you are viewing a single comment's thread
view the rest of the comments
[–] 22 points 2 years ago (2 children)

Very generous to imagine that maintainers have so much time on their hands

  • source
  • parent
  • hideshow 2 child comments
  • [–] 10 points 2 years ago* (1 child)

    Bug fixes can be delayed for a security sweep. One of the quicker ways that come to mind is checking the hash between built from source and the tarball

  • source
  • parent
  • hideshow 1 child comment
  • [–] 14 points 2 years ago

    The whole point here is that the build process was infiltrated - so you'd have to remake the build system yourself to compare, and that's not a task that can be automated

  • source
  • parent