Re: Sysadmins

[olafBuddenhagen]

Hi,

> Your comment that the administrator controls the boot loader is true
> today. It will probably continue to be true that the administrator can
> *replace* the OS. Given coming changes in PC architecture, it will
> probably *not* continue to be true that this can be done without
> detection, and it will not necessarily be true that changing the OS
> will allow successful inspection of data written by the previous OS.

And who will do this detection, other then the admin? Or do you mean
Treacherous Computing, introducing another "trusted" entity even more
out of your control?

My point is that no matter how hard you try, you can't change the fact
that ultimately the users need to trust the one controlling the machine.
Nothing in your system design can really change this.

-antrik-