Bitcoin Forum
June 30, 2024, 04:50:25 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: Moving bitcoin.org to a hardened server?  (Read 2087 times)
teamhugs
Member
**
Offline Offline

Activity: 69
Merit: 10



View Profile WWW
October 10, 2012, 09:03:53 PM
 #21

Compiling is a different matter, everything must be exactly the same or you'll end up with differences.  My box has slightly different libraries, and a very different compiler version, so the bitcoind that I build for my own use is wildly different from the official releases, for example.

They actually use a virtual machine to create a predictable build environment for the public releases.  If you hang out in #bitcoin-dev around release day, you'll see that even with all the work they put into the VM, they have differences fairly often and need to resolve them.

There is an entire field of computer science research about repeatable, trusted software builds. Due to address randomization and other 'anti-vulnerability' hacks in compilers, even building the same binary on the same system can be a challenge.

casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
October 12, 2012, 01:22:43 PM
 #22

There is an entire field of computer science research about repeatable, trusted software builds. Due to address randomization and other 'anti-vulnerability' hacks in compilers, even building the same binary on the same system can be a challenge.

I always thought address randomization was done by the OS at runtime so that the layout would be different per instance of the executable.  If the "randomness" had to be compiled into the executable, there would need to be a unique executable for each user to have any value, which would make production of installation media and downloads and signed binaries a challenge.


http://xkcd.com/221/

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!