4 ms·
Do you review all of the source-code that you run? If you trust the source-code due to its origin, why not trust a binary?
by adgasf 7y ago
Do you review all of the source-code that you run? If you trust the source-code due to its origin, why not trust a binary?
- qhwudbebd 7y agoIt doesn't matter whether I trust it or not: these binaries are typically linked against a different C library, assume a different filesystem layout and dynamic linker location, and are often only available for x86-64 in any case. I build binaries locally to get something that's marginally more likely to work on my system, rather than because I believe I could somehow catch nasties buried in the source code even if I read every line. Too many years of seeing the ingenuity of IOCCC entries has taught me I won't succeed at that. :)