5 ms·
Reproducible builds are for developers. As a user I didn't build the app on my phone. I have a phone with Signal on it. Tell me what I should do to verify it'
by 100001_100011 4y ago
Reproducible builds are for developers. As a user I didn't build the app on my phone.
I have a phone with Signal on it. Tell me what I should do to verify it's running the open source Signal code.
- bertman 4y agoIf you, as a user, are concerned about reproducibility, you are no longer an average user. Thus, if you want this extra security, you can be expected to check the APK on your phone.
- fgiox 4y agoMaybe you could figure this out yourself, and share your findings, rather than demanding answers from others?
- 0xChain 4y agoYou should check out Session. Their CTO apparently uses his PGP key to sign every release https://twitter.com/session_app/status/1514108746854985730 https://twitter.com/session_app/status/1514108746854985730
- ghransa 4y agoNot perfect chain of custody but could report to virustotal (virustotal.com) and compare in a sandbox: https://play.google.com/store/apps/details?id=com.funnycat.virustotal https://play.google.com/store/apps/details?id=com.funnycat.v...
- fsflover 4y agoReproducible builds benefit the user by allowing independent checks of the software.