undefined | Better HN

0 pointssesutton11y ago0 comments

You could audit the Go source and then use the diverse double compiling technique[0] to verify that the binary you're using corresponds to that source code.

[0] http://www.dwheeler.com/trusting-trust/dissertation/html/whe...

0 comments

cperciva11y ago

You mean, audit a large number of independently-written Go compilers?

indians_pro11y ago

Nicely done. To be fair though, Go is just 6 years old and still evolving.

cperciva11y ago

Exactly. Which is why I think it's important to keep the option of compiling its compiler from a language which has a large diversity of compilers.

1 more reply

j / k navigate · click thread line to collapse

0 comments

cperciva11y ago

You mean, audit a large number of independently-written Go compilers?

indians_pro11y ago

Nicely done. To be fair though, Go is just 6 years old and still evolving.

cperciva11y ago

Exactly. Which is why I think it's important to keep the option of compiling its compiler from a language which has a large diversity of compilers.

1 more reply

j / k navigate · click thread line to collapse