-
@taviso @fugueish @alexstamos @sleevi_ @durumcrustulum @LeaKissner I don't fully agree. It is still easier to hide a backdoor in (obfuscated) binary code than it is in (written-to-be-maintainable) source code. Config should ideally be included. And there are other code quality benefits of reproducible builds besides security (testing, deltas).
-
@taviso @fugueish @alexstamos @sleevi_ @durumcrustulum @LeaKissner What have I done by disagreeing with @taviso? (Seriously, this is a very good centithread, and there are not many that still make sense beyond a 100 replies 🤔)