsn7bjcs1.fsf@vserver.cs.uit.no> <2hit87j76o.fsf@vserver.cs.uit.no> Mail-Copies-To: never From: Erik Naggum Message-ID: <3224603675566967@naggum.net> Organization: Naggum Software, Oslo, Norway Lines: 26 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.1 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 08 Mar 2002 19:14:26 GMT X-Complaints-To: newsmaster@KPNQwest.no X-Trace: nreader2.kpnqwest.net 1015614866 193.71.199.50 (Fri, 08 Mar 2002 20:14:26 MET) NNTP-Posting-Date: Fri, 08 Mar 2002 20:14:26 MET Xref: archiver1.google.com comp.lang.lisp:28167 * Tim Bradshaw | The only kind of native code I'd regard as trusted is that for which | there is a formal correctness proof. How would you arrive at that proof? What software would you trust implicitly in order to trust some other software explicitly? > I believe Microsoft is setting up an entire trust infrastructure for > binaries, with cryptographic signing of applications and drivers and > whatnot, and that's probably for a reason. | You think I'm going to trust a program to be correct just because | someone's signed it? Come on, be serious. Well, you are obviously not the target audience for Microsoft's "we're the good guys, and the government that made us look like criminals in their court are the real bad guys" or their "we're the good guys, but all those bad guys abuse our naive incompetence to do bad things" propaganda. If there is one company I would _not_ trust to sign software I would depend on to be correct, it is Microsoft. Who _cares_ if buggy shitware with security holes the size of Washington state is signed or not? /// -- In a fight against something, the fight has value, victory has none. In a fight for something, the fight is a loss, victory merely relief.