-
@taviso @fugueish @alexstamos @sleevi_ @durumcrustulum @LeaKissner Oh, I never thought they _prevented_ backdoors, only that some of the easier vectors for introducing them are being mitigated. And that seems a good thing, especially in combination with my strong suspicion (only anecdata, though) that it helps code (or at least build) quality.
-
@taviso @fugueish @alexstamos @sleevi_ @durumcrustulum @LeaKissner And since I can't see any real harm with reproducible builds (besides the work it takes to set up in the first place) - i.e. no runtime overhead etc - I don't see the usual discussion of cost of mitigation measures to factor in much in this debate. So, why not build reproducibly?