What if every Nix build were bit-reproducible?

The holy grail of build systems and package managers is bit-reproducible builds. This is such a desired trait that nearly every Linux distribution has a reproducible builds project to track the progress and validity of their builds. Why is bit-reproducibility so important? Trust. You can trust that the software you are running has not been tampered with and is the same as what the developers intended if you can verify that when built from source, the output is identical. Making software bit-reproducible though is hard. There are a lot of ways that can introduce non-determinism into a build: timestamps, random…

Source: https://fzakaria.com/2026/11/09/what-if-every-nix-build-were-bit-reproducible. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.

Recommended for you

The Register0 Hot3 min8 h ago

Who Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed

UK shoppers caught up in third-party security mess, and nobody knows whether the data was flushed away

#security#phishing#data-breachSource

BleepingComputer0 Hot5 min1 h ago

N-able takes cloud platform offline after 30+ "zero-days" published

N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that could let attackers take over vulnerable systems.

#security#zero-daySource

Planet MySQL1 Hot6 min10 h ago

Vector search in MySQL: from a plugin to the top of the Contributor Summit agenda

This week vector search opened the MySQL Contributor Summit. A plugin started the fire, the M-ecosystem picked it up, the hyperscalers went native, and now the benchmark wars have begun.

#infrastructure#database#mysqlSource

MariaDB.org1 Hot4 min15 h ago

Giving the Optimizer a Hint: What’s New in MariaDB Server 13.0, compatibility and beyond

Discover optimizer hints in MariaDB Server 13.0: MySQL-compatible syntax, query plan control, and advanced features for views and query blocks.

#infrastructure#sql#mysqlSource

freeCodeCamp254 Hot2 min11 d ago

Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course

Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec

#security#cyber#linuxSource

Hacker News47 Hot4 min3 d ago

Pwn.college

pwn.college is a free, hands-on education platform for learning core cybersecurity and hacking skills, maintained by a team at Arizona State University. Learners progress through belt ranks, starting with a 'white belt' and earning belts through practice. Hackers continue beyond the platform to 'brown belt' and eventually 'black belt' status, which must happen outside the dojo. The site powers much of ASU's cybersecurity curriculum and asks users not to post writeups or walkthrough videos of challenge solutions. It points learners toward CTFtime.org for Capture The Flag events and a GitHub list of wargames for further practice. The underlying infrastructure is open source and accepts pull requests, though some modules remain closed-source.

#security#cyberSource

Hacker News1 Hot4 min1 d ago

A Little Snitch for Windows

PacketHound is a free outbound firewall for Windows. The first time an app tries to connect to the internet, it asks you: Allow or Block.

#security#open-source#windowsSource

Symfony1 Hot14 min1 d ago

A Week of Symfony #1036 (November 2–8, 2026) (Symfony Blog)

This week, Symfony 5.4.56, 6.4.50, 7.4.23, and 8.1.11 maintenance versions were released with many security fixes for components such as Routing, Serializer, Config, and HtmlSanitizer. We also publish…

#security#php#symfonySource