To be explicit: This depends on the app store only allowing CI builds, since oth... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		yjftsjthsd-h on Feb 17, 2021 \| parent \| context \| favorite \| on: Malware in open-source web extensions To be explicit: This depends on the app store only allowing CI builds, since otherwise you can't trust that the binaries match the source.

swiley on Feb 17, 2021 | [–]

Or allowing local builds with including custom patches. Giving people agency over the machines that run their lives is way too radical to be popular though.

JackeJR on Feb 17, 2021 | [–]

This is the approach of fdroid which is what imo makes it trustworthy.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact