Reflections on Trusting Trust

Ken Thompson's short Turing Award lecture asserts convincingly that it's even harder to trust programs than it is to trust people. If you thoroughly analyze source code and compile it yourself, do you get a trusted executable? Surprisingly, no!

The whole (3 pages! paper) (http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf)

An even shorter summary (https://blog.acolyer.org/2016/09/09/reflections-on-trusting-trust/).