3 ms·

That’s not correct. There is not a general solution to tell what any arbitrary program can do, but most code is boring stuff that is easy to reason about.

• chii 2y ago
  But a malicious actor can hide stuff that would be missed on a general casual inspection. Most of the methods in https://www.ioccc.org/ https://www.ioccc.org/ would be missed via a casual code inspection, esp. if there weren't any initial suspicion that something is wrong about it.
  • kortilla 2y ago
    Yes, but again, that doesn’t apply to the vast majority of code. My point is that saying you can’t know what code does “in general” is not true. We wouldn’t have code reviews if that were the case.
  • 5- 2y ago
    http://www.underhanded-c.org/ http://www.underhanded-c.org/ is a c programming contest specifically dealing with programs that hide behaviour 'in plain sight'. the winners are very much worth a look.
    • chii 2y ago
      ah yea, that was actually what i was thinking of, but mistakenly thought it was the iocccc (tho both has merits).
      • TeMPOraL 2y ago
        Yeah, they're kind of inverse of each other. They're both powerful stuff!