3 ms·

Is thst possible, in general? If someone published an open source app to Play, could I compare the Play downloaded app to a local build, and set config appropri

Is thst possible, in general? If someone published an open source app to Play, could I compare the Play downloaded app to a local build, and set config appropriately, and get a match?

epmatsw 11y ago
Sometimes? It's been done for TrueCrypt https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binaries-analysis/ https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binarie...
lcampbell 11y ago
> Is thst possible, in general? (Deterministic|reproducible) (compilation|builds) are a fairly recent endeavor; though they're not yet common they are technically feasible. The two efforts I'm aware of are Debian[1] and Chromium[2], though I'm not sure what state they're currently in. From their site, Chromium appears to include Android builds. There may be Android-specific concerts w.r.t the JVM's JIT, but if you can't trust the onboard runtime, you've already lost IMO. -- [1] https://wiki.debian.org/ReproducibleBuilds https://wiki.debian.org/ReproducibleBuilds [2] https://www.chromium.org/developers/testing/isolated-testing/deterministic-builds https://www.chromium.org/developers/testing/isolated-testing...
- leni536 11y ago
  F-droid[3] is supposedly working on reproducible builds for Android too. [3] https://f-droid.org/wiki/page/Deterministic,_Reproducible_Builds https://f-droid.org/wiki/page/Deterministic,_Reproducible_Bu...
pigeons 11y ago
The tor browser bundle and bitcoin use bitcoin's gitian deterministic reproducible build system: https://github.com/bitcoin/bitcoin/blob/master/doc/gitian-building.md https://github.com/bitcoin/bitcoin/blob/master/doc/gitian-bu... https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/BuildingWithGitian https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser... https://blog.torproject.org/blog/deterministic-builds-part-two-technical-details https://blog.torproject.org/blog/deterministic-builds-part-t...

Is thst possible, in general? If someone published an open source app to Play, could I compare the Play downloaded app to a local build, and set config appropriately, and get a match?

epmatsw 11y ago

Sometimes? It's been done for TrueCrypt https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binaries-analysis/ https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binarie...

lcampbell 11y ago

> Is thst possible, in general? (Deterministic|reproducible) (compilation|builds) are a fairly recent endeavor; though they're not yet common they are technically feasible. The two efforts I'm aware of are Debian[1] and Chromium[2], though I'm not sure what state they're currently in. From their site, Chromium appears to include Android builds. There may be Android-specific concerts w.r.t the JVM's JIT, but if you can't trust the onboard runtime, you've already lost IMO. -- [1] https://wiki.debian.org/ReproducibleBuilds https://wiki.debian.org/ReproducibleBuilds [2] https://www.chromium.org/developers/testing/isolated-testing/deterministic-builds https://www.chromium.org/developers/testing/isolated-testing...

leni536 11y ago
F-droid[3] is supposedly working on reproducible builds for Android too. [3] https://f-droid.org/wiki/page/Deterministic,_Reproducible_Builds https://f-droid.org/wiki/page/Deterministic,_Reproducible_Bu...

pigeons 11y ago

The tor browser bundle and bitcoin use bitcoin's gitian deterministic reproducible build system: https://github.com/bitcoin/bitcoin/blob/master/doc/gitian-building.md https://github.com/bitcoin/bitcoin/blob/master/doc/gitian-bu... https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/BuildingWithGitian https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser... https://blog.torproject.org/blog/deterministic-builds-part-two-technical-details https://blog.torproject.org/blog/deterministic-builds-part-t...