4 ms·

Maybe we should have a specific .metadata section in assembly so we can ignore the timestamps when diffing for reproducible code.

• majewsky 5y ago
  If we allow that, attackers could hide a codepath in the binary that only activates for a specific build time in the .metadata section. That would defeat the purpose of reproducible builds.
  • melony 5y ago
    Make it non-readable for the program.
  • WGH_ 5y ago
    That's an interesting scenario for sure, but "defeats the purpose" is a stretch.