Hacker News Reader

I've always regarded that paper as the 'Godel's Incompleteness Theorem' of Security.

I'm not saying that the security field had a 'Hilbert's Program' before then, but it certainly couldn't have one afterward.

View on HN

yeah, except there's a solution to "trusting trust" : http://www.dwheeler.com/trusting-trust/

Dr. Wheeler's research and resulting paper are excellent work. It certainly gets us thinking in the right direction in an attempt to solve the problem, but I don't know that I'd call his approach a tangible solution. You still need a trusted compiler. And from whence can one obtain a trusted compiler and guarantee that it has not been compromised? Also, no two compilers (GCC vs Intel, for example) would produce the same bit-for-bit executable code.

Perhaps we only lack the tools to implement his solution.

Reply on news.ycombinator.com