[langsec-discuss] Revisiting "Trusting Trust" for binary toolchains [30c3]
svenkieske at gmail.com
Fri Jan 3 19:17:09 UTC 2014
-----BEGIN PGP SIGNED MESSAGE-----
I sadly didn't have the time to attend to 30c3
in person, but I watched the video here:
I just have a small addition regarding the
"magic wand" mentioned in the beginning.
To be more precise, the authors refer to
Ken Thompsons famous "trusting trust"
and imply that this problem never was solved.
Well, to my understanding this was solved indeed
by David A. Wheelers, also famous, dissertation
"Fully Countering Trusting Trust through Diverse
I know that this does not prove anything wrong
which was shown later in the talk and I find the
findings really interesting, but I wanted
to share this information with you, just in case
you maybe missed Wheelers paper.
I hope I did understand the talk correctly and
that my findings are correct, if not, I accuse
my poor English skills ;-)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
-----END PGP SIGNATURE-----
More information about the langsec-discuss