you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 months ago (1 child)

to be fair there is no way to verify the google play distributed app has been built from the published source code. there are also people arguing that the closed source google components built into it could work as a backdoor

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago* (1 child)

    You can build the app from source code though. Couldn't you compare that to the Google Build?

    Also, you could use a fork like Molly, they removed all proprietary binary blobs and replaced them with FOSS alternatives. And it's still fully compatible with Signal

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 months ago

    only if the app is built reproducibly. I suspect the google libraries are likely minified/obfuscated by default though.

    Also, you could use a fork like Molly

    I do, but that's only so much when the point of the app is communicating with other people

  • source
  • parent