From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.0 required=5.0 tests=MAILING_LIST_MULTI
	autolearn=ham autolearn_force=no version=3.4.4
Received: (qmail 19575 invoked from network); 20 Sep 2021 07:13:09 -0000
Received: from minnie.tuhs.org (45.79.103.53)
  by inbox.vuxu.org with ESMTPUTF8; 20 Sep 2021 07:13:09 -0000
Received: by minnie.tuhs.org (Postfix, from userid 112)
	id 687AD9CA65; Mon, 20 Sep 2021 17:13:06 +1000 (AEST)
Received: from minnie.tuhs.org (localhost [127.0.0.1])
	by minnie.tuhs.org (Postfix) with ESMTP id E7CAE9C8DF;
	Mon, 20 Sep 2021 17:12:34 +1000 (AEST)
Received: by minnie.tuhs.org (Postfix, from userid 112)
 id 627A19C8DF; Mon, 20 Sep 2021 17:12:32 +1000 (AEST)
Received: from freefriends.org (freefriends.org [96.88.95.60])
 by minnie.tuhs.org (Postfix) with ESMTPS id BF83D9C8DB
 for <tuhs@minnie.tuhs.org>; Mon, 20 Sep 2021 17:12:31 +1000 (AEST)
X-Envelope-From: arnold@skeeve.com
Received: from freefriends.org (freefriends.org [96.88.95.60])
 by freefriends.org (8.14.7/8.14.7) with ESMTP id 18K7CRGu000545
 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); 
 Mon, 20 Sep 2021 01:12:28 -0600
Received: (from arnold@localhost)
 by freefriends.org (8.14.7/8.14.7/Submit) id 18K7CRBo000544;
 Mon, 20 Sep 2021 01:12:27 -0600
From: arnold@skeeve.com
Message-Id: <202109200712.18K7CRBo000544@freefriends.org>
X-Authentication-Warning: frenzy.freefriends.org: arnold set sender to
 arnold@skeeve.com using -f
Date: Mon, 20 Sep 2021 01:12:27 -0600
To: tuhs@minnie.tuhs.org, douglas.mcilroy@dartmouth.edu
References: <CAKH6PiUzQW9BhXrEExw_QaDTjuQ-gPZOZOpzKYLHu1DzLspL2Q@mail.gmail.com>
In-Reply-To: <CAKH6PiUzQW9BhXrEExw_QaDTjuQ-gPZOZOpzKYLHu1DzLspL2Q@mail.gmail.com>
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re: [TUHS] Thompson trojan put into practice
X-BeenThere: tuhs@minnie.tuhs.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: The Unix Heritage Society mailing list <tuhs.minnie.tuhs.org>
List-Unsubscribe: <https://minnie.tuhs.org/cgi-bin/mailman/options/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=unsubscribe>
List-Archive: <http://minnie.tuhs.org/pipermail/tuhs/>
List-Post: <mailto:tuhs@minnie.tuhs.org>
List-Help: <mailto:tuhs-request@minnie.tuhs.org?subject=help>
List-Subscribe: <https://minnie.tuhs.org/cgi-bin/mailman/listinfo/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=subscribe>
Errors-To: tuhs-bounces@minnie.tuhs.org
Sender: "TUHS" <tuhs-bounces@minnie.tuhs.org>

Douglas McIlroy <douglas.mcilroy@dartmouth.edu> wrote:

> > It's part of my academic project to work on provable compiler security.
> > I tried to do it according to the "Reflections on Trusting Trust" by Ken
> > Thompson, not only to show a compiler Trojan horse but also to prove that
> > we can discover it.
>
> Of course it can be discovered if you look for it. What was impressive about
> the folks who got Thompson's compiler at PWB is that they found the horse
> even though they weren't looking for it.

I had not heard this story. Can you elaborate, please? My impression from having
read the paper (a long time ago now) is that Ken did the experiment locally only.

Thanks,

Arnold