LWN: Comments on "Tor gets financial support for Arti development"

Security, bootstrapping, and transparency

oldtomas — Sun, 01 Aug 2021 07:13:26 +0000

This is nearly ironic, because the person you're asking is involved in a large project which, among other things, tries to tackle bootstrapping in a very systematic manner.

Had you followed the Guix links given to you, you might have stumbled upon interesting things.

Here's specifically something about bootstrapping C in Guix's context:

https://guix.gnu.org/blog/2019/guix-reduces-bootstrap-see...

Actually, bootstrapping C has a long and rich history, with several minimalist C compilers being built to build more complete compilers on top.

Security, bootstrapping, and transparency

mpr22 — Thu, 29 Jul 2021 17:07:03 +0000

C and C++ have multiple independently developed compilers.

Rust has one and a half.

Security, bootstrapping, and transparency

peter-b — Thu, 29 Jul 2021 16:45:08 +0000

> Another security consideration in the choice of a language is its bootstrapping story, to reduce chances of "Trusting Trust" attack as described by Ken Thompson.

People seem to worry about bootstrapping Rust far more than they worry about bootstrapping C or C++. Are there any C++ compilers that can be compiled without a C++ compiler?

Security, bootstrapping, and transparency

civodul — Mon, 26 Jul 2021 12:12:59 +0000

Another security consideration in the choice of a language is its bootstrapping story, to reduce chances of "Trusting Trust" attack as described by Ken Thompson.

Currently though, Rust requires a pre-built binary version of itself to build. This has been worked around in Guix via mrustc, a compiler for a subset of Rust implemented in C++ (GCC's Rust frontend may eventually provide another option to get there).

The road is still bumpy though, so let's hope Rust eventually has a goal to support an official bootstrapping method that would give distributors an incentive to build it from source.