Re:Show HN: Golang binaries built for your users depending o...
by guessmyname on Saturday May 02, 2026 @11:43PM
(#47993124)
Oh, this web service is going to be such a nice target for hackers waiting to infect everyone who dares download random binaries. Centralizing “builds on demand” like this creates a pretty juicy supply-chain target. If the service gets popped, you’ve got a one-stop shop for shipping compromised binaries to every arch/OS combo. Convenient idea, but I’d only trust it with strong guarantees: reproducible builds, signed artifacts tied to commits, and a way to verify locally. Otherwise it’s basically “go install URL” with extra steps.
[ Parent
| on HN ]
There are no comments on this comment yet.