3 ms·
What's the status of trustworthy reproducible build systems for deploying open source code to apps on Android?
by gowld 2y ago
What's the status of trustworthy reproducible build systems for deploying open source code to apps on Android?
- 1oooqooq 2y agowell, zero. just like apple. since there's no convenient way for the user the validate anything they are installing other than "the app store said so"
- sodality2 2y agoThis is a response to a question of Google Play’s reproducibility which is moot because of the distribution mechanism. *Android* in general does have reproducibility especially from third party repos like F-droid.
- 1oooqooq 2y agocorrect. sadly fdroid usage is close to zero. and even there verification requires adb hacks and very expert users, even for basic hash checking.
- kevincox 2y agohttps://f-droid.org/docs/Reproducible_Builds/ https://f-droid.org/docs/Reproducible_Builds/ I think Signal also does this for their Android app. I'm not sure of much else in this space.