“Bitcoin Build System Security” video

“Bitcoin Build System Security” video

[Ludovic Courtès]

Hello Guix!

I warmly warmly warmly recommend this video by Carl Dong:

  https://www.youtube.com/watch?v=I2iShmUTEl8

It’s a very clear explanation of the importance of reproducible builds
and bootstrappable builds for security and transparency, and as if it
weren’t enough, it even explains what functional package management is
about and why it matters.

Kudos, Carl, and thank you!

Ludo’.

Re: “Bitcoin Build System Security” video

[Ricardo Wurmus]

Ludovic Courtès <ludo@gnu.org> writes:

> Hello Guix!
>
> I warmly warmly warmly recommend this video by Carl Dong:
>
>   https://www.youtube.com/watch?v=I2iShmUTEl8
>
> It’s a very clear explanation of the importance of reproducible builds
> and bootstrappable builds for security and transparency, and as if it
> weren’t enough, it even explains what functional package management is
> about and why it matters.
>
> Kudos, Carl, and thank you!

This is a great video.  Thank you, Carl!  I would like to link to it
from the bootstrappable.org website.

-- 
Ricardo

Re: “Bitcoin Build System Security” video

[Carl Dong]

Ricardo,

I would be honored!

Cheers,
Carl Dong
contact@carldong.me
"I fight for the users"

Re: “Bitcoin Build System Security” video

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 1240 bytes --]

Hello Carl,

Ludovic Courtès <ludo@gnu.org> writes:

> I warmly warmly warmly recommend this video by Carl Dong:
>
>   https://www.youtube.com/watch?v=I2iShmUTEl8

Thank you Ludo' for your warm invite :-)

[...]

> Kudos, Carl, and thank you!

The whole story of Trusting Trust from 1984 until now in 16 mins, in
plain english! Great! :-)

Carl: please can you consider releasing your video with a CC-BY-SA
license?

I'm not updated ubout the "guix-videos" [1] policy (about videos
inclusion an tech requirements) and toolchain but AFAIU your material
could be reused in an official Guix (or bootstrappable.org) video, in a
"Core concepts" section :-)

For example, I'd really like to add EN and IT subtitles to help
my friends understand the core concepts of repro+boostrap without
"Trusting Me" :-)...or worse read two or three tech papers starting from
"Trusting Trust"

To be transparent, this *could* also be a good *marketing* video: I just
have some "self brainstorming" wandering in my head since a while, just
food for thought

Anyway: thank you for your work!

Happy Guix! Gio'.


[1] https://git.savannah.gnu.org/git/guix/videos.git

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: “Bitcoin Build System Security” video

[Pierre Neidhardt]

[-- Attachment #1: Type: text/plain, Size: 256 bytes --]

Great video, thanks for sharing!
A lot of ideas worth spreading in there, great job Carl :D

>   https://www.youtube.com/watch?v=I2iShmUTEl8

Oh, did you just share a link to a proprietary platform? ;)

-- 
Pierre Neidhardt
https://ambrevar.xyz/

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

Re: “Bitcoin Build System Security” video

[Ricardo Wurmus]

Pierre Neidhardt <mail@ambrevar.xyz> writes:

> Great video, thanks for sharing!
> A lot of ideas worth spreading in there, great job Carl :D
>
>>   https://www.youtube.com/watch?v=I2iShmUTEl8
>
> Oh, did you just share a link to a proprietary platform? ;)

You can watch Youtube videos with free software.  I use “mpv” (when I
have a URL) or “youtube-viewer” (when I want to browse videos).

The term “proprietary platform” can lead to confusion, much like
the term “non-free service”.  The issues of software freedom don’t
exactly apply to services.  See also this article:

    https://www.gnu.org/philosophy/who-does-that-server-really-serve.html

-- 
Ricardo

Re: “Bitcoin Build System Security” video

[Carl Dong]

Hello Giovanni!

> Carl: please can you consider releasing your video with a CC-BY-SA license?

Done!

> For example, I'd really like to add EN and IT subtitles to help my friends
understand the core concepts of repro+boostrap without "Trusting Me" :-)...or
worse read two or three tech papers starting from "Trusting Trust"

Haha that's exactly what I was aiming for! I'd love it if someone could put up
the subtitles, right now I'm riding on the momentum of this video so really
focusing on making builds work, but feel free to add them (I just turned on
community contributions for substitles, so let me know if you run into any
trouble).

As for putting it up as a marketing video/Guix video/Core concepts, I'd be
honored if that could be done, and if there are things that people in the
community feel I should add/clarify that doesn't sacrifice the video's
simplicity, I'd be happy to make revisions!

Cheers,
Carl Dong

Re: “Bitcoin Build System Security” video

[Jan Nieuwenhuizen]

Ludovic Courtès writes:

> I warmly warmly warmly recommend this video by Carl Dong:
>
>   https://www.youtube.com/watch?v=I2iShmUTEl8
>
> It’s a very clear explanation of the importance of reproducible builds
> and bootstrappable builds for security and transparency, and as if it
> weren’t enough, it even explains what functional package management is
> about and why it matters.
>
> Kudos, Carl, and thank you!

Carl what an amazingly clear talk, very well done and thanks!

janneke

-- 
Jan Nieuwenhuizen <janneke@gnu.org> | GNU LilyPond http://lilypond.org
Freelance IT http://JoyofSource.com | Avatar® http://AvatarAcademy.com

Re: “Bitcoin Build System Security” video

[Mark H Weaver]

Carl Dong <contact@carldong.me> writes:

>> Carl: please can you consider releasing your video with a CC-BY-SA license?
>
> Done!

Thank you, Carl, for the excellent video, and for making it available
under a good license.  This will be a great help to educate people on an
important topic.

    Warm regards,
       Mark

Re: “Bitcoin Build System Security” video

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 879 bytes --]

Hello Carl,

Carl Dong <contact@carldong.me> writes:

>> Carl: please can you consider releasing your video with a CC-BY-SA license?
>
> Done!

Grazie!

[...]

> but feel free to add them (I just turned on
> community contributions for substitles, so let me know if you run into any
> trouble).

I'll try to work on this in the next weeks, but since now I'm busy with
work don't hol your breath on this :-)

> As for putting it up as a marketing video/Guix video/Core concepts, I'd be
> honored if that could be done, and if there are things that people in the
> community feel I should add/clarify that doesn't sacrifice the video's
> simplicity, I'd be happy to make revisions!

You have already done a great work, let's see how the community will
elaborate on this :-)

Thanks! Gio'.

[...]

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]