pull down to refresh
100 sats \ 1 reply \ @Row OP 2h \ parent \ on: Rust is an existential threat. bitdevs
That's the point, having a second compiler would allow you as an auditor to perform the cross-check.
In the current state, you can't, and have to resort to auditing every single binary.
What options does the Bitcoin community have? Participate in their development process. Don't trust, verify.
Check Ken Thompson's "Reflection on Trusting Trust".
Auditories are out of the question, the problem is precisely that since the compiler is self-hosted, such attack is not easily auditable, the scheme can hide malicious code without requiring to publish a change in the source, you'd have to audit each and every binary release of the compiler.
It would be kind of solved with a second Rust compiler.
GENESIS