RE: references to password sniffer incident

[salzr]

>as one person who downloaded the source from his home site, and then
>compiled it on the local machine with a GCC binary which he had also
>brought from "home".

So he trusted the libaries and headers on the local machine?
That seems less secure than bringing statically-linked binaries
on a floppy, where you only have to trust the kernel.