3 ms·
That’s true of everything you haven’t compiled yourself, using a compiler you wrote and bootstrapped yourself. There is no technical proof that any of the soft
by brookst 3y ago
That’s true of everything you haven’t compiled yourself, using a compiler you wrote and bootstrapped yourself.
There is no technical proof that any of the software or hardware we use every day is trustworthy. There is, however, incentive alignment that makes it unlikely that companies do wild and crazy things.
- rekoil 3y ago> That’s true of everything you haven’t compiled yourself, using a compiler you wrote and bootstrapped yourself. Don't forget the hardware you built yourself. [1] 1: https://en.wikipedia.org/wiki/Intel_Management_Engine https://en.wikipedia.org/wiki/Intel_Management_Engine
- fsflover 3y ago> That’s true of everything you haven’t compiled yourself Except if your software is reproducible: https://reproducible-builds.org/ https://reproducible-builds.org/
- brookst 3y agoStill not 100% secure. Someone can MITM your connection and forge the info used to verify builds. It’s a silly example, but the point stands: there is no 100% security for anything that any other person or system has had any access to. It’s not a reasonable standard to demand.
- fsflover 3y agoThere is no 100% of anything, but there is a reasonable security.