Most likely referring to "Reflections on Trusting Trust" [0]; i.e. when the compiler is itself the attack vector. [0]: https://www.cs.cmu.edu/~rdriley/487/pap

Most likely referring to "Reflections on Trusting Trust" [0]; i.e. when the compiler is itself the attack vector. [0]: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...