What software are we running?
•We cannot verify that desired software is running on a computer.
•Stringent software design/review (even formal verification) doesn’t solve the problem.
•Open source does not solve the problem.
–“Disclosed” source is, however, highly desirable!