Hacker News new | ask | show | jobs
by munin 3848 days ago
yeah, except there's a solution to "trusting trust" : http://www.dwheeler.com/trusting-trust/
1 comments

Dr. Wheeler's research and resulting paper are excellent work. It certainly gets us thinking in the right direction in an attempt to solve the problem, but I don't know that I'd call his approach a tangible solution. You still need a trusted compiler. And from whence can one obtain a trusted compiler and guarantee that it has not been compromised? Also, no two compilers (GCC vs Intel, for example) would produce the same bit-for-bit executable code.

Perhaps we only lack the tools to implement his solution.