A minimal blog engine written in Go, compatible with Ghost themes

Re:A minimal blog engine written in Go, compatible with Ghos... by chc on Saturday April 25, 2015 @04:57PM (#9439542)

I don't see how a binary that you can't inspect is meaningfully less secure than source code that you don't inspect. I very much doubt most people vet, for example, the source code to Nginx before compiling and running it. If you're one of the few who does that, you still have that option here. I don't think this distribution model is giving up much.

[ Parent | on HN ]

Re:A minimal blog engine written in Go, compatible with Ghos... by hvs on Saturday April 25, 2015 @06:01PM (#9439704)

The point is that someone can inspect that code, not that everyone needs to inspect every piece of source code they use. If the source isn't available, no one can inspect it. That is qualitative different than providing the source code.

[ Parent | on HN ]

Re:A minimal blog engine written in Go, compatible with Ghos... by chc on Saturday April 25, 2015 @08:07PM (#9439996)

Huh? The link to the source is literally right under the link to the binary.

[ Parent | on HN ]

Re:A minimal blog engine written in Go, compatible with Ghos... by vvpan on Saturday April 25, 2015 @09:51PM (#9440224)

But you don't know that the binary is compiled from _that_ source code.

[ Parent | on HN ]

Re:A minimal blog engine written in Go, compatible with Ghos... by favadi on Saturday April 25, 2015 @10:48PM (#9440332)

Compile it yourself, problem solved.

[ Parent | on HN ]