3 ms·
The question is how hard it is to detect tampering. My linux distribution builds firefox from source and signs the build. The builds are also checked to be repr
by zimbatm 8y ago
The question is how hard it is to detect tampering. My linux distribution builds firefox from source and signs the build. The builds are also checked to be reproducible.
Raising the bar is a good thing.
- tomrittervg 8y agoI wasn't aware that any distribution (besides Tor Browser) was building Firefox (or anything really) reproducibly. There's debian's https://reproducible-builds.org/ https://reproducible-builds.org/ effort, but I thought that wasn't making much progress lately, nor was it deployed. Could you provide more info on what distro you're using, or how they're doing this?
- srazzaque 8y agoS/he may be referring to Gentoo Linux.