3 ms·
The comments on this page immediately reminded me of Ken Thompson's point: "You can't trust code that you did not totally create yourself." He wrote this right
by cs702 15y ago
The comments on this page immediately reminded me of Ken Thompson's point: "You can't trust code that you did not totally create yourself."
He wrote this right after demonstrating how to create, step-by-step, an undetectable trojan horse in the C compiler. Here are the steps for creating such a trojan horse:
http://cm.bell-labs.com/who/ken/trust.html http://cm.bell-labs.com/who/ken/trust.html
[ Also see http://news.ycombinator.com/item?id=2642486 http://news.ycombinator.com/item?id=2642486 ]