If you've never read it before, this could potentially make you paranoid about your computer: Reflections on Trusting Trust by Ken Thompson.
For those after the "TL,DR" version, it describes a C compiler, written in C, designed to do two things other than standard compiling:
- If it detects that it's compiling the UNIX login command, it inserts a backdoor that gives someone the ability to run as any user on the system.
- If it detects that it's compiling itself (with or without the additional code), it instead produces the binary for this "broken" version.
0 comments:
Post a Comment