Skip to main content

Questions tagged [reproducible-builds]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
5 votes
2 answers
351 views

Are reproducible builds practically possible on major app stores?

'Reproducible builds' ensure that a published app matches the published open source code. This answer gives some great information on it. But numerous sources1,2 indicate reproducible builds are very ...
stevec's user avatar
  • 1,290
1 vote
2 answers
261 views

What are the security trade-offs of using reproducible builds?

From reproducible-builds.org: Reproducible builds are a set of software development practices that create a verifiable path from human readable source code to the binary code used by computers. In ...
Philipp Claßen's user avatar
9 votes
1 answer
719 views

Are there any type safe languages with deterministic compilers?

This article about BIND9 concludes with the statement: The point I'm trying to make here is that BIND9 should not be exposed to the public. It has code problems that should be unacceptable in this ...
makerofthings7's user avatar
18 votes
8 answers
2k views

Trust Issues Relative to Open Source

Two separate discussions have very recently opened my eyes to an issue I had not considered – how to confirm the Open Source binary that one uses is based on the published source code. Zooko Wilcox-O'...
zedman9991's user avatar
  • 3,427
22 votes
2 answers
5k views

Is there a way to verify a binary against the sources?

It seems like there is no practical way to verify the full integrity path of precompiled and packaged software? I can check the downloaded package itself by hashes, but I have no verification if the ...
flori's user avatar
  • 391