Skip to main content

Questions tagged [reproducible-builds]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
5 votes
2 answers

Are reproducible builds practically possible on major app stores?

'Reproducible builds' ensure that a published app matches the published open source code. This answer gives some great information on it. But numerous sources1,2 indicate reproducible builds are very ...
stevec's user avatar
  • 1,290
1 vote
2 answers

What are the security trade-offs of using reproducible builds?

From Reproducible builds are a set of software development practices that create a verifiable path from human readable source code to the binary code used by computers. In ...
Philipp Claßen's user avatar
9 votes
1 answer

Are there any type safe languages with deterministic compilers?

This article about BIND9 concludes with the statement: The point I'm trying to make here is that BIND9 should not be exposed to the public. It has code problems that should be unacceptable in this ...
makerofthings7's user avatar
18 votes
8 answers

Trust Issues Relative to Open Source

Two separate discussions have very recently opened my eyes to an issue I had not considered – how to confirm the Open Source binary that one uses is based on the published source code. Zooko Wilcox-O'...
zedman9991's user avatar
  • 3,427
22 votes
2 answers

Is there a way to verify a binary against the sources?

It seems like there is no practical way to verify the full integrity path of precompiled and packaged software? I can check the downloaded package itself by hashes, but I have no verification if the ...
flori's user avatar
  • 391