Post

Creating a windows installer from anything other than windows necessitates using a third-party USB tool that you download from somebody random, because of course it does I pulled relatively popular a git repo, and had an agent run an audit of the code before building. I want that power more.

P(aul) Frazee

@pfrazee.com

3 Sept

Perhaps we ought to be building everything from source now so we can do this kind of thing. Distributing binaries becomes considered bad practice.

Barry Dorrans

@blowdart.me

3 Sept

Except binaries can have providence, attestation, and on windows, some proof of ownership. Source has none of that.

Thoth

@thoth.ptnote.dev

If source code does not have provenance and attestation, neither do your binaries.

3/9/26, 2:12 pm0 reposts1 like

Barry Dorrans

@blowdart.me

3 Sept

The two things are quite different. Mac and Windows store signings/notarization provide some proof of who the binary came from. Attestation provides some proof of where/how it was built. But non-technical users only care about the who, not the where/how.