Trusting-Trust Attack against an Entire Linux Distribution (via the strip utility)

"Ken Thompson's trusting-trust attack, in which a compromised compiler backdoors the programs it builds and reproduces the backdoor in subsequent rebuilds of itself, is widely regarded as a threat specific to compilers. We show that it is not." A few weeks ago I came across this https://www.teamten.com/lawrence/writings/coding-machines/ : it's clearly fictional (and furthermore is "pre-AI" in…

arxiv.org ·11h ago

We haven't written up this one. Lobsters has the full story — the link below goes straight to it.

Read the original at arxiv.org →

Trusting-Trust Attack against an Entire Linux Distribution (via the strip utility)

More in Tech

AMD Working To "Push Rust Deep Into The GPU Stack"

Yango Ride Reports Global Safety Progress, Including 31% Decline in Post-Trip Contacts in Pakistan

My GSoC Journey with InVesalius: Bringing PACS Integration to InVesalius

I enjoyed grappling with Stranger Than Heaven's unconventional combat, but I'd love to see more of its depiction of early 20th century Japan

We tested DLSS 5 in NBA 2K27 with every RTX 50-series GPU — first official release comes with a big performance hit, but almost every Blackwell card can run it at 1080p

T-Mobile’s secret $25/month plan is tempting, but here’s why I won’t sign up