News for hackers. Stuff that matters.
Re:Private by Design: How We Built Firefox Sync by zimbatm on Wednesday November 14, 2018 @05:52AM (#18448957)
The question is how hard it is to detect tampering. My linux distribution builds firefox from source and signs the build. The builds are also checked to be reproducible.

Raising the bar is a good thing.

Re:Private by Design: How We Built Firefox Sync by tomrittervg on Wednesday November 14, 2018 @01:55PM (#18452671)
I wasn't aware that any distribution (besides Tor Browser) was building Firefox (or anything really) reproducibly.

There's debian's https://reproducible-builds.org/ effort, but I thought that wasn't making much progress lately, nor was it deployed.

Could you provide more info on what distro you're using, or how they're doing this?

Re:Private by Design: How We Built Firefox Sync by srazzaque on Wednesday November 14, 2018 @04:45PM (#18454310)
S/he may be referring to Gentoo Linux.