News for hackers. Stuff that matters.

A comment on Worried About the Privacy of Your Messages? Download Signal. Parent comment

Re:Worried About the Privacy of Your Messages? Download Signal by twr on Friday December 09, 2016 @02:00AM (#13137190)
> Everyone else has to go with the binaries they distribute which, as the other poster has correctly argued, cannot be independently verified.

Do you have reverse engineering experience on Android?

APK uses the zip format. Extract its contents and compare those, minus the META-INF directory, which contains digests and a detached PKCS#7 signature.

Apps whose code output isn't reproducible can still be compared with a varying amount of IDA analysis.

[ Parent | on HN ]
Re:Worried About the Privacy of Your Messages? Download Signal by twr on Friday December 09, 2016 @04:02PM (#13141825)
Re-reading this post, I'm not sure why I typed IDA -- I meant baksmali. IDA is still useful for bundled ELF dependencies.
[ Parent | on HN ]