- cross-posted to:
- cybersecuritymemes@lemmy.world
- cross-posted to:
- cybersecuritymemes@lemmy.world
You must log in or register to comment.
The very fact that Anthropic is now injecting a kind of watermark into every output, is solid proof that such a Ken Thompson hack is a inevetable risk
For the uninitiated: who compiles the compilers?
Quis custodiet ipsos custodes?
I’ve had it on my todo for years to work through ddc and trusting trust.
Which is a method to verify a compiler is matching its source and thus trustworthy.An orthogonal approach is reproducible builds, which among many benefits can make sure a few people verifying things benefit everyone who can then see they have the same verified binaries.
Something you might like: https://bootstrappable.org/
If I remember correctly, they used KenC to bootstrap the Go compiler.
