If the app you use is open source but you didn't build from source, you actually have no idea what code you're running

Reply to this note

Please Login to reply.

Discussion

even when you build from source you dont always know whats in the code. 😏

Just ask xz Utils

Don't most open source projects sign their binaries?

If you write a program but you have dependencies, you actually have no idea what code you're running.

If you write a whole program but didn't make the compiler, you actually have no idea what code you're running.

If you weote the compiler but didn't write the cpu microcode, you actually have no idea what code you're running.

I built many software from source and have no clue what I was actually running

Ain't nobody got time for dat

This leads to. A slippery path of writting ones own bios and kernel.... A whole lot of fun 🀣

Do hashes of nix builds count?