Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm so happy to see this change. I got involved with reproducible builds in 2021 after reading in horror about the SolarWinds attack. [1]

I think Magnus Ihse Bursie said it best while working on reproducible builds of OpenJDK: "If you were to ask me, the fact that compilers and build tools ever started to produce non-deterministic output has been a bug from day one." [2]

[1] https://www.linux.com/news/preventing-supply-chain-attacks-l...

[2] https://github.com/openjdk/jdk/pull/9152#issue-1270543997



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: