4 ms·

By that standard, it can never be verified because what is running and what is reviewed could be different. Reviewing relevant elements is as meaningful as revi

By that standard, it can never be verified because what is running and what is reviewed could be different. Reviewing relevant elements is as meaningful as reviewing all the source code.

giancarlostoro 8mo ago
Or they could even take out the backdoor code and then put it back in after review.
- taneq 8mo ago
  Ah yes, the Volkswagen solution.
  - KellyCriterion 8mo ago
    ++1 "target market product alignment" :-D
- hedora 8mo ago
  This is why signal supports reproducible builds.
  - pdpi 8mo ago
    In this day and age, in a world with Docker and dev containers and such, it's kind of shocking that reproducible builds aren't table stakes.
  - LtWorf 8mo ago
    Does it still require the gigantic binary blob?
dangus 8mo ago
Let’s be real: the standard is “Do we trust Meta?” I don’t, and don’t see how it could possibly be construed to be logical to trust them. I definitely trust a non-profit open source alternative a whole lot more. Perception can be different than reality but that’s what we’ve got to work with.