3 ms·
I agree but let me play the devil's advocate. I'll channel Stallman: Same argument can be applied to all closed source software. In the end its about who you
by endsandmeans 8mo ago
I agree but let me play the devil's advocate. I'll channel Stallman:
Same argument can be applied to all closed source software.
In the end its about who you trust and who needs to be verified and that is relative, subjective, and contextual... always.
So unless you can read the source code and compile yourself on a system you built on an OS you also built from source on a machine built before server management backdoors were built into every server... you are putting your trust somewhere and you cannot really validate it beyond wider public percetptions.
- anonymars 8mo agoDon't forget to channel Ken Thompson ("Reflections on Trusting Trust") -- you can read the source code, but where did you get the compiler?
- fsflover 8mo agoThis can be mitigated by Bootstrappable builds: https://news.ycombinator.com/item?id=41368835 https://news.ycombinator.com/item?id=41368835