3 ms·
Survey says: NOPE. Realistically, the code in that repo probably isn't even everything that would run on your device even provided you built it yourself. Bets
by cyberpunk 10y ago
Survey says: NOPE.
Realistically, the code in that repo probably isn't even everything that would run on your device even provided you built it yourself.
Bets on some 'fetch js from somewhere' code in there which could completely unfuck the whole thing which acts as a help screen or something that would be very hard to find...
There is literally no way this sort of thing can ever be trusted. Christ, we barely trust PGP anymore...
- nickik 10y agohttps://github.com/WhisperSystems/Signal-Android/wiki/Reproducible-Builds https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...
- cyberpunk 10y agoAll well and good for us, but we're probably not the target here anyway. And be honest, did you really bother to do all that?
- nickik 10y agoThe hole point about this sort of things is you can detect mass attack. If only one person finds a problem all get the benefits. Its much harder to make a targeted attack, specially if you are not google or have the full support of google. Nothing is perfect, but there is very little that is better. Your other options are only not using the devices at all.