4 ms·
https://github.com/WhisperSystems/Signal-Android/wiki/Reproducible-Builds https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...
by veeti 10y ago
https://github.com/WhisperSystems/Signal-Android/wiki/Reproducible-Builds https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...
- cyberpunk 10y agoAnd so? You're still trusting them and the various libs they're using to protect you... Did you read the code? Did you understand it? Me neither. How can a bit of software like this obtain any kind of reputation whereas we barely trust openssl anymore is fucking beyond my understanding.........
- dublinben 10y agoThis criticism applies equally to every piece of software you haven't written yourself. You have to trust someone at some point. OWS has demonstrated that they are more trustworthy than their competitors.
- cyberpunk 10y agoSure, but the ease of someone abusing this is far greater than what we've been using before. Can you honestly say that you trust signal over locally or even airgapped pgp'd text?
- dublinben 10y agoNope! But they solve two completely different problems. And the metadata with Signal is actually much better than PGP+email. Have you looked at email headers recently?
- reacharavindh 10y agoThanks for that link. I'll go through the build process and play with the apk. But even if I wanted to build my own apk, and run it on my custom Android build, it would'nt work right? Because of the need for Google Play store? Verifiable builds are atleast a step in the right direction.