4 ms·
Worth linking "diverse double-compiling" there or to some other resource, if I may make the suggestion. For other interested readers: a) html version of David
by akkartik 10y ago
Worth linking "diverse double-compiling" there or to some other resource, if I may make the suggestion.
For other interested readers:
a) html version of David Wheeler's dissertation: http://www.dwheeler.com/trusting-trust/dissertation/html/wheeler-trusting-trust-ddc.html http://www.dwheeler.com/trusting-trust/dissertation/html/whe.... I read it over a week last month, and it made a big impression on me.
b) the HN discussion for the Wheeler dissertation: https://news.ycombinator.com/item?id=12666923 https://news.ycombinator.com/item?id=12666923
- Manishearth 10y agoGood point, linked!
- tcoppi 10y agoWell it looks like this answers the question I posited above. Very interesting work, surprised I hadn't seen it.
- nickpsecurity 10y agoAs I said there, Wheeler was exemplary for handling most of this right ahead of time. He gave credit to Karger for inventing the compiler subversion attack. He wrote the reference page on high-assurance FLOSS (for compiler verification) and high-assurance SCM (for repo security, esp distribution). He also wrote a cheat I gripe about in reproducible builds to give us something to work with if high-assurance methods get ignored. Any of his stuff on this subject is worth reading. Here's his high-assurance and SCM pages: http://www.dwheeler.com/essays/high-assurance-floss.html http://www.dwheeler.com/essays/high-assurance-floss.html http://www.dwheeler.com/essays/scm-security.html http://www.dwheeler.com/essays/scm-security.html