undefined | Better HN

0 points38362936482y ago0 comments

Nix doesn't require everything to be built from source, sure, but everything downloaded must match a provided hash. What's the difference between downloading source code and binaries at that point?

0 comments

2 comments · 1 top-level

ryukafalz2y ago· 1 in thread

It's easier to audit source code than binaries, and easier to audit it once than once for each architecture.

3836293648OP2y ago

Auditing is irrelevant to whether or not it's reproducable, which was the question here.

You also forgo any improvements to compiler improvements

j / k navigate · click thread line to collapse