Amount Quote by Kenneth P. Thompson
“You can't trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) No amount of source-level verification or scrutiny will protect you from using untrusted code.”
About This Quote
It warns that code not fully authored by oneself cannot be fully trusted, and that even thorough verification cannot guarantee safety against untrusted sources.
In simple terms: Uncreated code is unreliable despite checks.
Key Takeaway
Never trust code you didn't fully create.
Themes
security
trust
software development
Mood
cautious
pragmatic
Type
advice
warning
When to use this quote
- software engineering
- devops
- IT security
- open source projects
Key Concepts
risk management
code provenance
Questions to Reflect On
- How do you mitigate risks when using third‑party code?
- What policies can ensure code trustworthiness?
A Different Perspective
Verification cannot eliminate all hidden risks.
