News for hackers. Stuff that matters.
Re:Signal to leave Sweden if backdoor law passes by genewitch on Tuesday February 25, 2025 @09:18AM (#43172143)
I skimmed and didn't see that but the "apkdiff" script extracting the apk because "diff doesn't work well on zips" made my gut twitch.

Why can't I sha256sum the two apk?

Re:Signal to leave Sweden if backdoor law passes by CHY872 on Tuesday February 25, 2025 @09:43AM (#43172465)
Archive formats are hard to make reproducible because there are lots of ways of making different yet equivalent archives. So it’s not surprising to me that someone would fail at this hurdle and find it frustrating to resolve. Nix defined their own format for this to avoid this exact problem.
Re:Signal to leave Sweden if backdoor law passes by tuukkah on Tuesday February 25, 2025 @09:41AM (#43172453)
It seems there are multiple reasons. For one, the apk files include a digital signature and you won't have Signal's and Google's private keys available to recreate their signatures.
Re:Signal to leave Sweden if backdoor law passes by genewitch on Tuesday February 25, 2025 @11:10PM (#43180515)
Thank you for this nice response. Did you already know or did you look it up? please don't tell me you just copied and pasted my question into an input form somewhere and it gave a bunch of reasons...

i should have done that.

Re:Signal to leave Sweden if backdoor law passes by tuukkah on Wednesday February 26, 2025 @08:22AM (#43183382)
I was interested in this so I had a look at the tools.

Now that I asked ChatGPT, it didn't include this reason - perhaps it's too obvious and no-one has written it down before.