3 ms·
> Reproducible builds protect against all attacks. Generic statements like this are always false. As a simple rebuttal, reproducible builds do not protect agai
by tremon 5mo ago
> Reproducible builds protect against all attacks.
Generic statements like this are always false. As a simple rebuttal, reproducible builds do not protect against source-level attacks such as intentional backdoors or disabled/obfuscated access checks. In fact, I'd say that reproducible builds protect against one class of attacks only: compromise of the build infrastructure.