Blog comment on WEIS archive urges insurer- or law-mandated reproducible builds and trusted build agents for software
A reader comment on a Schneier on Security post about the Workshop on Economics and Information Security (WEIS) archive was posted by David Mohring on 21 October 2026. It links older material from 2002 and 2004, including a Usenet archive and a 2004 piece titled "Twelve Step TrustABLE IT". The commenter argues that businesses can historically insure against damages and pass the cost along to consumers. The commenter concludes that the best hope is to require a combination of Trusted Build Agents, Reproducible Builds and a "Warrant of Fitness", imposed by insurers or by legislative mandate. The text describes no incident, vulnerability, threat actor or indicator, so it is policy commentary with no direct operational impact.
Remediação
- The commenter proposes requiring Trusted Build Agents and Reproducible Builds.
- The commenter also proposes a "Warrant of Fitness" for software, enforced by insurers or legislative mandate.
Linha do tempo
-
Blog comment on WEIS archive urges insurer- or law-mandated reproducible builds and trusted build agents for software
ler a análise desta fonte ocultar
A reader comment on a Schneier on Security post about the Workshop on Economics and Information Security (WEIS) archive was posted by David Mohring on 21 October 2026. It links older material from 2002 and 2004, including a Usenet archive and a 2004 piece titled "Twelve Step TrustABLE IT". The commenter argues that businesses can historically insure against damages and pass the cost along to consumers. The commenter concludes that the best hope is to require a combination of Trusted Build Agents, Reproducible Builds and a "Warrant of Fitness", imposed by insurers or by legislative mandate. The text describes no incident, vulnerability, threat actor or indicator, so it is policy commentary with no direct operational impact.
Remediation
- The commenter proposes requiring Trusted Build Agents and Reproducible Builds.
- The commenter also proposes a "Warrant of Fitness" for software, enforced by insurers or legislative mandate.