3 ms·
Why should it only be valuable if the effects were to be publicly known? There are plenty of places in industrial computing where reproducible builds have prev
by MomsAVoxell 6mo ago
Why should it only be valuable if the effects were to be publicly known?
There are plenty of places in industrial computing where reproducible builds have prevented subterfuge within the organizations themselves. Injecting binaries to do inf-/exfiltration is a long-standing industrial espionage activity which is of immense value to all users of the operating system - not just the consumer users.
- murderfs 6mo agoMy magic beans have prevented thousands of tiger attacks in top secret underground moon bases, never you mind that there's no way for me to actually prove this. There's a certain irony in pushing for verifiable builds with completely unverifiable claims. I've worked at several of the biggest targets for espionage, industrial or otherwise, and to the best of my knowledge, the only thing that's ever been discovered by their reproducible build efforts has been failing hardware on build reproducers
- MomsAVoxell 6mo agoYou probably don’t have enough experience with professional enterprise IT departments. Rootfs audits are a thing made a lot easier, and more effective, with reproducible builds.