{"id":9028,"date":"2013-01-10T14:41:22","date_gmt":"2013-01-10T20:41:22","guid":{"rendered":"http:\/\/bucktownbell.com\/?p=9028"},"modified":"2013-01-10T14:41:22","modified_gmt":"2013-01-10T20:41:22","slug":"acm-classic-reflections-on-trusting-trust","status":"publish","type":"post","link":"http:\/\/bucktownbell.com\/?p=9028","title":{"rendered":"ACM Classic: Reflections on Trusting Trust"},"content":{"rendered":"<blockquote><p>The moral is obvious. You can&#8217;t trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) No amount of source-level verification or scrutiny will protect you from using untrusted code. In demonstrating the possibility of this kind of attack, I picked on the C compiler. I could have picked on any program-handling program such as an assembler, a loader, or even hardware microcode. As the level of program gets lower, these bugs will be harder and harder to detect. A well installed microcode bug will be almost impossible to detect.<\/p><\/blockquote>\n<p>via <a href=\"http:\/\/cm.bell-labs.com\/who\/ken\/trust.html\">ACM Classic: Reflections on Trusting Trust<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The moral is obvious. You can&#8217;t trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) No amount of source-level verification or scrutiny will protect you from using untrusted code. In demonstrating &hellip; <a href=\"http:\/\/bucktownbell.com\/?p=9028\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[54],"tags":[258,101],"class_list":["post-9028","post","type-post","status-publish","format-standard","hentry","category-programming","tag-compilers","tag-security"],"_links":{"self":[{"href":"http:\/\/bucktownbell.com\/index.php?rest_route=\/wp\/v2\/posts\/9028","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/bucktownbell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/bucktownbell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/bucktownbell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/bucktownbell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9028"}],"version-history":[{"count":0,"href":"http:\/\/bucktownbell.com\/index.php?rest_route=\/wp\/v2\/posts\/9028\/revisions"}],"wp:attachment":[{"href":"http:\/\/bucktownbell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9028"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/bucktownbell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9028"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/bucktownbell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}