[cap-talk] Security by safe language processing

[David-Sarah Hopwood]

John Carlson wrote:
> Seems like with all this talk of security and compilers, it's time to  
> bring up Ken Thompson's paper:
> 
> http://cm.bell-labs.com/who/ken/trust.html

That particular attack can be defended against by
"diverse double compiling":

<http://www.dwheeler.com/trusting-trust/>

which is a good idea anyway because it will catch some categories
of compiler bug.

-- 
David-Sarah Hopwood  ⚥  http://davidsarah.livejournal.com