logoalt Hacker News

charcircuittoday at 7:25 AM1 replyview on HN

>Being able to reproduce the binary from the source code and being able to verify that it's the same as the original is quite important in some contexts.

I disagree. The contexts that people come up with are purely theoretical, and are not practically important. Please do try and convince me otherwise by sharing such a context. From my view the juice of trying to accomplish this is no where worth the squeeze.


Replies

harrouettoday at 11:37 AM

You disagree but you're wrong.

Military context: a government would want to review the code and compile themselves. Provide a hash of the target binary to ensure they've compiled it correctly.

SDLC: provide auditors with _proof_ that the tested binary is indeed coming from the audited code

show 2 replies