Motivation

2002: Series of high profile trojans
irssi, dsniff, fragroute, fragrouter, openssh, sendmail, tcpdump
How many others are compromised?

Failures of Microsoft, Sun, Apple signed update systems

About 10 years of PGP
How well is the web of trust doing?