pull down to refresh

41 sats \ 2 replies \ @optimism 29 Apr \ parent \ on: Reverse Engineer OPA? security
Reproducible builds fix this

This. It just requires a massive build environment setup and a ton of work. Probably not worth it. But it can be done where it makes sense.

Does it in this case though? I'm not convinced.

write
preview
100 sats \ 1 reply \ @ek OP 29 Apr
It just requires a massive build environment setup and a ton of work

it's just an app that talks to a server

reply
0 sats \ 0 replies \ @optimism 29 Apr

Yeah. Meaning the interesting thing from a privacy perspective that you'd hunt for in the source code is:

  1. What data does it collect?
  2. What data does it throw over the wire?

When I edit apks (always do) the main effort is replacing data collection stuff with stubs and removing callbacks to googly goog, bugsnag or other data brokers.

reply