Reference to "Trusting Trust" (WAS: Really?)
Reference to "Trusting Trust" (WAS: Really?)
Posted May 10, 2021 22:29 UTC (Mon) by SomeOtherGuy (guest, #151918)In reply to: Reference to "Trusting Trust" (WAS: Really?) by josephrjustice
Parent article: Rethinking Fedora's compiler policy
That was it - TBH I figured we'd all heard about it - so yeah pulling compiler stuff from github seems less wise than "try this wordpress plugin"
Honestly the thing that surprised me was how easy it was for the thing to pass itself off in future compilers, that spooked me a bit, I figured "sure yeah do that" - but to have it insert itself into compilers it builds (with decent accuracy, I imagine it can be defeated) is still REALLY impressive
I'd never question objdump -D
