Re: System integrity verification and other delusions

[Russell Nelson]

D. J. Bernstein writes:
 > Explain. Why would it be _harder_ to verify static files?

Because they are different than the files on the CDROM.

Yes, you could write a program to compare them and ignore the differences.

This program might have bugs.

These bugs might result in a security hole.

You do not seem able to acknowledge this possibility.

You are only able to acknowledge the fact that qmail might have bugs
if you add extra code to it.

Why is qmail more susceptible to bugs than Redhat's RPM code?

-- 
-russ nelson <[EMAIL PROTECTED]>  http://crynwr.com/~nelson
Crynwr supports Open Source(tm) Software| PGPok |   There is good evidence
521 Pleasant Valley Rd. | +1 315 268 1925 voice |   that freedom is the
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   |   cause of world peace.