undefined | Better HN

0 pointspilif9y ago0 comments

... minus the libraries in native code which also are considerably harder to reverse-engineer than the java parts.

Also, unless you're suspicious and actually check, you could be served a special version by the App Store that was compiled only for you and contains the required add-a-key-but-dont-show-a-popup feature.

I'm not saying that Signal and/or Google are shipping a backdoor. I'm saying that we have to trust them that they don't.

0 comments

whyever9y ago

Of course, if the software or hardware on your phone is compromised, all is lost. This is not specific to Signal though.

> I'm saying that we have to trust them that they don't.

This applies to anything. It is not feasible to build and/or check all software and hardware by yourself.

j / k navigate · click thread line to collapse