3 ms·
It's definitely more work than it should be to bootstrap Rust, but we should be able to rule out most "trusting trust" scenarios with a fully bootstrapped compi
by t-3 4y ago
It's definitely more work than it should be to bootstrap Rust, but we should be able to rule out most "trusting trust" scenarios with a fully bootstrapped compiler, right?
- kibwen 4y agorustc has been successfully subjected to diverse-double-compilation (https://dwheeler.com/trusting-trust/ https://dwheeler.com/trusting-trust/) via mrustc at various points in its history, which plausibly rules out trusting-trust attacks for those versions.
- drexlspivey 4y agoGNU successfully bootstrapped the Rust compiler https://guix.gnu.org/tr/blog/2018/bootstrapping-rust/ https://guix.gnu.org/tr/blog/2018/bootstrapping-rust/