News for hackers. Stuff that matters.
Re:Evaluating Bazel for building Firefox by danpalmer on Tuesday October 29, 2019 @11:05AM (#21387946)
I don't think bundling in components inherently changes the reproducible builds equation.

In fact I think that bundling in a JVM that they know works in a particular way will likely improve the reproducibility of Bazel _setups_ and therefore builds that come out of Bazel, which is their aim.

Re:Evaluating Bazel for building Firefox by DuskStar on Tuesday October 29, 2019 @08:23PM (#21393502)
"every time the NSA's compiler binary builds my code I get the same output" isn't really all that comforting. If you can't build the compiler (and/or build tool) how can you be sure that there isn't anything malicious in it? Trusting trust all over again