On 13.08.2014 17:11, Giancarlo Razzolini wrote:
On 13-08-2014 11:36, Alexander Hall wrote:
How did you download your browser? Can you trust all certs it uses?
Etc
etc...:-p
It can't. Just see the Turktrust/Google case.
So many chickens and eggs here.
Since we are at this, how can you trust your operating system? Your
hardware? Everyone need to trust somebody else at some point, otherwise
we wouldn't be here. On the other hand, a little bit of paranoia, never
hurt.
To be honest, I find those discussions rather bizarr and yet they seem
to pop up more often.
With signify OpenBSD developers have created a tool that can give you a
reasonable amount of certainty that the software you are using is the
one that has been written and released by the OpenBSD team. Most Linux
distros or other projects are not providing more ways to have that kind
of reassurance and yet people start questioning every single bit that is
coming from OpenBSD and demand proove.
Next thing is that they want Theo to carve the bits into his
HDD-platters because they don't trust the controller software. *Please*.
I am all for paranoia and usually I am also seeing the bad things first
- but sometimes what is asked for is far beyond reasonable and doable.
If people would really think their demands through to the end and
understand what they are asking for - they would shutdown their
computers, trash them for good and start a woodworking business or
growing plants instead.
Please get back to the ground and be reasonable. What we now have is
better from what we had last year. So progress is being made and I want
to thank the team for that. If there is something to improve on, I am
certain they will implement it if there is a real benefit.
I, for my part have decided to trust at least this team. As you said, at
some point we have to trust somebody, because nobody needs so many
woodworkers.
Thanks
Lars
