Good news, rclone is not backdoored! Why reproducible builds matter, and how easy they are in Go
https://blog.filippo.io/reproducing-go-binaries-byte-by-byte/
https://mastodon.social/media/4sAGZNN6ijOiNz5oK90
Filippo Valsorda 🦊
@filippo@mastodon.social
mastodon
4.6.0-nightly.2026-04-20
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17
https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
0
Followers
0
Following
Joined April 04, 2017
Twitter:
Location:
Rome 🇮🇹
Pronouns:
he/him
Website:
Posts
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
@filippo@mastodon.social
·
Apr 23, 2017
8
0
9
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
@filippo@mastodon.social
·
Apr 23, 2017
Trying to reproduce the release build of a popular Go software. There are Makefiles and it's pretty basic, but coming up with slight differences. Taking bets:
1/10 Backdoor
3/5 Filippo is stupid
3/10 Owner messed up
1/10 Backdoor
3/5 Filippo is stupid
3/10 Owner messed up
3
0
1
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
@filippo@mastodon.social
·
Apr 21, 2017
"In Praise of Drop-In Libraries"
Just today I was mentioning how SQLite (drop-in library) and youtube-dl (drop-in Python "script") are case studies in how simplicity of adoption can make the success of something (even complex).
http://gpfault.net/posts/drop-in-libraries.txt.html
Just today I was mentioning how SQLite (drop-in library) and youtube-dl (drop-in Python "script") are case studies in how simplicity of adoption can make the success of something (even complex).
http://gpfault.net/posts/drop-in-libraries.txt.html
8
0
8
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
@filippo@mastodon.social
·
Apr 21, 2017
TIL "Despite being Clang-based, Apple's compiler version numbers have no apparent relationship to Clang version numbers."
https://github.com/sandstorm-io/capnproto/blob/master/security-advisories/2017-04-17-0-apple-clang-elides-bounds-check.md
https://github.com/sandstorm-io/capnproto/blob/master/security-advisories/2017-04-17-0-apple-clang-elides-bounds-check.md
1
0
0
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
Filippo Valsorda 🦊
@filippo@mastodon.social
@FiloSottile elsewhere / Cryptogopher / Go crypto maintainer / Professional Open Source maintainer / RC F'13, F2'17 https://mkcert.dev / https://age-encryption.org / https://filippo.io/newsletter
mastodon.social
@filippo@mastodon.social
·
Apr 09, 2017
More from my federation wish list: MastodonaaS, a hosted Mastodon service to point your own domain to, for identity ownership and vanity, just like custom email domains.
6
0
4