Build it from audited source? As for updates, I imagine if you set up a domain you can run your own WSUS update server, MITM the connection, etc. - and then co

Build it from audited source? As for updates, I imagine if you set up a domain you can run your own WSUS update server, MITM the connection, etc. - and then compare the behaviour with a "regular" home PC. The problem really is how deep the hole goes - as per Ken Thompson "Reflections on Trusting Trust", 1984.