The comments on this page immediately reminded me of Ken Thompson's point: "You can't trust code that you did not totally create yourself."
He wrote this right after demonstrating how to create, step-by-step, an undetectable trojan horse in the C compiler. Here are the steps for creating such a trojan horse:
He wrote this right after demonstrating how to create, step-by-step, an undetectable trojan horse in the C compiler. Here are the steps for creating such a trojan horse:
http://cm.bell-labs.com/who/ken/trust.html
[ Also see http://news.ycombinator.com/item?id=2642486 ]