Replying to Avatar yunginter.net

is there a way to do software verification where an implementation would periodically self sign a note saying it’s verified its build?

and then also broadcast relay actions?

Even, just to see the relay actions… not to move all trust of moderation to relays.
Avatar
Vitor Pamplona 2y ago 💬 1

Yep, it's called reproducible builds. Amethyst has this active. It means that anybody should be able to check if the APK I published matches the code on the repo by recompiling the app with the same code/parameters.

Reply to this note

Please Login to reply.

Discussion

Avatar
yunginter.net 2y ago 💬 1

but for relays on servers one would need like artifact sharing?

Avatar
Vitor Pamplona 2y ago 💬 2

There is no way to know if they are running the version you think they are and/or if they added anything between you and the code you know.

Avatar
yunginter.net 2y ago

probably need a tool that caches seen on and then rechecks for seen on later

how did you noticed relays deleting things?