3 ms·

What difference does it make if the build is compromised in an identical way byte-for-byte?

• acuozzo 4y ago
  https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...
  • ciupicri 4y ago
    How will a trusty compiler going to save you from a broken library, e.g. the npm colors package?
    • acuozzo 4y ago
      The software supply chain problem exists for native code as well.