A Reflection on Trusting Trustworthiness

“Perhaps it is more important to trust the people who wrote the software.” — Ken Thompson, Reflections on Trusting Trust Ken Thompson’s 1984 lecture is generally remembered for its unsettling demonstration that source-level inspection cannot establish the trustworthiness of a software system. A compiler can insert behavior that is absent from the program it compiles; it can even reproduce that…