News for hackers. Stuff that matters.

A comment on Suspicious iOS KeePass Client. Parent comment

Re:Suspicious iOS KeePass Client by r3trohack3r on Sunday May 21, 2023 @10:28AM (#36021217)
What’s the point of downloading the binary if you’re going to compile from source yourself anyways?

Is the expectation that only a few users (watchdogs) do this and everyone else benefits from the extra validation?

[ Parent | on HN ]
Re:Suspicious iOS KeePass Client by kevingadd on Sunday May 21, 2023 @08:02PM (#36025837)
That model has been proven for cryptocurrency, hasn't it? As long as you have enough validators, you don't need everyone to spend the considerable resources it takes to validate (or in this case, build from source).

Right now the Apple model is "trust that the Apple employee who glanced at this for 15 minutes spotted any problems".

[ Parent | on HN ]