BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//speaker//NEMVME
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-CUHGR3@cfp.romhack.io
DTSTART;TZID=CET:20261003T213000
DTEND;TZID=CET:20261003T223000
DESCRIPTION:In 1984 Ken Thompson\, during his Turing Award acceptance speec
 h\, introduced to the world a very interesting kind of backdoor\, describe
 d by himself as "the cutest program I have ever wrote". The speech has lat
 er been written in an article called "Reflections on Trusting Trust".\n\nT
 he idea is simple: modify a C compiler in order to insert a backdoor into 
 the login binary whenever the login.c program is compiled. The backdoor al
 lows a specific username to bypass authentication and obtain root privileg
 es. This is the simple step. Then comes the hack: the logic to introduce t
 he backdoor will replicate itself whenever the compromised compiler is use
 d to compile a new compiler. This means that once your compiler has been c
 ompromised\, it becomes very hard to get rid of it. Because how do you com
 pile a compiler? With the compiler you already have!\n\nThis workshop is a
 ll about compilers and backdoors. To make it practical we will apply it ag
 ainst a small but functional C compiler (TinyCC). We will show how to buil
 d a working Thompson backdoor step by step in a fun and reproducible way. 
 We will talk about quines\, about self-replication\, and ultimately about 
 why trust in software cannot be established by just reading the source cod
 e. The Thompson backdoor is now 40 years old\, yet it is more relevant tha
 n ever\, as modern supply-chain compromises e.g. SolarWinds can be reduced
  to similar trust-delegation problems in the supply chain of software as T
 hompson described.
DTSTAMP:20260921T190811Z
LOCATION:WORKSHOP 2 (GetRoot no Jutsu)
SUMMARY:Trusting Trust\, Hands On: Building a Self-Reproducing Compiler Bac
 kdoor - Leonardo Tamiano
URL:https://cfp.romhack.io/romhack-camp-2026/talk/CUHGR3/
END:VEVENT
END:VCALENDAR