4 ms·
> Even if it's decentralized there's only one client and they can always push updates to male it send keys/messages back for targeted users. The clients are op
by chippiewill 5y ago
> Even if it's decentralized there's only one client and they can always push updates to male it send keys/messages back for targeted users.
The clients are open source, presumably you can compile and install the client from source to avoid a bad update being pushed.
- krageon 5y agoYou cannot reproducibly build signal, what you get in the play store is effectively closed.
- tialaramex 5y agoYou can build the core code, reproducibly. As I understand it if you take this code, and the binary blobs of the code that does stuff like video calls, you can verify that's what is inside your Play Store APK. Now, if you're a tinfoil hat wearer obviously you can consider that maybe the video call code secretly reads your messages and sends them to the FBI, or indeed that the Android OS just ignores this APK and when you install it you get something else entirely anyway. But it sure looks like the source code is in fact for the app you get.
- dane-pgp 5y agoIt would be nice if Android let you check the hash of the APK against a Binary Transparency log hosted by a third party. Google have even written extensively about this idea: https://transparency.dev/application/add-tamper-checking-to-a-package-manager/ https://transparency.dev/application/add-tamper-checking-to-...
- psanford 5y agoAndroid does verify that any new versions of an APK are signed with the same signing key as previously installed versions. So you would have to compromise the signing key held by the developer in order to push an evil APK.
- gruez 5y agoSource? This page says otherwise: https://github.com/signalapp/Signal-Android/tree/master/reproducible-builds https://github.com/signalapp/Signal-Android/tree/master/repr...
- deleted 5y ago[deleted]