Trojan Source Attacks: Invisible Source Code Attacks

Also see https://news.ycombinator.com/item?id=29061987 (18 comments) which introduces the paper.

Most of the conversation about the subject is at https://news.ycombinator.com/item?id=29062982 (263 comments.)