Hacker News new | ask | show | jobs
by foxX 2826 days ago
The fact that the source code is available does not guarantee that the blob is the product of that source.
2 comments
abjKT26nO8 2826 days ago
This is why there is the "Reproducible Builds"[0] initiative from Debian folks.

[0] https://reproducible-builds.org/

link
Iolaum 2826 days ago
That's true and, to me, has been brought on the spotlight from Microsoft practices around VSCode. On the other hand, for an OSS project, building the binary is not that hard.
link