How does one verify an app is running of its published code source? (lemmy.world)

submitted 1 year ago by LunchEnjoyer@lemmy.world to c/opensource@lemmy.ml

23 comments fedilink hide all child comments

How can users confidently verify that a FOSS application is running from its published source code? Is there a easy way to check this, or is this based of checksum and hashes?

you are viewing a single comment's thread
view the rest of the comments

[-] pexavc@lemmy.world 1 points 1 year ago* (last edited 1 year ago)

When it comes to iOS, Here's a cool guide for reverse engineering .ipas. https://github.com/ivRodriguezCA/RE-iOS-Apps . I would think applying a sort of comparison of the static analysis with a published app against the compiled repos version would be a possible first step

this post was submitted on 01 Sep 2023

74 points (98.7% liked)

Open Source

31184 readers

135 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago

MODERATORS

Cloak@lemmy.ml

kevincox@lemmy.ml

CrypticCoffee@lemmy.ml

Lettuceeatlettuce@lemmy.ml