3 ms·
This is a PM asking, so please bear with me. I understand the argument that when the source code is available for inspection things tend to be more transparent,
by rodolphoarruda 10y ago
This is a PM asking, so please bear with me. I understand the argument that when the source code is available for inspection things tend to be more transparent, because it would allow the community to identify and remove backdoors or likes. But when it comes to distribution, e.g. via Play Store, how can the end users know the version made available for installation is "A" (with backdoor) or "B" (without backdoor)?
- resfirestar 10y agoIdeally you would be able to build it yourself and compare the checksums, but often that requires some extra effort to prevent particulars of the compile environment from affecting the binary. Debian is working with moderate success to make their packages reproducible.[1] On the Android side, F-Droid builds apps themselves from public repos.[2] [1] https://wiki.debian.org/ReproducibleBuilds https://wiki.debian.org/ReproducibleBuilds [2] https://f-droid.org/wiki/page/Inclusion_How-To https://f-droid.org/wiki/page/Inclusion_How-To
- qwertyuiop924 10y agoChecksums.