Security Concern - Open Source Binaries

Benjamin Donnachie benjamin at py-soft.co.uk
Tue Jun 9 21:14:26 CEST 2009


2009/6/7 simplejack <simplejack at mailinator.com>:
> Is sourceforge (or any of the other repositories for open source software)
> actually doing a compile and compare of uploaded source code to ensure that
> uploaded binaries are legitimate?

Nope, but they're not checking the code either.

Ben



More information about the Gnupg-users mailing list