# Preprint shows binary-seed attack can subvert NixOS bootstrap

_Published Tuesday, September 8, 2026 at 12:17 AM EDT · Science, Security · Latest · Tier 2 — Notable_

A preprint describes a trusting-trust attack built around GNU strip during the NixOS bootstrap process. The authors say a tampered strip binary seed can implant a payload into later generations of strip and leave it in the final standard environment after the seed exits the dependency closure. On one nixpkgs revision, they report building a complete graphical installer without failures while backdooring almost all of its binaries.

## Sources

- [arxiv.org](https://arxiv.org/abs/2607.24888)

---
Canonical: https://techandbusiness.org/newswire/fDuwsNUDLlyh5YbZPltTsE
Published: 2026-09-08T04:17:09.686Z
Story chronology: 2026-09-05T11:25:18.000Z
Retrieved: 2026-10-23T12:10:04.858Z
Publisher: Tech & Business (techandbusiness.org)