How do we know the code that’s published is the same code that’s actually being used
In: 0
If you want to know that you’re using the published code, you download the published code and compile it yourself.
That’s it. End of story. No other options.
If you want to be reasonably sure the published code is what’s being used you can wait for someone you trust to download and compile it and then ask them to send you a checksum to compare against the executable you’re running, but assuming some random person is telling the truth is scarcely better than trusting the developers.
Latest Answers