News for hackers. Stuff that matters.
Re:Reflections on Trusting Trust (1984) [pdf] by dane-pgp on Saturday July 11, 2020 @09:34PM (#23807891)
"Reflections on trusting trust" is specifically called out as a motivation for the Bootstrappable Builds project[0], which I think is an interesting approach at regaining some of the trust in our software. Another, better known project is the work on Reproducible Builds[1], and of course it would be nice to have auditable hardware based on clearly documented designs.

[0] https://www.bootstrappable.org/

[1] https://reproducible-builds.org/

Re:Reflections on Trusting Trust (1984) [pdf] by akavel on Sunday July 12, 2020 @02:11AM (#23809266)
For some other projects that more or less explicitly try to approach this challenge from various angles, see e.g.:

https://dwheeler.com/trusting-trust/

https://github.com/akkartik/mu

Re:Reflections on Trusting Trust (1984) [pdf] by mbakke on Sunday July 12, 2020 @06:25AM (#23810341)
There is also GNU Mes, which is able to build a GCC toolchain starting from nothing but a Scheme interpreter:

https://www.gnu.org/software/mes/

Practical implementation notes can be found on the Guix blog:

https://guix.gnu.org/blog/2019/guix-reduces-bootstrap-seed-b...

https://guix.gnu.org/blog/2020/guix-further-reduces-bootstra...