News for hackers. Stuff that matters.

A comment on Global Encryption Day: Demand End-to-End Encryption in DMs. Parent comment

Re:Global Encryption Day: Demand End-to-End Encryption in DMs by 100001_100011 on Saturday October 22, 2022 @06:50AM (#33297154)
Reproducible builds are for developers. As a user I didn't build the app on my phone.

I have a phone with Signal on it. Tell me what I should do to verify it's running the open source Signal code.

[ Parent | on HN ]
Re:Global Encryption Day: Demand End-to-End Encryption in DMs by bertman on Saturday October 22, 2022 @07:16AM (#33297308)
If you, as a user, are concerned about reproducibility, you are no longer an average user. Thus, if you want this extra security, you can be expected to check the APK on your phone.
[ Parent | on HN ]
Re:Global Encryption Day: Demand End-to-End Encryption in DMs by fgiox on Saturday October 22, 2022 @07:20AM (#33297330)
Maybe you could figure this out yourself, and share your findings, rather than demanding answers from others?
[ Parent | on HN ]
Re:Global Encryption Day: Demand End-to-End Encryption in DMs by 0xChain on Saturday October 22, 2022 @08:03AM (#33297570)
You should check out Session. Their CTO apparently uses his PGP key to sign every release https://twitter.com/session_app/status/1514108746854985730
[ Parent | on HN ]
Re:Global Encryption Day: Demand End-to-End Encryption in DMs by ghransa on Saturday October 22, 2022 @09:54AM (#33298325)
Not perfect chain of custody but could report to virustotal (virustotal.com) and compare in a sandbox:

https://play.google.com/store/apps/details?id=com.funnycat.v...

[ Parent | on HN ]
Re:Global Encryption Day: Demand End-to-End Encryption in DMs by fsflover on Saturday October 22, 2022 @10:57AM (#33298818)
Reproducible builds benefit the user by allowing independent checks of the software.
[ Parent | on HN ]