[Tutor] OT self-implementation?

Danny Yoo dyoo at hkn.eecs.berkeley.edu
Mon Jul 4 00:55:18 CEST 2005


> > (*)One of the hardest malicious bugs I've seen was by a disgruntled
> > employee who deliberately inserted a bug into the C source of the
> > companies compiler. He then recompiled the compiler (using the working
> > compiler) to produce a faulty compiler. He then removed his bugs in
> > the source code so it was back to the correct version. He then
> > recompiled the good source with the faulty compiler to produce a new
> > faulty compiler. He then left the company...
> >
> > It took a long time to figure out what was wrong and why...
>
> good lord, but if that fellow could only have harnessed that
> ingeniousness for the forces of good!

Hi Brian,

You may find the following paper by Ken Thompson an interesting one on
this topic: "Reflections on Trusting Trust":

    http://www.acm.org/classics/sep95/

It follows the exact stuation that Alan mentioned.



More information about the Tutor mailing list