3 ms·
I've always regarded that paper as the 'Godel's Incompleteness Theorem' of Security. I'm not saying that the security field had a 'Hilbert's Program' before th
by michaelfeathers 11y ago
I've always regarded that paper as the 'Godel's Incompleteness Theorem' of Security.
I'm not saying that the security field had a 'Hilbert's Program' before then, but it certainly couldn't have one afterward.
- agentxyz 11y agoOr how about Gödel’s Lost Theorem? https://medium.com/@yanazendo/godels-lost-theorem-ce8ee4af20b9 https://medium.com/@yanazendo/godels-lost-theorem-ce8ee4af20...
- cwzwarich 11y agoThat link doesn't actually state a theorem. What is it?
- jessaustin 11y agoApparently we've lost it...
- munin 11y agoyeah, except there's a solution to "trusting trust" : http://www.dwheeler.com/trusting-trust/ http://www.dwheeler.com/trusting-trust/
- delinka 11y agoDr. Wheeler's research and resulting paper are excellent work. It certainly gets us thinking in the right direction in an attempt to solve the problem, but I don't know that I'd call his approach a tangible solution. You still need a trusted compiler. And from whence can one obtain a trusted compiler and guarantee that it has not been compromised? Also, no two compilers (GCC vs Intel, for example) would produce the same bit-for-bit executable code. Perhaps we only lack the tools to implement his solution.