No amount of source-level verification or scrutiny will protect you from using untrusted code.
Interpretation
One must be cautious with external code as no verification can guarantee its trustworthiness.
Ken Thompson highlights the inherent risks associated with using third-party code, suggesting that despite thorough checks and validations, external code can still harbor vulnerabilities or malicious intentions. This serves as a cautionary reminder for programmers and developers to approach untrusted code with vigilance and skepticism, understanding that verification alone is not foolproof protection.
In practice
In a tech conference presentation discussing the importance of code security, this quote can illustrate the risks of adopting external libraries.
People invent new machines and improve existing ones almost unconsciously, rather as a Somnambulist will go walking in his sleep. The interesting puzzle in our times is that we so willingly sleepwalk through the process of reconstituting the conditions of human existence.
Type 'What is th' and faster than you can find the 'e' Google is sending choices back at you: 'What is the cloud?' 'What is the mean?' 'What is the American dream?' 'What is the illuminati?' Google is trying to read your mind. Only it's not your mind. It's the World Brain.
The Internet will make every enterprise a publisher.
Ere many generations pass, our machinery will be driven by a power obtainable at any point of the universe.
From the streets of Cairo and the Arab Spring, to Occupy Wall Street, from the busy political calendar to the aftermath of the tsunami in Japan, social media was not only sharing the news but driving it.
I think it is inevitable that people program poorly. Training will not substantially help matters. We have to learn to live with it.
Subscribe for the occasional hand-picked quote. No noise.