[schoen]

Good analysis of this issue in Halvar Flake's https://www.slideshare.net/hashdays/why-johnny-cant-tell-if-... ("Why Johnny can't tell if he is compromised").

[ams6110]

Or Ken Thompsons's Reflections on Trusting Trust.