Re: Refresher on gcc port and the executables

2013-09-12 Thread Jeremy Huddleston Sequoia
On Sep 11, 2013, at 3:22, Tabitha McNerney wrote: > Ian and all, > > I have been doing some more research and spoke with some people in the > industry about certified compilers. Apparently a lot of progress has been > made in the recent past and money has been flowing into the arena of > cer

Re: Refresher on gcc port and the executables

2013-09-12 Thread doug livesey
Really interesting post and replies, thankyou. I love it when something provokes the considered responses of extremely well informed people. I would just say that I really don't consider the OP's concerns to be tinfoilhattery. In light of recent revelations, it would actually be irresponsible to be

Re: Refresher on gcc port and the executables

2013-09-12 Thread Jeremy Lavergne
+1 And why trust the hardware when you can't trust the software? On Sep 12, 2013, at 11:11 AM, Jeremy Huddleston Sequoia wrote: > I guess the real point is that if you don't trust Apple's toolchain, you > can't trust the entire OS ... ___ macports-us

Re: Refresher on gcc port and the executables

2013-09-12 Thread Ian Wadham
Tabitha, This is wildly off topic for Macports, but here goes. On 11/09/2013, at 8:22 PM, Tabitha McNerney wrote: > I have been doing some more research and spoke with some people in the > industry about certified compilers. I do not know where you are from or what your applications and data ar

Re: Refresher on gcc port and the executables

2013-09-11 Thread Lawrence Velázquez
On Sep 11, 2013, at 6:22 AM, Tabitha McNerney wrote: > What's preventing Apple from having a third party independent audit of their > developer tools (which MacPorts depends on, and the rest of the world also > depends on for a wide range of apps either for OS X or iOS)? Seriously, how > hard

Re: Refresher on gcc port and the executables

2013-09-11 Thread Frank Schima
On Sep 11, 2013, at 8:18 AM, Lawrence Velázquez wrote: > On Sep 11, 2013, at 6:22 AM, Tabitha McNerney wrote: > >> What's preventing Apple from having a third party independent audit of their >> developer tools (which MacPorts depends on, and the rest of the world also >> depends on for a wi

Re: Refresher on gcc port and the executables

2013-09-11 Thread Ian Wadham
On 11/09/2013, at 8:22 PM, Tabitha McNerney wrote: > I have been doing some more research and spoke with some people in the > industry about certified compilers. Apparently a lot of progress has been > made in the recent past and money has been flowing into the arena of > certified compilers. W

Re: Refresher on gcc port and the executables

2013-09-11 Thread Dominik Reichardt
As someone else pointed out, why worty about the compiler? The OS is the very first thing you need to worry about. And how do you know that those certifying are not ordered to secrecy and overlook nsa backdoors? ;) Dom > Am 11.09.2013 um 12:22 schrieb Tabitha McNerney : > > Ian and all, > > I

Re: Refresher on gcc port and the executables

2013-09-11 Thread Tabitha McNerney
Ian and all, I have been doing some more research and spoke with some people in the industry about certified compilers. Apparently a lot of progress has been made in the recent past and money has been flowing into the arena of certified compilers. What's preventing Apple from having a third party

Re: Refresher on gcc port and the executables

2013-09-08 Thread Ian Wadham
On 08/09/2013, at 3:56 PM, Tabitha McNerney wrote: > My boss has been smiling at work a lot lately. He feels very vindicated for > having reasonably healthy "paranoia" about vendor compilers (e.g., Apple's > tools) just months ago before Snowden made headlines. My boss asked me and my > colleag

Re: Refresher on gcc port and the executables

2013-09-08 Thread Ryan Schmidt
On Sep 8, 2013, at 00:56, Tabitha McNerney wrote: > I would suggest the MacPorts community should think about this and evaluate > what options we may have should we want to wean ourselves off of the Apple > developer tools. As I wrote in May: > On Thu, May 23, 2013 at 12:59 AM, Ryan Schmidt wr

Re: Refresher on gcc port and the executables

2013-09-08 Thread Lawrence Velázquez
On Sep 8, 2013, at 1:56 AM, Tabitha McNerney wrote: > Therefore, in light of the very recent leaks, such as the NSA sitting on > encryption standards committees (NIST, etc.) and intentionally contributing > suggestions to help create workarounds for their own benefit, and in light > of the NSA wo

Re: Refresher on gcc port and the executables

2013-09-07 Thread Tabitha McNerney
Continuing this thread which was initiated in May of this year (2013), some things in the world have revealed themselves such as the NSA leaks by Ed Snowden. In particular the leaks of a few days ago were a *big* deal, as Bruce Schneier has eloquently written about here: http://www.theguardian.com

Re: Refresher on gcc port and the executables

2013-05-23 Thread Ryan Schmidt
On May 23, 2013, at 02:15, Tabitha McNerney wrote: > For a particular project I am working on, my boss asked me if there was a way > to compile some code from source (which depends on and will use of some > advanced cryptography potentially for highly sensitive business), such that, > in his w

Re: Refresher on gcc port and the executables

2013-05-23 Thread Mojca Miklavec
On Thu, May 23, 2013 at 9:15 AM, Tabitha McNerney wrote: > > For a particular project I am working on, my boss asked me if there was a > way to compile some code from source (which depends on and will use of some > advanced cryptography potentially for highly sensitive business), such that, > in hi

Re: Refresher on gcc port and the executables

2013-05-23 Thread Tabitha McNerney
On Wed, May 22, 2013 at 1:15 PM, Lawrence Velázquez wrote: > On May 22, 2013, at 8:17 AM, Ryan Schmidt wrote: > > > On May 22, 2013, at 05:25, Tabitha McNerney wrote: > > > >> Its been some time since I looked more deeply at the GCC ports. On a > new Mac recently I installed MacPorts and then spe

Re: Refresher on gcc port and the executables

2013-05-22 Thread Lawrence Velázquez
On May 22, 2013, at 8:17 AM, Ryan Schmidt wrote: > On May 22, 2013, at 05:25, Tabitha McNerney wrote: > >> Its been some time since I looked more deeply at the GCC ports. On a new Mac >> recently I installed MacPorts and then specifically installed gcc47 into my >> port prefix path /opt/local

Re: Refresher on gcc port and the executables

2013-05-22 Thread René J.V. Bertin
On May 22, 2013, at 14:17, Ryan Schmidt wrote: > > Note that Xcode 4.2 and later do not include any version of gcc. However if > you install the command line tools (which you must do in order to use > MacPorts) then /usr/bin/gcc does exist, as a symlink to llvm-gcc-4.2. I > assume as of Xcode

Re: Refresher on gcc port and the executables

2013-05-22 Thread Ryan Schmidt
On May 22, 2013, at 05:25, Tabitha McNerney wrote: > Its been some time since I looked more deeply at the GCC ports. On a new Mac > recently I installed MacPorts and then specifically installed gcc47 into my > port prefix path /opt/local > > I looked today and realized there are several binari