Reflections on Trusting Trust cs.cmu.edu ↗

Ken Thompson's 1984 Turing Award lecture on compiler backdoors that propagate themselves.

OtherSecurity & privacysupply-chaincompilerstrust

Captured 13 Nov 2026

Recommended in 1 thread

Weight Space Misfolding
alphaxiv.org · 6 hours ago
Cited as the classic analogue to models that infect the models they edit.

SafeScript ↗Security & privacy
A JavaScript subset and runtime for executing untrusted code that can only call injected facades.
1 thread
Microcorruption Security & privacy
An embedded-security CTF focused on exploiting a simulated microcontroller.
1 thread
NIST Small Business Cybersecurity Corner ↗Security & privacy
NIST's portal of cybersecurity resources aimed at small businesses.
1 thread
Seal ↗Security & privacy
A service that locks environment secrets in hardware.
1 thread
Certificate Transparency ↗Security & privacy
A public logging framework that records issued TLS certificates so misissuance can be detected.
1 thread
wolfSSL ↗Security & privacy
A lightweight TLS/DTLS library aimed at embedded and resource-constrained systems.
1 thread
Paranoid Crypto ↗Security & privacy
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
2 threads
BoringSSL ↗Security & privacy
Google's fork of OpenSSL used in Chrome and Android.
1 thread

1Password ↗
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
8 threads
YubiKey ↗
A hardware security key supporting FIDO2, PIV and OpenPGP.
5 threads
NoScript ↗
A browser extension that blocks JavaScript and other active content by default.
4 threads
Secretive ↗
A macOS app that stores SSH keys in the Secure Enclave and acts as an SSH agent.
3 threads
Signal
An end-to-end encrypted messaging app.
3 threads
Tor
An anonymity network that routes traffic through volunteer relays.
3 threads
Bubblewrap ↗
An unprivileged Linux sandboxing tool built on namespaces.
2 threads
Canarytokens ↗
Free service for planting tripwire tokens that alert you when they are accessed.
2 threads
Cloudflare Turnstile ↗
A CAPTCHA alternative from Cloudflare that checks whether a visitor is human.
2 threads
Cloudflare WAF ↗
Cloudflare's managed web application firewall.
2 threads
Convergence ↗
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
2 threads
Darknet Diaries ↗
A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.
2 threads

Link from a commenter, not checked or endorsed by us: ↗ https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf