Re:Ask HN: How do we know Signal or Telegram don't store our...
by danielrhodes on Wednesday January 13, 2021 @03:06PM
(#25767275)
While this is a great way to build trust, there is obviously no way to confirm the App Store version is the same as one built from their public source. In fact, due to the way Apple optimizes apps for each device, this becomes even harder. Furthermore, just because you compile it from source and put it on your phone does not mean that you can reasonably stay aware of or understand all the internal workings that happen inside the app.
[ Parent
| on HN ]
Re:Ask HN: How do we know Signal or Telegram don't store our...
by aarchi on Wednesday January 13, 2021 @03:49PM
(#25767785)
I know that developers can post LLVM bitcode to the App Store instead of a binary, which allows Apple to recompile it for architectural changes. I'd be surprised if Apple optimized per device. Creating separate builds with optimizations for different iPhone models would make more sense. Do you have more details on that?
Re:Ask HN: How do we know Signal or Telegram don't store our...
by restingrobot on Wednesday January 13, 2021 @06:45PM
(#25769633)
I think he meant "iPhone models" when he said "devices". I'm not the op, but they definitely do optimize per model, not individual device.
Re:Ask HN: How do we know Signal or Telegram don't store our...
by danielrhodes on Thursday January 14, 2021 @03:30AM
(#25773693)
Per model is what I meant.
Re:Ask HN: How do we know Signal or Telegram don't store our...
by j-james on Wednesday January 13, 2021 @08:43PM
(#25770711)
> Furthermore, just because you compile it from source and put it on your phone does not mean that you can reasonably stay aware of or understand all the internal workings that happen inside the app.
Can you elaborate on this? That's exactly what I'd expect of an app I compiled from source.
Re:Ask HN: How do we know Signal or Telegram don't store our...
by danielrhodes on Thursday January 14, 2021 @03:29AM
(#25773684)
Are you going to read every commit and fully explore the entire app to know your messages and encryption are being handled securely? And keep doing this every time you update? If so, you have more time than I do. :-)