Debian's next release just made it near-impossible for tampered binaries to sneak onto your PC

Reproducible packages are here to stay.