Mastodon Feed: Post

ireneista@irenes.space ("Irenes (many)") wrote:

since the program "hex" hasn't changed in a while, we checked the binary into the source repo. this was always the plan; it will eventually be the root of trust.

if you run a hexdump of that binary through your favorite tool (we like the Unix hexdump -C), you will be able to verify by hand that it is byte-for-byte identical to what hex.hex describes.... except that hex.hex has comments. neat trick, right?