[issue]: Remove BLOBs from the source tree · Issue #2795 · ventoy/Ventoy
github.com
What happened? Due to the recent XZ-Utils drama I checked the code and I'm appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f8946...

I had no idea this issue had been identified. While I find this tool very useful, the project is seeming rather questionable to me now.

  • refalo@programming.dev
    31·
    2 months ago

    That is true, but also nobody is doing it. Just like nobody is verifying Signal’s “reproducible builds”.

    • Pup Biru@aussie.zoneEnglish
      2·
      2 months ago

      are you sure?

      there could be thousands just waiting for a failure to come out and say “HEY THIS IS DODGY”

      • refalo@programming.dev
        1·
        2 months ago

        Yea because I tested it myself. Nobody else seems to care, and if they did, I would think there would be a public way to see regular test results regardless.

        I know this exists for some projects, but somehow nothing privacy-sensitive