UNIX and viruses

[John F. Haugh II]

In article <4457 at ficc.uu.net> peter at ficc.uu.net (Peter da Silva) writes:
>In article <19930 at adm.BRL.MIL>, bzs at bu-cs.bu.edu (Barry Shein) writes:
>> Will someone explain to me exactly how usernames and passwords and
>> file protections (a not unknown form of security) will protect against
>> computer viruses??
>
>Thirty-fifteen.
>
>I guess it's time for this again. I originally posted this before the
>Internet Worm Scare.

Anyone interested in a really good paper on trojan horses and trust
should read Ken Thompson's Turing Award presentation.

Ken creates a scenario in which the C compiler and login are in
cahoots to create this security hole which only he [ and dmr ;-) ]
are aware of.

It ends with some very sound advice - eventually a secure OS comes
down to trusting the people who wrote the code.  I don't think GNU
will ever produce a trusted OS for exactly this reason - who is
going to trust people such as Stallman who believes security is
something big companies use to steal from the average Joe?
-- 
John F. Haugh II                        +-Button of the Week Club:-------------
VoiceNet: (512) 832-8832   Data: -8835  | "AIX is a three letter word,
InterNet: jfh at rpp386.Cactus.Org         |  and it's BLUE."
UucpNet : <backbone>!bigtex!rpp386!jfh  +--------------------------------------