3 ms·
Signal isn’t good engineering though, it just happens to be a decent chat app, of which there is a long history. I only use it because some friends are on there
by kortilla 1y ago
Signal isn’t good engineering though, it just happens to be a decent chat app, of which there is a long history. I only use it because some friends are on there.
None of the builds are actually verifiable so all of the security claims are marketing at best and actively harmful at worst. Safety numbers change and nobody ever bothers to verify them. Random people are added by phone number with no verification (signalgate), etc.
Making a messaging app like this is the “make a TODO” of the single user app world. Which ones achieve popularity has zero correlation with engineering skills.
- tuukkah 1y agoWhat is this FUD regarding lack of reproducible builds? The documentation about them is right here: "Signal has supported reproducible builds since Signal Android version 3.15.0, which was first released in March 2016." https://github.com/signalapp/Signal-Android/blob/main/reproducible-builds/README.md https://github.com/signalapp/Signal-Android/blob/main/reprod...
- kortilla 1y agoThose steps assume you can get images pulled off of your Android device that are actually running. This is the problem with all of these ecosystems. Regardless, those instructions are useless for iPhone: https://community.signalusers.org/t/add-reproducible-builds-to-the-ios-app/20516 https://community.signalusers.org/t/add-reproducible-builds-...
- LtWorf 1y agoIf you include a binary blob that you can't verify in the steps… what's exactly the point to obtain an identical artifact?