[Reproducible-commits] [presentations] 03/03: editedit

Chris Lamb chris at chris-lamb.co.uk
Thu Jul 7 14:43:31 UTC 2016


This is an automated email from the git hooks/post-receive script.

lamby pushed a commit to branch master
in repository presentations.

commit 1c3d83a8065b7a0a488d22d8806d43d18cae8382
Author: Chris Lamb <lamby at debian.org>
Date:   Thu Jul 7 16:43:00 2016 +0200

    editedit
---
 2016-07-07-DebConf16/index.html | 66 +++++++++++++----------------------------
 1 file changed, 21 insertions(+), 45 deletions(-)

diff --git a/2016-07-07-DebConf16/index.html b/2016-07-07-DebConf16/index.html
index 139a226..777729e 100644
--- a/2016-07-07-DebConf16/index.html
+++ b/2016-07-07-DebConf16/index.html
@@ -148,22 +148,14 @@
         </ul>
       </section>
 
-      <!--
-      Whilst anyone can inspect the source code of free software for malicious
-      flaws, most Linux distributions provide binary (or "compiled") packages
-      to end users.
-
-      The motivation behind "reproducible" builds is to allow verification that
-      no flaws have been introduced during this compilation process by
-      promising identical binary packages are always generated from a given
-      source.
-      -->
+      <section data-background="images/install.jpg" data-background-size="80%" data-background-color="black">
+      </section>
 
       <section data-background="images/install2.jpg" data-background-size="80%" data-background-color="black">
         <ul>
           <li>Ensure compilation always produces the same result</li>
           <li>Multiple parties compare results</li>
-          <li>Attacker needs to infect everybody simultaneously</li>
+          <li>Attacker needs to infect/blackmail everybody simultaneously</li>
           <li>Bit-for-bit identical</li>
         </ul>
       </section>
@@ -178,20 +170,6 @@
 
       <section>
         <ul>
-          <li>Timestamps</li>
-          <li>Timezones & locale-specific content</li>
-          <li>Non-deterministic file ordering</li>
-          <li>Users, groups, <code>umask</code>, environment variables</li>
-          <li>Random behaviour (eg. hash ordering)</li>
-          <li>Build paths</li>
-          <li>Locale-specific ordering</li>
-          <li>Non-determistic data (eg. uninitialised memory)</li>
-          <li>Deliberate randomness (crypto keys)</li>
-        </ul>
-      </section>
-
-      <section>
-        <ul>
           <li>Detect corrupted build environments</li>
           <li>Unsafe/unreliable/privacy-leaking behaviours</li>
           <li>General non-deterministic behaviour</li>
@@ -222,13 +200,13 @@
       <section>
         <dl>
           <dt><code>#138409</code></dt>
-          <dd>dpkg-dev: please add support for .buildinfo files</dd>
+          <dd>dpkg-dev: please add support for <code>.buildinfo</code> files</dd>
 
           <dt><code>#787980</code></dt>
-          <dd>dpkg: please normalize file permissions when creating control.tar</dd>
+          <dd>dpkg: please normalize file permissions when creating <code>control.tar</code></dd>
 
           <dt><code>#802241</code></dt>
-          <dd>dpkg: please store the hash of the installed .deb and allow to query it</dd>
+          <dd>dpkg: please store the hash of the installed <code>.deb</code> and allow to query it</dd>
         </dl>
       </section>
 
@@ -238,26 +216,28 @@
           <li>Build environment recording (<code>.buildinfo</code>)</li>
           <li>
             1800+ patches: <code>dpkg</code>, <code>debhelper</code>, <code>sbuild</code>, …
-            <ul>
-              <li>
-                gcc (<code>__DATE__</code> & <code>__TIME__</code>)
-                <br><a href="https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html">https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html</a>
-              </li>
-            </ul>
           </li>
           <li>
-            Tools:
-            <ul>
-              <li><code>diffoscope</code> (formerly <code>debbindiff</code>)</li>
-              <li><code>disorderfs</code></li>
-              <li><code>reprotest</code></li>
-              <li><code>strip-nondeterminism</code></li>
-            </ul>
+            GCC (<code>__DATE__</code> & <code>__TIME__</code>)
+            <br><a href="https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html">https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html</a>
           </li>
         </ul>
       </section>
 
       <section>
+        <ul>
+          <li><code>diffoscope</code> (formerly <code>debbindiff</code>)</li>
+          <li><code>disorderfs</code></li>
+          <li><code>reprotest</code></li>
+          <li><code>strip-nondeterminism</code></li>
+        </ul>
+      </section>
+
+      <section data-background="images/diffoscope.png">
+         
+      </section>
+
+      <section>
         <h4><code>SOURCE_DATE_EPOCH</code></h4>
 
         <ul>
@@ -274,10 +254,6 @@
         </p>
       </section>
 
-      <section data-background="images/diffoscope.png">
-         
-      </section>
-
       <section>
         <h3>tests.reproducible-builds.org</h3>
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/presentations.git



More information about the Reproducible-commits mailing list