I had no idea this issue had been identified. While I find this tool very useful, the project is seeming rather questionable to me now.

  • refalo@programming.dev
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    1 month ago

    That is true, but also nobody is doing it. Just like nobody is verifying Signal’s “reproducible builds”.

    • Pup Biru@aussie.zone
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 month ago

      are you sure?

      there could be thousands just waiting for a failure to come out and say “HEY THIS IS DODGY”

      • refalo@programming.dev
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        1 month ago

        Yea because I tested it myself. Nobody else seems to care, and if they did, I would think there would be a public way to see regular test results regardless.

        I know this exists for some projects, but somehow nothing privacy-sensitive