3 ms·
Centralized computers of reputable projects are much more secure than private computers of individual developers
by dispose13432 10y ago
Centralized computers of reputable projects are much more secure than private computers of individual developers
- eeZah7Ux 10y agoThat's what the Debian buildbots do, plus companies doing their own rebuild. Reproducible builds allow comparing the outputs: they'll have to be identical.
- ryukafalz 10y agoThe source ultimately comes from those developers' computers, though. Do you trust those computers not to tamper with the source? If you do, but you don't trust them not to tamper with the resulting binary - well, that's what reproducible builds are for. If you don't... you've got bigger problems than your build system.
- angry-hacker 10y agoWho reads ALL the source code? If no one, then it doesn't matter where it's built.