Re: Risks of deterministic builds (was: Re: Truth matters when writing software and selecting leaders)

2021-04-09 Thread Jean Louis
* Martin [2021-04-06 12:22]: > > From practical viewpoint, among milions and millions of users, when it > > comes to validating compiler, they would have to validate the > > reproducible build with comparison to something. Benefits of > > reproducible builds thus depend of number of people

Re: Risks of deterministic builds (was: Re: Truth matters when writing software and selecting leaders)

2021-04-08 Thread Martin
On 4/6/21 7:40 AM, Jean Louis wrote: * Jacob Bachmeyer [2021-04-06 05:39]: Exploits are easier to develop when hardcoded offsets, virtual addresses, etc. can be used. In a "binary monoculture" environment, that is possible. This contributes to and worsens security problems in proprietary

Risks of deterministic builds (was: Re: Truth matters when writing software and selecting leaders)

2021-04-07 Thread Jacob Bachmeyer
Martin wrote: On 4/4/21 11:38 PM, Jacob Bachmeyer wrote: Martin wrote: In a perfect world if everything is reproducible than all the compilations are deterministic. It means that for a given environment your source code will always produce the same binaries. Briefly DDC method is using mix

Re: Risks of deterministic builds (was: Re: Truth matters when writing software and selecting leaders)

2021-04-07 Thread Jean Louis
* Jacob Bachmeyer [2021-04-06 05:39]: > Exploits are easier to develop when hardcoded offsets, virtual addresses, > etc. can be used. In a "binary monoculture" environment, that is possible. > This contributes to and worsens security problems in proprietary software, > which is almost always