[Cryptech Core] lager
Leif Johansson
leifj at sunet.se
Mon Feb 23 08:09:39 UTC 2015
On 02/23/2015 08:56 AM, Peter Stuge wrote:
> Randy Bush wrote:
>>>> and seven million lines of gcc is?
>>> They are auditable, so yes, potentially transparent.
>>
>> and how will we audit seven million lines of code? and then libc?
>> and then ...?
>
> This is an excellent case for ongoing peer review. I agree that
> after-the-fact audits are difficult, but at the same time I know
> how easy ongoing peer review (of every single commit) is, I've seen
> how it can help very much indeed. It takes time however.
>
>
>> look at the sad state of the one serious audit, truecrypt.
>
> Do you think that the audit is the reason for the sad state?
>
>
>> so, potentially cash could fall from the sky. in the meantime, a few
>> billion are under-fed.
>
> There are several different compilers and libc implementations
> around, which doesn't just mean one can choose and audit something
> else, but it also enables reliable reproducible builds.
>
> https://media.ccc.de/browse/congress/2014/31c3_-_6240_-_en_-_saal_g_-_201412271400_-_reproducible_builds_-_mike_perry_-_seth_schoen_-_hans_steiner.html
Is any of this a reason not to transfer files using btsync?
More information about the Core
mailing list