Chaos Communication Congress

Revisiting Trusting Trust for binary toolchains (30x64)

:

Speakers: sergeybratus, Julian Bangert, bx Ken Thompson's classic "Reflections on Trusting Trust" examined the impacts of planted build chain bugs, from an example of a compiler Trojan to a hypothetical "well-placed microcode bug". Once theoretical & remote, such scenarios have lately been revealed as a stark reality.