3 ms·

Even if the program was open source, you could still be wondering how much trust you can place on the source code [1] [1] https://www.cs.cmu.edu/~rdriley/487/p

• yencabulator 3y ago
  "Fully Countering Trusting Trust through Diverse Double-Compiling (DDC) - Countering Trojan Horse attacks on Compilers": https://dwheeler.com/trusting-trust/ https://dwheeler.com/trusting-trust/
• mbakke 3y ago
  That is now a solved problem thanks to GNU Mes and M2-planet: https://joyofsource.com/the-full-source-bootstrap-building-from-source-all-the-way-down.html https://joyofsource.com/the-full-source-bootstrap-building-f... And will gradually become a non issue as distros incorporate it (or more likely: reproducible binaries generated from it) in their bootstrap.
  • actionfromafar 3y ago
    Good! But don’t forget the source code itself can have subtle bugs introduced not spotted by reviewers. Raises the bar though.