3 ms·
Having user auditable source code and verifiable builds is pretty much the gold standard approach. Yes, the vast majority won't check the checksum and even less
by gillesjacobs 5y ago
Having user auditable source code and verifiable builds is pretty much the gold standard approach. Yes, the vast majority won't check the checksum and even less well check the source, but it only takes one critical person to get the ball rolling upon compromise.
- Brian_K_White 5y agoYep. The difference between convenient and inconvenient doesn't really matter at all. Visibility is the difference between possible and not-possible. That is all the difference in the world, and matters no matter how few people ever actually do something.