Re:Dotcom alleges Megaupload raid was part of deal to film T...
by schmrz on Friday June 14, 2013 @01:12PM
(#5881070)
But then you have to generate the hash each time the source code changes. And you also have to verify the source code each time yourself because you can't know if it's a regular update from mega (they probably update daily or weekly) or if someone compromised the source code.
Re:Dotcom alleges Megaupload raid was part of deal to film T...
by Dylan16807 on Friday June 14, 2013 @04:14PM
(#5882212)
That sounds like normal software to me. Nobody is forcing you to update unless the ABI changes. And you can start a mailing list that talks about updates if you like.
Re:Dotcom alleges Megaupload raid was part of deal to film T...
by mahyarm on Friday June 14, 2013 @03:10PM
(#5881822)
You can solve it with something like this: http://perspectives-project.org/
You can verify it once and generate a secure hash from it. Then the second time you could just check the hash.
It wouldn't be too difficult to write a browser extension that did it automatically, or a javascript bookmarklet for it.