2 ms·
Regarding this particular attack, isn't it addressed by reproducible builds? If the bitcoin software binaries are being replaced by nefarious actors, the hashe
by ISL 10y ago
Regarding this particular attack, isn't it addressed by reproducible builds?
If the bitcoin software binaries are being replaced by nefarious actors, the hashes would conflict by those generated by source compilation. Is there a reason this doesn't work?
- TD-Linux 10y agoNo, that works fine, and Bitcoin Core uses reproducible builds signed by many different people. The post seems to be attempting to address the chain of trust of the PGP keys instead, but whether it succeeds at doing so is questionable. Certainly if a "blockstack id" can only be owned by one person, it's worse.