Trusting-Trust Attack against an Entire Linux Distribution (via the strip utility)https://arxiv.org/abs/2607.24888
Ken Thompson's trusting-trust attack, in which a compromised compiler backdoors the programs it builds and reproduces the backdoor in subsequent rebuilds of itself, is widely regarded as a threat specific to compilers. We show that it is not. Comments
