Re: Risks of deterministic builds

[Jean Louis]

* Jan Nieuwenhuizen <janneke@gnu.org> [2021-04-08 16:43]:
> Martin writes:
> 
> > Maybe freedom in "free software" shouldn't require from the code to be
> > open neither. Let's just blindly trust some saint developers who
> > cannot even control their own binaries. Actually today we are closer
> > and closer to that sad scenario like never before in the history,
> > because in fact most of the open-source and GNU "free software"
> > nowadays base on blackboxed binary seeds that cannot be verified by
> > the users not even by the core developers.
> 
> The bootstrappable project, GNU Mes and GNU Guix are working to fix that
> 
>     
> https://guix.gnu.org/en/blog/2020/guix-further-reduces-bootstrap-seed-to-25/
>     https://fosdem.org/2021/schedule/event/gnumes/


>From https://bootstrapping.miraheze.org/wiki/Stage0

> Design

> Stage0 starts with only 1 thing:

> 1) A sub 500 byte hex monitor [How you create it is up to you; I like 
> toggling it in manually myself]

> from that starting point, I have provided in easy to audit form
> (direct mapping between Hex, its effective assembly and a C
> implementation) a series of hex utilities that are required for basic
> development work. These files are in the stage1 folder.

How do you toggle it manually itself?

Jean