3 ms·
> I think it would be quite the day to take the hashes of Microsoft's ISO images for Windows, and compare it with the source code Wat? How would you translate
by craftyguy 8y ago
> I think it would be quite the day to take the hashes of Microsoft's ISO images for Windows, and compare it with the source code
Wat? How would you translate an ISO hash into anything meaningful to compare to the actual source code (that you don't have access to, but that's beside the point) ?
Does microsoft enforce reproducible builds[0]? Even if they did, you couldn't reproduce it (no access to source). When you hash a large binary, like an ISO, you cannot deconstruct what, eh, sub-binaries it is made of, and you cannot magically decompile those, eh, sub-binaries into source code.
0. https://wiki.debian.org/ReproducibleBuilds https://wiki.debian.org/ReproducibleBuilds
- techntoke 8y agoYes, you can take a look at the source code and recompile the ISO to match the hash. If the compiled ISO hash doesn't match, then it isn't the same code.
- craftyguy 8y agoNo, you can literally do none of that with microsoft software.
- anticensor 8y agoMicrosoft enforces reproducible builds since 2017.
- craftyguy 8y agoDo you have a source for that (no pun intended)? Even if they did, it's impossible for anyone outside of microsoft to verify because, well, it's proprietary. So for those of us who trust microsoft as far as we can throw them, it doesn't really do much.
- deleted 8y ago[deleted]
- anticensor 8y agoYes, see https://blogs.msdn.microsoft.com/oldnewthing/20180103-00/?p=97705 https://blogs.msdn.microsoft.com/oldnewthing/20180103-00/?p=... by Raymond Chen.