3 ms·
I wouldn't be so quick to dismiss this possibility. Sure code compilation (and LTO) is going to filter out a lot of the signal, but you still have potential uni
by vardump 6y ago
I wouldn't be so quick to dismiss this possibility. Sure code compilation (and LTO) is going to filter out a lot of the signal, but you still have potential unique patterns in the structure of the system and in the data flow.
At least it can still be used together with other methods to compute a probability between different authors and organizations.
- jstanley 6y agoI'd say code compilation is a lot of the signal, in the sense that some people's build environment is likely to be quite unique. It's like identifying people based on their browser fingerprint.
- vardump 6y agoA good point. Definitely any build environment fingerprints are useful data, like compiler and linker quirks. What I should have said was that a different compiler (and/or version) can filter the original input in different ways, because of optimizations and other code transforms (including non-breaking codegen bugs).