But if it is an open source compiler - then there are ways to counter the attack: https://www.schneier.com/blog/archives/2006/01/countering_tr...