Binance hack> need better software integrity verification

The binance hack exposed a worsening issue with standards around software integrity verification. Code signing and integrity verification has fallen short for today's needs.

Package managers usually verify checksums during install, but this fails against upstream supply chain attacks or post-install mods. There needs to be a more widely adopted mechanism or standard for continuous verification of installed tooling against a source of truth. This applies to scripts and compiled binaries, with the latter being more challenging when built locally from variable inputs.

---

Comments URL: https://news.ycombinator.com/item?id=50371039

Points: 1

# Comments: 0