4 ms·
What good is the source code if you can't build it and flash it to your device? What good is it if you can't verify that the binary firmware was built from the
by moyix 12y ago
What good is the source code if you can't build it and flash it to your device? What good is it if you can't verify that the binary firmware was built from the source you have?
- jordigh 12y agoThat's what GPLv3 is for. 1) GPLv3 defines all build scripts as part of the source code. 2) GPLv3 ensures that you can install the software you built yourself. Signing is also useful, of course, but source code and free software seem like a more primitive prerequisite before code signing. What good is signing if we are merely verifying the signature of malicious software? With source code, you can just build it yourself and don't need to trust any signature.