3 ms·
> (God help you if you're using node and npm/yarn) Try to audit gcc if you’re using C :)
by Xylakant 7y ago
> (God help you if you're using node and npm/yarn)
Try to audit gcc if you’re using C :)
- xfer 7y agoYou only have to audit the binary produced, not gcc.
- merb 7y agoand how do you do that? - btw. without reading bit per bit you still have a problem since you can't audit a binary with a full trust chain, i.e. the auditing tool needs to be audited aswell, etc...
- comex 7y agoThere’s CompCert, if you really want to go that far… Then there’s the question of auditing the hardware you’re running on ;)