Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You could audit the Go source and then use the diverse double compiling technique[0] to verify that the binary you're using corresponds to that source code.

[0] http://www.dwheeler.com/trusting-trust/dissertation/html/whe...



You mean, audit a large number of independently-written Go compilers?


Nicely done. To be fair though, Go is just 6 years old and still evolving.


Exactly. Which is why I think it's important to keep the option of compiling its compiler from a language which has a large diversity of compilers.


I don't believe it has been tried yet, but it seems entirely possible to use gccgo as the bootstrap compiler.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: