Post #1081862
2023-10-26 14:03 UTC
The security hill I will die on: Credit for the “backdoored compiler” trick should go to Karger and Schell (“Multics Security Evaluation: Vulnerability Analysis,” 1974).¹ That’s the “Unknown Air Force Document” from which Thompson (1984) borrowed the idea.
__
¹ https://www.acsac.org/2002/papers/classic-multics-orig.pdf, §3.4.5
Replies (2)
-
@hhardy01@mastodon.social 2023-10-26 21:03
Good catch https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf @hovav
-
@rsc@hachyderm.io 2023-10-27 13:15
@hovav Ken updated his copy of the paper decades ago to cite them directly. That copy is gone but a presumably unauthorized mirror is at http://cm.bell-labs.co/who/ken/trust.html - see reference 4.