News for hackers. Stuff that matters.
Re:Who's at the Helm? by jacques_chester on Tuesday January 05, 2021 @06:43PM (#25652899)
I think I misunderstood your emphasis. I've seen folks position reproducible builds as the best and only solution to trust and integrity problems; I buttonholed you as the same.

I do appreciate the general benefits of controlling the factors which go into an asset. Build reproducibility is a standard that requires a high capability to track and control your assets. In that respect it's an excellent goal.

Recapping: I say yes to reproducibility as a practice, but I don't see it as a substitute for an accounting mechanism. They're complementary.

There are no comments on this comment yet.