nafyi.让-巴蒂斯特·康普夫谈开源代码质量、维护与安全构建
原始摘录
There is no code that gets into VLC that we don’t control, and the way we compile VLC, you would call me completely paranoid. Like, we compile on boxes that are offline, where we start by compiling the compiler. We do everything offline on places that have never been connected to the internet. We— The way we do signing, there is double signature.
翻译 · 非原文措辞
没有任何代码能在未经我们控制的情况下进入 VLC；而我们的 VLC 编译方式，你或许会称我完全偏执——我们使用离线设备进行编译，这些设备甚至从未连接过互联网；我们从编译编译器本身开始，一切操作均在从未联网的环境中完成。我们的签名方式采用双重签名。
上下文
那么‘妥协’的定义是什么？比如允许政府植入后门——那我就搬去开曼群岛，更换域名，重新开始，对吧？VLC 是一个工具，一个帮助人们做事的工具。我们并非一个平台。至于专利问题，抱歉，大多数专利……比如，你不该能对数学和矩阵申请专利。这显然是错误的。
原始上下文
And what’s the definition of compromise? Like allowing a government to do a backdoor- I move to, I don’t know, Cayman Islands, and I change the domain name, and I start again, right? Like, VLC is a tool. It’s a tool that is going to help people doing things. We are not a platform. And for patents, well, I’m sorry, but most of the patents… Like, you shouldn’t be able to patent math and matrices. Like, this is wrong.
时间点来自所提供的转录稿，尚待媒体回放核对。