News for hackers. Stuff that matters.

A comment on Signal to leave Sweden if backdoor law passes. Parent comment

Re:Signal to leave Sweden if backdoor law passes by Ajedi32 on Tuesday February 25, 2025 @09:54AM (#43172627)
Without reproducible builds, this just means you have to trust the packager instead of the developer. Sometimes that's a good trade-off, but you still haven't really solved the problem, just moved it.

With reproducible builds, you don't have to trust the packager or the developer as long as you trust at least one person who reviewed the source code.

[ Parent | on HN ]
Re:Signal to leave Sweden if backdoor law passes by lupusreal on Tuesday February 25, 2025 @12:07PM (#43174526)
Packagers have proven to be more reliable. Sometimes they make mistakes but there's no case of a packager ever selling out (correct me if I'm wrong.) On the other hand, there are numerous cases of developers selling out.
[ Parent | on HN ]