3 ms·
This doesn't work at all: a build cache is meaningless in this context because the only thing you can do is rebuild the code to verify that what is in the cache
by XorNot 2y ago
This doesn't work at all: a build cache is meaningless in this context because the only thing you can do is rebuild the code to verify that what is in the cache is what comes from the code you expect...or to bootstrap the whole compiler chain, then use cryptographic signatures to chain trust from a matching compiler hash up to all the dependent outputs.
It certainly doesn't change the nature of packaging in any real way in that case.
- anotherhue 2y agoOthers can rebuild the chain and the results can be compared. Without reproducibility there is no concept of comparison.
- XorNot 2y agoWhich is still a cryptographic trust system - i.e. who are the others who built it and are they suitably independent or working from similar sources?
- vlovich123 2y agoIt turns out that conspiracies are really hard to maintain the larger the network gets due to network effects. All it takes is one guy to run it, get different results and go “guys I’m noticing something weird” to start the ball rolling. As a proof point, look at what happened to the attack on ssh by way of a xz utils back door.
- gosub100 2y agoIt's not just detecting malicious actions, binary reproducability helps solve "works on my machine" bugs because you'll get a different hash if you, say, link against a library you didn't think was being selected.