franzap on Nostr: Sure. But besides reproducible builds it's impossible to know if the build is not ...
Sure. But besides reproducible builds it's impossible to know if the build is not manipulating the source code. So you got to trust the dev and the build environment
Published at
2024-07-03 23:18:01Event JSON
{
"id": "7356dd3f04ec9fb7958d50f7f7f1516fe8a9b536a7361daa2166eec9c46cdd0b",
"pubkey": "726a1e261cc6474674e8285e3951b3bb139be9a773d1acf49dc868db861a1c11",
"created_at": 1720048681,
"kind": 1,
"tags": [
[
"p",
"a008def15796fba9a0d6fab04e8fd57089285d9fd505da5a83fe8aad57a3564d"
],
[
"p",
"036533caa872376946d4e4fdea4c1a0441eda38ca2d9d9417bb36006cbaabf58"
],
[
"p",
"726a1e261cc6474674e8285e3951b3bb139be9a773d1acf49dc868db861a1c11"
],
[
"e",
"7fba60aa1cd8232156992ed5fe69a5c5cdd201b4b8bf2ade5152291036b2f67f",
"wss://a.nos.lol",
"root"
],
[
"e",
"d87e838cf64ac5108654d6dfc1785ef72b8d0ab90e6b7f4327971ba1a6126423",
"wss://a.nos.lol",
"reply"
]
],
"content": "Sure. But besides reproducible builds it's impossible to know if the build is not manipulating the source code. So you got to trust the dev and the build environment",
"sig": "033adb91e84b257889d5a987aa7a0cbca687749cfd83d6011d6bbf57be1688cfbfaf6e1971a7b1bbe343dcd33b71d8edd1e0465aa46073160e64c702a8b8cfff"
}