Welcome to the RB family, Synkplay 🥳

https://apt.izzysoft.de/packages/com.reddnek.syncplay

Synkplay synchronizes playback on different devices and makes sure everyone is watching the same thing at the same second, even if they're miles away.

Thanks to the help of its developer, we finally succeeded with #ReproducibleBuilds for it at the #IzzyOnDroid repository 

Aaand… Welcome to the RB family, Sshd4a 🥳

https://apt.izzysoft.de/packages/com.hardbacknutter.sshd

Sshd4a provides an 'sshd' server with shell access, rsync and scp/sftp services. Thanks to the help of its developer, it could now be confirmed to be reproducible 

Coming to your favourite repository with the next sync 😉

#IzzyOnDroid #ReproducibleBuilds

Inspired by the Debian 14 announcement, I’ve finally made my json-store #Python package create reproducible builds.

This was super easy thanks to all the work done by the hatch build system.

https://hatch.pypa.io/1.16/config/build/#reproducible-builds

You should too. 😁

#reproduciblebuilds

Dear opensource developers,

I added an "adoption" list to the repro-env README, if you publish pre-compiled binaries and you successfully adopted it to allow anyone to reproduce them from source code to prove the absense of a build server compromise, you are very welcome to add yourself to the list. 😺

https://github.com/kpcyrd/repro-env#adoption

#reproducible #reproduciblebuilds #supplychainsecurity #rust

Debian 14 Forky is mandating bit-for-bit identical builds to stop supply chain attacks. Discover how this shifts trust from servers to auditable source code.

More details here: https://ostechnix.com/debian-linux-reproducible-builds/

#Debian14 #DebianForky #ReproducibleBuilds #Security #Linux #Packages #SupplyChainSecurity

Hey #Google, cool you're adding a bit of #BinaryTransparency. Unfortunately, it doesn't mean much without #FreeSoftware #OpenSource and #ReproducibleBuilds. When can we expect you to adopt those practices?

https://blog.google/security/bringing-binary-transparency-to-the-android-ecosystem/

For the record #FDroid has offered binary transparency since 2017 https://gitlab.com/fdroid/fdroidserver/-/merge_requests/226

And we even offer binary transparency for your #Gradle and #AndroidSDK binaries
https://f-droid.org/2021/02/05/apis-for-all-the-things.html#binary-transparency-logs

How about expanding your logging to all your binaries?

Debian's mandate for reproducible packages aims to revolutionize software supply chain security, but the real challenge extends far beyond verifying source code. The article explains how achieving byte-for-byte identical binaries requires meticulously neutralizing every source of non-determinism across the entire build toolchain and package ecosystem, a formidable engineering feat for a…

https://www.tpp.blog/1d23ahl

#cybersecurity #debian #reproduciblebuilds

🤖 This post was AI-generated.

Why Reproducible Builds?

재현 가능한 빌드(reproducible builds)는 빌드 환경이나 컴파일러가 악의적으로 변조되었는지 조기에 탐지할 수 있게 하여 보안 공격에 대응한다. 또한, 다양한 환경에서의 일관된 빌드 테스트를 통해 품질 보증과 디버깅을 용이하게 하며, 바이너리 차이를 최소화해 저장 공간과 네트워크 비용을 절감한다. 개발 속도 향상과 의존성 투명성 확보, 소프트웨어 구성 요소 목록(SBOM) 생성에도 기여하여 보안과 규제 준수에 필수적이다. 에페메랄 개발 환경과 결합하면 신속한 환경 재현과 보안 강화가 가능해 현대 DevSecOps 실천에 적합하다.

https://reproducible-builds.org/docs/why/

#reproduciblebuilds #security #softwaredevelopment #sbom #devsecops

Debian alza l'asticella della sicurezza rendendo obbligatorie le "Reproducible Builds" per Debian 14 "Forky".
Ogni pacchetto dovrà poter essere ricompilato partendo dal sorgente originale pena la sua esclusione.
Questo garantisce che il software che installiamo sia esattamente quello dichiarato dagli sviluppatori, proteggendoci da manipolazioni durante la fase di compilazione.
https://itsfoss.com/news/debian-makes-reproducible-builds-mandatory/

@linux

#Debian #Linux #Sicurezza #ReproducibleBuilds #SoftwareLibero #Privacy