rene_mobile’s Twitter Archive—№ 6,412

@taviso @halvarflake @julianor @coolhandle01 @fugueish @alexstamos @sleevi_ @durumcrustulum @LeaKissner Because the original binary is typically signed by the vendor, and you may not be able to run it on the same platform without that signature. With a repro build, you can use the original binary and have (a degree of) certainty it matches the source. Even better are multi-sigs.