* Vagrant Cascadian [announced](https://lists.reproducible-builds.org/pipermail/rb-general/2018-October/001227.html) that he has [begun uploading `.buildinfo` files from the Debian archive](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862073#39) to the experimental [buildinfo.debian.net](https://buildinfo.debian.net/) service.
* Vagrant Cascadian then used a simple script and found that in the current
Debian as delivered (now that some .buildinfo data is available) 57% of the packages installed in a minimal system are verifiably reproducible (88 reproducible and 66 unreproducible). This is a major step forward, as this is not a measure of special reproducible builds created "on the side", but of the actual "real world" Debian packages.
* David A. Wheeler started a thread on [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general) enquiring on the [status of core reproducibility in Debian](https://lists.reproducible-builds.org/pipermail/rb-general/2018-October/001215.html).
* It was [announced](https://twitter.com/SFScon/status/1055071106552475648) that Chris Lamb will be presenting in on Reproducible Builds at the [SFScon](https://www.sfscon.it) conference in Bozen, Italy on [reproducible builds and how they can prevent developers from becoming targets of various attacks](https://www.sfscon.it/talks/you-think-youre-not-a-target-a-tale-of-three-developers/).
...
...
@@ -55,8 +52,8 @@ Packages reviewed and fixed, and bugs filed
*[#911757](https://bugs.debian.org/911757) filed against [zsh-antigen](https://tracker.debian.org/pkg/zsh-antigen) — timestamps.
* Marina Moore:
*[librabbitmq](https://github.com/alanxz/rabbitmq-c/pull/535)- use CMAKE_SYSTEM_NAME instead of CMAKE_SYSTEM
*[golang-go-flags](https://salsa.debian.org/go-team/packages/golang-go-flags/merge_requests/1)- use SOURCE_DATE_EPOCH
*[librabbitmq](https://github.com/alanxz/rabbitmq-c/pull/535)— Use `CMAKE_SYSTEM_NAME` instead of `CMAKE_SYSTEM`.
*[golang-go-flags](https://salsa.debian.org/go-team/packages/golang-go-flags/merge_requests/1)— Use `SOURCE_DATE_EPOCH`.
* Vagrant Cascadian then used a simple script and found that in the current Debian as delivered (now that some .buildinfo data is available) 57% of the packages installed in a minimal system are verifiably reproducible (88 reproducible and 66 unreproducible). This is a major step forward, as this is not a measure of special reproducible builds created "on the side", but of the actual "real world" Debian packages.