#Trusting

When you run npm install in a new project, you are trusting hundreds of developers you have never met. A single modern web application can… Continue reading on JavaScript in Plain English »

Ken Thompson's trusting-trust attack, in which a compromised compiler backdoors the programs it builds and reproduces the backdoor in subsequent rebuilds of itself, is widely regarded as a threat specific to compilers. We show that it is not.…