On Tue, Sep 16, 2014 at 11:27 PM, Mark H Weaver <address@hidden> wrote:
A Thompson virus could be hiding in this intermediate C code that would
be very hard to audit.
When did you last audit these 66,000 lines of intermediate code, which people are encouraged to run as root? If you _had_ audited it, how would you know you hadn't missed something cunningly concealed in a double expansion somewhere?