3 ms·
>If WhatsApp is so evil that they've backdoored their product, it is ... stupid to leave that backdoor in their source code. Reproducible builds[1] are the sol
by danjoc 11y ago
>If WhatsApp is so evil that they've backdoored their product, it is ... stupid to leave that backdoor in their source code.
Reproducible builds[1] are the solution to that problem. Everyone doesn't have to build the source if a) building the source produces the exact same binaries every time, and b) source can be built by a trustworthy party to verify that it matches the build being distributed. This way, you only need one good build cop to warn the rest of the population about bad binaries.
Signal for Android supports reproducible builds[2] so it seems entirely possible an open source WhatsApp client could as well.
[1]https://reproducible-builds.org/ https://reproducible-builds.org/
[2]https://github.com/WhisperSystems/Signal-Android/wiki/Reproducible-Builds https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...