4 ms·
How do you know the packaged binaries were built from the published source?
by 29athrowaway 4y ago
How do you know the packaged binaries were built from the published source?
- jacooper 4y agoYou don't. If you are paranoid you can just build it yourself!
- LoganDark 4y agoHow do you know your compiler was built from its published sources? :) https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...
- yencabulator 4y agohttps://dwheeler.com/trusting-trust/ https://dwheeler.com/trusting-trust/