this post was submitted on 16 Jan 2026
25 points (87.9% liked)
Technology
1356 readers
58 users here now
A tech news sub for communists
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I don't know much about Rust, but from the discussion here, I get that it only has one compiler implementation and that it can't be verified. So anything compiled with it is, technically, not fully verifiable. It doesn't matter if the compiler I have on my computer is exactly the same as the one provided by the Rust devs (which is what checksums do), if the one provided by them is already tampered with.
Right, but really the problem goes beyond Rust itself. Other compilers could be compromised as well. Of course, when you have multiple compiler implementations, the situation is better because you can compare differences in binaries they output. Another approach you could take is to make am minimal program and decompile it, and see if there's anything funky.