Hacker News Reader

And that's why we need deterministic builds

Yes, but in this case this was a bit-flip in a third-party binary dependency that we don't have the source code for.

Then we need the Gentoo approach as well ^^