5 ms·
Well, there are several ways to get read access to the iPhone's filesystem. You can grab the binary from the phone and verify that its the same as when you comp
by adrusi 12y ago
Well, there are several ways to get read access to the iPhone's filesystem. You can grab the binary from the phone and verify that its the same as when you compile the app on your own machine.
No one's going to do that for most apps though.
- citruspi 12y agoSo, I'm not intimately familiar with the code signing process, but I imagine that the bundle on the iPhone wouldn't match the one you would get by compiling the source on your machine. The former would be signed with Whisper System's distribution certificate, which you couldn't do on your system because you don't have their certificate.
- zokier 12y agoCompared to other issues I think stripping/ignoring signatures for comparison should be fairly minor issue.
- maxmouchet 12y agoIsn't there chances that different LLVM versions or flags ends up building a slightly different binary ?
- zokier 12y agoAnd now you are aware of the difficulties in producing reproducible/deterministic builds. This would be a good starting point for further reading: https://wiki.debian.org/ReproducibleBuilds/About https://wiki.debian.org/ReproducibleBuilds/About
- StavrosK 12y agoWhy not check the signature instead?