News for hackers. Stuff that matters.
Re:Google reveals its servers all contain custom security si... by swegg on Monday January 16, 2017 @12:05PM (#13411203)
Basically splitting the trusted circuit and testing the parts separately. This requires a trusted master circuit, but it can be arbitrarily small.

See https://perso.uclouvain.be/fstandae/PUBLIS/177.pdf

Re:Google reveals its servers all contain custom security si... by amelius on Monday January 16, 2017 @12:35PM (#13411451)
But what if the malicious code is time activated? (just an example)
Re:Google reveals its servers all contain custom security si... by swegg on Monday January 16, 2017 @07:31PM (#13414271)
This is actually addressed in the paper. Basically you can use testing to detect the timebomb, up to a negligible probability.

This paper is approachable, it's understandable without too much background if you're interested in the topic.