2 ms·

https://web.archive.org/web/20100305234633/http://www.h-online.com/security/news/item/Virus-infects-development-environment-743003.html https://web.archive.org/

• nickpsecurity 10y ago
  Thanks for digging. I'll be damned! Somebody did pull it off. On my old, favorite platform as well!? So, one time on record. Still supports my claim that reproducible builds and Thompson are mainstream buzzwords where our real concern per Orange Book days should be: coding defects in compiler source; effects of optimizations; malicious developers; trusted distribution of source; bootstrapping first, verified, local compiler. That's basically a human and machine verified compiler with simple code and signed zip's. Knocks out Thompson attack as side effect and negates reptoducible build need except for debugging.