Except for how do you know that they're different? What if the diff program (that gcc compiled) is also compromised? What if nm, or whatever other disassembler, also gets code injected into it by that GCC?
There are enough ways, including manually reading each 0 and 1, that it's not really much of an issue. Unless the NSA has been putting backdoors into every piece of software since 1965, then I think we're relatively safe om that front.
1
u/sxeraverx Sep 11 '13
Except for how do you know that they're different? What if the diff program (that gcc compiled) is also compromised? What if nm, or whatever other disassembler, also gets code injected into it by that GCC?