• 0 Posts
  • 7 Comments
Joined 1 year ago
cake
Cake day: January 3rd, 2024

help-circle



  • I had a hard time choosing a link. Searching GitHub for “F-Droid” reveals a long convoluted back-and-forth about meeting F-Droid’s requirements for reproducible builds. Signal is not, as of earlier today, listed on F-Droid.

    F-Droid’s reproducibility rules are meant to cut out the kind of shenanigans that would be necessary to hide a back door in the binaries.

    Again, this isn’t proof. But it’s beyond fishy for an open source security tool.

    Edit: And Signal’s official statements on the topic are always reasonable - but kind of bullshit.

    Reasonable in that I alwould absolutely accept that answer, if it were the first time that Signal rejected a contribution to add it to F-Droid.

    Bullshit in that it’s been a long time, lots of folks have volunteered to help, and Signal still isn’t available on F-Droid.


  • I don’t have such a source, but the Cybersecurity community throw accusations around easily, and are loathe to ever bless any software as completely innocent - which is a good thing.

    When the accusations stop, the issue has either been addressed (typical outcome), or the product owner was written off by the Cybersecurity community as a lost cause (rare, but it happens).



  • To the best of my knowledge - from a spirited but doomed attempt to read Google’s privacy policies - Google is committed to deleting your location history after sharing it with 10,000 or so vendor partners.

    Each of those vendor partners have pinky promised to comply with the rules outlined in the same privacy policy that I failed to read.

    For context, I’m not convinced any living person has read the entirety of Google’s privacy policies.

    Sadly, I’m quite confident - by the law of averages, human nature, and corporate corruption - that not all 10,000 trusted partners also deletes our location data history.

    Google does take privacy preserving steps to anonymyze what it shares.

    My educated opinion is that no amount of attempted anonymozation is sufficient for the breadth, scope and quantity of data that Google collects.

    Shorter answer for you: yes, I believe that is a corporate lie. True only in technicality, but likely false by any reasonable persons expectation of what “delete” means.