3 ms·

But sorta possible to solve with source-based distribution and totally possible to solve with pure reproducible builds.

• daveguy 6mo ago
  What systems have pure reproducible builds? Does Nix? Any others? From what I understand, it is a very difficult problem.
  • pshirshov 6mo ago
    https://stal-ix.github.io/ https://stal-ix.github.io/ and Guix, but the definitions of purity are different for them. Yes, a very difficult problem, compilers must be pure functions with thin effectful wrappers.
• gertop 6mo ago
  It's entirely possible to ship malware in source form... Just look at the numerous supply chain attacks. Nix is a cute project but entirely irrelevant here.
  • miniBill 6mo ago
    It is possible but visible, and it means burning an identity, so it's not irrelevant
    • Thorrez 6mo ago
      Burning an identity? Instead of hacking the server that serves the binary, you have to hack the developer's machine and commit a malicious source change. I wouldn't consider either of them to burn an identity.