[jongraehl]

You also have to trust the source code of the 'untrusted' compiler (that is, read it and make sure it doesn't directly contain any back door).

[unhammer]

Or trust the source code of a simpler compiler that is able to compile the untrusted compiler: http://www.dwheeler.com/trusting-trust/