logoalt Hacker News

tovejyesterday at 3:30 PM1 replyview on HN

Yeah, from source in that case. Or using a verified binary if I absolutely had to.


Replies

qarl2yesterday at 3:33 PM

Yes, if you want to, you can do that.

Understand that 99% are comfortable trusting downloads. They know that it's just as easy to sneak backdoors into source code as it is to sneak backdoors into executables.

See also: XZ hack.

show 1 reply