From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: William ML Leslie Newsgroups: gmane.lisp.guile.devel,gmane.comp.gnu.lightning.general Subject: Re: The Free Semantics Foundation Date: Thu, 4 Sep 2014 12:21:28 +1000 Message-ID: References: NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 X-Trace: ger.gmane.org 1409797334 8285 80.91.229.3 (4 Sep 2014 02:22:14 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 4 Sep 2014 02:22:14 +0000 (UTC) Cc: lightning , guile-devel To: Ian Grant Original-X-From: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Thu Sep 04 04:22:06 2014 Return-path: Envelope-to: guile-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XPMgY-00033W-3L for guile-devel@m.gmane.org; Thu, 04 Sep 2014 04:22:06 +0200 Original-Received: from localhost ([::1]:48461 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XPMgX-0000M4-El for guile-devel@m.gmane.org; Wed, 03 Sep 2014 22:22:05 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:39613) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XPMg0-0008GS-5d for guile-devel@gnu.org; Wed, 03 Sep 2014 22:21:33 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XPMfz-0003LZ-9f for guile-devel@gnu.org; Wed, 03 Sep 2014 22:21:32 -0400 Original-Received: from mail-oi0-x236.google.com ([2607:f8b0:4003:c06::236]:51149) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XPMfx-0003Kw-Ds; Wed, 03 Sep 2014 22:21:29 -0400 Original-Received: by mail-oi0-f54.google.com with SMTP id a3so6149060oib.41 for ; Wed, 03 Sep 2014 19:21:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=TZ/8rz69fGR/dUdxzyqlpxMmRn2pHq5TZuNE5DY+/0Y=; b=Ju/MENRSi2KjJ3PDjfFJvjV1BjpOQTP6AuVNuVnQq3BJ6LBS17vumJKbBGxzZmw5qf pEXLnYHYg/vJPIWatjTHCDMbTTMjm84OScKhbnKSvdKjNzNcLkOqNbU0ly65VOAP8Zv/ 7BgV0lTQgBKQHsfwR/0XIZ67NkslugNi62cfRD3LMqJoYj0RUI0/B99t9Vq6lHmcfBXK HxdF0Upj0Mg64UwFYDG2DB7I49HG8UEcH4BDuzw74cNqbh6OlIXRZLC1BjQ/HXQwKXlG yTEpigAgSZVfgIZxdOHK2N2jGa+DEkZmCVzzbD4PKWkTTxKTxcvUZmFzUNU8DJ3FOMPf +3Qg== X-Received: by 10.182.133.104 with SMTP id pb8mr1227816obb.37.1409797288506; Wed, 03 Sep 2014 19:21:28 -0700 (PDT) Original-Received: by 10.182.165.196 with HTTP; Wed, 3 Sep 2014 19:21:28 -0700 (PDT) In-Reply-To: X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2607:f8b0:4003:c06::236 X-BeenThere: guile-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Developers list for Guile, the GNU extensibility library" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Original-Sender: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.lisp.guile.devel:17396 gmane.comp.gnu.lightning.general:560 Archived-At: On 4 September 2014 11:57, Ian Grant wrote: > Now it may seem unlikely to some that this has been done. But it is surely > obvious to *everyone* that this is *possible,* and since the advantage an > attacker accrues if he can pull this off effectively is incalculable, it > should also be obvious to *everyone* that if this has not yet been done, > then it will soon be done. Perhaps as a direct result of people reading what > I am writing right now. I'm not too sure how different distributions are bootstrapping GCC, but I presume most all of them have been using the previous version of GCC to do so for a very long time. My recollection of the early nineties is not great, but I don't recall GNU being at sufficient Ghandicon that it would have seemed worthwhile attempting it. Besides, there are easier ways to get that kind of control of a system, such as with SMM or hardware - even hardware like graphics cards and USB sticks, if you understand how the system will behave when presented with out-of-spec signals. > Focussing on free source code is pointless, we need to focus on free > semantics. I don't see how this (any of the paragraph) followed from the above. If compilers used for bootstrapping have incorporated the Richie crack, how are patents going to make your system secure? -- William Leslie Notice: Likely much of this email is, by the nature of copyright, covered under copyright law. You absolutely MAY reproduce any part of it in accordance with the copyright law of the nation you are reading this in. Any attempt to DENY YOU THOSE RIGHTS would be illegal without prior contractual agreement.