3 ms·
Insert obligatory ref to "on trusting trust" what is the compiler doing? Has the pre-processor been vetted? This is looking more and more like hardware solutio
by ForOldHack 2y ago
Insert obligatory ref to "on trusting trust" what is the compiler doing? Has the pre-processor been vetted?
This is looking more and more like hardware solutions are becoming more attractive.
- yjftsjthsd-h 2y ago1. I don't see why you need to solve Trusting Trust to make libc and the shell more robust. 2. If we are worried about Trusting Trust, then Rust is worse; at least C has the wide range of compilers needed for diverse double-compiling and as of https://guix.gnu.org/en/blog/2023/the-full-source-bootstrap-building-from-source-all-the-way-down/ https://guix.gnu.org/en/blog/2023/the-full-source-bootstrap-... we arguably have a working solution. Rust only has a single compiler, and that compiler is used to build itself, making it the poster child for Trusting Trust targets.
- steveklabnik 2y agoRust has a second compiler, mrustc, written in C++ and that is able to bit-reproduce rustc. This has been the case for a few years now.
- yjftsjthsd-h 2y agoOh, excellent; I didn't realize that was capable of building rustc. In that case, I'm wrong and Rust is just as good as C.