News for hackers. Stuff that matters.

A comment on Telegram has launched a pretty intense campaign to malign Signal as insecure. Parent comment

Re:Telegram has launched a pretty intense campaign to malign... by CorrectHorseBat on Monday May 13, 2024 @08:15AM (#40342443)
Their problem is that F-Droid releases are signed by F-Droid, not by Signal. This way F-Droid could potentially insert a backdoor in an update.
[ Parent | on HN ]
Re:Telegram has launched a pretty intense campaign to malign... by rigid on Monday May 13, 2024 @08:31AM (#40342561)
That's not true tho. f-droid supports (true) https://f-droid.org/en/docs/Reproducible_Builds/ for quite some time now. Those are signed by both, f-droid and the author.
[ Parent | on HN ]
Re:Telegram has launched a pretty intense campaign to malign... by CorrectHorseBat on Monday May 13, 2024 @08:52AM (#40342762)
I should have checked before I posted something from memory. These are the reasons they list:

https://community.signalusers.org/t/signal-android-app-on-f-...

F-Droid with reproducible builds signed by both parties seems the best of both worlds to me, now I don't understand why Signal is so stubborn about this.

[ Parent | on HN ]
Re:Telegram has launched a pretty intense campaign to malign... by jjav on Tuesday May 14, 2024 @04:24AM (#40352830)
> This way F-Droid could potentially insert a backdoor in an update.

Google requires app developers on play store to give goole the keys that enable google to insert backdoors in any release. I can't trust anything on the play store for this reason. There is no way to tell which apps have been backdoored by google for whatever reason (the usual reason is a NSL).

[ Parent | on HN ]