Comment by callc
15 hours ago
Turtles all the way down. Can you trust your compiler?
https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...
15 hours ago
Turtles all the way down. Can you trust your compiler?
https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...
This problem can be solved by the bootstrappable builds: https://news.ycombinator.com/item?id=41368835
But do you trust the processor? Which can also be backdoored internally to start rewriting instructions on the fly?
You use different CPUs and compare the result. Also, you can try this: https://www.crowdsupply.com/sutajio-kosagi/precursor
This is called "security through compartmentalization", i.e., you don't trust one single entity. The only approach that works.