4 ms·
Do you actually read all the sources of all the software you use?
by gress 11y ago
Do you actually read all the sources of all the software you use?
- zimpenfish 11y agoYou'd have to read the entire stack down through the compiler, the libraries, the kernel, and eventually the (whatever is the equivalent of the BIOS these days). To quote "Reflections on Trusting Trust", The moral is obvious. You can't trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) No amount of source-level verification or scrutiny will protect you from using untrusted code. https://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf https://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thomp...