This is a good talk regarding "Trusting Trust" for binary toolchains http://youtu.be/QogdeTy7cDc