Re:Unix legend Ken Thompson announces he's switching From ma...
by em-bee on Sunday March 19, 2023 @03:11PM
(#35222399)
there is 0 guarantees that the binary I install on my system is the exact same binary as I would get if I build the source myself
not true, for years there are efforts in various distributions to make package builds reproducible. there are ways to build a package from source that allows you to get the same results and verify it.
we outsource this responsibility to the package maintainer
which is the point. i trust the package maintainers to do a better job at that than myself.
not true, for years there are efforts in various distributions to make package builds reproducible. there are ways to build a package from source that allows you to get the same results and verify it.
we outsource this responsibility to the package maintainer
which is the point. i trust the package maintainers to do a better job at that than myself.