思想与社会2020 · 分享于 Hacker News

Trusting Trust: Ken Thompson on supply chain security (1984)

探索《Trusting Trust: Ken Thompson on supply chain security (1984)》的原文与 Hacker News 社区讨论,查看来源并加入阅读清单。

阅读原文

看看社区如何讨论这个想法。

来自 Hacker News 的原始讨论。不同的视角、疑问,以及值得继续思考的线索。

最多展示 100 条相关讨论。论文可能出现在评论中,并非原帖投稿内容。

在讨论中发现的引用

按 HN 条目顺序展示最近的 50 条引用来源。

Y1915cb1f ·

New Mac ransomware spreading through piracy

390 赞同344 评论
Yjonbaer ·

Most Influential Papers in Computer Science History

335 赞同112 评论
Yuzyn ·

Malaysia started mandating ISPs to redirect DNS queries to local servers

328 赞同402 评论
YCrankyBear ·

Log4j: The pain just keeps going

259 赞同288 评论
Ynullc ·

It Is Never a Compiler Bug Until It Is

256 赞同132 评论
Ysecfirstmd ·

Second Swiss firm allegedly sold encrypted spying devices

248 赞同173 评论
Ymooreds ·

Unauthorized gem takeover for some gems

239 赞同76 评论
Ytaviso ·

Zentool – AMD Zen Microcode Manipulation Utility

236 赞同66 评论
Ytomalpha ·

WhatsApp goes down for users globally

229 赞同220 评论
Ytodsacerdoti ·

Committing to Rust in the Kernel

208 赞同170 评论
Yjszymborski ·

Turning Everyday Gadgets into Bombs Is a Bad Idea

144 赞同129 评论
Yromac ·

Retrobootstrapping Rust for some reason

142 赞同51 评论
Ystephc_int13 ·

The Ken Thompson Hack

127 赞同43 评论
Ypseudolus ·

AI-assisted coding will change software engineering: hard truths

91 赞同109 评论
Yjjgreen ·

AI can't tell you it's lying if it thinks it's telling the truth

86 赞同75 评论
YAloha ·

Most security is based on the honor system

85 赞同87 评论
YDonckele ·

Don't Call Yourself A Programmer, And Other Career Advice (2011)

71 赞同89 评论
Yperfunctory ·

Bootstrappable Builds

59 赞同17 评论
Ybrianzelip ·

Trusting Trust: Ken Thompson on supply chain security (1984)

49 赞同21 评论
Yprakhargurunani ·

Why Windows 11 is forcing everyone to use TPM chips

26 赞同37 评论
Ypolycaster ·

Ask HN: What's the best paper you've read?

6 赞同8 评论
Yibobev ·

Reflections on Trusting Trust [pdf]

4 赞同0 评论
Yflorianherrengt ·

AI is removing the middle class of software engineering

4 赞同3 评论
Yastdb ·

Reflections on Trusting Trust (1984)

1 赞同0 评论
Ykulpreet ·

Reflections on Trusting Trust (1984)

1 赞同0 评论
Ypabs3 ·

Detecting the use of “curl | bash” server side

1 赞同0 评论
YrussianGuy83829 ·

The GitHub 1000 year archive may be the last code dataset uncontaminated by AI

1 赞同0 评论
Ythrowawaylinux ·

Ken Thompson on the bug that exposed his compiler trojan (2021)

1 赞同0 评论
Yristos ·

Reflections on Trusting Trust

1 赞同0 评论
Ysuper-user-d0 ·

Insecurity in Node.js Servers

1 赞同1 评论
Yjohng ·

Ask HN: How to deal with security implications of running/installing projects?

1 赞同0 评论

一个想法,引向另一个。

发现更多论文