{"id":8131,"date":"2019-06-25T11:56:26","date_gmt":"2019-06-25T15:56:26","guid":{"rendered":"https:\/\/irreal.org\/blog\/?p=8131"},"modified":"2019-06-25T11:59:09","modified_gmt":"2019-06-25T15:59:09","slug":"haldar-reads-reflections-on-trusting-trust","status":"publish","type":"post","link":"https:\/\/irreal.org\/blog\/?p=8131","title":{"rendered":"Haldar Reads <i>Reflections on Trusting Trust<\/i>"},"content":{"rendered":"<p>I\u2019ve written at least twice about Ken Thompson\u2019s Turing Award Lecture, <i>Reflections on Trusting Trust<\/i> and each time I told you to be sure to read it. It describes one of the\u2014if not the\u2014greatest hacks of all time. In the talk and the paper that recapitulates it, Thompson describes how he modified the C compiler to insert a backdoor into the Unix <code>login<\/code> command and arranged to have all signs of the code removed from the compiler\u2019s source while keeping it in the binary. In a way, the paper is terrifying and after reading it, you\u2019ll never fully trust your tools again.<\/p>\n<p>If you ignored my strong urging to read the paper don\u2019t worry. Vivek Haldar had done it for you and produced a <a href=\"https:\/\/www.youtube.com\/watch?v=Ow9yMxJ8ez4&amp;feature=youtu.be\">short video describing it<\/a>. Watch Haldar\u2019s video to see how Thompson pulled off his trick but then you really should the <a href=\"https:\/\/www.archive.ece.cmu.edu\/~ganger\/712.fall02\/papers\/p761-thompson.pdf\">paper itself<\/a>. It\u2019s short, easy to read, and entertaining.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I\u2019ve written at least twice about Ken Thompson\u2019s Turing Award Lecture, Reflections on Trusting Trust and each time I told you to be sure to read it. It describes one of the\u2014if not the\u2014greatest hacks of all time. In the &hellip; <a href=\"https:\/\/irreal.org\/blog\/?p=8131\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[3,36],"class_list":["post-8131","post","type-post","status-publish","format-standard","hentry","category-general","tag-security","tag-unix"],"_links":{"self":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8131"}],"version-history":[{"count":2,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8131\/revisions"}],"predecessor-version":[{"id":8133,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8131\/revisions\/8133"}],"wp:attachment":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}