On Sunday 10 April 2005 8:57 am, Dr. Vesselin Bontchev wrote: > [Kernigan's speech] > > Ah, yes, "Reflections on Trusting Trust"; that's a really famous one. :-) > > > When I read that excerpt from his speech (given nearly 20 years > > ago now, I think), I realized that the only way I could be sure my > > system was secure would be to bench check every single binary. > > You can't do that. What are you going to inspect the binaries with? A > debugger? A hex editor? What if they have been Trojanized already? :-)
I meant "hand-bench." Back when I did Z80 embedded systems work, I used to do this frequently (until I got an In Circuit Emulator, that is). I'd take a whiteboard, draw boxes for the registers, and "step" instruction by instruction (with the CPU manual at my side) through the problematic routine. VERY tedious. Obviously impossible to do in a human lifetime on any multi-million instuction modern system. Anyways, I meant what I said about the only cure for ignorance being confession. I appreciate this discussion and the links you've sent me have been most interesting. Thanks! -- Michael Schwarz [EMAIL PROTECTED] -- For information on using the Palm Developer Forums, or to unsubscribe, please see http://www.palmos.com/dev/support/forums/
