Don’t Use ISO/IEC 14977 Extended Backus-Naur Form (EBNF) (2019, 2023)

Debugging: Indispensable rules for finding even the most elusive problems (2004)

David A. Wheeler – Countering Trusting Trust via Diverse Double-Compiling (2009)

Filenames and pathnames in shell: How to do it correctly (2020)

Make it Simple: A Tale about Robert Dewar (2015)

How to Prevent the Next Heartbleed

The Most Backdoor-Looking Bug I’ve Ever Seen: Apple's goto fail bug (2014)

A Beginner's Garden of Chess Openings

Real-world application of DDC: GNU Mes C Compiler boostrap

Don’t Use Extended Backus-Naur Form (EBNF)

Fixing Unix/Linux/Posix Filenames

The Most Important Software Innovations (2017)

6502 Language Implementation Approaches

Fully Countering Trusting Trust through Diverse Double-Compiling [2009]

Email encryption is here – use STARTTLS everywhere

Make it Simple: A Tale about Robert Dewar (2015)

How to Prevent the Next Heartbleed (2014-2017)

Sweet-expressions: A readable format for Lisp-like languages (2006)

Fully Countering Trusting Trust Through Diverse Double-Compiling (2009)

Ways to implement computer languages on 6502s

Introduction to the Autotools (autoconf, automake, and libtool)

Software Configuration Management (SCM) Security (2011)

Countering Trusting Trust Through Diverse Double-Compiling (DDC)

Filenames and Pathnames in Shell: How to Do It Correctly (2010)

Shellshock, a paper by by David A. Wheeler

Ada, C, C++, and Java vs. The Steelman