Re:Researchers crack open malware that hid for 5 years
by pjmorris on Tuesday August 09, 2016 @10:53PM
(#12259220)
And that's what I really mean by 'black boxes'. Yes, you can buy access to, e.g., Windows source, but that doesn't mean that what you review and what is running on your systems are the same thing. And I can't even speak to all the third-party bits that get compiled in to an instance of Windows. It's a really, really hard problem.
But reproducible builds are a hard problem, so… honestly, I can't answer that.