rene_mobile’s Twitter Archive—№ 6,393

@taviso @fugueish @alexstamos @sleevi_ @durumcrustulum @LeaKissner Reproducible builds make most sense together with open source, of course. And it's of value even if nobody is constantly verifying the builds. Simply the point that they could mitigates the vector of a malicious builds server. Source level backdoors are certainly not addressed.