HN user

whacker

112 karma

http://hackernewsers.com/users/whacker.html

Posts0
Comments96
View on HN
No posts found.

That also means that unless you build a project on two identical hosts then it is unlikely you will get the same SBOMs.

I don't understand why the author thinks this is such an insurmountable issue.

Reproducible builds are possible with a little care: large parts of Debian are built reproducible. There are tools from https://reproducible-builds.org/

Bazel and similar build systems support reproducible builds, and thus identical SBOMs.

This is such a frustrating clickbait headline!

Most of the 'attack' s are:

1. Plain old bugs in apt. 2. Involve disabling the very security features (GPG and checksum verification) designed to prevent that attack!

I think the car issue is caused by rise of emissions controls. Efficiency and emissions control have been improved by computerizing the car - thats what puts car maintenance out of reach. Its hard for the average person to understand/fix things that we cannot see or touch.

JSC loves ES6 9 years ago

Not having to pay does not make it 'open' either, but I see your point.

I think (on linux, at least), its better to implement this as a nss- module (/etc/nsswitch.conf). You can do things like lookup a hashtable, automatically update databases, etc without having to rewrite system config files.

Also this does not protect you from programs that perform their own dns lookups, and ignore /etc/hosts and /etc/resolv.conf entirely!