3 ms·
The next time something like this happens it will be a distribution packager (RedHat, arch, etc). They'll just release a package that has extra code than a cle
by 77pt77 3y ago
The next time something like this happens it will be a distribution packager (RedHat, arch, etc).
They'll just release a package that has extra code than a clean build from source.
- bandrami 3y agoReproducible builds can help in theory, but in practice you're always using the potentially-compromised system itself to reproduce the build