Re:Why Package Signing is not the Holy Grail
by charlesap on Wednesday July 24, 2013 @09:42AM
(#6096096)
Well crap. Source code reputation is exactly the problem we are trying to solve at http://rputbl.com (sorry, just a splash page for now.)
We are nowhere near close to launch yet and there's a chicken-and-egg problem of having a sufficiently large database of hashes to make an arbitrary source code file reputation check worth your time, but we have some ideas about what to do about that too.
We are nowhere near close to launch yet and there's a chicken-and-egg problem of having a sufficiently large database of hashes to make an arbitrary source code file reputation check worth your time, but we have some ideas about what to do about that too.