[24558] in Cypherpunks
Re: Why I have a 512 bit PGP key
daemon@ATHENA.MIT.EDU (Eric Hughes)
Wed Dec 28 00:00:03 1994
Date: Tue, 27 Dec 1994 20:52:17 -0800
To: cypherpunks@toad.com
In-Reply-To: <9412280307.AA03703@snark.imsi.com> (perry@imsi.com)
From: eric@remailer.net (Eric Hughes)
Read Ken Thompson's Turing Award lecture for why that isn't
sufficient. Its quite amusing.
I'm quite familiar with the work. [For those who aren't, it's about
compilers that compile in self-perpetuating bugs from their own source
code.]
The question, however, is not one of possibility but timeliness.
Attacks against persistent information are easier than attacks against
transient information. If the sysadmin is going to go modifying
compilers, it's no longer annoyance.
Eric
