# Gavin Andresen # 2011-01-25 15:58:14 # https://bitcointalk.org/index.php?topic=2926.msg41301#msg41301 ribuck: what do you suggest instead? @p{par} I've read Ken Thompson's paper; that is what motivated me to propose a reproducible virtual machine image as the best we can do @p{(bf}IN PRACTICE@p{bf)}. @p{par} Yes, it is theoretically possible somebody might sneak bitcoin-stealing code into the gcc compiler. Code that detects that bitcoin is being compiled and injects instructions to send coins to the sneaky gcc hacker. @p{par} In reality, we trust that the gcc maintainers are trustworthy and careful and that they care about their reputations. If you don't trust them, what is the alternative? @p{par} Nefario: can "we" make building bitcoin easier? I've been asking people to submit patches to the bitcoin linux build process, but so far none have been forthcoming... @p{par} devrandom: Nice! @p{brk}