Re: Refresher on gcc port and the executables

2013-09-12 Thread Ian Wadham
Tabitha, This is wildly off topic for Macports, but here goes. On 11/09/2013, at 8:22 PM, Tabitha McNerney wrote: I have been doing some more research and spoke with some people in the industry about certified compilers. I do not know where you are from or what your applications and data

Re: Refresher on gcc port and the executables

2013-09-12 Thread Jeremy Lavergne
+1 And why trust the hardware when you can't trust the software? On Sep 12, 2013, at 11:11 AM, Jeremy Huddleston Sequoia wrote: I guess the real point is that if you don't trust Apple's toolchain, you can't trust the entire OS ... ___

Re: Refresher on gcc port and the executables

2013-09-12 Thread doug livesey
Really interesting post and replies, thankyou. I love it when something provokes the considered responses of extremely well informed people. I would just say that I really don't consider the OP's concerns to be tinfoilhattery. In light of recent revelations, it would actually be irresponsible to

Re: Refresher on gcc port and the executables

2013-09-12 Thread Jeremy Huddleston Sequoia
On Sep 11, 2013, at 3:22, Tabitha McNerney tabith...@gmail.com wrote: Ian and all, I have been doing some more research and spoke with some people in the industry about certified compilers. Apparently a lot of progress has been made in the recent past and money has been flowing into the

Re: Refresher on gcc port and the executables

2013-09-11 Thread Tabitha McNerney
Ian and all, I have been doing some more research and spoke with some people in the industry about certified compilers. Apparently a lot of progress has been made in the recent past and money has been flowing into the arena of certified compilers. What's preventing Apple from having a third party

Re: Refresher on gcc port and the executables

2013-09-11 Thread Dominik Reichardt
As someone else pointed out, why worty about the compiler? The OS is the very first thing you need to worry about. And how do you know that those certifying are not ordered to secrecy and overlook nsa backdoors? ;) Dom Am 11.09.2013 um 12:22 schrieb Tabitha McNerney tabith...@gmail.com:

Re: Refresher on gcc port and the executables

2013-09-11 Thread Ian Wadham
On 11/09/2013, at 8:22 PM, Tabitha McNerney wrote: I have been doing some more research and spoke with some people in the industry about certified compilers. Apparently a lot of progress has been made in the recent past and money has been flowing into the arena of certified compilers.

Re: Refresher on gcc port and the executables

2013-09-11 Thread Frank Schima
On Sep 11, 2013, at 8:18 AM, Lawrence Velázquez lar...@macports.org wrote: On Sep 11, 2013, at 6:22 AM, Tabitha McNerney tabith...@gmail.com wrote: What's preventing Apple from having a third party independent audit of their developer tools (which MacPorts depends on, and the rest of the

Re: Refresher on gcc port and the executables

2013-09-11 Thread Lawrence Velázquez
On Sep 11, 2013, at 6:22 AM, Tabitha McNerney tabith...@gmail.com wrote: What's preventing Apple from having a third party independent audit of their developer tools (which MacPorts depends on, and the rest of the world also depends on for a wide range of apps either for OS X or iOS)?

Re: Refresher on gcc port and the executables

2013-09-08 Thread Lawrence Velázquez
On Sep 8, 2013, at 1:56 AM, Tabitha McNerney tabith...@gmail.com wrote: Therefore, in light of the very recent leaks, such as the NSA sitting on encryption standards committees (NIST, etc.) and intentionally contributing suggestions to help create workarounds for their own benefit, and in

Re: Refresher on gcc port and the executables

2013-09-08 Thread Ryan Schmidt
On Sep 8, 2013, at 00:56, Tabitha McNerney wrote: I would suggest the MacPorts community should think about this and evaluate what options we may have should we want to wean ourselves off of the Apple developer tools. As I wrote in May: On Thu, May 23, 2013 at 12:59 AM, Ryan Schmidt

Re: Refresher on gcc port and the executables

2013-09-08 Thread Ian Wadham
On 08/09/2013, at 3:56 PM, Tabitha McNerney wrote: My boss has been smiling at work a lot lately. He feels very vindicated for having reasonably healthy paranoia about vendor compilers (e.g., Apple's tools) just months ago before Snowden made headlines. My boss asked me and my colleagues

Re: Refresher on gcc port and the executables

2013-09-07 Thread Tabitha McNerney
Continuing this thread which was initiated in May of this year (2013), some things in the world have revealed themselves such as the NSA leaks by Ed Snowden. In particular the leaks of a few days ago were a *big* deal, as Bruce Schneier has eloquently written about here:

Re: Refresher on gcc port and the executables

2013-05-23 Thread Tabitha McNerney
On Wed, May 22, 2013 at 1:15 PM, Lawrence Velázquez lar...@macports.orgwrote: On May 22, 2013, at 8:17 AM, Ryan Schmidt ryandes...@macports.org wrote: On May 22, 2013, at 05:25, Tabitha McNerney wrote: Its been some time since I looked more deeply at the GCC ports. On a new Mac recently

Re: Refresher on gcc port and the executables

2013-05-23 Thread Mojca Miklavec
On Thu, May 23, 2013 at 9:15 AM, Tabitha McNerney wrote: For a particular project I am working on, my boss asked me if there was a way to compile some code from source (which depends on and will use of some advanced cryptography potentially for highly sensitive business), such that, in his

Re: Refresher on gcc port and the executables

2013-05-23 Thread Ryan Schmidt
On May 23, 2013, at 02:15, Tabitha McNerney wrote: For a particular project I am working on, my boss asked me if there was a way to compile some code from source (which depends on and will use of some advanced cryptography potentially for highly sensitive business), such that, in his

Refresher on gcc port and the executables

2013-05-22 Thread Tabitha McNerney
Hello all, Its been some time since I looked more deeply at the GCC ports. On a new Mac recently I installed MacPorts and then specifically installed gcc47 into my port prefix path /opt/local I looked today and realized there are several binaries (in /opt/local/bin), such as: gcc-ranlib-mp-4.7

Re: Refresher on gcc port and the executables

2013-05-22 Thread Ryan Schmidt
On May 22, 2013, at 05:25, Tabitha McNerney wrote: Its been some time since I looked more deeply at the GCC ports. On a new Mac recently I installed MacPorts and then specifically installed gcc47 into my port prefix path /opt/local I looked today and realized there are several binaries

Re: Refresher on gcc port and the executables

2013-05-22 Thread René J.V. Bertin
On May 22, 2013, at 14:17, Ryan Schmidt wrote: Note that Xcode 4.2 and later do not include any version of gcc. However if you install the command line tools (which you must do in order to use MacPorts) then /usr/bin/gcc does exist, as a symlink to llvm-gcc-4.2. I assume as of Xcode 4.7

Re: Refresher on gcc port and the executables

2013-05-22 Thread Lawrence Velázquez
On May 22, 2013, at 8:17 AM, Ryan Schmidt ryandes...@macports.org wrote: On May 22, 2013, at 05:25, Tabitha McNerney wrote: Its been some time since I looked more deeply at the GCC ports. On a new Mac recently I installed MacPorts and then specifically installed gcc47 into my port prefix