Experimental News Clipping Site

Tag: reproducible builds

  • Slashdot: Secure Software Supply Chains, Urges Former Go Lead Russ Cox

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/09/21/0650219/secure-software-supply-chains-urges-former-go-lead-russ-cox?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Secure Software Supply Chains, Urges Former Go Lead Russ Cox Feedly Summary: AI Summary and Description: Yes Summary: The text emphasizes the critical need for enhancing software supply chain security, particularly in the face of ongoing vulnerabilities. It outlines practical solutions, such as adopting software signatures and reproducible builds,…

  • Simon Willison’s Weblog: Introducing OSS Rebuild: Open Source, Rebuilt to Last

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/23/oss-rebuild/ Source: Simon Willison’s Weblog Title: Introducing OSS Rebuild: Open Source, Rebuilt to Last Feedly Summary: Introducing OSS Rebuild: Open Source, Rebuilt to Last Major news on the Reproducible Builds front: the Google Security team have announced OSS Rebuild, their project to provide build attestations for open source packages released through the NPM,…

  • Hacker News: Show HN: Formal Verification for Machine Learning Models Using Lean 4

    —

    by

    Kurt Seifried
    in

    Source URL: https://github.com/fraware/leanverifier Source: Hacker News Title: Show HN: Formal Verification for Machine Learning Models Using Lean 4 Feedly Summary: Comments AI Summary and Description: Yes Summary: The project focuses on the formal verification of machine learning models using the Lean 4 framework, targeting aspects like robustness, fairness, and interpretability. This framework is particularly relevant…

  • Hacker News: NixOS and reproducible builds could have detected the xz backdoor

    —

    by

    Kurt Seifried
    in

    Source URL: https://luj.fr/blog/how-nixos-could-have-detected-xz.html Source: Hacker News Title: NixOS and reproducible builds could have detected the xz backdoor Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details a significant security breach involving the open-source xz compression software, where a backdoor was inserted by a malicious maintainer. This event highlights the vulnerabilities within the…

  • Hacker News: Why it’s hard to trust software, but you mostly have to anyway

    —

    by

    system automation
    in

    Source URL: https://educatedguesswork.org/posts/ensuring-software-provenance/ Source: Hacker News Title: Why it’s hard to trust software, but you mostly have to anyway Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the inherent challenges of trusting software, particularly in the context of software supply chains, vendor trust, and the complexities involved in verifying the integrity…