4 ms·
Determinism. https://tests.reproducible-builds.org/debian/reproducible.html https://tests.reproducible-builds.org/debian/reproducible.ht... We're making great
by RL_Quine 6y ago
Determinism.
https://tests.reproducible-builds.org/debian/reproducible.html https://tests.reproducible-builds.org/debian/reproducible.ht...
We're making great strides into software being completely deterministic. The Bitcoin project for many years has had completely deterministic binaries and a ceremony process for GPG signing the output with many individual parties.
- drdrey 6y agoSee my other comment about determinism: https://news.ycombinator.com/item?id=23424925 https://news.ycombinator.com/item?id=23424925 Trying to get a bit-to-bit equivalent of a binary lifted from the app store sounds challenging to say the least.
- ryukafalz 6y agoYes, this is more difficult than it sounds - but GP linked to the reproducible builds project which has gotten there already for a lot of software. See also Guix, which provides tools to challenge servers providing binary packages to see if they match a locally-built version: https://guix.gnu.org/manual/en/html_node/Invoking-guix-challenge.html https://guix.gnu.org/manual/en/html_node/Invoking-guix-chall...
- dependenttypes 6y agoThere is https://signal.org/blog/reproducible-android/ https://signal.org/blog/reproducible-android/ but it is not complete.