3 ms·
So, technically, it is possible that there's an undetected backdoor that has lingered around since GCC 1.0
by nwah1 10y ago
So, technically, it is possible that there's an undetected backdoor that has lingered around since GCC 1.0
- smegger001 10y agoTechnically it would have been in the original C complier written for the original unix by Ken Thompson and Dennis Ritchie, and been compiled in every complier and login utility since the 70s. At this point try finding a complier that doesn't trace is compiling lineage at some point reach back to a complier compiled by a complier that doens't eventually reach back to it may be pretty hard.
- nwah1 10y agoTrue, but that compiler wasn't open source. The real head-scratcher here seems to be that you can have a self-replicating security vulnerability in a completely open source stack including the compiler