Re: Compromising Debian Repositories
Just wanted to share news on this topic.
Why are deterministic builds important? Mike Perry from The Tor Project
wrote a blog post:
https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise
Some Debian maintainers are working on deterministic builds, although
they call it reproducible builds, that's great! Link:
https://wiki.debian.org/ReproducibleBuilds
(The later is not really news, but I wonder that no one posted this link
and I wasn't aware of it either.)
Reply to: