Re:How to make Linux more trustworthy
by andrewflnr on Friday December 16, 2016 @06:30PM
(#13197861)
This is a bit unfair. The threat that source auditing is supposed to mitigate is backdooring by well-funded attackers, and it (AFAICT) isn't very effective against those when they can just go down a level. Are there plausible attackers that really stopped by compiling from source, that can ship a malicious blob but can't ship malicious hardware?
Re:How to make Linux more trustworthy
by confounded on Friday December 16, 2016 @11:51PM
(#13199279)
Think about scale.
Do you believe reproducible builds cover an important threat to make them worth the effort just for that? As far as I understand - not even a little. But the effort is much more important for the future of package management.
Honestly, I consider it lucky that the people who typically promote this nonsensical bullshit are probably not actually security engineers or researchers, or allowed to do security related work in any way -- because they would be terrible at it with a position like that. Actual security engineers understand that there are things called "threat models" and "tradeoffs" and you can, in fact, measurably improve security in meaningful ways for many systems.
You might as well just starve yourself to death because -- hey -- eating is pointless when you could get hit by a bus at any moment.
Why prevent your application from having SQL injections? Why not just dump all your customer records and private keys on pastebin? After all, the NSA can just steal those secrets from your computer with some Unicorn Magic, so clearly securing anything is actually pointless.