Technology

58112 readers

4762 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

founded 1 year ago

MODERATORS

200

submitted 1 month ago by [email protected] to c/technology

39 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] doodledup 12 points 1 month ago (1 children)

They don't have reproducible builds afaik (unlike Signal). You can have a completely different code running on your phone than on GitHub.

Besides, who is using Secret Chat anyways? All default chats and group chats are unencrypted.

[–] woelkchen 0 points 1 month ago (1 children)

You can have a completely different code running on your phone than on GitHub.

Just use the F-Droid version if there is any doubt.

Besides, who is using Secret Chat anyways?

Probably Russians who used Signal before.

[–] doodledup 7 points 1 month ago (2 children)

The F-droid version is also not reproducible. The binary you install has a different hash than the one you build from the GitHub.

[–] Nonononoki 1 points 1 month ago

It's reproducible if you compare it with F-droid's tarball, which has all the source code in it.

[–] woelkchen 0 points 1 month ago

The F-droid version is also not reproducible. The binary you install has a different hash than the one you build from the GitHub.

F-Droid builds from source, so any suspicion whether the Google Play version has been tampered is completely irrelevant for the F-Droid version.