BitTorrent Chat - Private instant messaging via secure, distributed technology

Re:BitTorrent Chat - Private instant messaging via secure, d... by xenonite on Tuesday October 01, 2013 @04:17AM (#6474872)

Even more than that, if one wants to insert backdoors in OOS, one could easily do that getting barely noticed.

A program might be open source, still the binaries offered for download might be compromised. Who is able to notice that now?

You might compile the software yourself, but the majority of users wont.

You might have reverse engineered a closed source software, but I guess you won't do that for the OSS binaries.

[ Parent | on HN ]

Re:BitTorrent Chat - Private instant messaging via secure, d... by omegant on Tuesday October 01, 2013 @06:17AM (#6475208)

Honest question: if the source code is compiled with the same compiler (although different computer), will it give a different binary with a different hash?

[ Parent | on HN ]

Re:BitTorrent Chat - Private instant messaging via secure, d... by MaulingMonkey on Tuesday October 01, 2013 @11:38PM (#6480465)

Even compiling the source code with the same compiler, same build options, and same computer will generally generate a different binary with a different hash! Special effort is required to generate "deterministic builds", sometimes seen for e.g. verifying the integrity of gambling software. Here's what one fellow has been going through in an effort to accomplish that:

http://stackoverflow.com/questions/1180852/deterministic-bui...

[ Parent | on HN ]

Re:BitTorrent Chat - Private instant messaging via secure, d... by FedRegister on Tuesday October 01, 2013 @08:44AM (#6475702)

Potentially yes if the compiler is not configured (at build time) with the same options and the same optimization levels are not used when building the source.

[ Parent | on HN ]