> can only run code they wrote themselves They of course can't use compilers either [1] and have to write the machine code by hand. Now if you consider the CPU

> can only run code they wrote themselves They of course can't use compilers either [1] and have to write the machine code by hand. Now if you consider the CPU's microcode as general code as well which can be updated, what is he to do now? So I agree, you need trust, and the less parties you need to trust, the less chance of getting bit. [1]: http://c2.com/cgi/wiki?TheKenThompsonHack http://c2.com/cgi/wiki?TheKenThompsonHack