Notes: Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation

The paper shows how Thompson-class attacks aren’t restricted to compilers by tampering with strip in the NixOS bootstrap seed. The malicious strip repurposes PT_NOTE as PT_LOAD, and the payload propagates into later generations of strip rebuilt from clean source. All but one binary in stdenv ends up infected, without breaking the build or functional tests.

I walked away thinking about diverse artifact structure verification: population-level artifact checks run from independent trust roots, with independently built parsers and tooling. Could we come up with a stable ELF morphology of a distribution and use that to detect a coordinated structural shift across thousands of unrelated binaries?

Really good read by Julien Malka, Stefano Zacchiroli, Martin Monperrus, and their coauthors: read the July 2026 paper on arXiv.