Tag Info

New answers tagged


You need to read Ken Thompson's paper on Trusting Trust. He did something magical, that will forever awaken your inner Tin foil hat. https://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf MORAL The moral is obvious. You can't trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) ...


It is not only possible, it has been documented several times in the past. http://www.cvedetails.com/vulnerability-list/vendor_id-72/product_id-960/GNU-GCC.html For example, http://www.cvedetails.com/cve/CVE-2008-1367/ shows a memory corruption attack that could lead to various types of compromise, if they were sufficiently exploited. A compiler is just ...


At least C++ compilation is turing complete so it is possible/easy to produce infinite loop impacting system performance and producing infinite output (exhausting ram and/or disk place). More info on how C++ compilation is turing complete : http://stackoverflow.com/questions/189172/c-templates-turing-complete


If your threat model means your code has to run on a computer you can't trust, there is no way to protect your data: it simply isn't possible. No matter what you do, the decryption key MUST be present in the memory of the system performing the decryption in order to access the data. This means that the only possible way to protect the key is to move that ...

Top 50 recent answers are included