4 ms·
It only has a counter assuming you have trusted compiler.
by guipsp 9y ago
It only has a counter assuming you have trusted compiler.
- Jach 9y agoDo you trust yourself? You can choose whatever compiler(s) you want as the 'trusted' one(s), even writing your own. It doesn't even need to be a very good or complete compiler.
- guipsp 9y agoWhat do you compile the trusted compiler with?
- Jach 9y agoWho says it needs to be compiled? Your trusted compiler can be a Basic script. The dissertation likely addresses all your concerns. Sticking with the Basic example, say you wanted to see if tcc was vulnerable, but you don't trust gcc, icc, borland, clang, etc. either as compilers to use directly or as compilers to compile your trusted one.. And you don't want to write your own in Java or Python because you don't trust the VMs. Whip out an Altair BASIC binary from the 70s and write your compiler with that, just enough to compile tcc. Perform DCC. If the tcc source does not correspond with its binary, you'll know.