☆ Yσɠƚԋσʂ ☆ to Privacy@lemmy.mlEnglish • 22 hours agoTelegram Hands U.S. Authorities Data on Thousands of Userswww.404media.coexternal-linkmessage-square101fedilinkarrow-up175arrow-down11cross-posted to: world@lemmy.worldtechnology@beehaw.orgwolnyinternet@szmer.info
arrow-up174arrow-down1external-linkTelegram Hands U.S. Authorities Data on Thousands of Userswww.404media.co☆ Yσɠƚԋσʂ ☆ to Privacy@lemmy.mlEnglish • 22 hours agomessage-square101fedilinkcross-posted to: world@lemmy.worldtechnology@beehaw.orgwolnyinternet@szmer.info
minus-squaredavel [he/him]linkfedilinkEnglish3•8 hours agoThe double ratchet algo is irrelevant if the app is doing something else altogether.
minus-squareKairoslinkfedilink-1•8 hours agoCompiling the app is irrelevant if I don’t read the source.
minus-square☆ Yσɠƚԋσʂ ☆OPlinkfedilink0•8 hours agoThat’s nonsense, because many different people read the source and audit open source software. While it’s certainly possible to sneak malicious code in, the trust doesn’t depend on each single individual auditing it. It’s a collective effort.
minus-squarePup BirulinkfedilinkEnglish1•2 hours agookay, but reproducible builds solve the rest of that problem https://signal.org/blog/reproducible-android/
The double ratchet algo is irrelevant if the app is doing something else altogether.
Compiling the app is irrelevant if I don’t read the source.
That’s nonsense, because many different people read the source and audit open source software. While it’s certainly possible to sneak malicious code in, the trust doesn’t depend on each single individual auditing it. It’s a collective effort.
okay, but reproducible builds solve the rest of that problem
https://signal.org/blog/reproducible-android/