Post A3SadrIDQBGc4VS0Se by orionwl@x0f.org
 (DIR) More posts by orionwl@x0f.org
 (DIR) Post #A3SZ8Ry7QTHSbCVge0 by orionwl@x0f.org
       2021-01-21T08:04:21Z
       
       0 likes, 4 repeats
       
       it would be good to be prepared for the moment that bitcoincore.org comes under attack, exploiting legal or other loopholesit's not a matter of *if*, but *when*it's a bit of a single point of failure which makes it an attractive target for people on a crusade against bitcoinif you want to help, make mirrors (can we do something like "deterministic verifiable builds for websites"?), host the files, seed the torrents, show them what censorship resistance means
       
 (DIR) Post #A3SadqSoVI9NV5OxLE by 0x0ff@bitcoinhackers.org
       2021-01-21T08:32:04Z
       
       0 likes, 0 repeats
       
       @orionwl does a more robust way to create a mirror exist now, other than `wget -mkxKE -e robots=off https://bitcoincore.org` ?
       
 (DIR) Post #A3Sadqtkt7hWqe0TKq by orionwl@x0f.org
       2021-01-21T08:33:50Z
       
       0 likes, 0 repeats
       
       @0x0ff yes, wget seems suboptimalthe robust way is to clone the website off github (git@github.com:bitcoin-core/bitcoincore.org.git), so that you have a copy of the source code as well, then you can build it yourself
       
 (DIR) Post #A3SadrIDQBGc4VS0Se by orionwl@x0f.org
       2021-01-21T08:38:00Z
       
       0 likes, 1 repeats
       
       @0x0ff however that's for the website—it won't give you a copy of the historical release binaries, i'm not sure of a good way to mirror those, maybe best would be to make a script based on https://github.com/bitcoin/bitcoin/blob/master/test/get_previous_releases.pyand https://github.com/bitcoin-core/bitcoin-maintainer-tools/blob/master/gitian-verify.pythat gets *all* releases and verifies them against their gitian.sigs hashes
       
 (DIR) Post #A3SadrrfINchqS2JiS by orionwl@x0f.org
       2021-01-21T08:43:52Z
       
       0 likes, 1 repeats
       
       @0x0ff oh this one might actually be best, it downloads SHA256SUMS.asc for an arbitrary release, verifies the signature, and downloads all the files mentioned in it:https://github.com/bitcoin/bitcoin/tree/master/contrib/verifybinaries
       
 (DIR) Post #A3Y2LV48xef4OIdxdw by harding@hash.social
       2021-01-24T02:05:46Z
       
       0 likes, 1 repeats
       
       @orionwl Saïvann Carignan and myself actually put a fair amount of effort into making the Bitcoin.org build deterministic back in the day.  You can still see one legacy of that: https://bitcoin.org/sha256sums.txt.  The current BitcoinCore.org build is *almost* fully deterministic with the only dynamic bit I recall being date stamps in the RSS files.  Making it fully deterministic would be easy and I can port over the old verification stuff from Bitcoin.org hopefully without much effort.
       
 (DIR) Post #A3Y3JiFD5ob4ddX0fA by drgo@bitcoinhackers.org
       2021-01-24T02:16:38Z
       
       0 likes, 0 repeats
       
       @harding @orionwl you guys are awesome. I remember all the translating stuff saivann did…much respect. I really appreciate the optech newsletter too! I certainly don’t understand all of it, but enough to get a feel for the future.