Blog post about a talk by Ken Thompson and the original Trusting Trust attack finally released

Marcel Fourné email at marcelfourne.de
Sat Oct 28 15:04:06 UTC 2023


On Thu, 2023-10-26, at 12:14:30 +0200, Janneke Nieuwenhuizen wrote:
> > More of historical importance, but definitely interesting and relevant
> > to this group, which is also mentioned in the posting.  The talk by
> > Thompson which sparked all this is linked to as well at
> > https://www.youtube.com/watch?v=kaandEt_pKw&t=643s
>
> Yeah, while it's very uplifting to see a reference to
> Reproducible-Builds, it's also puzzling not to see
> bootstrappable-builds, or the Guix full source Bootstrap being
> mentioned?
>
> https://guix.gnu.org/en/blog/2023/the-full-source-bootstrap-building-from-source-all-the-way-down/

I completely agree that it would be nice to have that mentioned, but I fear that for marketing reasons the two names "Reproducible Builds" and "Bootstrappable Builds" are a barrier for dropping a quick link to a website, since now there's two.
Thank you for your amazing work though! If it'd been me, I'd have linked to both (and will probably do in my dissertation).

Cheers,
Marcel

--
Marcel FOURNÉ

Please note that I honour and respect boundaries around personal
time, well-being, care-taking and the rest.
Should you receive correspondence from me during a time that you're
engaging in any of the above, please protect your time and wait to
respond until you're next working or in front of a PC.
Prioritize joy and not e-mail when and where you can.


More information about the rb-general mailing list