> like manually compiling and loading Signal, as it's OSS.
Except, I’d have to modify the code, as the current version depends on Google’s proprietary libs, which I can’t inspect. And I lose half of the functionality, as RedPhone is also proprietary.
> by coercing Google or Facebook engineers to run you a Hadoop query or conditionally inject malicious JS.
The same can be done by coercing OWS engineers to backdoor their services.
And in any case, Signal can start collecting metadata any minute now, and there’s nothing we could do against it.
