The compiler-based backdoor is described by the authors in PoC||GTFO #8: https://www.alchemistowl.org/pocorgtfo/pocorgtfo08.pdf https://www.alchemistowl.org/po

The compiler-based backdoor is described by the authors in PoC||GTFO #8: https://www.alchemistowl.org/pocorgtfo/pocorgtfo08.pdf https://www.alchemistowl.org/pocorgtfo/pocorgtfo08.pdf Note that this isn't "Reflections on Trusting Trust" - the backdoor in question relies on specific non-buggy code in "sudo" triggering a pre-existing miscompilation bug in clang 3.3. If you examine the source to sudo, the backdoor isn't there; if you compile it with any other compiler, the backdoor doesn't exist.