Re:Nixos-unstable’s ISO_minimal.x86_64-Linux is 100% reprodu...
by XorNot on Sunday June 20, 2021 @10:17PM
(#27575644)
There is an uphill effort here to actually do this. While theoretically a very informed adversary might get it right first time, human adversaries are unlikely to and their resources are large, but far from infinite.
Your entire effort is potentially brought down by someone making a change in a way you didn't expect and someone goes "huh, that's funny..."
Re:Nixos-unstable’s ISO_minimal.x86_64-Linux is 100% reprodu...
by GauntletWizard on Monday June 21, 2021 @12:34AM
(#27576344)
Quite frankly, I'm surprised that is hasn't come up multiple times in the course of getting to NixOS and etc. The attacks are easy to hide and hard to attribute.
Critically, it shouldn't be taken as a demonstration that the toolchain is trustworthy unless you trust whoever's picking the compilers! This kind of ruins approaches based on having any particular outside organization certify certain compilers as "trusted".