[Tutor] OT self-implementation?
dyoo at hkn.eecs.berkeley.edu
Mon Jul 4 00:55:18 CEST 2005
> > (*)One of the hardest malicious bugs I've seen was by a disgruntled
> > employee who deliberately inserted a bug into the C source of the
> > companies compiler. He then recompiled the compiler (using the working
> > compiler) to produce a faulty compiler. He then removed his bugs in
> > the source code so it was back to the correct version. He then
> > recompiled the good source with the faulty compiler to produce a new
> > faulty compiler. He then left the company...
> > It took a long time to figure out what was wrong and why...
> good lord, but if that fellow could only have harnessed that
> ingeniousness for the forces of good!
You may find the following paper by Ken Thompson an interesting one on
this topic: "Reflections on Trusting Trust":
It follows the exact stuation that Alan mentioned.
More information about the Tutor