"Trojan Source" Bug threatens the Security of all code

There's also "Vulnerability by design". A quick Google search on the term turns up articles that mostly focus on UI's, but I would think that also applies to compilers. eternal_noob 's post #9 earlier in this thread links to a pretty good example of that. To patch a vulnerability like that, you'd have to either find a differently designed compiler, or redesign GCC from ground up. Good luck finding somebody willing to put in THAT kind of effort to patch things up upon discovery. 😩
 
Back
Top