Technology

59588 readers

3097 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

founded 1 year ago

MODERATORS

200

submitted 3 months ago by neme@lemm.ee to c/technology@lemmy.world

39 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] doodledup@lemmy.world 12 points 3 months ago (1 children)

They don't have reproducible builds afaik (unlike Signal). You can have a completely different code running on your phone than on GitHub.

Besides, who is using Secret Chat anyways? All default chats and group chats are unencrypted.

[–] woelkchen@lemmy.world 0 points 3 months ago (1 children)

You can have a completely different code running on your phone than on GitHub.

Just use the F-Droid version if there is any doubt.

Besides, who is using Secret Chat anyways?

Probably Russians who used Signal before.

[–] doodledup@lemmy.world 7 points 3 months ago (2 children)

The F-droid version is also not reproducible. The binary you install has a different hash than the one you build from the GitHub.

[–] Nonononoki@lemmy.world 1 points 3 months ago

It's reproducible if you compare it with F-droid's tarball, which has all the source code in it.

[–] woelkchen@lemmy.world 0 points 3 months ago

The F-droid version is also not reproducible. The binary you install has a different hash than the one you build from the GitHub.

F-Droid builds from source, so any suspicion whether the Google Play version has been tampered is completely irrelevant for the F-Droid version.