3 ms·

We have no particular reason to trust any of these images though. An image built from a reproducible-build-only distribution (if that exists) would be valuable

We have no particular reason to trust any of these images though. An image built from a reproducible-build-only distribution (if that exists) would be valuable in this space.

kevincox 11y ago
Yeah, and the design of the sight also doesn't exactly make me want to trust it either. Not that relying on design is a good security measure.
heavenlyhash 11y ago
> An image built from a reproducible-build-only distribution (if that exists) Yeah, that'd be amazing. Know of any?
AdmiralAsshat 11y ago
Looking at the about page, this seems to be maintained by some college kid: http://www.osboxes.org/about/ http://www.osboxes.org/about/ So I'd be tempted to cut the guy some slack and assume that any oversights are from inexperience rather than malice.