Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Who is reproducing these and publishing results?

Moxie made it very clear he never wants third parties like f-droid -actually- reproducing and signing packages for distribution to de-googled signature-enforcing android distros etc. Providing side-loadable apks as an alternative a joke.

Third party builds and distribution would serve as public canary and be better for privacy forbidden. He argued the tracking advantages of centralized development and distribution outweighed any wins of allowing third party clients.

In reality a build published with a breaking change and a subtle crypto backdoor omitted from public sources may not be discovered for days or longer. Long enough to decrypt most every convo on the planet.



What’s your solution to this?


Something built like any other internet protocol with staying power.

A federated network with multiple strong client and server implementations that are able to be built, reproduced, and distributed by multiple independent parties. Like Matrix.

Matrix is far from perfect yet but it is miles beyond Signal in being a sustainable solution that can survive any single point of failure.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: