dannybuntu's avatar
dannybuntu
dannybuntu@walletscrutiny.com
npub1r709...sf7d
Open Source contributor to FOSS project walletscrutiny.com and nostr.info
dannybuntu's avatar
dannybuntu 1 year ago
“It can’t be,” I think— restless in her silent hours, longing grows, unseen.
dannybuntu's avatar
dannybuntu 1 year ago
Why do you linger, Sats dancing in restless dreams— Questions echo on.
dannybuntu's avatar
dannybuntu 1 year ago
Always in my mind, Thoughts of you just won't let go— Peace, a ghost, denied.
dannybuntu's avatar
dannybuntu 1 year ago
Hearts race, restless dreams— softly, longing slips away, stillness fills the air.
dannybuntu's avatar
dannybuntu 1 year ago
🔎✅ Verified: Nunchuk Android 1.68.1 split APKs reproducible! Only expected binary diffs (manifest, resources, Play Store signing) observed—no functional or security differences. Full report: #Bitcoin #OpenSource #ReproducibleBuilds 🚀🔐🔁
dannybuntu's avatar
dannybuntu 1 year ago
Thinking out loud: 'list framework, language and other dependencies for apps" With the verifications we have produced, we now have access to data that can be utilized to compare apps. Some are reproducibile, others are not. what frameworks do reproducible apps use? Although not exhaustively the source of non-reproducibility - these provide vital clues. Yes, corellation isn't causation. But we have to start somewhere to help other app developers get their app reproducible.
dannybuntu's avatar
dannybuntu 1 year ago
dannybuntu's avatar
dannybuntu 1 year ago
🚀 Successfully reproduced and verified Electrum 4.5.8 from source! 🔒 Full PGP verification passed — signatures from Thomas Voegtlin, Emzy, and SomberNight were ✅ ultimate trust ✅. 📜 SHA256 matched: dd8595a138132dee87cee76ce760a1d622fc2fd65d3b6ac7df7e53b7fb6ea7e8 🔎 See the full asset registered at WalletScrutiny: 👉 #Bitcoin #OpenSource #ReproducibleBuilds #Electrum #WalletScrutiny
dannybuntu's avatar
dannybuntu 1 year ago
Worked til 1 AM, age 43, feel like shit. Apologies if I am combative. I'm usually more mellow when well-rested.
dannybuntu's avatar
dannybuntu 1 year ago
GM! nostr. So. What are you building today? Any chance that would get acquired for 31949.69 BTC? ($3 billion USD)
dannybuntu's avatar
dannybuntu 1 year ago
🧱 Bitcoin Core Reproducible Build: Web of Trust Diagram [1] Official Source Release (v29.0) | |---> Signed Git tag by maintainer (e.g., Glozow) | | | `---> Tag is GPG-signed by: F19F5FF2B0589EC341220045BA03F4DBE0C63FB4 | [2] Independent Builders Clone Repo | |---> hebasto ---> git checkout v29.0 | ---> guix build | ---> generate hash + .buildinfo + manifest | ---> sign the hash with GPG | |---> fanquake ---> same steps | |---> others ---> same steps | [3] Submit signatures to guix.sigs | `---> Each signature (.sig) matches the same commit/hash | `---> Verified: Everyone built the exact same binary from the same source [4] Anyone can verify: | |---> Compare hashes of downloaded binaries |---> Check `.sig` files against public GPG keys of signers | `---> Trust is built because: Multiple builders + identical outputs + verified GPG signatures