2 ms·
Others can rebuild the chain and the results can be compared. Without reproducibility there is no concept of comparison.
by anotherhue 2y ago
Others can rebuild the chain and the results can be compared. Without reproducibility there is no concept of comparison.
- XorNot 2y agoWhich is still a cryptographic trust system - i.e. who are the others who built it and are they suitably independent or working from similar sources?
- vlovich123 2y agoIt turns out that conspiracies are really hard to maintain the larger the network gets due to network effects. All it takes is one guy to run it, get different results and go “guys I’m noticing something weird” to start the ball rolling. As a proof point, look at what happened to the attack on ssh by way of a xz utils back door.
- gosub100 2y agoIt's not just detecting malicious actions, binary reproducability helps solve "works on my machine" bugs because you'll get a different hash if you, say, link against a library you didn't think was being selected.