hi folks.

I would like to know how much 'safe' and 'secure' are
the binaries packages (.tgz) to be used in a
production environment. I would like to know points of
view about the binaries generated by netbsd.org, and
external binaries like www/phoenix-bin and
lang/sun-jdk14 for example.

I have talked with some friends about it. All said
that they don't want binaries in their netbsd systems,
but I told them that if they don't see the code, the
compile process would be just a lost of time. If the
compiler would be able to detect some common
vulnerabilities (some shellcode, some programmed and
unrelated connection), chosing source should be the
right choice. But it is another history.

I trust binaries made on netbsd.org, and binaries made
from open source orgs, in that order. A binary system
made entirely by binaries should be easy to mantain. I
don't trust closed source binaries, but it is personal
opinion.

thanks and kind regards

César Catrián C.
http://cetrox.bsd.st

_________________________________________________________
Do You Yahoo!?
Información de Estados Unidos y América Latina, en Yahoo! Noticias.
Visítanos en http://noticias.espanol.yahoo.com