Re: signing applets a solution? Never!

[Pauline van Winsen - Uniq Professional Services <Pauline.van.Winsen () uniq com au>]

> When talking about security of binary products, I believe it is hard to
> believe that programmers do not sometimes program backdoors into their
> programs. It probably depends on the software company, but in many places
> it should be fairly easy to put something into the code without company or
> fellow programmers finding out about it.

& for a classic example check out:

http://www.cs.umsl.edu/~sanjiv/sys_sec/security/thompson/hack.html

one of my all time favourite security papers.

cheers,
pauline

Pauline van Winsen                                   pauline () uniq com au
Uniq Professional Services Pty Ltd                       www.uniq.com.au
PO Box 70, Paddington, NSW 2021,                      (Sydney) Australia
Phone: +61-2-9380-6360      Fax: +61-2-9380-6416      Pager: 016 287 000
"You'll need a dress for dancing. Unless you're going steady with 
someone in the Diplomatic Corps, you won't really need a full-length 
ball gown."
   Fashion Sense - The Single Woman - Book 2, Woman's World, circa 1964.