Re: Trojan Source Attacks

[Josh Bressers <josh () bress net>]

On Tue, Nov 2, 2021 at 10:56 AM David A. Wheeler <dwheeler () dwheeler com>
wrote:

> However, I think it’s important to realize this is a special case of
> “underhanded code” aka “underhanded source code” aka “maliciously
> misleading code”. Underhanded code is source code crafted so that the
> source code looks like it does one thing to human reviewers, but it
> actually does something else. Homoglyphs are a common mechanism of attack
> (e.g., 1/l or O/0), as are misleading indentation, etc.
>
> The first reference I can find to underhanded code is the 2004 Obfuscated
> V Contest (http://graphics.stanford.edu/~danielh/vote/vote.html) created
> by Daniel Horn.
You could argue the obfuscated C contest is related, that goes back to 1984.
https://www.ioccc.org/years.html#1984

-- 
     Josh